last executing test programs: 3m40.082960081s ago: executing program 2 (id=814): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 3m39.007823247s ago: executing program 2 (id=817): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 3m35.134864032s ago: executing program 2 (id=823): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 3m22.800023013s ago: executing program 2 (id=847): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m20.846286771s ago: executing program 2 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/trace_pipe\x00', 0xe0180, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r4, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r4, &(0x7f0000000680)='nullb1\x00', 0x200) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 'syz1\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffc}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}]}, 0x3c}}, 0x0) 3m19.812720227s ago: executing program 2 (id=855): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 3m4.126723328s ago: executing program 32 (id=855): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 14.75245238s ago: executing program 3 (id=1224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000240)=""/208, 0xd0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) 10.946658088s ago: executing program 3 (id=1227): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x6) 10.701879265s ago: executing program 3 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/block/md0/md/array_state\x00', 0x81ff, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='raid1\x00', 0x5) r6 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='1:0\x00', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write$khugepaged_scan(r8, &(0x7f0000000080), 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r9, &(0x7f0000000e00)='active\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.680107297s ago: executing program 1 (id=1235): openat$fb0(0xffffffffffffff9c, 0x0, 0x182000, 0x0) epoll_create1(0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x5515}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8.665924357s ago: executing program 4 (id=1236): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173"], 0x60}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0xcc, 0x3e8, 0x22c, 0x22c, 0x0, 0x494, 0x494, 0x494, 0x494, 0x494, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffff00, 0xff], 0x4e21, 0x4e21, 0x4e23, 0x4e24, 0x88, 0x9e7d, 0x24, 0x81, 0x2}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x48, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0a390305c9"], 0x6) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 8.625647008s ago: executing program 3 (id=1237): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) recvmmsg(r0, 0x0, 0xffffffffffffff79, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) 5.958371677s ago: executing program 0 (id=1240): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 5.429473911s ago: executing program 0 (id=1241): ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$RTC_PLL_SET(r0, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 5.386973042s ago: executing program 1 (id=1242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 5.240263165s ago: executing program 4 (id=1243): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180)) socket(0x2, 0xa, 0x0) 3.51229514s ago: executing program 1 (id=1244): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) 3.48100557s ago: executing program 0 (id=1245): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) mkdir(&(0x7f0000000180)='dir0\x00', 0xc2) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) creat(&(0x7f0000000200)='./file1\x00', 0x105) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 3.338748214s ago: executing program 4 (id=1246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/block/md0/md/array_state\x00', 0x81ff, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='raid1\x00', 0x5) r6 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='1:0\x00', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write$khugepaged_scan(r8, &(0x7f0000000080), 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r9, &(0x7f0000000e00)='active\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.382460329s ago: executing program 1 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305005b68fdce0afc5924000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) modify_ldt$write2(0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket(0x28, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 2.259105672s ago: executing program 0 (id=1248): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) modify_ldt$write2(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/4101, 0xffffffffffffffd6) r0 = io_uring_setup(0x178e, &(0x7f00000001c0)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, &(0x7f0000000600)='dir', 0x3) write(r1, &(0x7f0000000700)='bind', 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.086873277s ago: executing program 3 (id=1249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r1, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x810018, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x202, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800080002000400fdff140000004589001400690000606c907800000000ffffffffa42c52a2fe080630577e7fc0cd3111d093b3b346c17b928ac58f2026"], 0x22) close(r5) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000240)=r0, 0x4) close(r5) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x7, 0x8, [0x0, 0xfffffffffffff5b1, 0x8000000000000000, 0x10], &(0x7f0000000000)=[0x0]}) write$sequencer(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000001000081", @ANYRES32=r4], 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xa2e42, 0x0) 2.064444217s ago: executing program 0 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x4, &(0x7f0000000380)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x240040c1}, 0x8001) syz_open_dev$vim2m(0x0, 0xd, 0x2) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r3}) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x3, 0xfffffb39, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, 0x40, 0x10, 0x3, 0x3}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', r7, 0x29, 0x4, 0x2, 0x7, 0x2, @mcast1, @private1, 0x700, 0x7, 0xfff, 0x6aeb}}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000004740)=@newtfilter={0x1cec, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x5, 0x2}, {0x1, 0xfff2}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c7c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0xdb04, 0x98, 0x5, 0x5}, {0x2, 0x4, 0x11, 0x2}, {0x4, 0x0, 0x10, 0xfffffffa}, {0x1, 0x12, 0x2}, {0x3, 0x7, 0xa, 0x4636}, {0x5, 0x9, 0x72, 0x7}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x14a8, 0x1, [@m_connmark={0x54, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x21, 0x6, "c9d1b032813fbaeada0d3bdc0623232152bbbdaa847b6206ae632354d0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x10d0, 0xa, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xd365, 0xf, 0x8, 0x6, 0x529e822b}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x1, 0x5, 0x4, 0x7}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfffffe00, 0x1, 0xff, 0xb}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0xfff, 0x1, 0x2ef, 0x2}, 0x7, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x1, 0x4, 0x7, 0xfffffff8}, 0x4, r7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x114, 0x14, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x1, 0x81, 0x2}, @local, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80000001, 0x1, 0x6, 0x1}, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x3, 0xffffffffffffffff, 0x2, 0x6}, @private=0xa010102, @local}}]}, {0x71, 0x6, "50b7229e9c9c2cedc517e850fa5fd7db5c84ef5bd9128b09b58b2503deb3ae5539b95c38758ce35920e7ab012bd1dca9ce75ee3fb8bfae422c390758666a2de2dd0a99560ca1b968ec7f885a745746a20177b5c7539f6f93871c7c61b15d6702ff26f8bdb759e04649ce65c3f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x124, 0x1f, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x401, 0x9, 0x0, 0x6}, {0x3, 0x0, 0x4, 0x8}, {0x9, 0xca, 0x0, 0xe12}, {0x8, 0x9, 0x40, 0x2}, {0x7, 0x9, 0x3, 0x1}, {0x76, 0x0, 0x2, 0x8}, {0x401, 0xe2, 0x5, 0x3}, {0x9, 0xff, 0x3}, {0x2, 0x4, 0x7, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x4, 0x8, 0x1ff, 0xffff0000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4232, 0x7, 0x0, 0x6, 0x7}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x5d, 0x6, "a35b38f518eb973fff43d34411d6701c0e0b6e067d9d05644d097704842d7e90d3b3b5648949c5fff0b692afb4c2d9d46134c5009210363f3a41a6da4a2609c051f7904a1fafb039f5349e8e1a3f9160dbe13cce0ba156e87e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x90, 0x14, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'taprio\x00'}]}, {0x58, 0x6, "3b4da74282661e2725de735438864dc9994625c072f2b6414e22afdbb1fd0a4fa1b33757149275a25c40b26718dab6d8e26127d0be5cdadb32d42b921e9c324f566ae4584b3e9be4103e6c0a1e0e3316bf158b77"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xb8, 0x1d, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x8000, 0x8, 0x2, 0x3ff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x43, 0x6, "1c2f89a1c46181ad6075f6d7e7f13f0d698b5ac69f6731b3f22d4d1a0fc6cba2c43b0bb0eb87176394dc50c6e1c8835025da5bd10dff2ff9d3c22a585d68e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x8}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x76c, 0x1, [@m_vlan={0xa8, 0x1f, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x71, 0x6, "1c2d3b244d4f83fd6b067c0eb03777251291c1720d0c9de8734c551638ee14443ad1be7cfcdbf14b68e66584343af308c989ea9512654dc7061e32eb4e50b7a7c7a9863efb539780fe27f51a4b6a672148a56789ea7f4a0f896a26aa57facbfda9d497cc71a6cfe38fce9dff97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xdd, 