last executing test programs: 12m34.934860987s ago: executing program 5 (id=836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff0c0000000c0001800800", @ANYBLOB="0c000380070002"], 0x2c}}, 0x0) 12m34.481879594s ago: executing program 5 (id=838): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x3, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460200000000aeada677ea7f14e0000000000000000001008bd02800", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 12m34.181341882s ago: executing program 5 (id=840): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12m32.861208006s ago: executing program 5 (id=841): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6(0xa, 0x3, 0x8000000003c) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 12m31.891563191s ago: executing program 5 (id=847): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r2, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r2}}], 0x1, 0x0, 0x0) 12m31.20736052s ago: executing program 5 (id=850): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44240, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10000) 12m30.528320964s ago: executing program 32 (id=850): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44240, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10000) 12m7.194819258s ago: executing program 6 (id=953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) 12m6.877513047s ago: executing program 6 (id=954): io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x4, 0x400, 0x4, 0x3d8}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x6e, 0x40000716, 0x0, 0xfffffffffffffe97) 12m5.611649947s ago: executing program 6 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)="d22b2235590ef7a0f5141f5e5d010800000000000000b488b3db75252f1927e18bafc8a9de268b259885844cbcb8815f7b1b02b9737f5086896424246db44290dc521d06840f9f0bfa6175a73b97ccce8c8a058e9713bb4ed17e39dfa811b323eae19f4cafea1b577b6a5b401802c46017ec", 0x72) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe) 12m4.200100551s ago: executing program 6 (id=963): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6(0xa, 0x3, 0x8000000003c) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 12m3.653643652s ago: executing program 6 (id=969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, 0x0, 0x540) 12m3.167404655s ago: executing program 6 (id=974): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, r0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3ff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 12m2.194963628s ago: executing program 33 (id=974): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, r0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3ff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 3m56.750962076s ago: executing program 7 (id=2692): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000000c0)="00e1881b2d8564cb005b59bac2ba58809b407780c4be3646e5557eca4c63b2aca76a30ba5e876b31aa10d31361dcd0b8ceef2fab885c1f5716fc5a120ea5991467f48b18e6550ad2f5f0af4eb3f32a7b1ffecd5c5f325d2a19191b46d822", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000180)="01c2c87a8f8f749297c652f441309c8940f944a670fe382093a8328c540fe06be4c7a4da3a9f8bad78374c876a9cadcc9ba8b3237110b8e820b8db2e705f4c5d2810c49388d3d8c79d79bd221898b7bd0ff3cfd6242671c40e71ae26a38e7f27057f7e819dbe43ca88356e6ca500cd612487511c366a782b049eca4850691e", 0x7f}], 0x1}}], 0x2, 0x40488c1) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 3m55.597528493s ago: executing program 7 (id=2698): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000090) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m53.617318995s ago: executing program 7 (id=2709): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="0200", 0x2}], 0x1, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 3m53.432192779s ago: executing program 7 (id=2712): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x2c, 0x0, 0x1, 0x5, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "9432"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x2c}}, 0x24004094) 3m52.905733173s ago: executing program 7 (id=2717): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m52.680425482s ago: executing program 7 (id=2718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x10, 0xa}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x44080) r2 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x404004, 0x80, 0x7}, 0xf0, 0x2000, 0x31a, 0x3, 0x88a, 0x8, 0x8b, 0x1b, 0x5, 0xbf6, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 3m36.98702613s ago: executing program 34 (id=2718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x10, 0xa}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x44080) r2 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x404004, 0x80, 0x7}, 0xf0, 0x2000, 0x31a, 0x3, 0x88a, 0x8, 0x8b, 0x1b, 0x5, 0xbf6, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 2m46.796401566s ago: executing program 2 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x20008020) 2m46.01326926s ago: executing program 2 (id=2983): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000010c0)=0x9, 0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0xb91, 0x6, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "31f30a6a5cf99319e230c9652b48569c555bdb4d56707686efd7798ebf93b8268a4e6da92b4d6436d6de154e3c904f8c0ef09644a56700ec447ce9ccf3e973a7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000200020000840900020073797a310000000005000100070000002800074c7566f206a3046240fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2m44.030852673s ago: executing program 2 (id=2988): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 2m42.923682896s ago: executing program 2 (id=2997): r0 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) 2m42.462949202s ago: executing program 2 (id=3001): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000900)="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", 0x559, r0) r2 = epoll_create1(0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1, 0x51, 0x40}, 0x0, &(0x7f0000000840)="17a7810af800485bd285f9863843fb368020bd49c47eb0014489c7a0281edc0c5337e4c2d9ef88e836f3e27bd4a9880de8e9b499c705d32be30e638a686113cfe161e367a661b7f27d5d55402101782539", &(0x7f00000008c0)=""/64) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000002880)={0x2020}, 0x2020) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) fanotify_init(0x200, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000280), 0x8) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x5, 0x65, {0x7, 0x25, 0x1, 0xc, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xee, 0x8, 0x1, {0x7, 0x25, 0x1, 0xc, 0xa, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x2000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x8) write$P9_RSTATu(r6, 0x0, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0xa0028014}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha3-384\x00'}}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x3ffc000}]}}]}, 0x150}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xdc, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xbc, 0x2, 0x0, 0x1, [@nested={0xb6, 0x14, 0x0, 0x1, [@typed={0x8, 0xdb, 0x0, 0x0, @u32=0x9}, @generic="71ded80de62769f1b1b21c60fd0fdfd16d1d9a6ffa9300fbfb4a249bc6ec0368814b3f2df41925f6140413bd725761deecb8ea02650000000017c3759b66360ce1b91de6f9ee442d24f220a7aa214927c534f300448572958def4ed1b9a9a23ae8871db21f6d3e11d09b8c02d780808ce398506e1c61fe50d0ad2e8ef9b364d4b2f1e7575799d56f992c9dd4dabfe10f7321a870816b41be8bb647e21f7c6e1d139f0cb4373fe7202a74"]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 2m41.640188583s ago: executing program 2 (id=3010): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2m26.404216675s ago: executing program 35 (id=3010): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 46.155632201s ago: executing program 3 (id=3521): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x238, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20c, 0x2, [@TCA_BPF_ACT={0x208, 0x1, [@m_skbmod={0x114, 0xc, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x8001, 0xffffffffffffffff, 0xffffffff, 0x3}, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3c95}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x664, 0x5, 0x94, 0x6}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x621, 0x7, 0x20000000, 0x8, 0xff}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x3, 0x20000000, 0x7855, 0x3}, 0xc}}]}, {0x2d, 0x6, "f51f67ec79be0129849dff1b1f031b2d21b8ebb3988d16442c08ce346629703a4d0408a9a97022eaeb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0xf0, 0x5, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x92, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 46.060485931s ago: executing program 3 (id=3522): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='byd', 0x3) 44.990798467s ago: executing program 3 (id=3527): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) close(0x3) 44.693819824s ago: executing program 3 (id=3529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 43.693054636s ago: executing program 3 (id=3532): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 42.250243883s ago: executing program 3 (id=3536): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 39.015985784s ago: executing program 8 (id=3541): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 27.641967884s ago: executing program 8 (id=3569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000000}, 0x2000c8d0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f00", 0x2a}, {&(0x7f0000003280)="0000d9269d79000000000000455f1a88c3bd094965", 0x15}], 0x2) 27.333789725s ago: executing program 8 (id=3572): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x301, 0x20}, 0xc) r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x7, 0x7, 0x8, 0x8, 0x5, 0x9, 0x0, 0x10, 0xb, 0x9, 0x1, 0xa, 0xfe}, 0xe) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) 21.85843841s ago: executing program 1 (id=3582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a0000000004000002000000020000000000000001000000000000000000000000000000000000000000000000000000020100") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)) 21.562043037s ago: executing program 9 (id=3583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)=""/17, &(0x7f00000003c0)=0xfffffffffffffe34) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x45}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x204, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a812008100440008004b0001ee0000000000069078ac1414aaac1414aa440c07c1e00000020000100007886d1d8d200bdcac1414bbac14142f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe907800042d245c0fb34f81e3ee70a340d23c1c2db35f5bcdb3ea05608165b739fb1077320e541a18e7a590ee327d910f4db0e2a817f3696de4f47a948f6e88ef225986d67ba5bc5e328bf119010790c000000000000000c63008a80d56061b5bb1b3fd2f5b80d58802169ebc1bc5efe24cae55bac9b399ac217d9c1e55b508b0453d1efd39edc9825369f3e3df875fa68864ded90567f4370ab71dc3b7fb9528183a8a083edf2d835a569fe86bcf690b1d9fe388b05132bc7a7eb2bc154b90aae348601a190fb1320a726166579d8598f8193c81870107"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0xfeab) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x23, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080002fe800000000000000000000000000012fe8000005cc5000000000000000000aa3200020400000000"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 21.390295992s ago: executing program 0 (id=3584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000fc0), 0x0, 0x40) recvmmsg(r2, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 21.168410589s ago: executing program 1 (id=3585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x23, 0x80805, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x4, 0x1}}, @padn={0x1, 0x1, [0x0]}]}, 0x18) 19.585018653s ago: executing program 1 (id=3586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a"], 0xa0}}, 0xc050) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 19.463767062s ago: executing program 0 (id=3587): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x23, 0x80805, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x4, 0x1}}, @padn={0x1, 0x1, [0x0]}]}, 0x18) 17.55192305s ago: executing program 0 (id=3588): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={0x0}) 17.204910396s ago: executing program 8 (id=3589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @loopback, 0x4}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x800ffff, @mcast2}}}, 0x32) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r5, 0x0, 0x0, 0x10, 0x0, 0x0) 15.292479593s ago: executing program 8 (id=3590): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) 12.978347432s ago: executing program 4 (id=3593): write(0xffffffffffffffff, &(0x7f0000000080)=' ', 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x30c3f000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8c4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x890, 0x2, [@TCA_U32_POLICE={0x868, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x7fff, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x0, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2002, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r2, 0x29, 0x0, 0x5, 0xffff, 0x22, @mcast1, @empty, 0x0, 0x1, 0xfc}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x2, 0xffff2d37, 0x3, 0x46, 0x4, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0xffff0001, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x41, 0x3, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x8000005, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0x0, 0x129432e6, 0xcd, 0x40c, 0x9, 0x2bf, 0x6c9, 0x1, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x10, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x7, 0x7, 0x4, 0x7, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xfffffffc, 0x6, 0x7, 0x8000, 0x0, 0xfe000003, 0xffff, 0x4, 0x62de, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x9, 0x5, 0x8, 0x83, 0x4000003, 0x20000009, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x8, 0x8005, 0x9, 0x800000, 0x4, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x8, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x8003, 0xa2ed, 0x404, 0x25], [0x4000009, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x0, 0x6, 0x0, 0x5, 0xce7, 0x53f53804, 0x0, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x6, 0x148, 0x60a7, 0x4006, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xcc, 0x7, 0xfffff000, 0x10003, 0x3, 0x7e, 0x20100, 0x9602, 0xc63c, 0x20000002, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa21, 0xc, 0x7, 0xce3, 0x6c1b, 0x3, 0x6, 0x5, 0xb1e, 0x1, 0x1fe, 0xffff3441, 0x7]}, 0x45c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYBLOB="0d00000014200000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="7ddbcb49dce0144420d07ea31b3ab63bfc66c86011cd374e039736e5cb58e9632c1ac10f0ff8489d7c252aacc6ae329a2513b7a139be78b100d8796846c49502a234eec0dc90c2f4a86a53a8b94b9b12e07cf1e93b62d21818a024920701a8e0a5428c1d3b69481965", @ANYRES64=0x0], 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x23c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, 0x0) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) set_mempolicy(0x4005, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000080)=0x1) 12.853548608s ago: executing program 9 (id=3594): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "d9260c66", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x4, 0x20000000, 0x10000025, 0x0, 0x4, 0x4, 0x54c6cff3, 0x1356, 0x2, 0x1006, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x5, 0x202089, 0x2, 0x2, 0x30001e5b, 0x3c8e, 0x8, 0x3, 0x80080006, 0x4002, 0x0, 0x3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x8, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 12.144333007s ago: executing program 9 (id=3595): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) syz_io_uring_setup(0x53a, &(0x7f00000003c0)={0x0, 0x2, 0x3010, 0x3, 0x5}, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000000c0)) 11.579604728s ago: executing program 9 (id=3596): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x40000, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x1f5}}], 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x5c0, 0x0, 0x0}}, 0x0) 11.434948395s ago: executing program 4 (id=3597): syz_emit_ethernet(0x3b0, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x37a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x6, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 11.111554918s ago: executing program 4 (id=3598): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6.636289397s ago: executing program 4 (id=3599): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x34}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x485) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000500)='./file1\x00', 0x804, &(0x7f0000000280)={[{@uni_xlateno}, {@shortname_win95}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@uni_xlateno}, {@fat=@nocase}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uni_xlate}, {@numtail}, {@fat=@debug}, {@utf8no}, {@shortname_winnt}, {@uni_xlate}]}, 0x1, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) 6.432476428s ago: executing program 1 (id=3600): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, 0x0) 4.467294832s ago: executing program 8 (id=3601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)=""/17, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x45}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x204, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a812008100440008004b0001ee0000000000069078ac1414aaac1414aa440c07c1e00000020000100007886d1d8d200bdcac1414bbac14142f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe907800042d245c0fb34f81e3ee70a340d23c1c2db35f5bcdb3ea05608165b739fb1077320e541a18e7a590ee327d910f4db0e2a817f3696de4f47a948f6e88ef225986d67ba5bc5e328bf119010790c000000000000000c63008a80d56061b5bb1b3fd2f5b80d58802169ebc1bc5efe24cae55bac9b399ac217d9c1e55b508b0453d1efd39edc9825369f3e3df875fa68864ded90567f4370ab71dc3b7fb9528183a8a083edf2d835a569fe86bcf690b1d9fe388b05132bc7a7eb2bc154b90aae348601a190fb1320a726166579d8598f8193c81870107"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0xfeab) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x23, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080002fe800000000000000000000000000012fe8000005cc5000000000000000000aa3200020400000000"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.444633008s ago: executing program 9 (id=3602): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 4.308131297s ago: executing program 0 (id=3603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.269141444s ago: executing program 4 (id=3604): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x23, 0x80805, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x4, 0x1}}, @padn={0x1, 0x1, [0x0]}]}, 0x18) 3.196962986s ago: executing program 1 (id=3605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[], 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) sendmsg$rds(r5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) 3.172197622s ago: executing program 0 (id=3606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a0000000004000002000000020000000000000001000000000000000000000000000000000000000000000000000000020100") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)) 1.964153475s ago: executing program 1 (id=3607): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 921.933807ms ago: executing program 0 (id=3608): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a0000000004000002000000020000000000000001000000000000000000000000000000000000000000000000000000020100") ioctl(r1, 0x40140921, &(0x7f0000000440)) 158.017709ms ago: executing program 4 (id=3609): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x4, 0x1}}, @padn={0x1, 0x1, [0x0]}]}, 0x18) 0s ago: executing program 9 (id=3610): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) kernel console output (not intermixed with test programs): (slave gretap2): failed to get link speed/duplex [ 898.819376][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 900.013788][T14751] netlink: 'syz.4.2566': attribute type 4 has an invalid length. [ 900.214511][T14756] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 900.687557][T14771] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 900.921641][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 901.734129][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'. [ 901.975822][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 902.146363][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 902.846045][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2592'. [ 903.102973][ T49] net_ratelimit: 59 callbacks suppressed [ 903.103004][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 903.184112][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 903.214139][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 903.294482][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 903.323662][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 903.411040][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 903.437809][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 903.515789][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 903.543265][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 904.067024][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 905.139899][T14857] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2602'. [ 906.205997][T14869] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2605'. [ 906.318241][T14873] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2605'. [ 906.373075][T14872] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2605'. [ 907.499808][T14887] loop1: detected capacity change from 0 to 512 [ 907.519342][T14887] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 907.519367][T14887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 907.639021][T14887] EXT4-fs (loop1): 1 truncate cleaned up [ 907.641134][T14887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.064459][T14898] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.2610: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 908.100236][T14898] EXT4-fs (loop1): Remounting filesystem read-only [ 908.100316][T14898] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #2: comm syz.1.2610: Deleting old file: nlink 4, error=-117 [ 908.152364][T12564] net_ratelimit: 43 callbacks suppressed [ 908.152425][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 908.187734][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 908.253664][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 908.343916][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 908.364272][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 908.455266][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 908.482609][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 908.566359][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 908.590753][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 908.620495][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.677904][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 911.228580][T14918] tipc: Enabling of bearer rejected, failed to enable media [ 913.156951][ T5915] net_ratelimit: 61 callbacks suppressed [ 913.157049][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 913.286931][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 913.345984][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 913.394450][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 913.476344][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 913.525136][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 913.669275][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 913.693568][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 913.785313][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 913.808704][T10364] bond2: (slave gretap1): failed to get link speed/duplex [ 916.892684][T14977] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2633'. [ 916.967770][T14981] atomic_op ffff8880786ab1e0 conn xmit_atomic 0000000000000000 [ 916.971345][T14981] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 919.701255][T14995] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 919.701284][T14995] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 919.703628][ T6362] net_ratelimit: 34 callbacks suppressed [ 919.703668][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 919.703721][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 919.764717][T14996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 919.764905][T14996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 919.765108][T14996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 919.765275][T14996] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 919.765440][T14996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 919.813129][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 919.813182][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 919.924837][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 919.924893][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 920.036424][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 920.036487][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 920.576417][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 920.576470][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 921.833069][T13400] Bluetooth: hci5: command 0x0406 tx timeout [ 921.833118][T13400] Bluetooth: hci3: command 0x0406 tx timeout [ 921.833149][T13400] Bluetooth: hci2: command 0x0406 tx timeout [ 921.836624][T13400] Bluetooth: hci1: command 0x0406 tx timeout [ 921.836729][T11073] Bluetooth: hci4: command 0x0406 tx timeout [ 922.338617][T15020] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2642'. [ 924.460047][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2648'. [ 924.472270][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2648'. [ 924.530143][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2648'. [ 924.530257][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2648'. [ 924.749019][T15034] net_ratelimit: 24 callbacks suppressed [ 924.749047][T15034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.795385][T10364] bond3: (slave gretap2): failed to get link speed/duplex [ 924.817710][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 924.905073][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 924.930906][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 925.125853][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 925.145149][T10364] bond2: (slave gretap1): failed to get link speed/duplex [ 925.235102][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 925.236552][T15056] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 925.285141][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 925.446981][T10364] bond3: (slave gretap2): failed to get link speed/duplex [ 926.414610][ T1259] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 929.564002][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2658'. [ 929.781786][T15088] fuse: fd is not a fuse device [ 929.849145][ T3365] net_ratelimit: 31 callbacks suppressed [ 929.849173][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 929.877476][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 929.955078][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 929.986186][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 930.145021][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 930.210659][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 930.257819][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 930.326522][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 930.375236][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 930.458777][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 930.662429][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 930.662469][T15094] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 930.664985][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 930.665018][T15094] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 930.866874][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.866942][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.639854][T15119] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2673'. [ 935.290643][T15126] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2677'. [ 935.502404][ T3365] net_ratelimit: 34 callbacks suppressed [ 935.502434][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 935.532672][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 935.603161][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 935.641479][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 935.714836][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 935.755735][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 935.822575][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2682'. [ 935.822618][T15137] netlink: 'syz.7.2682': attribute type 1 has an invalid length. [ 935.870744][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2682'. [ 935.870789][T15137] netlink: 'syz.7.2682': attribute type 1 has an invalid length. [ 935.918813][T15139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 935.983739][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 936.494893][ T6362] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.494956][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 936.517345][ T986] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.517401][ T986] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.517444][ T986] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.523471][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 936.604329][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 936.844532][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 937.253670][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 937.410800][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 937.410881][ T25] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 937.419432][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 238, changing to 7 [ 937.441443][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.441533][ T25] usb 1-1: Product: syz [ 937.441553][ T25] usb 1-1: Manufacturer: syz [ 937.441573][ T25] usb 1-1: SerialNumber: syz [ 937.762561][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 937.774830][ T25] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 937.792150][ T25] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 937.850297][ T25] usb 1-1: USB disconnect, device number 23 [ 937.965306][T15183] wlan0 speed is unknown, defaulting to 1000 [ 940.573578][ T986] net_ratelimit: 51 callbacks suppressed [ 940.573603][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 940.573645][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 940.580466][T15234] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2710'. [ 940.698746][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 940.698795][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 940.858832][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 940.858883][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 940.859969][T15240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.905512][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 940.986736][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 940.989041][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 941.393195][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 944.854057][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 945.131192][T15312] wlan0 speed is unknown, defaulting to 1000 [ 945.691928][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 945.691984][ T25] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 945.695599][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 238, changing to 7 [ 945.697780][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.697808][ T25] usb 1-1: Product: syz [ 945.697826][ T25] usb 1-1: Manufacturer: syz [ 945.697844][ T25] usb 1-1: SerialNumber: syz [ 945.793080][ T59] net_ratelimit: 57 callbacks suppressed [ 945.793104][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 945.793143][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 945.829719][T15322] fuse: fd is not a fuse device [ 945.963194][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 945.963274][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 946.063942][T15324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.073596][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 946.073641][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 946.166187][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 946.185198][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 946.185246][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 946.258207][ T25] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 946.289052][ T25] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 946.295022][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 946.308755][ T25] usb 1-1: USB disconnect, device number 24 [ 949.578343][T15357] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2748'. [ 950.875198][ T6613] net_ratelimit: 60 callbacks suppressed [ 950.875227][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 950.880171][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 951.026355][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 951.026424][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 951.143859][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 951.143946][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 951.255699][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 951.255755][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 951.307143][T15378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.390721][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 951.628363][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 951.796669][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 952.308708][T15395] loop0: detected capacity change from 0 to 16 [ 952.431464][T15395] erofs (device loop0): mounted with root inode @ nid 36. [ 956.428838][ T6613] net_ratelimit: 37 callbacks suppressed [ 956.433743][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 956.434188][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 956.751724][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 956.751777][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 956.874304][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 956.874357][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 956.986035][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 957.003100][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 957.096050][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 957.119330][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 957.675182][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 957.953330][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 958.057556][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.114808][ T25] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 958.114843][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.146518][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.146553][ T25] usb 1-1: Product: syz [ 958.146571][ T25] usb 1-1: Manufacturer: syz [ 958.146590][ T25] usb 1-1: SerialNumber: syz [ 958.227918][ T25] usb 1-1: 0:2 : does not exist [ 958.433058][ T25] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 958.529291][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 958.535388][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 958.543345][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 958.556576][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 958.569943][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 958.608643][ T25] usb 1-1: USB disconnect, device number 25 [ 958.749862][T15411] udevd[15411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.798722][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 959.422329][T15432] wlan0 speed is unknown, defaulting to 1000 [ 960.364807][T15464] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2778'. [ 960.597544][T15466] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2779'. [ 960.634543][ T5624] Bluetooth: hci6: command tx timeout [ 961.667175][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 962.481372][T10364] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.481418][T10364] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.754159][ T5624] Bluetooth: hci6: command tx timeout [ 964.943393][T11073] Bluetooth: hci6: command tx timeout [ 964.959304][ T5915] net_ratelimit: 41 callbacks suppressed [ 964.959326][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 964.959379][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 965.104909][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 965.104961][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 965.321145][T10364] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.321192][T10364] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.319373][T15520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 966.688234][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 966.774064][T10364] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.774112][T10364] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.840405][T15540] IPv6: addrconf: prefix option has invalid lifetime [ 967.018848][T15543] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2798'. [ 967.053158][ T5624] Bluetooth: hci6: command tx timeout [ 967.702023][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.703768][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.703914][T15432] bridge_slave_0: entered allmulticast mode [ 967.714390][T15432] bridge_slave_0: entered promiscuous mode [ 967.747845][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 967.747894][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 967.751319][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.751432][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.751596][T15432] bridge_slave_1: entered allmulticast mode [ 967.759062][T15432] bridge_slave_1: entered promiscuous mode [ 968.160953][T10364] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.161008][T10364] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.483691][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 969.483766][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 970.124875][T15556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 970.125095][T15556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 970.125263][T15556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 970.125422][T15556] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 970.125587][T15556] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 970.125663][T15556] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 970.202329][T15556] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 970.224350][T12606] net_ratelimit: 2 callbacks suppressed [ 970.224372][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 970.224411][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 970.346951][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 970.346999][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 970.449977][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.467388][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.397313][T15432] team0: Port device team_slave_0 added [ 971.515812][T15432] team0: Port device team_slave_1 added [ 971.759774][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.759797][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.759831][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.835355][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 971.835443][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 971.899470][T10364] bridge0: left allmulticast mode [ 971.983181][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 972.172114][T15601] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2814'. [ 972.186689][T13400] Bluetooth: hci3: command 0x0406 tx timeout [ 972.186818][T13400] Bluetooth: hci2: command 0x0406 tx timeout [ 972.191963][T11073] Bluetooth: hci5: command 0x0406 tx timeout [ 972.193845][ T5624] Bluetooth: hci6: command 0x0c1a tx timeout [ 974.097349][T10364] bond0 (unregistering): Released all slaves [ 974.166197][T10364] bond1 (unregistering): Released all slaves [ 974.240904][T10364] bond2 (unregistering): Released all slaves [ 974.268404][ T5624] Bluetooth: hci6: command 0x0c1a tx timeout [ 974.324670][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.324689][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.324721][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.562937][ T6613] bond2: (slave gretap1): failed to get link speed/duplex [ 974.562985][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 974.598691][T15432] hsr_slave_0: entered promiscuous mode [ 974.604435][T15432] hsr_slave_1: entered promiscuous mode [ 974.613130][T15432] debugfs: 'hsr0' already exists in 'hsr' [ 974.613156][T15432] Cannot create hsr debugfs directory [ 974.980902][T15628] wlan0 speed is unknown, defaulting to 1000 [ 975.197260][T15634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 975.199006][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 976.047220][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 976.047269][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 976.312510][ T5624] Bluetooth: hci6: command 0x0c1a tx timeout [ 976.466549][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 976.466605][ T1259] bond2: (slave gretap1): failed to get link speed/duplex [ 976.814028][T10364] hsr_slave_0: left promiscuous mode [ 976.832650][T10364] hsr_slave_1: left promiscuous mode [ 976.854759][T10364] veth1_macvtap: left promiscuous mode [ 976.854807][T10364] veth0_macvtap: left promiscuous mode [ 976.854919][T10364] veth1_vlan: left promiscuous mode [ 976.855007][T10364] veth0_vlan: left promiscuous mode [ 977.622527][T15687] overlayfs: failed to clone upperpath [ 977.841122][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 978.099233][T15673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 978.101117][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 978.103545][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 978.103607][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 978.734425][ T6613] bond3: (slave gretap2): failed to get link speed/duplex [ 978.969731][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 978.969783][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 979.106192][T15432] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 979.133531][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.138199][T15432] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 979.902342][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.912682][T15432] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 979.998060][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.001571][T15432] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 980.072272][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.782644][T15432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.351528][T15432] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.407860][T12606] net_ratelimit: 12 callbacks suppressed [ 981.407885][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 981.407924][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 981.448946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.449056][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.483090][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.483192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.573058][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 981.573111][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 981.640610][T15747] fuse: Bad value for 'fd' [ 981.704685][T15751] netlink: 'syz.3.2855': attribute type 4 has an invalid length. [ 981.755516][ T1259] bond2: (slave gretap1): failed to get link speed/duplex [ 981.755571][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 981.904310][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 981.904355][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 982.015936][ T1259] bond2: (slave gretap1): failed to get link speed/duplex [ 982.015998][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 982.230224][T15760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2856'. [ 982.691714][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 982.751787][T15772] overlayfs: failed to clone upperpath [ 984.984007][T15801] netlink: 'syz.0.2867': attribute type 4 has an invalid length. [ 985.117525][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2869'. [ 986.503002][ T13] net_ratelimit: 51 callbacks suppressed [ 986.503032][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 986.503078][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 986.615505][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 986.615555][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 986.702537][T15432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.724256][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 986.724304][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 986.837271][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 986.837321][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 986.948439][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 986.983331][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 987.524250][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 988.218621][T15874] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 988.283564][T15432] veth0_vlan: entered promiscuous mode [ 988.360115][T15432] veth1_vlan: entered promiscuous mode [ 988.457908][T15432] veth0_macvtap: entered promiscuous mode [ 988.569235][T15432] veth1_macvtap: entered promiscuous mode [ 988.676758][T15432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.797298][T15886] wlan0 speed is unknown, defaulting to 1000 [ 988.816511][T15432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.362088][T15903] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2888'. [ 990.033468][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.033787][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.033974][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.372686][T15918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2893'. [ 991.520339][ T12] net_ratelimit: 26 callbacks suppressed [ 991.520370][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 991.520415][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 991.520461][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.625846][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 991.625905][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 991.883361][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 992.000133][T15929] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 992.093367][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 992.093464][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 992.128803][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.128826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.159396][T15932] netlink: 'syz.2.2897': attribute type 4 has an invalid length. [ 992.224808][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 992.224858][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 992.305872][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.305944][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.446225][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 992.446280][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 992.555067][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.555097][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.367919][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 996.079314][T15962] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2904'. [ 996.735398][ T90] net_ratelimit: 4 callbacks suppressed [ 996.735426][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 996.735465][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 996.843192][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 996.843242][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 996.955080][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 996.955130][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 997.068682][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 997.068736][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 997.213185][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 997.213237][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 999.081722][T15989] netlink: 'syz.1.2911': attribute type 4 has an invalid length. [ 999.318321][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1000.203002][T16007] wlan0 speed is unknown, defaulting to 1000 [ 1000.835302][T16019] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2919'. [ 1001.202087][T16036] overlayfs: failed to clone upperpath [ 1001.327775][T16042] netlink: 'syz.8.2925': attribute type 4 has an invalid length. [ 1001.829926][ T1259] net_ratelimit: 30 callbacks suppressed [ 1001.829953][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 1001.868776][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1001.933237][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 1001.978907][ T1259] bond2: (slave gretap1): failed to get link speed/duplex [ 1002.045836][ T1259] bond3: (slave gretap2): failed to get link speed/duplex [ 1002.087648][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1002.155292][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1002.194671][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1002.268348][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1002.304348][ T1259] bond2: (slave gretap1): failed to get link speed/duplex [ 1002.366189][T16082] netlink: 'syz.2.2939': attribute type 4 has an invalid length. [ 1003.122246][T16101] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1003.380926][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 1004.298568][T16125] netlink: 'syz.8.2954': attribute type 4 has an invalid length. [ 1004.974300][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1005.108738][T16142] Illegal XDP return value 4294967274 on prog (id 282) dev N/A, expect packet loss! [ 1005.131874][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1005.147361][ T10] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 1005.147411][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.147435][ T10] usb 1-1: config 1 has no interface number 0 [ 1005.147481][ T10] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.147515][ T10] usb 1-1: config 1 interface 188 has no altsetting 0 [ 1005.202332][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.202370][ T10] usb 1-1: Product: syz [ 1005.202387][ T10] usb 1-1: Manufacturer: syz [ 1005.202406][ T10] usb 1-1: SerialNumber: syz [ 1005.343863][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2962'. [ 1005.463561][ T10] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 1005.463592][ T10] usb 1-1: 188:0 : does not exist [ 1005.569306][ T10] usb 1-1: USB disconnect, device number 26 [ 1005.634944][T16155] loop2: detected capacity change from 0 to 7 [ 1005.653131][T16155] Dev loop2: unable to read RDB block 7 [ 1005.653178][T16155] loop2: unable to read partition table [ 1005.653416][T16155] loop2: partition table beyond EOD, truncated [ 1005.653461][T16155] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1005.742596][T16136] udevd[16136]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.245059][T16163] wlan0 speed is unknown, defaulting to 1000 [ 1006.844150][ T12] net_ratelimit: 76 callbacks suppressed [ 1006.844175][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1006.848569][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1007.052987][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1007.053035][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1007.165144][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1007.165198][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1007.283032][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1007.283081][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1007.394106][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1007.394157][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1007.539445][T16200] wlan0 speed is unknown, defaulting to 1000 [ 1010.618038][T16239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2991'. [ 