last executing test programs: 18.197838681s ago: executing program 3 (id=42): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) unshare(0x50000600) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) fcntl$getown(r0, 0x9) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='sockfs\x00', 0x2000000, &(0x7f00000001c0)='\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17.416442327s ago: executing program 1 (id=43): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 15.7289888s ago: executing program 3 (id=44): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x7f, &(0x7f0000000800)={0x0, 0x17, 0x2, 'H\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x82, 0x2, "47d8"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x81, 0x2, "b3e8"}, 0x0, 0x0, 0x0, 0x0}) 15.677402721s ago: executing program 1 (id=45): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x10, 0x6dd, 0x64, 0x0, 0x4, 0xb05, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x4048081) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="74e756000000000000"]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000180)={0xf2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, &(0x7f0000000d40)=0xfdfe0001) 13.945996665s ago: executing program 0 (id=49): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 12.349417007s ago: executing program 0 (id=50): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x118) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000003000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021d88400000c0a01010000000000000000070000000900020073797a31000000003400038030000080080003400000000224000b80100001800c000100636f756e74657200100001800c000100636f756e746572000900010073797a30"], 0x855c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x318735e0) 11.907954435s ago: executing program 2 (id=51): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0xa0044d07, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 11.798213817s ago: executing program 0 (id=52): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) unshare(0x50000600) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) fcntl$getown(r0, 0x9) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='sockfs\x00', 0x2000000, &(0x7f00000001c0)='\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 10.450466954s ago: executing program 2 (id=53): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 10.393079705s ago: executing program 0 (id=54): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000200)=0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x32) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x32001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 10.303478297s ago: executing program 3 (id=55): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x26, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe, 0x49}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x40480b0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket(0x1e, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1006, 0x2, {0x0}, 0x10000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) 9.984050364s ago: executing program 1 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = socket(0x10, 0x2, 0x81) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=0x0}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000000000", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000700)=0x9, 0x4) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r7, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x300000, 0x6) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) 8.222620168s ago: executing program 2 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0xfa1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x10000005, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10, 0x7f}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4081) r7 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x182, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$userns(r1, &(0x7f0000000740)) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800) 6.352813114s ago: executing program 1 (id=58): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000300)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) 6.267478076s ago: executing program 0 (id=59): socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) 5.305574175s ago: executing program 2 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x404c080) openat$urandom(0xffffffffffffff9c, 0x0, 0x5752c1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x17) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0100"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) 3.450906652s ago: executing program 1 (id=61): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0x8000000) r2 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x4, 0x7, 0x800}}) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) 3.449183112s ago: executing program 2 (id=62): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0xa0044d07, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x1, 0x2004000) 2.145135288s ago: executing program 1 (id=63): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10000) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000003580)=0xf2c17809, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x4e23, @broadcast}}) r7 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000084"], 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 2.105928758s ago: executing program 3 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xbf5, 0x20000003}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.282131475s ago: executing program 2 (id=65): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 930.874501ms ago: executing program 3 (id=66): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 225.002246ms ago: executing program 0 (id=67): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mount(&(0x7f0000000180)=@nullb, 0x0, &(0x7f0000000040)='befs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000002c0)) r5 = socket$packet(0x11, 0x3, 0x300) dup(r5) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000180)=""/238, 0x0, 0x5000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) 0s ago: executing program 3 (id=68): socket(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0xf2) read$msr(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 67.287229][ T5775] cgroup: Unknown subsys name 