0x6, "14788ee5fab2833ce0c658de7b4aa76b92c497c2afeb5dbd65f431d55fd24186261e0e983428886212b5e3834831528b2e0e0f86522fb586078858b3310ff4cddcea9c659973f67b01abaec92fed8c58babf85cd8f2e7f0f59d935d1534bd689aa9822893ef9b53842e88af48b2240c769bb26a540a87ace13d01fbce097fafd7716c8247127d0e67149a81256a94824547e7b7799c722e5b19d6076afa3e4ea2dfefe2878b051f7aea2e85b00f6f0a7a025ad4449560608f1a66da44ad9d04fb84e40ed341ae7b6e85c2423fac4b4ddf75a8a3ab94fcba821"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x4, 0x4, 0x22}, @remote, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf33, 0xb, 0x4, 0x4, 0xffffff81}, @dev={0xac, 0x14, 0x14, 0x16}, @remote, 0xff000000, 0x1}}]}, {0x75, 0x6, "d9855e68448abdee794a78267309d8abc657bf4afb9362a10f7dc9e3f7e50741d62b7634278dfec3fb5ec3ce61d19199d90374f8227c558250f5624a10b2fa41b7cf2a35b13b5ce8d9f818c9190636954016110763a13c12f09fd00b4321cff59e58c2a30e50d46f7bca5418f6b80053f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xe4, 0x14, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x70, 0x6, {0xffff, 'mangle\x00', 0x7, 0x6, "ce4b34436307736f1958831bd86fc683a438c71fe3252ed20862954a60d033c8dd5df1d8a6088947c9a5ad683a85ae680e881091ec758a4082f1c8ed81931070e696bb06f69d"}}]}, {0x41, 0x6, "0dbeecda310c3273784a47340afdf3033757bb1f31f51c4fde382aba15ec6d35dfbc7918140129b2b03e8b651aea73a17a0b68ecd493b503134f7fc70c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x11c, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffc01}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0xe0, 0x6, "4a71617872625d9e5ac34542fa028dcd19be8a2348ccd80c480fa78b481b8ee8663ec3013cc1d097ba74f63c1f6fe231aa4144b99fd1d78cb4216a305c2e482f3b3e53739e82c914a89138371295c7f803987195411260312cf3479116b1cca470f1078f5aefe2658bbb555424db0a7dddb069c7dd6d61cfb88ddab0a666bfb4dfdbf05c10471bf9d22b455e232f5561f1d9ac22925ec8845c65724de255172781405a17a973f8695f5bca2e00093e162e3fac1679fd7ca912b0c536f2b35086915d5d05f65eef8554ea9e185e94b03a3caf05e0b5549ec60095b43c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1a0, 0x6, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000000, 0x8, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0xffff, 0xdbf0}, 0xc677}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x0, 0x0, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x1, 0x9, 0x10000}}}]}, {0xfe, 0x6, "1c25dcd66cbcc29370c3eed3f5df8e8193c3d1d54f3d92fa8348edd57019b4e12f58ffe319e00eb3b36ecb94f876c16163acd5e93c5da83dc55ef24ef942d4de6498108d5dcdeb9cf2d733574e56c1e445f9b66af274837bdb6682700fbdeb552963c159be8781a0fcde59b73524e755fa70365623a9e0872e817fd6ae3b2d491ab7b40d297ac1b726bc611c08172f0e51efae74a93660e483555445b6d6f4c30eeb5326822659e0c5e39e35ad9528ecde872b64e8b7ec31057b4422ba1cfbf369acc96d58f093128e27f1b0a17d24d27f06fa56ae0f837a0755c159cf7c7bdac52737a0a2f82d51427c690e0feef98fdfab2d2348c98d2f6935"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x124, 0x14, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x200, 0x0, 0x5, 0x4}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0xffffffff, 0x3, 0x8001, 0x6}, 0x3}}]}, {0xb8, 0x6, "d48ae1bed63c15caae7d85b4260c973e598fd9712289de8a8454037daaf7d6cf08e49913ede6be297fe41170cc232364193af8dba33adf0f6e4bc686c933c064b284230178a3035adcf757229381f171481904b57946015b27facbad7d267169e10ff697fbc60c0332bf61e842d5b71460ae7e164a581d0b2b53c2a60eded106dee826be616224b008b3770b1eeca8e0d83c67315fa34ffac61b7a982143ce11910db53d9c12e4ec455852030448729ec83958b1"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x1cec}, 0x1, 0x0, 0x0, 0x20004094}, 0x8000044) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast1}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000360001002bfd7004fcdbdf250400000008000400020000ff04000500"], 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xbb, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000329bd7000fddbdf25860000000c009900260000006604000000009f00050000000800a00211a600000800a0000900000005001901050000002ef71bae34ff705aa9bb62b8f7a6ef19e007260c04fc91"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000080000000000000082f4000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000080000000bf91000000000000b7020400000000008500000087000000b7000001000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x7}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000100)="05000000010001", 0x7) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000440)={r11}) 1.810524274s ago: executing program 4 (id=1251): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173"], 0x60}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0xcc, 0x3e8, 0x22c, 0x22c, 0x0, 0x494, 0x494, 0x494, 0x494, 0x494, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffff00, 0xff], 0x4e21, 0x4e21, 0x4e23, 0x4e24, 0x88, 0x9e7d, 0x24, 0x81, 0x2}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x48, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0a390305c9"], 0x6) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 1.251255418s ago: executing program 0 (id=1252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 1.1895225s ago: executing program 1 (id=1253): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, &(0x7f0000000440)) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d4, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}, @common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) 1.103594592s ago: executing program 4 (id=1254): ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$RTC_PLL_SET(r0, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 1.022383354s ago: executing program 3 (id=1255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x321, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000380)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000004100010029bd7000040000000100000004004880100001800c00108005000380f300000008000200", @ANYRES32=r6, @ANYBLOB="7a8626162d0aee4ba3de2eba145da6a101007b98416ff0674e458c6b1ed6fb70ba64d1954c8699d568b9"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2e00000099f8941fe980963dca9813da7ec92536434d9d841148d6d96d8263a846696bb39d4ab904562c48f432182855febbfc04ea724b6651b1b0a61b49c6372b49a3badf530e0e33c5a2", @ANYRES16=r3, @ANYBLOB="04002abd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='v', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x14, 0xec, 0x0, 0x7, 0x0}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0) 1.3811ms ago: executing program 4 (id=1256): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) mkdir(&(0x7f0000000180)='dir0\x00', 0xc2) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) creat(&(0x7f0000000200)='./file1\x00', 0x105) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 0s ago: executing program 1 (id=1257): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) recvmmsg(r0, 0x0, 0xffffffffffffff79, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000000170a600000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000000800074000000000100005800a000100512e39333100000052d100aa91fc2db5d7aa3d830f62726c32a994fb1dd0f0649265422e86c4db9b7b6c590417f45a04a46223c7f800ed8499afbe6ee1a9725701b8885bcc7b3edcaabc7d118141085a52a85c80827926a5ba4bfae7495c"], 0xa4}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 76.685411][ T5763] cgroup: Unknown subsys name 'net' [ 76.826262][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.489473][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.830982][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.839784][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.848659][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.856268][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.864269][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.872564][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.880060][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.887871][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.895289][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.901161][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.910723][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.918491][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.926267][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.927034][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.936900][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.942906][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.949187][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.955697][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.971016][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.972499][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.980800][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.987254][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.993401][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.000617][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.396105][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.563654][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.619268][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.626549][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.634033][ T5776] bridge_slave_0: entered allmulticast mode [ 81.643661][ T5776] bridge_slave_0: entered promiscuous mode [ 81.657306][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.665434][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.672727][ T5776] bridge_slave_1: entered allmulticast mode [ 81.679992][ T5776] bridge_slave_1: entered promiscuous mode [ 81.791922][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.816736][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.824777][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.832418][ T5778] bridge_slave_0: entered allmulticast mode [ 81.839463][ T5778] bridge_slave_0: entered promiscuous mode [ 81.850786][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.860222][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.883282][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.895805][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.903400][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.911793][ T5778] bridge_slave_1: entered allmulticast mode [ 81.919335][ T5778] bridge_slave_1: entered promiscuous mode [ 82.014781][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.028971][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.041304][ T5776] team0: Port device team_slave_0 added [ 82.075309][ T5776] team0: Port device team_slave_1 added [ 82.129121][ T5778] team0: Port device team_slave_0 added [ 82.169488][ T5778] team0: Port device team_slave_1 added [ 82.176205][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.183461][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.209823][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.253858][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.261004][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.287620][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.299176][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.306311][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.316110][ T5775] bridge_slave_0: entered allmulticast mode [ 82.323922][ T5775] bridge_slave_0: entered promiscuous mode [ 82.332607][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.340476][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.349166][ T5777] bridge_slave_0: entered allmulticast mode [ 82.356278][ T5777] bridge_slave_0: entered promiscuous mode [ 82.382856][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.389994][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.415995][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.428781][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.435944][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.444440][ T5775] bridge_slave_1: entered allmulticast mode [ 82.452070][ T5775] bridge_slave_1: entered promiscuous mode [ 82.465229][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.472740][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.481173][ T5777] bridge_slave_1: entered allmulticast mode [ 82.488569][ T5777] bridge_slave_1: entered promiscuous mode [ 82.523151][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.532939][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.559331][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.602070][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.614125][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.651955][ T5776] hsr_slave_0: entered promiscuous mode [ 82.658820][ T5776] hsr_slave_1: entered promiscuous mode [ 82.678426][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.725427][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.766667][ T5777] team0: Port device team_slave_0 added [ 82.775682][ T5777] team0: Port device team_slave_1 added [ 82.804857][ T5775] team0: Port device team_slave_0 added [ 82.828960][ T5778] hsr_slave_0: entered promiscuous mode [ 82.835641][ T5778] hsr_slave_1: entered promiscuous mode [ 82.842131][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.850408][ T5778] Cannot create hsr debugfs directory [ 82.865671][ T5775] team0: Port device team_slave_1 added [ 82.884468][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.891638][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.918249][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.957590][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.964596][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.991098][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.021833][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.029127][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.055753][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.078506][ T5790] Bluetooth: hci2: command tx timeout [ 83.078570][ T5785] Bluetooth: hci0: command tx timeout [ 83.084222][ T5790] Bluetooth: hci1: command tx timeout [ 83.090984][ T5788] Bluetooth: hci3: command tx timeout [ 83.112354][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.122284][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.148687][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.298606][ T5777] hsr_slave_0: entered promiscuous mode [ 83.305712][ T5777] hsr_slave_1: entered promiscuous mode [ 83.313965][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.322016][ T5777] Cannot create hsr debugfs directory [ 83.371642][ T5775] hsr_slave_0: entered promiscuous mode [ 83.381357][ T5775] hsr_slave_1: entered promiscuous mode [ 83.388263][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.395862][ T5775] Cannot create hsr debugfs directory [ 83.618468][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.644315][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.654884][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.668028][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.806142][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.818244][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.837111][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.861631][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.950626][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.962024][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.979866][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.991054][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.080848][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.092008][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.103116][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.113598][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.175255][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.227180][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.256005][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.268547][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.276137][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.306639][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.313861][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.378909][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.421648][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.438601][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.445794][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.463128][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.470339][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.494574][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.505787][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.546558][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.624166][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.631402][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.656318][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.706801][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.714053][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.753411][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.777280][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.822435][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.829668][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.888690][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.895891][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.949964][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.158010][ T5788] Bluetooth: hci1: command tx timeout [ 85.163493][ T5788] Bluetooth: hci3: command tx timeout [ 85.170419][ T5785] Bluetooth: hci2: command tx timeout [ 85.171885][ T5792] Bluetooth: hci0: command tx timeout [ 85.234240][ T5776] veth0_vlan: entered promiscuous mode [ 85.281792][ T5776] veth1_vlan: entered promiscuous mode [ 85.303388][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.375007][ T5776] veth0_macvtap: entered promiscuous mode [ 85.407212][ T5776] veth1_macvtap: entered promiscuous mode [ 85.474829][ T5778] veth0_vlan: entered promiscuous mode [ 85.490593][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.519254][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.537236][ T5778] veth1_vlan: entered promiscuous mode [ 85.569235][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.579045][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.590798][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600091][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.609576][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.710273][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.748529][ T5778] veth0_macvtap: entered promiscuous mode [ 85.785800][ T5777] veth0_vlan: entered promiscuous mode [ 85.801407][ T5778] veth1_macvtap: entered promiscuous mode [ 85.851722][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.857016][ T5777] veth1_vlan: entered promiscuous mode [ 85.886492][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.926044][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.940779][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.952714][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.992070][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.998699][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.010778][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.017332][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.031037][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.041072][ T5775] veth0_vlan: entered promiscuous mode [ 