1011.127302][T16227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1011.127509][T16227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1011.127679][T16227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1011.127859][T16227] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1011.128040][T16227] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1011.567286][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3000'. [ 1011.833249][T16269] wlan0 speed is unknown, defaulting to 1000 [ 1012.235871][T16286] bridge_slave_0: left allmulticast mode [ 1012.235901][T16286] bridge_slave_0: left promiscuous mode [ 1012.236135][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.285748][T16286] bridge_slave_1: left allmulticast mode [ 1012.285780][T16286] bridge_slave_1: left promiscuous mode [ 1012.286234][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.377592][T16286] bond0: (slave bond_slave_0): Releasing backup interface [ 1012.678941][T16286] bond0: (slave bond_slave_1): Releasing backup interface [ 1012.721457][T16286] team0: Port device team_slave_0 removed [ 1012.777308][T16286] team0: Port device team_slave_1 removed [ 1012.787790][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.787816][T16286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.810327][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.810356][T16286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.829407][T16286] net_ratelimit: 26 callbacks suppressed [ 1012.829474][T16286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1013.118305][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 1013.118359][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1013.183367][ T5624] Bluetooth: hci6: command 0x0c1a tx timeout [ 1013.183393][T13400] Bluetooth: hci5: command 0x0406 tx timeout [ 1013.183413][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 1013.183425][T13400] Bluetooth: hci2: command 0x0406 tx timeout [ 1013.183442][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 1013.224742][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1013.224790][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1013.336029][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1013.336083][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1013.472967][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1013.473019][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1013.584364][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1016.451093][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3016'. [ 1016.915601][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3018'. [ 1017.236375][T16343] wlan0 speed is unknown, defaulting to 1000 [ 1017.873241][ T1287] net_ratelimit: 54 callbacks suppressed [ 1017.873266][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1017.873304][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1017.984314][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1017.984363][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1018.143387][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1018.163704][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1018.216774][T16367] syzkaller0: entered promiscuous mode [ 1018.216802][T16367] syzkaller0: entered allmulticast mode [ 1018.768321][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1018.768372][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1019.279392][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 1019.279445][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1020.671778][T16413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1022.320497][T16451] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1022.320547][T16451] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1025.901514][T16460] overlayfs: failed to clone upperpath [ 1026.893016][T10938] net_ratelimit: 56 callbacks suppressed [ 1026.893042][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1026.894063][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1027.003493][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1027.004501][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1027.051764][T16466] netlink: 'syz.1.3051': attribute type 4 has an invalid length. [ 1027.060665][T16466] netlink: 'syz.1.3051': attribute type 4 has an invalid length. [ 1027.113007][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1027.113968][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1027.224266][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1027.224344][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1027.333300][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1027.334337][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1027.819154][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1027.841611][T16487] usb usb5: usbfs: process 16487 (syz.8.3060) did not claim interface 0 before use [ 1028.395566][T10068] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1028.578292][T10068] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1028.580707][T10068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.580734][T10068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.588986][T10068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1028.589059][T10068] usb 1-1: SerialNumber: syz [ 1028.805979][T13400] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1028.815906][T13400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1028.824168][T13400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1028.838526][T13400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1028.842632][T13400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1028.931639][T10068] usb 1-1: 0:2 : does not exist [ 1028.931738][T10068] usb 1-1: unit 5 not found! [ 1029.296401][T10068] usb 1-1: USB disconnect, device number 27 [ 1029.614678][T16491] udevd[16491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.030199][T16500] wlan0 speed is unknown, defaulting to 1000 [ 1030.653963][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 1030.943206][T13400] Bluetooth: hci4: command tx timeout [ 1031.448399][T16565] 9p: Bad value for 'rfdno' [ 1031.829923][T16576] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3084'. [ 1031.871280][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.871369][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.871528][T16500] bridge_slave_0: entered allmulticast mode [ 1031.884978][T16500] bridge_slave_0: entered promiscuous mode [ 1031.913113][T16315] net_ratelimit: 61 callbacks suppressed [ 1031.913139][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1031.913181][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1031.914446][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.916597][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.917084][T16500] bridge_slave_1: entered allmulticast mode [ 1031.929755][T16500] bridge_slave_1: entered promiscuous mode [ 1032.043745][T16581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1032.278277][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.298830][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.481526][T16500] team0: Port device team_slave_0 added [ 1032.483006][T10068] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1032.505048][T16500] team0: Port device team_slave_1 added [ 1032.652095][T10068] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1032.653262][T10068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.653294][T10068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.654661][T10068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1032.654688][T10068] usb 1-1: SerialNumber: syz [ 1032.735444][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.735463][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.735488][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.757505][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.757555][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.757589][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.951480][T10068] usb 1-1: 0:2 : does not exist [ 1032.951546][T10068] usb 1-1: unit 5 not found! [ 1033.032901][T13400] Bluetooth: hci4: command tx timeout [ 1033.133046][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1033.133093][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1033.217168][T16500] hsr_slave_0: entered promiscuous mode [ 1033.225797][T10068] usb 1-1: USB disconnect, device number 28 [ 1033.233684][T16500] hsr_slave_1: entered promiscuous mode [ 1033.234576][T16500] debugfs: 'hsr0' already exists in 'hsr' [ 1033.234600][T16500] Cannot create hsr debugfs directory [ 1033.246275][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1033.246321][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1033.439625][T16491] udevd[16491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.473127][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1033.473183][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1033.520751][T16606] wlan0 speed is unknown, defaulting to 1000 [ 1033.611694][T16616] 9p: Bad value for 'rfdno' [ 1034.323062][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1035.016400][T16643] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3104'. [ 1035.104849][T13400] Bluetooth: hci4: command tx timeout [ 1036.136426][T16500] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1036.178525][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1036.179468][T16500] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1036.215710][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1036.221725][T16500] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1036.311245][T16662] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3114'. [ 1036.354124][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1036.358076][T16500] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1036.412678][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.497004][T16673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3116'. [ 1036.895764][T16684] loop2: detected capacity change from 0 to 7 [ 1036.904471][T16684] Dev loop2: unable to read RDB block 7 [ 1036.904502][T16684] loop2: AHDI p1 p2 p3 [ 1036.904528][T16684] loop2: partition table partially beyond EOD, truncated [ 1036.904763][T16684] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1036.904788][T16684] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1036.944109][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.967373][ T6362] net_ratelimit: 19 callbacks suppressed [ 1036.967399][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1037.033237][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1037.033377][ T5734] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1037.048744][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.073782][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1037.096573][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.096686][T12606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.135199][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.135317][T12606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.182966][T13400] Bluetooth: hci4: command tx timeout [ 1037.185728][ T5734] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1037.189882][ T5734] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.189934][ T5734] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1037.189961][ T5734] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1037.189989][ T5734] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.190037][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.221601][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1037.243580][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1037.303652][T16689] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3124'. [ 1037.363012][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1037.435811][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1037.544600][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1037.553929][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1037.663527][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1037.666726][T16703] loop2: detected capacity change from 0 to 7 [ 1037.677371][T16703] Dev loop2: unable to read RDB block 7 [ 1037.677419][T16703] loop2: unable to read partition table [ 1037.677773][T16703] loop2: partition table beyond EOD, truncated [ 1037.680859][T16703] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1037.961204][T16709] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1038.043907][ T5734] gud 1-1:1.0: Failed to get connectors (error=-71) [ 1038.043947][ T5734] gud 1-1:1.0: probe with driver gud failed with error -71 [ 1038.148176][ T5734] usb 1-1: USB disconnect, device number 29 [ 1038.544285][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.136600][T16748] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3141'. [ 1039.162961][ T5734] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1039.168123][T16751] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1039.251570][T16500] veth0_vlan: entered promiscuous mode [ 1039.327234][T16500] veth1_vlan: entered promiscuous mode [ 1039.336499][ T5734] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1039.341752][ T5734] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.341808][ T5734] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.341835][ T5734] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1039.341863][ T5734] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.341912][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.789124][T16500] veth0_macvtap: entered promiscuous mode [ 1039.817569][T16500] veth1_macvtap: entered promiscuous mode [ 1040.001103][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.088542][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.187081][ T90] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.187144][ T90] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.187188][ T90] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.187231][ T90] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.254540][ T5734] gud 1-1:1.0: Failed to get connectors (error=-5) [ 1040.254578][ T5734] gud 1-1:1.0: probe with driver gud failed with error -5 [ 1040.471283][T16767] wlan0 speed is unknown, defaulting to 1000 [ 1041.156381][ T5771] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1041.334069][ T5771] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1041.337224][ T5771] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.337270][ T5771] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1041.337290][ T5771] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1041.337311][ T5771] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.337349][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.726368][T16315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.726399][T16315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.043290][ T6362] net_ratelimit: 49 callbacks suppressed [ 1042.043318][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1042.043363][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1042.112173][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.112202][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.155715][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1042.155768][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1042.263847][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1042.263900][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1042.306617][ T5771] gud 9-1:1.0: Failed to get connectors (error=-5) [ 1042.306662][ T5771] gud 9-1:1.0: probe with driver gud failed with error -5 [ 1042.374450][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1042.374508][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1042.455325][T10068] usb 1-1: USB disconnect, device number 30 [ 1042.483940][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1042.484018][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1043.244062][ T5771] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1043.417251][ T5771] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1043.419947][ T5771] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.419975][ T5771] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1043.419998][ T5771] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1043.420033][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.445822][T16792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1043.518210][T16801] loop2: detected capacity change from 0 to 7 [ 1043.535961][T16801] Dev loop2: unable to read RDB block 7 [ 1043.536000][T16801] loop2: unable to read partition table [ 1043.536291][T16801] loop2: partition table beyond EOD, truncated [ 1043.536353][T16801] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1043.908277][T16792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.914628][T16792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.920548][T10068] usb 9-1: USB disconnect, device number 2 [ 1044.110141][T16818] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1044.559163][ T31] audit: type=1800 audit(1790728801.475:50): pid=16828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3169" name="nullb0" dev="tmpfs" ino=2763 res=0 errno=0 [ 1044.602480][T16830] loop2: detected capacity change from 0 to 7 [ 1044.611885][T16830] Dev loop2: unable to read RDB block 7 [ 1044.611922][T16830] loop2: AHDI p1 p2 p3 [ 1044.611945][T16830] loop2: partition table partially beyond EOD, truncated [ 1044.613220][T16830] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1044.614621][T16830] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1046.295677][ T5771] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1046.300658][ T5771] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input9 [ 1047.134004][ T49] net_ratelimit: 82 callbacks