'net' [ 67.403593][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.073115][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.193721][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.202737][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.210924][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.219695][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.225679][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.228604][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.237216][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.242007][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.249593][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.257412][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.263634][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.270026][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.276986][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.290620][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.293012][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.305011][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.306104][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.314818][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.319779][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.327260][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.341075][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.380619][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.391157][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.401452][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.693314][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.704679][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.785247][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 71.913591][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.921152][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.929558][ T5787] bridge_slave_0: entered allmulticast mode [ 71.937202][ T5787] bridge_slave_0: entered promiscuous mode [ 71.990617][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.998079][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.005558][ T5787] bridge_slave_1: entered allmulticast mode [ 72.013096][ T5787] bridge_slave_1: entered promiscuous mode [ 72.020675][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 72.101652][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.116830][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.171772][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 72.199755][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 72.218375][ T5787] team0: Port device team_slave_0 added [ 72.250279][ T5787] team0: Port device team_slave_1 added [ 72.287795][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.295030][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.302688][ T5788] bridge_slave_0: entered allmulticast mode [ 72.310562][ T5788] bridge_slave_0: entered promiscuous mode [ 72.354341][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.361832][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.369548][ T5788] bridge_slave_1: entered allmulticast mode [ 72.378742][ T5788] bridge_slave_1: entered promiscuous mode [ 72.438566][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.445547][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.471898][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.487148][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.494138][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.520209][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.548461][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.565039][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.600407][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.607865][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.615034][ T5785] bridge_slave_0: entered allmulticast mode [ 72.623017][ T5785] bridge_slave_0: entered promiscuous mode [ 72.631811][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.639243][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.646716][ T5785] bridge_slave_1: entered allmulticast mode [ 72.653855][ T5785] bridge_slave_1: entered promiscuous mode [ 72.711667][ T5788] team0: Port device team_slave_0 added [ 72.720182][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.727440][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.734567][ T5784] bridge_slave_0: entered allmulticast mode [ 72.742666][ T5784] bridge_slave_0: entered promiscuous mode [ 72.764129][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.775532][ T5788] team0: Port device team_slave_1 added [ 72.793620][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.800881][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.809326][ T5784] bridge_slave_1: entered allmulticast mode [ 72.816303][ T5784] bridge_slave_1: entered promiscuous mode [ 72.836945][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.871371][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.878818][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.906194][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.931892][ T5787] hsr_slave_0: entered promiscuous mode [ 72.938566][ T5787] hsr_slave_1: entered promiscuous mode [ 72.961814][ T5785] team0: Port device team_slave_0 added [ 72.968411][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.975394][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.001671][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.030370][ T5785] team0: Port device team_slave_1 added [ 73.067636][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.112180][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.119349][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.145853][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.159449][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.166494][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.192602][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.205685][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.302883][ T5784] team0: Port device team_slave_0 added [ 73.313682][ T5784] team0: Port device team_slave_1 added [ 73.340806][ T5785] hsr_slave_0: entered promiscuous mode [ 73.347551][ T5785] hsr_slave_1: entered promiscuous mode [ 73.353641][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.361491][ T5785] Cannot create hsr debugfs