86.083225][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.099396][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.108275][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.117122][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.135361][ T5775] veth1_vlan: entered promiscuous mode [ 86.188917][ T5777] veth0_macvtap: entered promiscuous mode [ 86.256252][ T5777] veth1_macvtap: entered promiscuous mode [ 86.302584][ T5775] veth0_macvtap: entered promiscuous mode [ 86.325710][ T5775] veth1_macvtap: entered promiscuous mode [ 86.363916][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.378918][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.390866][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.403820][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.415600][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.434799][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.447201][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.458054][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.468763][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.478874][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.490045][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.506166][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.531085][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.558770][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.590155][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.611956][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.628193][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.642304][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.658043][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.702447][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.716515][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.727656][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.739439][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.749968][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.762506][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.774846][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.792970][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.804011][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.812928][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.821873][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.905154][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.927758][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.936533][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.988289][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.055268][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.066254][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.074295][ T5846] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.5'. [ 87.237929][ T5792] Bluetooth: hci0: command tx timeout [ 87.248401][ T5790] Bluetooth: hci3: command tx timeout [ 87.248435][ T5785] Bluetooth: hci1: command tx timeout [ 87.259928][ T5788] Bluetooth: hci2: command tx timeout [ 87.717859][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.778202][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.041040][ T5865] input: syz1 as /devices/virtual/input/input5 [ 88.048076][ T5865] input: failed to attach handler leds to device input5, error: -6 [ 88.683324][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.755984][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.778368][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.814613][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.925548][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.028790][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.317942][ T5788] Bluetooth: hci2: command tx timeout [ 89.323568][ T5788] Bluetooth: hci0: command tx timeout [ 89.329451][ T5788] Bluetooth: hci1: command tx timeout [ 89.335006][ T5788] Bluetooth: hci3: command tx timeout [ 89.981269][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.997909][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 90.123703][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.151598][ T5875] bond1: (slave bond0): making interface the new active one [ 90.160509][ T5875] bond1: (slave bond0): Enslaving as an active interface with an up link [ 90.194864][ T5875] syz.1.8 (5875) used greatest stack depth: 20904 bytes left [ 90.218521][ T5881] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 90.226405][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8'. [ 90.485225][ T5893] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 90.961018][ T5881] .`: renamed from bond0 (while UP) [ 91.787633][ T5881] syz.1.8 (5881) used greatest stack depth: 20848 bytes left [ 91.962381][ T27] cfg80211: failed to load regulatory.db [ 92.234178][ T5909] binder: 5907:5909 ioctl c0306201 2000000004c0 returned -14 [ 92.541910][ T5915] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.529883][ T5914] sched: RT throttling activated [ 93.928340][ T5917] (null): rxe_set_mtu: Set mtu to 256 [ 93.936919][ T5917] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 94.201225][ T5917] infiniband syz0: set active [ 94.206163][ T5917] infiniband syz0: added bond_slave_1 [ 94.607520][ T5917] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 94.611662][ T5917] infiniband syz0: Couldn't open port 1 [ 95.401275][ T5917] RDS/IB: syz0: added [ 95.405732][ T5917] smc: adding ib device syz0 with port count 1 [ 95.412078][ T5917] smc: ib device syz0 port 1 has pnetid [ 96.551378][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.033888][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 97.207174][ T5863] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.344532][ T5863] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.450688][ T5863] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.517762][ T5863] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.579641][ T5863] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.639224][ T5863] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.689314][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.713021][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.747560][ T5863] usb 1-1: can't set config #16, error -71 [ 97.778726][ T5863] usb 1-1: USB disconnect, device number 2 [ 99.046804][ T5957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 99.053796][ T5957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 99.655361][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.758552][ T5960] hsr_slave_0: left promiscuous mode [ 99.857879][ T5960] hsr_slave_1: left promiscuous mode [ 99.923049][ T5969] binder: BC_ACQUIRE_RESULT not supported [ 99.959360][ T5969] binder: 5965:5969 ioctl c0306201 200000004a40 returned -22 [ 100.179277][ T5973] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.24'. [ 102.507557][ T6008] syz_tun: entered allmulticast mode [ 102.583782][ T6008] dvmrp6: entered allmulticast mode [ 102.753042][ T6007] syz_tun: left allmulticast mode [ 104.167438][ T6049] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 104.174358][ T6049] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.213672][ T6049] vhci_hcd vhci_hcd.0: Device attached [ 104.487525][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 105.218011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 105.636372][ T6051] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 105.656225][ T6050] vhci_hcd: connection closed [ 105.669401][ T12] vhci_hcd: stop threads [ 105.687887][ T12] vhci_hcd: release socket [ 105.699188][ T12] vhci_hcd: disconnect device [ 105.812788][ T6054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.42'. [ 106.377269][ T6087] Zero length message leads to an empty skb [ 108.016348][ T6122] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.57'. [ 109.127670][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 109.702738][ T6148] binder_alloc: 6145: pid 6145 spamming oneway? 2 buffers allocated for a total size of 5120 [ 109.716548][ T6148] binder_alloc: 6145: pid 6145 spamming oneway? 3 buffers allocated for a total size of 5128 [ 109.978631][ T6155] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.68'. [ 110.649727][ T6176] binder_alloc: 6175: pid 6175 spamming oneway? 2 buffers allocated for a total size of 5120 [ 110.685281][ T6176] binder_alloc: 6175: pid 6175 spamming oneway? 