suppressed [ 1047.134035][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1047.136147][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1047.243173][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 1047.243229][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1047.352981][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1047.353033][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 1047.463138][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1047.463192][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1047.573749][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1047.573887][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1048.177062][T10068] usb 1-1: USB disconnect, device number 31 [ 1048.177171][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1048.824949][T16877] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3183'. [ 1048.977713][T16884] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1049.759667][ T31] audit: type=1800 audit(1790728806.675:51): pid=16896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3192" name="nullb0" dev="tmpfs" ino=2763 res=0 errno=0 [ 1049.808471][T16898] overlayfs: failed to clone upperpath [ 1051.911964][ T5771] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1051.912219][T10068] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1052.163882][ T5771] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1052.167106][T10068] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1052.169675][ T5771] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.169702][ T5771] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.169747][ T5771] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.169783][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.173736][T10068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.173786][T10068] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1052.173820][T10068] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1052.173848][T10068] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.173894][T10068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.181695][T16903] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1052.269099][ T90] net_ratelimit: 74 callbacks suppressed [ 1052.269123][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1052.270048][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1052.373406][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1052.374360][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1052.483906][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1052.484883][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1052.594269][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1052.594425][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1052.628962][T16903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.642164][T16903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.705522][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1052.705666][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 1053.027643][T10068] gud 1-1:1.0: Failed to get connectors (error=-5) [ 1053.027673][T10068] gud 1-1:1.0: probe with driver gud failed with error -5 [ 1053.411871][ T90] IPVS: starting estimator thread 0... [ 1053.662905][T16937] IPVS: using max 33 ests per chain, 79200 per kthread [ 1053.758934][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.758985][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.183782][ T5771] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1054.187668][ T5771] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input10 [ 1054.649936][T10068] usb 1-1: USB disconnect, device number 32 [ 1056.566451][ T5734] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1056.732197][ T5734] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1056.737293][ T5734] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.771325][T10068] usb 9-1: USB disconnect, device number 3 [ 1056.771379][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1056.799774][ T5734] usb 10-1: config 0 descriptor?? [ 1057.010871][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3220'. [ 1057.056128][ T5734] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1057.298995][ T5734] [drm:udl_init] *ERROR* Selecting channel failed [ 1057.333294][ T13] net_ratelimit: 82 callbacks suppressed [ 1057.333325][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1057.334387][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1057.443985][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1057.444939][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1057.553771][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1057.554933][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1057.555432][ T4941] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1057.575799][ T5734] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1057.575836][ T5734] [drm] Initialized udl on minor 1 [ 1057.660876][ T5734] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1057.672029][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1057.680220][ T5734] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1057.688693][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1057.718850][ T5734] usb 10-1: USB disconnect, device number 2 [ 1057.723068][ T4941] usb 1-1: Using ep0 maxpacket: 16 [ 1057.723843][ T4941] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.724948][ T4941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.724974][ T4941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.728432][ T4941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.728459][ T4941] usb 1-1: Product: syz [ 1057.728478][ T4941] usb 1-1: Manufacturer: syz [ 1057.728496][ T4941] usb 1-1: SerialNumber: syz [ 1057.784129][ T4941] usb 1-1: 0:2 : does not exist [ 1057.792014][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1057.803158][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1057.973930][ T4941] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1058.418967][ T4941] usb 1-1: USB disconnect, device number 33 [ 1058.604390][T16491] udevd[16491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.992906][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1059.159803][ T25] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1059.164162][ T25] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.164202][ T25] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1059.164236][ T25] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1059.164289][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.243645][T17002] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1059.663245][ T4941] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1059.684337][T17002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.690276][T17002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.812589][T17018] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3239'. [ 1059.833260][ T4941] usb 1-1: Using ep0 maxpacket: 32 [ 1059.835961][ T4941] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1059.838712][ T4941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.848396][ T4941] usb 1-1: config 0 descriptor?? [ 1059.875546][ T4941] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1060.937747][ T4941] gspca_sunplus: reg_w_riv err -71 [ 1060.937853][ T4941] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1060.954846][ T4941] usb 1-1: USB disconnect, device number 34 [ 1061.358364][ T25] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1061.367134][ T25] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input11 [ 1062.404145][ T90] net_ratelimit: 81 callbacks suppressed [ 1062.404171][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1062.404219][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1062.519898][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1062.519954][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1062.626510][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1062.626568][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1062.632680][T17058] netlink: 'syz.9.3253': attribute type 6 has an invalid length. [ 1062.632697][T17058] netlink: 360 bytes leftover after parsing attributes in process `syz.9.3253'. [ 1062.733236][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1062.733298][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1062.844642][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1062.844706][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1063.066840][ T5734] usb 9-1: USB disconnect, device number 4 [ 1063.066911][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1063.248927][T17063] overlayfs: missing 'workdir' [ 1063.510092][T17071] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3255'. [ 1064.960259][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 1065.331460][T17100] netlink: 'syz.9.3269': attribute type 6 has an invalid length. [ 1065.331482][T17100] netlink: 360 bytes leftover after parsing attributes in process `syz.9.3269'. [ 1065.455926][T17104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3270'. [ 1067.481415][ T5915] net_ratelimit: 54 callbacks suppressed [ 1067.481917][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 1067.693206][ T8717] bond2: (slave gretap1): failed to get link speed/duplex [ 1067.694537][ T9028] bond3: (slave gretap2): failed to get link speed/duplex [ 1067.812896][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 1067.875838][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1067.952946][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1067.994909][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1068.127982][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1068.130460][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1068.280510][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1071.350688][T17141] netlink: 'syz.9.3283': attribute type 6 has an invalid length. [ 1071.350709][T17141] netlink: 360 bytes leftover after parsing attributes in process `syz.9.3283'. [ 1071.453253][T17143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1072.919946][ T996] net_ratelimit: 51 callbacks suppressed [ 1072.919973][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1072.946196][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1073.024141][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1073.053548][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1073.134900][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1073.163507][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1073.243949][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1073.273551][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1073.354966][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1073.383519][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1073.761209][T17155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1073.761370][T17155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.761490][T17155] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1073.761609][T17155] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1073.761725][T17155] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1073.761773][T17155] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1073.805214][T17155] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1075.593174][T11073] Bluetooth: hci1: command 0x0406 tx timeout [ 1075.833188][T11073] Bluetooth: hci4: command 0x0c1a tx timeout [ 1075.833238][T11073] Bluetooth: hci6: command 0x0c1a tx timeout [ 1075.833262][T11073] Bluetooth: hci5: command 0x0406 tx timeout [ 1075.833289][T11073] Bluetooth: hci2: command 0x0406 tx timeout [ 1076.032852][T17191] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3300'. [ 1077.207715][T17237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3315'. [ 1077.630135][T17120] IPVS: starting estimator thread 0... [ 1077.743628][T17250] IPVS: using max 33 ests per chain, 79200 per kthread [ 1077.913477][T13400] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.925084][ T1287] net_ratelimit: 74 callbacks suppressed [ 1077.925107][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1077.963244][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1078.033137][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1078.073387][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1078.119611][T17259] loop9: detected capacity change from 0 to 256 [ 1078.165992][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 1078.183882][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1078.373615][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1078.373661][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1078.424010][ T4941] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1078.483091][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1078.483137][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1078.585500][ T4941] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1078.589168][ T4941] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1078.589194][ T4941] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1078.589217][ T4941] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1078.589252][ T4941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.615832][T17266] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1079.060664][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.072515][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.993349][T13400] Bluetooth: hci4: command 0x0c1a tx timeout [ 1080.616327][ T4941] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1080.627586][ T4941] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 1081.203936][T17323] loop2: detected capacity change from 0 to 7 [ 1081.210431][T17323] Dev loop2: unable to read RDB block 7 [ 1081.210528][T17323] loop2: unable to read partition table [ 1081.210746][T17323] loop2: partition table beyond EOD, truncated [ 1081.210773][T17323] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1081.499748][T17328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1082.236890][ T4941] usb 1-1: USB disconnect, device number 35 [ 1082.236968][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1082.896961][T11850] IPVS: starting estimator thread 0... [ 1083.013006][T17348] IPVS: using max 33 ests per chain, 79200 per kthread [ 1083.029332][T17120] net_ratelimit: 67 callbacks suppressed [ 1083.029351][T17120] bond2: (slave gretap1): failed to get link speed/duplex [ 1083.044733][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1083.143036][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1083.154147][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1083.253781][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1083.263273][T17120] bond3: (slave gretap2): failed to get link speed/duplex [ 1083.363198][T17120] bond2: (slave gretap1): failed to get link speed/duplex [ 1083.384189][T12564] bond3: (slave gretap2): failed to get link speed/duplex [ 1083.483771][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1083.512894][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1083.562106][T17363] loop2: detected capacity change from 0 to 7 [ 1083.570205][T17363] Dev loop2: unable to read RDB block 7 [ 1083.570231][T17363] loop2: unable to read partition table [ 1083.570406][T17363] loop2: partition table beyond EOD, truncated [ 1083.570422][T17363] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1083.628461][T17360] wlan0 speed is unknown, defaulting to 1000 [ 1085.911502][T17379] wlan0 speed is unknown, defaulting to 1000 [ 1086.702861][ T4941] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1086.711289][T13400] Bluetooth: hci5: Invalid handle: 0xff42 > 0x0eff [ 1086.874447][ T4941] usb 9-1: Using ep0 maxpacket: 16 [ 1086.875743][ T4941] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1086.877107][ T4941] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.877143][ T4941] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1086.890304][ T4941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.890340][ T4941] usb 9-1: Product: syz [ 1086.890361][ T4941] usb 9-1: Manufacturer: syz [ 1086.890381][ T4941] usb 9-1: SerialNumber: syz [ 1086.905950][ T4941] usb 9-1: config 0 descriptor?? [ 1087.228605][ T4941] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input13 [ 1087.435227][ T4941] rc_core: IR keymap rc-imon-pad not found [ 1087.435251][ T4941] Registered IR keymap rc-empty [ 1087.435363][ T4941] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1087.435385][ T4941] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1087.581921][T17414] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3381'. [ 1087.890734][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1087.891830][ T4941] imon:send_packet: packet tx failed (-71) [ 1087.913852][ T4941] imon 9-1:0.0: remote input dev register failed [ 1087.914005][ T4941] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1088.083141][ T1287] net_ratelimit: 57 callbacks suppressed [ 1088.083171][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1088.083212][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1088.194190][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1088.194241][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1088.304352][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1088.304404][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1088.413121][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1088.413182][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1088.523164][ T1287] bond2: (slave gretap1): failed to get link speed/duplex [ 