directory [ 73.367973][ T5798] Bluetooth: hci3: command tx timeout [ 73.395540][ T5788] hsr_slave_0: entered promiscuous mode [ 73.402084][ T5788] hsr_slave_1: entered promiscuous mode [ 73.408761][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.416493][ T5788] Cannot create hsr debugfs directory [ 73.446628][ T5798] Bluetooth: hci2: command tx timeout [ 73.446648][ T50] Bluetooth: hci0: command tx timeout [ 73.446884][ T5802] Bluetooth: hci1: command tx timeout [ 73.468290][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.475347][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.501712][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.535593][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.542672][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.568825][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.720337][ T5784] hsr_slave_0: entered promiscuous mode [ 73.727285][ T5784] hsr_slave_1: entered promiscuous mode [ 73.733442][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.741182][ T5784] Cannot create hsr debugfs directory [ 73.943709][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.963314][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.975258][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.002308][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.085156][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.101109][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.132557][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.158317][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.201954][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.214024][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.235248][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.246747][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.333325][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.343261][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.358800][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.374051][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.397621][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.443119][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.499628][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.507091][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.541095][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.548388][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.653690][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.704731][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.722197][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.756465][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.779887][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.787105][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.815235][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.829138][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.836478][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.860254][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.880693][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.887896][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.939884][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.947122][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.003318][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.010652][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.025818][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.032984][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.175240][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.326345][ T5787] veth0_vlan: entered promiscuous mode [ 75.370080][ T5787] veth1_vlan: entered promiscuous mode [ 75.447848][ T5802] Bluetooth: hci3: command tx timeout [ 75.470849][ T5787] veth0_macvtap: entered promiscuous mode [ 75.483324][ T5787] veth1_macvtap: entered promiscuous mode [ 75.528664][ T5802] Bluetooth: hci1: command tx timeout [ 75.531266][ T5798] Bluetooth: hci0: command tx timeout [ 75.534100][ T50] Bluetooth: hci2: command tx timeout [ 75.579335][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.628757][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.649474][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.679691][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.689922][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.700012][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708857][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.736687][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.773502][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.884621][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.906713][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.929935][ T5788] veth0_vlan: entered promiscuous mode [ 75.968101][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.974171][ T5785] veth0_vlan: entered promiscuous mode [ 75.984474][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.005395][ T5788] veth1_vlan: entered promiscuous mode [ 76.080414][ T5785] veth1_vlan: entered promiscuous mode [ 76.093261][ T5784] veth0_vlan: entered promiscuous mode [ 76.122644][ T5784] veth1_vlan: entered promiscuous mode [ 76.155667][ T5788] veth0_macvtap: entered promiscuous mode [ 76.191441][ T5788] veth1_macvtap: entered promiscuous mode [ 76.234357][ T5785] veth0_macvtap: entered promiscuous mode [ 76.261209][ T5785] veth1_macvtap: entered promiscuous mode [ 76.394577][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.405785][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.601690][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.670551][ T5784] veth0_macvtap: entered promiscuous mode [ 76.825703][ T5784] veth1_macvtap: entered promiscuous mode [ 76.838635][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.856368][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.888147][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.919920][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.929800][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.939046][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.948166][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960170][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.972091][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.986486][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.999848][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.021671][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.182804][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.188267][ T5875] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 77.193385][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.193440][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.193456][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.195090][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.242639][ T5875] qnx6: wrong signature (magic) in superblock #1. [ 77.250193][ T5875] qnx6: unable to read the first superblock [ 77.255201][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.275101][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.285599][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.301080][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.311405][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.322347][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.348134][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.533388][ T50] Bluetooth: hci3: command tx timeout [ 77.561399][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566732][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'. [ 77.603998][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.606501][ T50] Bluetooth: hci2: command tx timeout [ 77.613126][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.618390][ T5802] Bluetooth: hci1: command tx timeout [ 77.627079][ T5798] Bluetooth: hci0: command tx timeout [ 77.632539][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.775116][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.803644][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.816551][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.827182][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.838577][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.850977][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.881414][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.972271][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.982734][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.994438][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007045][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088196][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.215690][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.020152][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.040962][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.106186][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.123855][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.333300][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.345937][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.363518][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.380911][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.467007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.649312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.750258][ T5798] Bluetooth: hci3: command tx timeout [ 79.757362][ T5798] Bluetooth: hci2: command tx timeout [ 79.760888][ T50] Bluetooth: hci1: command tx timeout [ 79.768967][ T5802] Bluetooth: hci0: command tx timeout [ 79.956531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 80.058916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.271719][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.284479][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.355290][ T8] libceph: connect (1)[c::]:6789 error -101 [ 80.361960][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 80.378130][ T8] libceph: connect (1)[c::]:6789 error -101 [ 80.385627][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 80.557299][ T5892] ceph: No mds server is up or the cluster is laggy [ 80.652011][ T8] libceph: connect (1)[c::]:6789 error -101 [ 80.666510][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 81.185921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.197596][ T8] libceph: connect (1)[c::]:6789 error -101 [ 81.288113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.635325][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 83.230352][ T787] libceph: connect (1)[c::]:6789 error -101 [ 83.238418][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 83.258274][ T787] libceph: connect (1)[c::]:6789 error -101 [ 83.264373][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 83.371519][ T5915] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.626831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.296783][ T5926] Zero length message leads to an empty skb [ 85.446690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.998221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.612483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.855134][ T1186] cfg80211: failed to load regulatory.db [ 95.624239][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 95.638125][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 95.822257][ T5983] 9pnet_fd: Insufficient options for proto=fd [ 95.897232][ T5979] ceph: No mds server is up or the cluster is laggy [ 95.904307][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 95.920892][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 96.077458][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.276397][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 96.300934][ T786] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.330515][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.476656][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.290114][ T786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.316598][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.354637][ T786] usb 1-1: Product: syz [ 97.369634][ T786] usb 1-1: Manufacturer: syz [ 97.396926][ T786] usb 1-1: SerialNumber: syz [ 98.401505][ T786] usb 1-1: 0:2 : does not exist [ 101.706447][ T786] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 102.295066][ T786] usb 1-1: USB disconnect, device number 2 [ 103.470809][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.557387][ T6022] geneve2: entered promiscuous mode [ 103.565099][ T6022] geneve2: entered allmulticast mode [ 108.280022][ T6060] process 'syz.2.46' launched './file1' with NULL argv: empty string added [ 108.386367][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.401607][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 