3 buffers allocated for a total size of 5128 [ 110.759680][ T9] vhci_hcd: vhci_device speed not set [ 112.784834][ T6196] binder: 6194:6196 ioctl 401c7012 0 returned -22 [ 112.799844][ T6196] 9pnet_virtio: no channels available for device syz [ 112.813230][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 117.921174][ T6221] binder: 6220:6221 ioctl 401c7012 0 returned -22 [ 118.408092][ T6221] 9pnet_virtio: no channels available for device syz [ 118.415926][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 120.577708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.943831][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.547670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 124.241410][ T5923] usb 1-1: device descriptor read/all, error -71 [ 124.358823][ T6267] binder: 6262:6267 ioctl 401c7012 0 returned -22 [ 124.404394][ T6267] 9pnet_virtio: no channels available for device syz [ 124.412362][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 124.770704][ T6284] netlink: 148 bytes leftover after parsing attributes in process `syz.2.114'. [ 124.827876][ T6284] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 128.947562][ T5840] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.132072][ T6324] syz_tun: entered allmulticast mode [ 129.148281][ T5840] usb 1-1: not running at top speed; connect to a high speed hub [ 129.164007][ T6324] dvmrp6: entered allmulticast mode [ 129.180513][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 129.210275][ T5840] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 129.228124][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.249108][ T6323] syz_tun: left allmulticast mode [ 129.299026][ T5840] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 129.337823][ T5840] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 129.491728][ T5840] usb 1-1: USB disconnect, device number 5 [ 129.525506][ T5840] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 129.553262][ T5840] garmin_gps 1-1:1.0: device disconnected [ 130.799487][ T6356] syz_tun: entered allmulticast mode [ 130.813415][ T6356] dvmrp6: entered allmulticast mode [ 130.840230][ T6355] syz_tun: left allmulticast mode [ 132.177579][ T5782] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 132.922489][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937956][ T5782] usb 3-1: not running at top speed; connect to a high speed hub [ 132.945823][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.963578][ T5782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 132.976285][ T5782] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 132.985725][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.024617][ T5782] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 133.078134][ T5782] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 133.266550][ T5840] usb 3-1: USB disconnect, device number 2 [ 133.297030][ T5840] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 133.319795][ T5840] garmin_gps 3-1:1.0: device disconnected [ 133.614338][ T6388] syz_tun: entered allmulticast mode [ 133.622121][ T6387] syz_tun: left allmulticast mode [ 134.835572][ T6405] binder: BC_ACQUIRE_RESULT not supported [ 134.867644][ T6405] binder: 6402:6405 ioctl c0306201 200000004a40 returned -22 [ 135.235428][ T6418] netlink: 148 bytes leftover after parsing attributes in process `syz.0.163'. [ 135.257608][ T6418] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 136.957966][ T6437] binder: 6433:6437 ioctl 401c7012 0 returned -22 [ 136.972083][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 138.101435][ T6453] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.118458][ T6453] overlayfs: failed to set xattr on upper [ 138.135137][ T6453] overlayfs: ...falling back to redirect_dir=nofollow. [ 138.184490][ T6453] overlayfs: ...falling back to index=off. [ 138.242230][ T6453] overlayfs: ...falling back to uuid=null. [ 138.786306][ T6460] mmap: syz.3.173 (6460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.310233][ T6473] binder: BC_ACQUIRE_RESULT not supported [ 139.316080][ T6473] binder: 6469:6473 ioctl c0306201 200000004a40 returned -22 [ 139.451881][ T6476] binder: 6472:6476 ioctl 401c7012 0 returned -22 [ 139.466637][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 141.776033][ T6505] binder: 6501:6505 ioctl 401c7012 0 returned -22 [ 141.787706][ T6505] 9pnet_virtio: no channels available for device syz [ 141.804330][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.483916][ T6514] binder: 6507:6514 ioctl 401c7012 0 returned -22 [ 142.503345][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 142.858025][ T6517] binder: BC_ACQUIRE_RESULT not supported [ 142.935566][ T6517] binder: 6511:6517 ioctl c0306201 200000004a40 returned -22 [ 147.074707][ T6560] vlan0: entered promiscuous mode [ 147.121734][ T6560] team0: Port device vlan0 added [ 147.528442][ T6569] binder: BC_ACQUIRE_RESULT not supported [ 147.555477][ T6569] binder: 6565:6569 ioctl c0306201 200000004a40 returned -22 [ 151.154830][ T6588] netlink: 148 bytes leftover after parsing attributes in process `syz.3.212'. [ 151.198080][ T6588] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 153.182934][ T6609] binder: BC_ACQUIRE_RESULT not supported [ 153.219455][ T6609] binder: 6607:6609 ioctl c0306201 200000004a40 returned -22 [ 154.599516][ T6603] binder: 6602:6603 ioctl 401c7012 0 returned -22 [ 154.645569][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 155.078919][ T6627] netlink: 148 bytes leftover after parsing attributes in process `syz.0.224'. [ 155.147883][ T6627] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 156.132224][ T6642] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 156.164152][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 158.783810][ T6653] binder: 6645:6653 ioctl 401c7012 0 returned -22 [ 158.801109][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 159.109111][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 159.883246][ T6675] pim6reg: entered allmulticast mode [ 159.922947][ T6675] pim6reg: left allmulticast mode [ 160.144649][ T6674] 9pnet_virtio: no channels available for device syz [ 160.174930][ T6674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.236'. [ 164.854745][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 165.438446][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 165.561658][ T6723] binder: 6718:6723 ioctl 401c7012 0 returned -22 [ 165.565584][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 166.597497][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd  !ÿÿÿÿÿ€J…Š€Ð`”[ 166.933913][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.958888][ T5840] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 166.995268][ T5840] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 167.927250][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.597614][ T5840] usb 2-1: can't set config #1, error -71 [ 169.647565][ T5840] usb 2-1: USB disconnect, device number 2 [ 170.824044][ T6758] Bluetooth: MGMT ver 1.22 [ 170.932359][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 171.768374][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 172.017489][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 172.909424][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 173.839209][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 173.850493][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 173.860665][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.942974][ T9] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 174.015522][ T9] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 174.174741][ T9] usb 4-1: USB disconnect, device number 2 [ 174.241497][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 174.266234][ T9] garmin_gps 4-1:1.0: device disconnected [ 174.398262][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 175.219571][ T6800] gre1: entered promiscuous mode [ 177.105583][ T6824] binder: 6813:6824 ioctl 401c7012 0 returned -22 [ 177.117145][ T6824] 9pnet_virtio: no channels available for device syz [ 177.128713][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 177.335076][ T6815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.411986][ T6815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.529762][ T6815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.643880][ T6815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.673857][ T6815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.729120][ T6815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.277552][ T5788] Bluetooth: hci0: command 0x0405 tx timeout [ 178.437536][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.760342][ T6815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.766519][ T6815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.776494][ T6815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.787500][ T6815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.793651][ T6815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.808329][ T6815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.929739][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 179.132243][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 179.717505][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.517542][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.663939][ T6865] binder: 6859:6865 ioctl 401c7012 0 returned -22 [ 180.674543][ T6865] 9pnet_virtio: no channels available for device syz [ 180.685450][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 181.152442][ T5788] Bluetooth: hci0: command 0x0405 tx timeout [ 181.152472][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.936671][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.766642][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.917038][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 183.237588][ T5790] Bluetooth: hci0: command 0x0405 tx timeout [ 183.243801][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.967612][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.317595][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.323786][ T5788] Bluetooth: hci0: command 0x0405 tx timeout [ 186.180997][ T6906] overlayfs: missing 'workdir' [ 186.342004][ T6909] CacheFiles: Empty directory specified [ 186.430029][ T6909] CacheFiles: No cache directory specified [ 186.634473][ T5788] Bluetooth: hci3: unexpected event for opcode 0x203d [ 188.112817][ T6885] syz.0.299 (6885) used greatest stack depth: 19880 bytes left [ 191.916984][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 192.180093][ T6956] Config c/1 of g1 needs at least one function. [ 192.201618][ T6956] udc dummy_udc.0: failed to start g1: -22 [ 192.207657][ T6956] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 192.223992][ T6956] UDC core: g1: couldn't find an available UDC or it's busy [ 192.304352][ T6956] XFS (nullb0): Invalid superblock magic number [ 192.321079][ T6960] binder: 6957:6960 ioctl c0306201 2000000004c0 returned -14 [ 192.598465][ T175] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.851052][ T175] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 