1088.523213][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1089.528805][T17423] wlan0 speed is unknown, defaulting to 1000 [ 1089.899353][T17430] comedi comedi1: Minor 0 could not be opened [ 1090.308997][ T4941] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1090.309018][ T4941] imon:imon_probe: failed to initialize context! [ 1090.317235][ T4941] imon 9-1:0.0: unable to register, err -19 [ 1090.358693][ T4941] usb 9-1: USB disconnect, device number 5 [ 1090.703215][ T4941] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1090.833576][T17456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1090.868661][ T4941] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1090.869606][ T4941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.891832][T17455] loop9: detected capacity change from 0 to 1024 [ 1090.901871][T17455] journal_path: Non-blockdev passed as './bus' [ 1090.901919][T17455] EXT4-fs: error: could not find journal device path [ 1090.909120][ T4941] usb 9-1: config 0 descriptor?? [ 1091.443299][T17458] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1092.216520][ T4941] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1092.217552][ T4941] [drm:udl_init] *ERROR* Selecting channel failed [ 1092.322659][ T4941] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 1092.322681][ T4941] [drm] Initialized udl on minor 1 [ 1092.447296][ T4941] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1092.447624][ T4941] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1092.462481][ T4941] usb 9-1: USB disconnect, device number 6 [ 1092.469332][ T25] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1092.537743][T17465] netlink: 'syz.3.3399': attribute type 29 has an invalid length. [ 1092.549585][T17465] netlink: 'syz.3.3399': attribute type 29 has an invalid length. [ 1092.555506][T17465] netlink: 'syz.3.3399': attribute type 29 has an invalid length. [ 1092.710701][T17472] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1092.856675][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1093.164105][ T12] net_ratelimit: 64 callbacks suppressed [ 1093.164132][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1093.165636][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 1093.274149][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1093.274786][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1093.384209][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1093.384355][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 1093.495372][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1093.495525][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1093.604122][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1093.604260][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1094.112836][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1094.114852][ T25] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1094.119812][ T25] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1094.119833][ T25] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.126383][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.126412][ T25] usb 10-1: Product: syz [ 1094.126440][ T25] usb 10-1: Manufacturer: syz [ 1094.126457][ T25] usb 10-1: SerialNumber: syz [ 1094.557073][ T25] usb 10-1: 0:2 : does not exist [ 1094.621999][T17485] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1094.717803][ T25] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1094.725340][T17485] md: could not open device unknown-block(1,0). [ 1094.922377][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1094.993037][ T25] usb 10-1: USB disconnect, device number 3 [ 1095.020036][T17498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1095.178086][T17426] udevd[17426]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.353425][T10068] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1095.508687][T10068] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1095.513861][T10068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.533940][T10068] usb 1-1: config 0 descriptor?? [ 1096.817191][T10068] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1096.818323][T10068] [drm:udl_init] *ERROR* Selecting channel failed [ 1096.969706][T10068] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1096.969731][T10068] [drm] Initialized udl on minor 1 [ 1096.998346][T10068] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1097.057311][T10068] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1097.089633][T10068] usb 1-1: USB disconnect, device number 36 [ 1097.142366][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1097.142903][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1098.198992][ T49] net_ratelimit: 64 callbacks suppressed [ 1098.199018][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1098.240073][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 1098.678774][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1098.875712][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1098.895294][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1099.061406][T12564] bond2: (slave gretap1): failed to get link speed/duplex [ 1099.076234][ T1287] bond3: (slave gretap2): failed to get link speed/duplex [ 1099.164197][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1099.187092][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1099.273267][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1100.313024][T17540] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3427'. [ 1101.464766][T10068] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1101.614425][T10068] usb 9-1: Using ep0 maxpacket: 16 [ 1101.615085][T10068] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1101.617977][T10068] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1101.617998][T10068] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1101.647147][T10068] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.647179][T10068] usb 9-1: Product: syz [ 1101.647197][T10068] usb 9-1: Manufacturer: syz [ 1101.647214][T10068] usb 9-1: SerialNumber: syz [ 1101.863717][T10068] usb 9-1: 0:2 : does not exist [ 1102.037686][T10068] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1102.286690][T10068] usb 9-1: USB disconnect, device number 7 [ 1102.439858][T17426] udevd[17426]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.854374][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3441'. [ 1103.272975][ T59] net_ratelimit: 63 callbacks suppressed [ 1103.273006][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1103.273062][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1103.301375][T10068] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1103.386333][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1103.387863][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 1103.493239][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1103.493299][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1103.603271][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 1103.603321][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1103.712925][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1103.712975][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1104.985502][T10068] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1104.986690][T10068] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.986710][T10068] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.986739][T10068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.000690][T10068] usb 1-1: config 0 descriptor?? [ 1105.686903][T11073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.693164][T11073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1105.694795][T11073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1105.697668][T11073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1105.699085][T11073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1106.003756][T10068] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1106.062984][ T4941] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1106.152975][T10068] usb 10-1: Using ep0 maxpacket: 32 [ 1106.153722][T10068] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1106.156247][T10068] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1106.156275][T10068] usb 10-1: config 0 has no interface number 0 [ 1106.165380][T10068] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.165410][T10068] usb 10-1: Product: syz [ 1106.165428][T10068] usb 10-1: Manufacturer: syz [ 1106.165446][T10068] usb 10-1: SerialNumber: syz [ 1106.182031][T10068] usb 10-1: config 0 descriptor?? [ 1106.202687][T10068] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1106.214545][ T4941] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1106.216006][ T4941] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1106.216057][ T4941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.401830][T10068] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1108.348757][T11073] Bluetooth: hci3: command tx timeout [ 1108.366949][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1108.503379][ T996] net_ratelimit: 61 callbacks suppressed [ 1108.503428][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1108.503512][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1108.533506][ T5734] usb 1-1: USB disconnect, device number 37 [ 1108.612958][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1108.613020][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1108.633794][ T4941] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 1108.663998][T17611] wlan0 speed is unknown, defaulting to 1000 [ 1108.669222][T10068] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1108.719971][T10068] usb 10-1: USB disconnect, device number 4 [ 1108.841848][T10068] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1110.082410][T10068] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1110.090303][T10068] quatech2 10-1:0.51: device disconnected [ 1111.045976][T11073] Bluetooth: hci3: command tx timeout [ 1111.082631][ T4941] wwan wwan0: port wwan0qmi0 attached [ 1113.102965][T11073] Bluetooth: hci3: command tx timeout [ 1114.721998][ T4941] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, 1a:37:7b:0f:11:07 [ 1114.751008][ T4941] usb 9-1: USB disconnect, device number 8 [ 1114.778064][ T4941] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device [ 1115.041334][T17662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1115.043164][T17121] bond3: (slave gretap2): failed to get link speed/duplex [ 1115.043205][T17121] bond2: (slave gretap1): failed to get link speed/duplex [ 1115.051871][ T4941] wwan wwan0: port wwan0qmi0 disconnected [ 1115.172871][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1115.172917][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1115.187906][T11073] Bluetooth: hci3: command tx timeout [ 1115.190698][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.190761][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.760684][T17673] bridge_slave_0: left allmulticast mode [ 1115.760708][T17673] bridge_slave_0: left promiscuous mode [ 1115.766343][T17673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.807586][T17673] bridge_slave_1: left allmulticast mode [ 1115.807609][T17673] bridge_slave_1: left promiscuous mode [ 1115.807790][T17673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.856623][T17673] bond0: (slave bond_slave_0): Releasing backup interface [ 1115.880727][T17673] bond0: (slave bond_slave_1): Releasing backup interface [ 1115.947504][T17673] team0: Port device team_slave_0 removed [ 1115.974124][T17673] team0: Port device team_slave_1 removed [ 1115.978431][T17673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.978451][T17673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.985412][T17673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.985437][T17673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.033926][T17673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1116.035505][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1116.035552][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1116.287939][T17121] bond3: (slave gretap2): failed to get link speed/duplex [ 1116.440758][T17682] wlan0 speed is unknown, defaulting to 1000 [ 1116.681252][T17690] fuse: fd is not a fuse device [ 1116.814040][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 1117.084506][T17611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.086301][T17611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.086500][T17611] bridge_slave_0: entered allmulticast mode [ 1117.088552][T17611] bridge_slave_0: entered promiscuous mode [ 1117.096719][T17611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.096830][T17611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.096969][T17611] bridge_slave_1: entered allmulticast mode [ 1117.105011][T17611] bridge_slave_1: entered promiscuous mode [ 1119.007167][T17611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.028111][T17611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.123302][T17611] team0: Port device team_slave_0 added [ 1119.126442][T17611] team0: Port device team_slave_1 added [ 1119.172401][T17611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.172422][T17611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.172455][T17611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.221407][T17611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.221429][T17611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.221484][T17611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.267620][ T5734] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1119.336809][T17611] hsr_slave_0: entered promiscuous mode [ 1119.337941][T17611] hsr_slave_1: entered promiscuous mode [ 1119.338751][T17611] debugfs: 'hsr0' already exists in 'hsr' [ 1119.338774][T17611] Cannot create hsr debugfs directory [ 1119.442900][ T5734] usb 10-1: Using ep0 maxpacket: 16 [ 1119.446559][ T5734] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.447815][ T5734] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.447843][ T5734] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1119.452234][ T5734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.452262][ T5734] usb 10-1: Product: syz [ 1119.452281][ T5734] usb 10-1: Manufacturer: syz [ 1119.452301][ T5734] usb 10-1: SerialNumber: syz [ 1119.548791][ T5734] usb 10-1: 0:2 : does not exist [ 1119.548882][ T5734] usb 10-1: unit 6 not found! [ 1119.779664][ T5734] usb 10-1: USB disconnect, device number 5 [ 1120.035792][T17611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.372604][T17611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.424159][T11850] net_ratelimit: 5 callbacks suppressed [ 1120.424183][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1120.424220][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1120.534429][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1120.534476][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1120.684628][T17611] bond0: (slave netdevsim1): Releasing backup interface [ 1120.709290][T17611] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1120.725349][T17611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.777695][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1120.778434][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1120.884157][T11850] bond2: (slave gretap1): failed to get link speed/duplex [ 1120.884887][T11850] bond3: (slave gretap2): failed to get link speed/duplex [ 1120.995952][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 1120.996705][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1121.738410][T17611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.082878][ T5734] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1122.103044][T17756] fuse: Unknown parameter 'grou00000000000000000000' [ 1122.105022][T11073] Bluetooth: hci6: Invalid handle: 0xff42 > 0x0eff [ 1122.232926][ T5734] usb 10-1: Using ep0 maxpacket: 16 [ 1122.238667][ T5734] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1122.241521][ T5734] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.241557][ T5734] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1122.252988][ T5734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.253017][ T5734] usb 10-1: Product: syz [ 1122.253036][ T5734] usb 10-1: Manufacturer: syz [ 1122.253055][ T5734] usb 10-1: SerialNumber: syz [ 1122.277555][ T5734] usb 10-1: config 0 descriptor?? [ 1122.431149][T17611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1122.447127][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1122.447986][T17611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1122.472830][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.473714][T17611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1122.478154][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.480586][T17611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1122.516337][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.533550][ T5734] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input15 [ 1122.688140][T17611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.750958][T17611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.788531][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.788645][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.845157][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.845270][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.191388][ T5734] rc_core: IR keymap rc-imon-pad not found [ 1123.191410][ T5734] Registered IR keymap rc-empty [ 1123.191516][ T5734] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1123.191537][ T5734] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1123.219939][ T5734] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1123.239574][ T5734] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input16 [ 1123.260433][ T5734] imon 10-1:0.0: iMON device (15c2:0041, intf0) on usb<10:6> initialized [ 1124.281103][T17120] Bluetooth: hci1: Frame reassembly failed (-84) [ 1124.281784][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 1125.583264][T13400] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1125.961196][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1125.970360][ T5758] usb 10-1: USB disconnect, device number 6 [ 1126.123483][ T986] net_ratelimit: 20 callbacks suppressed [ 1126.123510][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.123553][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 1126.235464][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 1126.235513][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.355703][T17120] bond3: (slave gretap2): failed to get link speed/duplex [ 1126.356693][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.478013][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.478061][T16315] bond3: (slave gretap2): failed to get link speed/duplex [ 1126.588307][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 1126.588356][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.674158][ T5758] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1126.828157][ T5758] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1126.834287][ T5758] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.834339][ T5758] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1126.834367][ T5758] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1126.834396][ T5758] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1126.834443][ T5758] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.013865][T17611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.218162][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3518'. [ 1127.283979][T17824] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 1127.652385][ T5758] gud 10-1:1.0: Failed to add properties (error=-5) [ 1127.652425][ T5758] gud 10-1:1.0: probe with driver gud failed with error -5 [ 1127.673195][T17824] bond6: entered promiscuous mode [ 1127.673614][T17824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1127.757325][T17829] syzkaller0: entered promiscuous mode [ 1127.757352][T17829] syzkaller0: entered allmulticast mode [ 1128.178654][T17611] veth0_vlan: entered promiscuous mode [ 1128.905795][T17611] veth1_vlan: entered promiscuous mode [ 1129.192186][T17611] veth0_macvtap: entered promiscuous mode [ 1129.266555][T17856] overlayfs: failed to clone upperpath [ 1129.295139][T17611] veth1_macvtap: entered promiscuous mode [ 1129.334739][T15923] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1129.403376][T17862] loop8: detected capacity change from 0 to 256 [ 1129.543649][T15923] usb 1-1: Using ep0 maxpacket: 16 [ 1129.578460][T15923] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1129.659077][T15923] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1129.659199][T15923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1129.920728][T15923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.920764][T15923] usb 1-1: Product: syz [ 1129.920782][T15923] usb 1-1: Manufacturer: syz [ 1129.920801][T15923] usb 1-1: SerialNumber: syz [ 1129.989458][ T5758] usb 10-1: USB disconnect, device number 7 [ 1130.001470][T15923] usb 1-1: config 0 descriptor?? [ 1130.065628][T17611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.085165][T17611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.278230][T15923] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 1130.329193][ T986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.329700][ T986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.388733][T10938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.392340][T17786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.520984][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.521044][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.244115][T16315] net_ratelimit: 41 callbacks suppressed [ 1131.245189][T16315] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.514064][T17786] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.514460][T15923] rc_core: IR keymap rc-imon-pad not found [ 1131.514478][T15923] Registered IR keymap rc-empty [ 1131.514555][T15923] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1131.514605][T15923] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1131.554613][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1131.559742][T15923] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1131.616963][T15923] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 1131.667762][T15923] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:38> initialized [ 1131.722631][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.730735][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1131.790004][T10938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.790031][T10938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.799256][T10068] usb 1-1: USB disconnect, device number 38 [ 1131.801518][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1131.858314][T17121] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.863999][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1131.973234][T17786] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.988015][T17786] bond3: (slave gretap2): failed to get link speed/duplex [ 1133.561619][T17121] bond3: (slave gretap2): failed to get link speed/duplex [ 1136.172959][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1136.346519][ T9] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1136.362073][T10938] net_ratelimit: 21 callbacks suppressed [ 1136.362096][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1136.362138][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1136.378865][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.378895][ T9] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1136.378943][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.389161][T17919] loop2: detected capacity change from 0 to 7 [ 1136.398548][ T9] usb 10-1: config 0 descriptor?? [ 1136.398866][T17919] Dev loop2: unable to read RDB block 7 [ 1136.398895][T17919] loop2: AHDI p1 p2 p3 [ 1136.398926][T17919] loop2: partition table partially beyond EOD, truncated [ 1136.399182][T17919] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1136.399207][T17919] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1136.473725][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1136.473773][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1136.583154][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 1136.583204][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 1136.701590][ T986] bond2: (slave gretap1): failed to get link speed/duplex [ 1136.701639][ T986] bond3: (slave gretap2): failed to get link speed/duplex [ 1136.864566][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 1136.864649][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 1137.104827][T11073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1137.110919][T11073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1137.111738][T11073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1137.141139][T11073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1137.156041][T11073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1137.681358][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1137.892119][T17946] loop4: detected capacity change from 0 to 512 [ 1137.916223][T17946] EXT4-fs: Ignoring removed bh option [ 1137.940264][T17946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1138.040907][T17946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.041035][T17946] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.481205][ T5771] usb 10-1: USB disconnect, device number 8 [ 1138.777711][T17611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.406852][T13400] Bluetooth: hci1: command tx timeout [ 1141.424487][T13400] Bluetooth: hci1: command tx timeout [ 1142.627296][ T90] net_ratelimit: 34 callbacks suppressed [ 1142.627323][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1142.633547][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1142.668745][T17977] loop2: detected capacity change from 0 to 7 [ 1142.674514][T17977] Dev loop2: unable to read RDB block 7 [ 1142.674546][T17977] loop2: AHDI p1 p2 p3 [ 1142.674569][T17977] loop2: partition table partially beyond EOD, truncated [ 1142.687090][T17977] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1142.687132][T17977] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1142.738046][ T6362] bond3: (slave gretap2): failed to get link speed/duplex [ 1142.743649][T17971] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1142.744557][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1142.751307][T17971] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1142.801366][T17971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1142.801500][T17971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1142.801549][T17971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1142.861785][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1142.869781][T17971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1142.904855][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1142.956527][T17971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1142.956719][T17971] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1142.994165][T17971] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1142.997960][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1143.032423][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1143.201112][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1143.331492][ T6362] bond2: (slave gretap1): failed to get link speed/duplex [ 1144.922825][T11073] Bluetooth: hci6: command 0x0c1a tx timeout [ 1144.922875][T11073] Bluetooth: hci5: command 0x0406 tx timeout [ 1144.922908][T11073] Bluetooth: hci4: command 0x0c1a tx timeout [ 1144.922946][T11073] Bluetooth: hci3: command 0x0c1a tx timeout [ 1145.023013][T13400] Bluetooth: hci1: command 0x0419 tx timeout [ 1145.151992][T17925] wlan0 speed is unknown, defaulting to 1000 [ 1145.336257][T17993] bridge_slave_0: left allmulticast mode [ 1145.336291][T17993] bridge_slave_0: left promiscuous mode [ 1145.340656][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.411088][T17993] bridge_slave_1: left allmulticast mode [ 1145.411118][T17993] bridge_slave_1: left promiscuous mode [ 1145.411339][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.450403][T17993] bond0: (slave bond_slave_0): Releasing backup interface [ 1145.487965][T17993] bond0: (slave bond_slave_1): Releasing backup interface [ 1145.570167][T17993] team0: Port device team_slave_0 removed [ 1145.591022][T17993] team0: Port device team_slave_1 removed [ 1145.592150][T17993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.592175][T17993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.618339][T17993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.618369][T17993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.103732][T17997] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1146.103764][T17997] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1146.107688][T17998] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1146.107966][T17998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1146.108203][T17998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1146.111270][T17998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1146.166233][T17997] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1146.166262][T17997] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1146.192419][T17997] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1146.192446][T17997] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1146.215510][T17997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1146.215538][T17997] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1146.240264][T17997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1146.240289][T17997] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1146.999824][T18012] netlink: 'syz.9.3570': attribute type 34 has an invalid length. [ 1146.999853][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3570'. [ 1147.352901][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1148.354395][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1148.372994][ T9] usb 10-1: config 1 has an invalid interface number: 188 but max is 0 [ 1148.373033][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.373058][ T9] usb 10-1: config 1 has no interface number 0 [ 1148.373105][ T9] usb 10-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1148.373139][ T9] usb 10-1: config 1 interface 188 has no altsetting 0 [ 1148.484872][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.484907][ T9] usb 10-1: Product: syz [ 1148.484934][ T9] usb 10-1: Manufacturer: syz [ 1148.484953][ T9] usb 10-1: SerialNumber: syz [ 1148.490134][ T13] net_ratelimit: 24 callbacks suppressed [ 1148.490155][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1148.490197][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1148.759687][T18024] wlan0 speed is unknown, defaulting to 1000 [ 1148.845693][ T5915] bond3: (slave gretap2): failed to get link speed/duplex [ 1148.845746][ T5915] bond2: (slave gretap1): failed to get link speed/duplex [ 1148.846689][T18033] loop2: detected capacity change from 0 to 7 [ 1148.847691][ T9] usb 10-1: unknown interface protocol 0xc1, assuming v1 [ 1148.847720][ T9] usb 10-1: 188:0 : does not exist [ 1148.884121][T18033] Dev loop2: unable to read RDB block 7 [ 1148.884154][T18033] loop2: AHDI p1 p2 p3 [ 1148.884176][T18033] loop2: partition table partially beyond EOD, truncated [ 1148.884402][T18033] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1148.884426][T18033] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1150.909769][ T9] usb 10-1: USB disconnect, device number 9 [ 1151.034296][T18040] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1151.058076][T17925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.058163][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.058287][T17925] bridge_slave_0: entered allmulticast mode [ 1151.085238][T17925] bridge_slave_0: entered promiscuous mode [ 1151.104302][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1151.104335][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 1151.118042][T17925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.118157][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.118322][T17925] bridge_slave_1: entered allmulticast mode [ 1151.144987][T17925] bridge_slave_1: entered promiscuous mode [ 1151.184552][T18040] md: array md0 already has disks! [ 1151.274067][T17786] bond2: (slave gretap1): failed to get link speed/duplex [ 1151.274120][T17786] bond3: (slave gretap2): failed to get link speed/duplex [ 1151.429767][T17786] bond3: (slave gretap2): failed to get link speed/duplex [ 1151.649953][T17925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.671152][T18040] md/raid1:md0: active with 1 out of 2 mirrors [ 1151.672424][T18040] md0: detected capacity change from 0 to 8192 [ 1151.677831][T17925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.914601][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1151.944105][T17925] team0: Port device team_slave_0 added [ 1151.958639][T18053] md: recover of RAID array md0 [ 1151.970615][T17925] team0: Port device team_slave_1 added [ 1152.248740][T17925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.248762][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.248796][T17925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.289786][T17925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.289800][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.289825][T17925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.404714][T18053] md: md0: recover done. [ 1152.721056][T17925] hsr_slave_0: entered promiscuous mode [ 1152.739228][T17925] hsr_slave_1: entered promiscuous mode [ 1152.758179][T17925] debugfs: 'hsr0' already exists in 'hsr' [ 1152.758203][T17925] Cannot create hsr debugfs directory [ 1154.296268][T17121] net_ratelimit: 5 callbacks suppressed [ 1154.296294][T17121] bond3: (slave gretap2): failed to get link speed/duplex [ 1154.296336][T17121] bond2: (slave gretap1): failed to get link speed/duplex [ 1154.482914][T12606] bond2: (slave gretap1): failed to get link speed/duplex [ 1154.482966][T12606] bond3: (slave gretap2): failed to get link speed/duplex [ 1154.644708][T18064] wlan0 speed is unknown, defaulting to 1000 [ 1159.293101][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1159.297600][ T59] bond3: (slave gretap2): failed to get link speed/duplex [ 1159.805260][T17925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.805301][T17925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.022985][T10938] bond2: (slave gretap1): failed to get link speed/duplex [ 1160.023030][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1160.273797][ T12] bond3: (slave gretap2): failed to get link speed/duplex [ 1160.273851][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1160.387565][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1160.387612][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1160.494822][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1160.494872][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1160.607284][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 