108.434433][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 108.501232][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 108.686321][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 108.696038][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 109.029676][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 109.036177][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 109.676970][ T6058] ceph: No mds server is up or the cluster is laggy [ 109.725943][ T5877] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.745605][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.760382][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.773470][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.783895][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.798571][ T5877] usb 4-1: Product: syz [ 109.806644][ T5877] usb 4-1: Manufacturer: syz [ 109.816355][ T5877] usb 4-1: SerialNumber: syz [ 110.738546][ T6074] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 110.751505][ T6074] qnx6: wrong signature (magic) in superblock #1. [ 110.758282][ T6074] qnx6: unable to read the first superblock [ 110.790462][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 111.327381][ T5877] usb 4-1: 0:2 : does not exist [ 111.482782][ T6078] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.50'. [ 112.766697][ T5877] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 113.242629][ T5877] usb 4-1: USB disconnect, device number 2 [ 113.415084][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.433898][ T6118] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.312210][ T6122] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 119.324452][ T6122] qnx6: wrong signature (magic) in superblock #1. [ 119.331116][ T6122] qnx6: unable to read the first superblock [ 119.847850][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 122.010266][ T6130] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 122.178748][ T6130] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.904291][ T12] ------------[ cut here ]------------ [ 123.910452][ T12] WARNING: CPU: 0 PID: 12 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 123.919124][ T48] ------------[ cut here ]------------ [ 123.921497][ T12] Modules linked in: [ 123.927058][ T48] WARNING: CPU: 1 PID: 48 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 123.927108][ T48] Modules linked in: [ 123.927127][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 123.931053][ T12] [ 123.931064][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 123.942095][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.946079][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.946095][ T12] Workqueue: phy5 ieee80211_csa_finalize_work [ 123.953527][ T48] Workqueue: phy6 ieee80211_csa_finalize_work [ 123.955844][ T12] [ 123.955855][ T12] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 123.963428][ T48] [ 123.973374][ T12] Code: 48 89 df e8 4a ce e9 f7 e9 dc fc ff ff e8 40 83 92 f7 eb 24 e8 39 83 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 28 83 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 1a 83 92 f7 48 8b 7c 24 08 4c 8b 7c [ 123.973399][ T12] RSP: 0000:ffffc900001179c0 EFLAGS: 00010293 [ 123.973423][ T12] RAX: ffffffff89f3107e RBX: 0000000000000001 RCX: ffff88801ba4da00 [ 123.983519][ T48] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 123.990851][ C0] ------------[ cut here ]------------ [ 123.990939][ C0] WARNING: CPU: 0 PID: 12 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 123.991017][ C0] Modules linked in: [ 123.991033][ C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 123.991054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.991067][ C0] Workqueue: phy5 ieee80211_csa_finalize_work [ 123.991088][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 123.997351][ T48] Code: 48 89 df e8 4a ce e9 f7 e9 dc fc ff ff e8 40 83 92 f7 eb 24 e8 39 83 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 28 83 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 1a 83 92 f7 48 8b 7c 24 08 4c 8b 7c [ 123.999711][ C0] Code: 24 4c 89 e7 e8 8e 4d d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 69 28 97 f7 0f 0b e9 f6 f7 ff ff e8 5d 28 97 f7 <0f> 0b e9 48 fb ff ff e8 51 28 97 f7 48 c7 c7 60 0b 24 8e 4c 89 e6 [ 124.007248][ T48] RSP: 0000:ffffc90000b979c0 EFLAGS: 00010293 [ 124.009353][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 124.009376][ C0] RAX: ffffffff89ee6f43 RBX: ffffffff89ee5d46 RCX: ffff88801ba4da00 [ 124.009393][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.009406][ C0] RBP: 0000000000000000 R08: ffff88801ba4da00 R09: 0000000000000003 [ 124.029233][ T48] [ 124.035370][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c2863c0 [ 124.043663][ T48] RAX: ffffffff89f3107e RBX: 0000000000000001 RCX: ffff88801aef3c00 [ 124.050980][ C0] R13: dffffc0000000000 R14: ffff88805c2868b0 R15: ffff888026617024 [ 124.056682][ T48] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 124.066592][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 124.070523][ T48] RBP: dffffc0000000000 R08: ffff88805c2855af R09: 1ffff1100b850ab5 [ 124.077914][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.077932][ C0] CR2: 000000110c41ff93 CR3: 000000007a253000 CR4: 00000000003506f0 [ 124.088032][ T48] R10: dffffc0000000000 R11: ffffed100b850ab6 R12: 0000000000000001 [ 124.094082][ C0] Call Trace: [ 124.094094][ C0] [ 124.094107][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 124.094153][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 124.094186][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 124.094230][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 124.094262][ C0] __iterate_interfaces+0x243/0x500 [ 124.094287][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 124.094312][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 124.094339][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 124.094364][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 124.094394][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 124.094421][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 124.094453][ C0] ? hw_scan_work+0xf40/0xf40 [ 124.094486][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 124.094508][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 124.094544][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 124.094572][ C0] handle_softirqs+0x280/0x820 [ 124.094598][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 124.094627][ C0] ? do_softirq+0x180/0x180 [ 124.094653][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 124.101264][ T48] R13: ffff88805c2865d9 R14: ffff888020e1ac70 R15: ffff888020e1ace8 [ 124.121471][ C0] __irq_exit_rcu+0xc7/0x190 [ 124.121507][ C0] ? irq_exit_rcu+0x20/0x20 [ 124.141264][ T48] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 124.147380][ C0] irq_exit_rcu+0x9/0x20 [ 124.153451][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.161460][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 124.169467][ T48] CR2: 0000200000027000 CR3: 000000007a253000 CR4: 00000000003506e0 [ 124.177476][ C0] [ 124.177486][ C0] [ 124.177496][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.177521][ C0] RIP: 0010:console_flush_all+0x889/0xd00 [ 124.177545][ C0] Code: ed 01 00 00 e8 e8 31 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 d9 31 1b 00 eb 06 e8 d2 31 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 124.179975][ T48] Call Trace: [ 124.188136][ C0] RSP: 0000:ffffc90000117340 EFLAGS: 00000293 [ 124.196660][ T48] [ 124.204100][ C0] [ 124.212214][ T48] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 124.221034][ C0] RAX: ffffffff816a65ce RBX: ffffc900001174df RCX: ffff88801ba4da00 [ 124.229058][ T48] ieee80211_csa_finalize+0x59a/0xf00 [ 124.229084][ T48] ? mutex_lock_nested+0x20/0x20 [ 124.229112][ T48] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 124.229136][ T48] ? ieee80211_csa_finalize_work+0x140/0x140 [ 124.235796][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.243965][ T48] ? read_lock_is_recursive+0x20/0x20 [ 124.251964][ C0] RBP: ffffc900001174b0 R08: ffffffff90da75c7 R09: 1ffffffff21b4eb8 [ 124.255251][ T48] ieee80211_csa_finalize_work+0xf6/0x140 [ 124.258113][ C0] R10: dffffc0000000000 R11: fffffbfff21b4eb9 R12: ffffffff8d4b57a0 [ 124.258130][ C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b57f8 R15: dffffc0000000000 [ 124.263751][ T48] ? process_scheduled_works+0x957/0x15b0 [ 124.269319][ C0] ? console_flush_all+0x87e/0xd00 [ 124.276105][ T48] process_scheduled_works+0xa45/0x15b0 [ 124.281658][ C0] ? __rwlock_init+0x150/0x150 [ 124.286918][ T48] ? assign_work+0x400/0x400 [ 124.293096][ C0] ? console_flush_all+0x10f/0xd00 [ 124.300904][ T48] ? assign_work+0x39e/0x400 [ 124.306675][ C0] ? is_console_locked+0x20/0x20 [ 124.306699][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 124.306738][ C0] console_unlock+0xae/0x340 [ 124.313775][ T48] worker_thread+0xa55/0xfc0 [ 124.318990][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 124.324222][ T48] kthread+0x2fa/0x390 [ 124.328896][ C0] ? vprintk_emit+0x447/0x600 [ 124.334000][ T48] ? pr_cont_work+0x560/0x560 [ 124.340094][ C0] ? vprintk_emit+0x301/0x600 [ 124.345200][ T48] ? kthread_blkcg+0xd0/0xd0 [ 124.349986][ C0] ? vprintk_emit+0x301/0x600 [ 124.350020][ C0] vprintk_emit+0x477/0x600 [ 124.354777][ T48] ret_from_fork+0x48/0x80 [ 124.359300][ C0] ? vprintk_emit+0x301/0x600 [ 124.364497][ T48] ? kthread_blkcg+0xd0/0xd0 [ 124.372504][ C0] ? printk_sprint+0x460/0x460 [ 124.372531][ C0] ? _printk+0xd0/0x110 [ 124.372553][ C0] ? copy_from_kernel_nofault+0x1d2/0x320 [ 124.377161][ T48] ret_from_fork_asm+0x11/0x20 [ 124.381839][ C0] _printk+0xd0/0x110 [ 124.390820][ T48] [ 124.395126][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 124.402365][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.402378][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 124.402395][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.402405][ T48] Workqueue: phy6 ieee80211_csa_finalize_work [ 124.402428][ T48] Call Trace: [ 124.402434][ T48] [ 124.402442][ T48] dump_stack_lvl+0x16c/0x230 [ 124.402468][ T48] ? show_regs_print_info+0x20/0x20 [ 124.402489][ T48] ? load_image+0x3b0/0x3b0 [ 124.402520][ T48] panic+0x2c0/0x710 [ 124.402551][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 124.402585][ T48] ? ret_from_fork_asm+0x11/0x20 [ 124.402613][ T48] __warn+0x2e0/0x470 [ 124.402634][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 124.402661][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 124.402685][ T48] report_bug+0x2be/0x4f0 [ 124.402706][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 124.402731][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 124.402754][ T48] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 124.402778][ T48] handle_bug+0xcf/0x120 [ 124.402799][ T48] exc_invalid_op+0x1a/0x50 [ 124.402819][ T48] asm_exc_invalid_op+0x1a/0x20 [ 124.402835][ T48] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 124.402860][ T48] Code: 48 89 df e8 4a ce e9 f7 e9 dc fc ff ff e8 40 83 92 f7 eb 24 e8 39 83 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 28 83 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 1a 83 92 f7 48 8b 7c 24 08 4c 8b 7c [ 124.402873][ T48] RSP: 0000:ffffc90000b979c0 EFLAGS: 00010293 [ 124.402888][ T48] RAX: ffffffff89f3107e RBX: 0000000000000001 RCX: ffff88801aef3c00 [ 124.402900][ T48] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 124.402910][ T48] RBP: dffffc0000000000 R08: ffff88805c2855af R09: 1ffff1100b850ab5 [ 124.402922][ T48] R10: dffffc0000000000 R11: ffffed100b850ab6 R12: 0000000000000001 [ 124.402933][ T48] R13: ffff88805c2865d9 R14: ffff888020e1ac70 R15: ffff888020e1ace8 [ 124.402954][ T48] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 124.402999][ T48] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 124.403037][ T48] ieee80211_csa_finalize+0x59a/0xf00 [ 124.403053][ T48] ? mutex_lock_nested+0x20/0x20 [ 124.403078][ T48] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 124.403098][ T48] ? ieee80211_csa_finalize_work+0x140/0x140 [ 124.403115][ T48] ? read_lock_is_recursive+0x20/0x20 [ 124.403142][ T48] ieee80211_csa_finalize_work+0xf6/0x140 [ 124.403161][ T48] ? process_scheduled_works+0x957/0x15b0 [ 124.403182][ T48] process_scheduled_works+0xa45/0x15b0 [ 124.403231][ T48] ? assign_work+0x400/0x400 [ 124.403258][ T48] ? assign_work+0x39e/0x400 [ 124.403283][ T48] worker_thread+0xa55/0xfc0 [ 124.403331][ T48] kthread+0x2fa/0x390 [ 124.403345][ T48] ? pr_cont_work+0x560/0x560 [ 124.403365][ T48] ? kthread_blkcg+0xd0/0xd0 [ 124.403381][ T48] ret_from_fork+0x48/0x80 [ 124.403400][ T48] ? kthread_blkcg+0xd0/0xd0 [ 124.403416][ T48] ret_from_fork_asm+0x11/0x20 [ 124.403452][ T48] [ 124.407802][ T48] Kernel Offset: disabled