194.714276][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.739515][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.112486][ T175] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 195.444662][ T175] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.453881][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.473480][ T6989] pim6reg: entered allmulticast mode [ 195.511505][ T6990] pim6reg: left allmulticast mode [ 195.584552][ T175] usb 1-1: can't set config #255, error -71 [ 195.610864][ T175] usb 1-1: USB disconnect, device number 6 [ 195.705696][ T7001] autofs4:pid:7001:autofs_fill_super: called with bogus options [ 195.847050][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 196.109738][ T7012] binder: 7010:7012 ioctl c0306201 2000000004c0 returned -14 [ 196.437486][ T175] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 197.377988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 197.489926][ T5782] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.765532][ T175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.782130][ T5782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.807198][ T175] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 198.825087][ T5782] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 198.838641][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.860880][ T175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.946687][ T175] as10x_usb: device has been detected [ 198.961029][ T5782] as10x_usb: device has been detected [ 198.969002][ T175] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 199.012784][ T5782] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 199.060063][ T175] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 199.143928][ T5782] usb 4-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 199.199123][ T175] as10x_usb: error during firmware upload part1 [ 199.202826][ T5782] as10x_usb: error during firmware upload part1 [ 199.217967][ T175] Registered device Abilis Systems DVB-Titan [ 199.233005][ T5782] Registered device Abilis Systems DVB-Titan [ 199.247789][ T7040] binder: BC_ACQUIRE_RESULT not supported [ 199.268510][ T7040] binder: 7036:7040 ioctl c0306201 200000004a40 returned -22 [ 199.388888][ T7045] pim6reg: entered allmulticast mode [ 199.402156][ T7045] pim6reg: left allmulticast mode [ 199.806563][ T7059] binder: 7055:7059 ioctl 401c7012 0 returned -22 [ 199.819361][ T7059] 9pnet_virtio: no channels available for device syz [ 199.831234][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 200.591959][ T5840] usb 3-1: USB disconnect, device number 3 [ 200.692699][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 200.736215][ T5840] Unregistered device Abilis Systems DVB-Titan [ 200.748819][ T5819] usb 4-1: USB disconnect, device number 3 [ 200.762935][ T5840] as10x_usb: device has been disconnected [ 200.844063][ T5819] Unregistered device Abilis Systems DVB-Titan [ 200.845421][ T5819] as10x_usb: device has been disconnected [ 200.960130][ T7073] binder: 7072:7073 ioctl c0306201 2000000004c0 returned -14 [ 202.641029][ T7092] binder: BC_ACQUIRE_RESULT not supported [ 202.646835][ T7092] binder: 7088:7092 ioctl c0306201 200000004a40 returned -22 [ 202.798857][ T5788] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 202.938355][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 203.063260][ T7103] binder: BINDER_SET_CONTEXT_MGR already set [ 203.073363][ T7103] binder: 7101:7103 ioctl 4018620d 200000004a80 returned -16 [ 203.226954][ T7108] syz_tun: entered allmulticast mode [ 203.255377][ T7107] syz_tun: left allmulticast mode [ 205.819749][ T7132] binder: BINDER_SET_CONTEXT_MGR already set [ 205.846236][ T7132] binder: 7131:7132 ioctl 4018620d 200000004a80 returned -16 [ 206.420758][ T7138] pim6reg: entered allmulticast mode [ 206.438311][ T7138] pim6reg: left allmulticast mode [ 206.526747][ T7137] 9pnet_virtio: no channels available for device syz [ 207.617660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 207.756985][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 208.791617][ T7148] syz_tun: entered allmulticast mode [ 208.806211][ T7146] syz_tun: left allmulticast mode [ 209.095927][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 211.024439][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 211.277564][ T7178] binder: 7177:7178 ioctl 401c7012 0 returned -22 [ 211.333737][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 211.780676][ T7192] trusted_key: encrypted_key: insufficient parameters specified [ 213.094847][ T7196] pim6reg: entered allmulticast mode [ 213.102911][ T7196] pim6reg: left allmulticast mode [ 213.208125][ T7191] 9pnet_virtio: no channels available for device syz [ 213.755986][ T7207] binder: BINDER_SET_CONTEXT_MGR already set [ 213.798670][ T7207] binder: 7206:7207 ioctl 4018620d 200000000040 returned -16 [ 215.297933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 215.707563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 217.858029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 218.267549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 218.460566][ T7215] binder: 7214:7215 ioctl 401c7012 0 returned -22 [ 218.510207][ T7215] 9pnet_virtio: no channels available for device syz [ 218.529203][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 218.742354][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 219.620133][ T7230] binder: 7228:7230 ioctl 401c7012 0 returned -22 [ 219.631612][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 219.853459][ T7239] trusted_key: encrypted_key: insufficient parameters specified [ 220.982562][ T5788] Bluetooth: hci1: unexpected event for opcode 0x203d [ 220.991890][ T7246] overlayfs: missing 'workdir' [ 221.012206][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 221.043296][ T7248] CacheFiles: Empty directory specified [ 221.050284][ T7248] CacheFiles: No cache directory specified [ 222.108491][ T5788] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 222.219423][ T7258] binder: 7256:7258 ioctl 401c7012 0 returned -22 [ 222.227077][ T7258] 9pnet_virtio: no channels available for device syz [ 222.234845][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 222.916811][ T7277] (null): rxe_set_mtu: Set mtu to 1024 [ 222.926614][ T7277] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 225.341143][ T144] rpcbind: server 127.0.0.1 not responding, timed out [ 225.361125][ T5788] Bluetooth: hci0: unexpected event for opcode 0x203d [ 225.374520][ T7287] overlayfs: missing 'workdir' [ 225.384867][ T7287] CacheFiles: Empty directory specified [ 225.392057][ T7287] CacheFiles: No cache directory specified [ 225.623274][ T7288] trusted_key: encrypted_key: insufficient parameters specified [ 226.458026][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 226.976175][ T7298] binder: 7295:7298 ioctl 401c7012 0 returned -22 [ 226.988047][ T7298] 9pnet_virtio: no channels available for device syz [ 226.996052][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 227.163174][ T7310] program syz.3.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.173151][ T7310] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 227.215518][ T7310] (null): rxe_set_mtu: Set mtu to 1024 [ 227.223377][ T7310] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 230.227656][ T7314] syz0: rxe_newlink: already configured on bond_slave_1 [ 232.383060][ T7324] overlayfs: missing 'workdir' [ 233.840351][ T5788] Bluetooth: hci3: unexpected event for opcode 0x203d [ 233.887475][ T7324] CacheFiles: Empty directory specified [ 233.905150][ T7324] CacheFiles: No cache directory specified [ 238.313229][ T5788] Bluetooth: hci1: unexpected event for opcode 0x203d [ 238.319685][ T7358] overlayfs: missing 'workdir' [ 238.355865][ T7358] CacheFiles: Empty directory specified [ 238.380886][ T7358] CacheFiles: No cache directory specified [ 245.210417][ T7396] overlayfs: missing 'workdir' [ 245.215432][ T5788] Bluetooth: hci2: unexpected event for opcode 0x203d [ 245.227966][ T7396] CacheFiles: Empty directory specified [ 245.237974][ T7396] CacheFiles: No cache directory specified [ 247.286326][ T7413] binder: 7412:7413 unknown command 1074553619 [ 247.377189][ T7413] binder: 7412:7413 ioctl c0306201 200000000040 returned -22 [ 253.067699][ T5782] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 253.143522][ T5788] Bluetooth: hci0: unexpected event for opcode 0x203d [ 253.151948][ T7458] overlayfs: missing 'workdir' [ 253.214022][ T7458] CacheFiles: Empty directory specified [ 253.247536][ T5782] usb 2-1: device descriptor read/64, error -71 [ 253.298168][ T7463] CacheFiles: No cache directory specified [ 254.317643][ T5782] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 254.597683][ T5782] usb 2-1: device descriptor read/64, error -71 [ 255.147821][ T5782] usb usb2-port1: attempt power cycle [ 255.673536][ T5782] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 255.802026][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808580][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.149353][ T5782] usb 2-1: device descriptor read/8, error -71 [ 256.515141][ T5788] Bluetooth: hci0: unexpected event for opcode 0x203d [ 256.521089][ T7497] overlayfs: missing 'workdir' [ 256.562297][ T7497] CacheFiles: Empty directory specified [ 256.595527][ T7497] CacheFiles: No cache directory specified [ 258.889382][ T7525] netlink: 156 bytes leftover after parsing attributes in process `syz.0.472'. [ 259.387523][ T5840] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 260.267827][ T5840] usb 4-1: device descriptor read/64, error -71 [ 260.340377][ T5788] Bluetooth: hci0: unexpected event for opcode 0x203d [ 260.351074][ T7536] overlayfs: missing 'workdir' [ 260.362533][ T7538] program syz.1.