1160.607329][ T13] bond3: (slave gretap2): failed to get link speed/duplex [ 1160.629350][T18087] atomic_op ffff8880692151e0 conn xmit_atomic 0000000000000000 [ 1161.082693][T17925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.095346][T17925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.688118][T17925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.688166][T17925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.731979][T18099] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1162.106241][T17925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.106277][T17925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.983711][ T5734] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1163.269410][ T5734] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1163.282586][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.259004][ T5734] usb 1-1: config 0 descriptor?? [ 1168.583066][T10938] net_ratelimit: 20 callbacks suppressed [ 1168.583093][T10938] bond3: (slave gretap2): failed to get link speed/duplex [ 1168.583167][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 1169.577358][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 1169.577408][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1169.629107][ T5734] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1169.640717][ T5734] [drm:udl_init] *ERROR* Selecting channel failed [ 1169.739030][ T5734] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1169.739053][ T5734] [drm] Initialized udl on minor 1 [ 1169.771175][ T5734] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1169.771493][ T5734] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1169.805357][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1169.832070][ T5734] usb 1-1: USB disconnect, device number 39 [ 1169.862899][ T90] bond3: (slave gretap2): failed to get link speed/duplex [ 1169.881010][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1169.881167][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1169.883028][ T90] bond2: (slave gretap1): failed to get link speed/duplex [ 1169.892112][T17925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1170.467679][T18129] loop4: detected capacity change from 0 to 256 [ 1170.525452][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.545011][T17925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1170.609169][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.610777][T17925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1170.914110][T10068] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1171.024876][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.051802][T17925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1171.062809][T10068] usb 10-1: Using ep0 maxpacket: 16 [ 1171.107707][T10068] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1171.126957][T10068] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1171.126980][T10068] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1171.348243][T10068] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.348268][T10068] usb 10-1: Product: syz [ 1171.348283][T10068] usb 10-1: Manufacturer: syz [ 1171.348297][T10068] usb 10-1: SerialNumber: syz [ 1171.363774][T18137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1171.672567][T18139] atomic_op ffff88805ab6b1e0 conn xmit_atomic 0000000000000000 [ 1171.672998][T18139] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1171.675741][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.790947][T10068] usb 10-1: 0:2 : does not exist [ 1171.873819][T17981] bond3: (slave gretap2): failed to get link speed/duplex [ 1171.873854][T17981] bond2: (slave gretap1): failed to get link speed/duplex [ 1171.875347][T18132] wlan0 speed is unknown, defaulting to 1000 [ 1172.047001][T17981] bond3: (slave gretap2): failed to get link speed/duplex [ 1172.066380][T10068] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1173.924628][T17121] bond2: (slave gretap1): failed to get link speed/duplex [ 1174.105022][T10068] usb 10-1: USB disconnect, device number 10 [ 1174.135927][T18156] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1174.193723][T18156] md: couldn't update array info. -22 [ 1174.234102][T18156] [ 1174.236442][T18156] ====================================================== [ 1174.243460][T18156] WARNING: possible circular locking dependency detected [ 1174.250455][T18156] syzkaller #0 Not tainted [ 1174.254845][T18156] ------------------------------------------------------ [ 1174.261839][T18156] syz.0.3608/18156 is trying to acquire lock: [ 1174.267900][T18156] ffffffff8f5547c0 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1174.277389][T18156] [ 1174.277389][T18156] but task is already holding lock: [ 1174.284729][T18156] ffff888022bf0358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 1174.295032][T18156] [ 1174.295032][T18156] which lock already depends on the new lock. [ 1174.295032][T18156] [ 1174.305435][T18156] [ 1174.305435][T18156] the existing dependency chain (in reverse order) is: [ 1174.314425][T18156] [ 1174.314425][T18156] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1174.322664][T18156] __mutex_lock+0x19d/0x1550 [ 1174.327796][T18156] md_start_sync+0x15a/0x1010 [ 1174.332992][T18156] process_scheduled_works+0xc3d/0x1630 [ 1174.339078][T18156] worker_thread+0xa47/0xfb0 [ 1174.344183][T18156] kthread+0x38b/0x480 [ 1174.348754][T18156] ret_from_fork+0x514/0xb70 [ 1174.353847][T18156] ret_from_fork_asm+0x1a/0x30 [ 1174.359126][T18156] [ 1174.359126][T18156] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 1174.368583][T18156] process_scheduled_works+0xc03/0x1630 [ 1174.374639][T18156] worker_thread+0xa47/0xfb0 [ 1174.379743][T18156] kthread+0x38b/0x480 [ 1174.384328][T18156] ret_from_fork+0x514/0xb70 [ 1174.389422][T18156] ret_from_fork_asm+0x1a/0x30 [ 1174.394701][T18156] [ 1174.394701][T18156] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 1174.402963][T18156] touch_wq_lockdep_map+0xcb/0x180 [ 1174.408609][T18156] __flush_workqueue+0x148/0x1470 [ 1174.414168][T18156] md_alloc+0x32/0xf20 [ 1174.418757][T18156] md_alloc_and_put+0x1a/0x1f0 [ 1174.424033][T18156] blk_request_module+0x27d/0x2a0 [ 1174.429570][T18156] blkdev_get_no_open+0x3f/0xe0 [ 1174.434928][T18156] blkdev_open+0x1d7/0x600 [ 1174.439854][T18156] do_dentry_open+0x816/0x1380 [ 1174.445126][T18156] vfs_open+0x3b/0x340 [ 1174.449704][T18156] path_openat+0x1443/0x1d60 [ 1174.454801][T18156] do_file_open+0x23e/0x4a0 [ 1174.459832][T18156] do_sys_openat2+0x115/0x200 [ 1174.465025][T18156] __x64_sys_openat+0x138/0x170 [ 1174.470388][T18156] do_syscall_64+0x166/0x520 [ 1174.475488][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.481885][T18156] [ 1174.481885][T18156] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1174.489607][T18156] __lock_acquire+0x164c/0x2de0 [ 1174.494971][T18156] lock_acquire+0x115/0x350 [ 1174.500003][T18156] __mutex_lock+0x19d/0x1550 [ 1174.505130][T18156] blk_request_module+0x35/0x2a0 [ 1174.510579][T18156] blkdev_get_no_open+0x3f/0xe0 [ 1174.515932][T18156] bdev_file_open_by_dev+0xa0/0x240 [ 1174.521634][T18156] md_import_device+0x2e9/0x650 [ 1174.527021][T18156] md_add_new_disk+0x669/0x1850 [ 1174.532378][T18156] md_ioctl+0x200a/0x2610 [ 1174.537216][T18156] blkdev_ioctl+0x5e3/0x740 [ 1174.542245][T18156] __se_sys_ioctl+0xfc/0x170 [ 1174.547355][T18156] do_syscall_64+0x166/0x520 [ 1174.552455][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.558852][T18156] [ 1174.558852][T18156] other info that might help us debug this: [ 1174.558852][T18156] [ 1174.569057][T18156] Chain exists of: [ 1174.569057][T18156] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 1174.569057][T18156] [ 1174.584639][T18156] Possible unsafe locking scenario: [ 1174.584639][T18156] [ 1174.592066][T18156] CPU0 CPU1 [ 1174.597408][T18156] ---- ---- [ 1174.602753][T18156] lock(&mddev->reconfig_mutex); [ 1174.607775][T18156] lock((work_completion)(&mddev->sync_work)); [ 1174.616536][T18156] lock(&mddev->reconfig_mutex); [ 1174.624083][T18156] lock(major_names_lock); [ 1174.628572][T18156] [ 1174.628572][T18156] *** DEADLOCK *** [ 1174.628572][T18156] [ 1174.636896][T18156] locks held by syz.0.3608/18156: 1, last CPU#1: [ 1174.643213][T18156] #0: ffff888022bf0358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 1174.653919][T18156] [ 1174.653919][T18156] stack backtrace: [ 1174.659791][T18156] CPU: 1 UID: 0 PID: 18156 Comm: syz.0.3608 Not tainted syzkaller #0 PREEMPT(full) [ 1174.669138][T18156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1174.679190][T18156] Call Trace: [ 1174.682449][T18156] [ 1174.685378][T18156] dump_stack_lvl+0xe8/0x150 [ 1174.689965][T18156] print_circular_bug+0x2e2/0x300 [ 1174.694980][T18156] check_noncircular+0x12f/0x150 [ 1174.699911][T18156] __lock_acquire+0x164c/0x2de0 [ 1174.704749][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.710368][T18156] ? post_alloc_hook+0x208/0x250 [ 1174.715300][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.720918][T18156] ? get_page_from_freelist+0x2209/0x2280 [ 1174.726625][T18156] lock_acquire+0x115/0x350 [ 1174.731111][T18156] ? blk_request_module+0x35/0x2a0 [ 1174.736232][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.741851][T18156] __mutex_lock+0x19d/0x1550 [ 1174.746431][T18156] ? blk_request_module+0x35/0x2a0 [ 1174.751538][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.757154][T18156] ? lock_acquire+0x115/0x350 [ 1174.761818][T18156] ? blk_request_module+0x35/0x2a0 [ 1174.766921][T18156] ? __pfx___mutex_lock+0x10/0x10 [ 1174.771939][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.777554][T18156] ? find_inode_fast+0x5dc/0x740 [ 1174.782498][T18156] ? find_inode_fast+0xd2/0x740 [ 1174.787339][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.792972][T18156] blk_request_module+0x35/0x2a0 [ 1174.797908][T18156] blkdev_get_no_open+0x3f/0xe0 [ 1174.802747][T18156] bdev_file_open_by_dev+0xa0/0x240 [ 1174.807949][T18156] md_import_device+0x2e9/0x650 [ 1174.812791][T18156] md_add_new_disk+0x669/0x1850 [ 1174.817631][T18156] md_ioctl+0x200a/0x2610 [ 1174.821947][T18156] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1174.827563][T18156] ? __pfx_md_ioctl+0x10/0x10 [ 1174.832227][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.837841][T18156] ? do_vfs_ioctl+0x116f/0x1530 [ 1174.842677][T18156] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1174.847716][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.853334][T18156] ? hook_file_ioctl+0x1f2/0x600 [ 1174.858259][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.863899][T18156] ? __pfx_md_ioctl+0x10/0x10 [ 1174.868566][T18156] blkdev_ioctl+0x5e3/0x740 [ 1174.873064][T18156] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1174.878075][T18156] ? __fget_files+0x2a/0x420 [ 1174.882653][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.888270][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.893900][T18156] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1174.898931][T18156] __se_sys_ioctl+0xfc/0x170 [ 1174.903513][T18156] do_syscall_64+0x166/0x520 [ 1174.908123][T18156] ? trace_irq_disable+0x3b/0x140 [ 1174.913158][T18156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.919213][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.925090][T18156] RIP: 0033:0x7f7ea959e159 [ 1174.929489][T18156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.949079][T18156] RSP: 002b:00007f7eaa3e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.957485][T18156] RAX: ffffffffffffffda RBX: 00007f7ea9825fa0 RCX: 00007f7ea959e159 [ 1174.965445][T18156] RDX: 0000200000000440 RSI: 0000000040140921 RDI: 0000000000000004 [ 1174.973401][T18156] RBP: 00007f7ea963506b R08: 0000000000000000 R09: 0000000000000000 [ 1174.981372][T18156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.989339][T18156] R13: 00007f7ea9826038 R14: 00007f7ea9825fa0 R15: 00007ffec13a74d8 [ 1174.997308][T18156] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1175.391748][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1175.391790][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1175.525519][T18112] udevd[18112]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1175.542817][T10364] bond2: (slave gretap1): failed to get link speed/duplex [ 1175.542855][T10364] bond3: (slave gretap2): failed to get link speed/duplex [ 1175.709818][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 1175.709853][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1175.823187][T10364] bond2: (slave gretap1): failed to get link speed/duplex [ 1175.823225][T10364] bond3: (slave gretap2): failed to get link speed/duplex [ 1176.160926][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 1176.644548][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.644589][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.732781][T18156] md: could not open device unknown-block(0,0). [ 1176.732845][T18156] md: md_import_device returned -6 [ 1176.915186][ T986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.975744][ T986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.031170][ T986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.095217][ T986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.230635][ T986] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.256440][ T986] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.309882][ T986] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.399446][ T986] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.810637][ T986] bond0 (unregistering): Released all slaves [ 1177.938096][ T986] bond0 (unregistering): Released all slaves [ 1177.953093][ T986] bond1 (unregistering): Released all slaves [ 1178.209187][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1178.298019][ T986] hsr_slave_0: left promiscuous mode [ 1178.298386][ T986] hsr_slave_1: left promiscuous mode [ 1178.302351][ T986] hsr_slave_0: left promiscuous mode [ 1178.330453][ T986] hsr_slave_1: left promiscuous mode [ 1178.356813][ T986] veth1_macvtap: left promiscuous mode [ 1178.356839][ T986] veth0_macvtap: left promiscuous mode [ 1178.356895][ T986] veth1_vlan: left promiscuous mode [ 1178.356933][ T986] veth0_vlan: left promiscuous mode [ 1178.357494][ T986] veth1_macvtap: left promiscuous mode [ 1178.357515][ T986] veth0_macvtap: left promiscuous mode [ 1178.357578][ T986] veth1_vlan: left promiscuous mode [ 1178.357615][ T986] veth0_vlan: left promiscuous mode [ 1179.162328][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1179.162917][ T996] net_ratelimit: 23 callbacks suppressed [ 1179.162933][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1179.162958][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1179.272814][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1179.272861][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1179.387749][ T996] bond3: (slave gretap2): failed to get link speed/duplex [ 1179.387785][ T996] bond2: (slave gretap1): failed to get link speed/duplex [ 1179.497198][ T3365] bond2: (slave gretap1): failed to get link speed/duplex [ 1179.497232][ T3365] bond3: (slave gretap2): failed to get link speed/duplex [ 1179.624263][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 1179.624295][ T49] bond3: (slave gretap2): failed to get link speed/duplex [ 1179.810367][ T986] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.862330][ T986] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.900313][ T986] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.957217][ T986] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.167829][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1180.405046][ T986] bridge_slave_1: left allmulticast mode [ 1180.405070][ T986] bridge_slave_1: left promiscuous mode [ 1180.405202][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.406211][ T986] bridge_slave_0: left allmulticast mode [ 1180.406228][ T986] bridge_slave_0: left promiscuous mode [ 1180.406345][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.587626][ T986] bond0 (unregistering): Released all slaves [ 1180.681173][ T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.699530][ T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.711802][ T986] bond0 (unregistering): Released all slaves [ 1180.872954][ T986] hsr_slave_0: left promiscuous mode [ 1180.873409][ T986] hsr_slave_1: left promiscuous mode [ 1180.877022][ T986] hsr_slave_0: left promiscuous mode [ 1180.877834][ T986] hsr_slave_1: left promiscuous mode [ 1180.878245][ T986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.878589][ T986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.927243][ T986] veth1_macvtap: left promiscuous mode [ 1180.927272][ T986] veth0_macvtap: left promiscuous mode [ 1180.927329][ T986] veth1_vlan: left promiscuous mode [ 1180.927370][ T986] veth0_vlan: left promiscuous mode [ 1181.301067][ T986] team0 (unregistering): Port device team_slave_1 removed [ 1181.328014][ T986] team0 (unregistering): Port device team_slave_0 removed [ 1181.395237][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1181.767531][ T986] IPVS: stop unused estimator thread 0... [ 1182.006537][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1182.340043][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1182.680735][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1183.017883][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1183.355162][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1183.745884][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1184.091706][ T5275] 8021q: adding VLAN 0 to HW filter on device eth19