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.373356][ T7536] CacheFiles: Empty directory specified [ 260.380020][ T7538] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 260.380287][ T7536] CacheFiles: No cache directory specified [ 260.552995][ T5840] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 260.717480][ T5840] usb 4-1: device descriptor read/64, error -71 [ 261.376326][ T5840] usb usb4-port1: attempt power cycle [ 261.797661][ T5840] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 261.886207][ T5840] usb 4-1: device descriptor read/8, error -71 [ 262.276420][ T5840] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 262.584919][ T5840] usb 4-1: device descriptor read/8, error -71 [ 262.747746][ T5840] usb usb4-port1: unable to enumerate USB device [ 262.984948][ T5788] Bluetooth: hci2: unexpected event for opcode 0x203d [ 263.007963][ T7570] overlayfs: missing 'workdir' [ 263.009164][ T7572] program syz.0.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.023880][ T7572] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 263.042015][ T7570] CacheFiles: Empty directory specified [ 266.917685][ T5849] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 267.606746][ T7601] overlayfs: missing 'workdir' [ 267.615815][ T5790] Bluetooth: hci2: unexpected event for opcode 0x203d [ 267.623187][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 267.642140][ T7601] CacheFiles: Empty directory specified [ 267.707448][ T5849] usb 2-1: device descriptor read/64, error -71 [ 267.775707][ T7605] program syz.3.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.787751][ T7605] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 268.007606][ T5849] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 268.078109][ T7613] binder: 7609:7613 ioctl 401c7012 0 returned -22 [ 268.105349][ T7613] 9pnet_virtio: no channels available for device syz [ 268.181422][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 268.915327][ T5849] usb 2-1: device descriptor read/64, error -71 [ 269.107843][ T5849] usb usb2-port1: attempt power cycle [ 269.220484][ T7619] fuse: Bad value for 'fd' [ 269.567758][ T5849] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 269.625843][ T5849] usb 2-1: device descriptor read/8, error -71 [ 269.948823][ T5849] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 270.061748][ T5849] usb 2-1: device descriptor read/8, error -71 [ 270.248679][ T5849] usb usb2-port1: unable to enumerate USB device [ 270.731322][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 275.219235][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 276.022501][ T7676] binder: 7675:7676 ioctl 4018620d 0 returned -22 [ 277.410620][ T7690] overlayfs: missing 'workdir' [ 277.633953][ T7691] CacheFiles: No cache directory specified [ 282.048975][ T5788] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 283.186760][ T5788] Bluetooth: hci2: unexpected event for opcode 0x203d [ 283.204221][ T7724] overlayfs: missing 'workdir' [ 283.219494][ T7725] 9pnet_virtio: no channels available for device syz [ 283.231652][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 283.320255][ T7724] CacheFiles: No cache directory specified [ 284.393922][ T7739] program syz.1.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.403801][ T7739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 288.172524][ T7773] 9pnet_virtio: no channels available for device syz [ 288.184641][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 289.165034][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 289.537627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.977714][ T7786] program syz.1.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.137455][ T7786] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.981478][ T7791] program syz.1.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.991101][ T7791] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 293.000730][ T7791] syz0: rxe_newlink: already configured on bond_slave_1 [ 293.650627][ T7802] binder: 7797:7802 ioctl 401c7012 0 returned -22 [ 294.417518][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 295.752382][ T7821] overlayfs: missing 'workdir' [ 295.767664][ T5788] Bluetooth: hci1: unexpected event for opcode 0x203d [ 295.920609][ T7827] 9pnet_virtio: no channels available for device syz [ 295.933982][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 296.629487][ T7832] binder: 7831:7832 ioctl c0306201 2000000004c0 returned -14 [ 298.657721][ T7844] program syz.0.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.827442][ T7844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 306.282986][ T5788] Bluetooth: hci3: unexpected event for opcode 0x203d [ 306.297131][ T7869] overlayfs: missing 'workdir' [ 306.435103][ T7856] syz.0.572 (7856) used greatest stack depth: 19784 bytes left [ 307.553957][ T7881] binder: 7880:7881 ioctl c0306201 2000000004c0 returned -14 [ 310.209834][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 315.128649][ T7958] program syz.2.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.317417][ T7958] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 315.467497][ T7956] (null): rxe_set_mtu: Set mtu to 1024 [ 315.473272][ T7956] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 317.241215][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247739][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.615522][ T7979] binder: 7974:7979 ioctl 401c7012 0 returned -22 [ 318.627809][ T7979] 9pnet_virtio: no channels available for device syz [ 318.640540][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 322.346032][ T7982] pim6reg: entered allmulticast mode [ 322.354727][ T7982] pim6reg: left allmulticast mode [ 327.197794][ T8015] syz.3.614 (8015) used greatest stack depth: 19624 bytes left [ 327.783373][ T8031] program syz.2.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.793311][ T8031] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 333.504403][ T8056] pim6reg: entered allmulticast mode [ 333.518842][ T8056] pim6reg: left allmulticast mode [ 333.579445][ T8059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.623'. [ 336.158034][ T8064] binder: 8060:8064 ioctl 401c7012 0 returned -22 [ 336.169135][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 337.267875][ T8073] program syz.0.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.397450][ T8073] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.890543][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 344.937835][ T8110] binder: 8101:8110 ioctl 401c7012 0 returned -22 [ 344.957139][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 349.696614][ T8137] binder: 8128:8137 ioctl 401c7012 0 returned -22 [ 349.709919][ T8137] 9pnet_virtio: no channels available for device syz [ 349.721313][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 349.794886][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 350.418571][ T8144] program syz.2.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.557445][ T8144] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 353.717612][ T1001] rpcbind: server 127.0.0.1 not responding, timed out [ 353.971441][ T8165] binder: 8153:8165 ioctl 401c7012 0 returned -22 [ 353.985908][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 360.525724][ T5788] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 362.904157][ T8217] binder: 8207:8217 ioctl 401c7012 0 returned -22 [ 364.779328][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 365.112117][ T8229] binder: 8223:8229 ioctl 401c7012 0 returned -22 [ 365.161807][ T8229] 9pnet_virtio: no channels available for device syz [ 365.172783][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 366.046034][ T8232] nbd2: detected capacity change from 0 to 63 [ 366.075485][ T8235] block nbd2: NBD_DISCONNECT [ 366.127601][ T8235] block nbd2: Disconnected due to user request. [ 366.165583][ T8235] block nbd2: shutting down sockets [ 366.211855][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.221149][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 366.239879][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 366.249035][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 366.256861][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 366.264676][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 366.283365][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.294405][ T1061] Buffer I/O error on dev nbd2, logical block 0, async page read [ 366.302390][ T1061] Buffer I/O error on dev nbd2, logical block 1, async page read [ 366.310351][ T1061] Buffer I/O error on dev nbd2, logical block 2, async page read [ 366.318183][ T1061] Buffer I/O error on dev nbd2, logical block 3, async page read [ 366.329175][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.339604][ T1061] Buffer I/O error on dev nbd2, logical block 0, async page read [ 366.347649][ T1061] Buffer I/O error on dev nbd2, logical block 1, async page read [ 366.355969][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.375769][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.385529][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.395027][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.404573][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.413851][ T8222] ldm_validate_partition_table(): Disk read failed. [ 366.421258][ T1061] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.432407][ T8222] Dev nbd2: unable to read RDB block 0 [ 366.442300][ T8222] nbd2: unable to read partition table [ 366.460337][ T8222] ldm_validate_partition_table(): Disk read failed. [ 366.469947][ T8222] Dev nbd2: unable to read RDB block 0 [ 366.478519][ T8222] nbd2: unable to read partition table [ 368.100605][ T8264] binder: 8261:8264 ioctl 401c7012 0 returned -22 [ 368.130286][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 369.097563][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 369.310879][ T8274] program syz.1.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.321240][ T8274] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 371.429579][ T8276] program syz.2.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.439492][ T8276] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 371.464067][ T8276] (null): rxe_set_mtu: Set mtu to 1024 [ 371.471181][ T8276] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 374.292559][ T8307] binder: 8303:8307 ioctl 401c7012 0 returned -22 [ 374.304675][ T8307] 9pnet_virtio: no channels available for device syz [ 374.318480][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 374.811693][ T8321] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.819048][ T8321] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 376.291658][ T8329] program syz.2.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.301630][ T8329] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 376.323832][ T8329] (null): rxe_set_mtu: Set mtu to 1024 [ 376.330847][ T8329] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 377.587621][ T8331] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 377.762297][ T8331] bond1: entered promiscuous mode [ 377.769376][ T8331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.801887][ T8340] binder: 8336:8340 ioctl 401c7012 0 returned -22 [ 377.814355][ T8340] 9pnet_virtio: no channels available for device syz [ 377.825985][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 377.877842][ T8333] bond1: (slave bridge1): making interface the new active one [ 377.885552][ T8333] bridge1: entered promiscuous mode [ 377.895785][ T8333] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 378.687149][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.707858][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.354130][ T5788] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 385.655498][ T8445] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 385.662100][ T8445] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 386.298134][ T8454] Config c/1 of g1 needs at least one function. [ 386.304564][ T8454] udc usbip-vudc.0: failed to start g1: -22 [ 386.364880][ T8454] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 386.389781][ T8454] UDC core: g1: couldn't find an available UDC or it's busy [ 388.120102][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 393.225742][ T8500] (null): rxe_set_mtu: Set mtu to 1024 [ 393.232491][ T8500] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 400.173189][ T8571] block nbd1: NBD_DISCONNECT [ 404.317458][ T8599] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.497410][ T8599] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 404.837538][ T8599] (null): rxe_set_mtu: Set mtu to 1024 [ 404.844196][ T8599] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 405.587669][ T5862] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 406.690389][ T34] rpcbind: server 127.0.0.1 not responding, timed out [ 409.427104][ T8631] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 409.433694][ T8631] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.491815][ T8646] (null): rxe_set_mtu: Set mtu to 1024 [ 411.498901][ T8646] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 413.986008][ T8648] binder: 8647:8648 ioctl 401c7012 0 returned -22 [ 414.002620][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 414.904267][ T8663] fuse: Bad value for 'group_id' [ 417.421553][ T8685] (null): rxe_set_mtu: Set mtu to 1024 [ 417.427457][ T8685] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 418.616311][ T8697] binder: 8686:8697 ioctl 401c7012 0 returned -22 [ 418.643147][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 419.276178][ T8713] fuse: Bad value for 'group_id' [ 419.382434][ T8717] (null): rxe_set_mtu: Set mtu to 1024 [ 419.388385][ T8717] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 419.568046][ T5862] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 420.479252][ T5862] usb 2-1: not running at top speed; connect to a high speed hub [ 420.501599][ T5862] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 420.523618][ T5862] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 420.544593][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.618370][ T5862] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 420.640714][ T5862] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 420.854839][ T5862] usb 2-1: USB disconnect, device number 11 [ 420.923127][ T8735] binder: 8732:8735 ioctl 401c7012 0 returned -22 [ 420.942643][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 420.963164][ T5862] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 421.155465][ T5862] garmin_gps 2-1:1.0: device disconnected [ 421.625269][ T8741] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 421.631895][ T8741] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 421.868763][ T8747] (null): rxe_set_mtu: Set mtu to 1024 [ 421.874638][ T8747] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 424.177206][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.227623][ T8775] binder: 8770:8775 ioctl 401c7012 0 returned -22 [ 424.241781][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 424.492450][ T5862] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 425.148854][ T5862] usb 1-1: not running at top speed; connect to a high speed hub [ 425.175460][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 425.203665][ T5862] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 425.215684][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.237515][ T5862] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 425.260974][ T5862] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 425.356590][ T8780] (null): rxe_set_mtu: Set mtu to 1024 [ 425.362991][ T8780] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 425.468727][ T5862] usb 1-1: USB disconnect, device number 8 [ 425.489972][ T5862] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 425.511547][ T5862] garmin_gps 1-1:1.0: device disconnected [ 429.348579][ T8808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.355127][ T8808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.619727][ T8809] binder: 8805:8809 ioctl 401c7012 0 returned -22 [ 429.641739][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 431.476553][ T8821] (null): rxe_set_mtu: Set mtu to 1024 [ 431.503297][ T8821] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 431.701040][ T8823] overlayfs: missing 'workdir' [ 431.714590][ T8823] CacheFiles: Empty directory specified [ 431.722295][ T8823] CacheFiles: No cache directory specified [ 433.364911][ T8842] binder: 8837:8842 ioctl 401c7012 0 returned -22 [ 433.381539][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'. [ 437.642406][ T8855] fuse: Bad value for 'user_id' [ 437.671025][ T8857] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 437.677620][ T8857] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 440.123053][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245180][ T8876] jffs2: notice: (8876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 440.265388][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.758958][ T8893] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 442.765471][ T8893] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 442.837986][ T8888] binder: 8886:8888 ioctl 401c7012 0 returned -22 [ 443.022362][ T8888] 9pnet_virtio: no channels available for device syz [ 443.168418][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 446.553871][ T5788] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 448.003458][ T8929] (null): rxe_set_mtu: Set mtu to 1024 [ 448.113643][ T8929] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 454.524687][ T5788] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 454.579534][ T8968] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 454.586081][ T8968] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.928577][ T8986] sctp: failed to load transform for md5: -2 [ 459.797436][ T5923] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 460.519110][ T9013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 460.525637][ T9013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.528893][ T5923] usb 1-1: not running at top speed; connect to a high speed hub [ 460.556298][ T5923] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 460.587399][ T5923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 460.596561][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.653059][ T5923] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 460.678482][ T5923] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 460.945755][ T5840] usb 1-1: USB disconnect, device number 9 [ 461.019410][ T5840] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 461.068473][ T5840] garmin_gps 1-1:1.0: device disconnected [ 463.597014][ T9036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.646817][ T9036] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.661398][ T9036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.680569][ T9036] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.689273][ T9036] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 463.696631][ T9036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.705498][ T9039] nbd0: detected capacity change from 0 to 63 [ 463.725407][ T9040] block nbd0: NBD_DISCONNECT [ 463.731058][ T9040] block nbd0: Disconnected due to user request. [ 463.737631][ T9040] block nbd0: shutting down sockets [ 463.784147][ C1] blk_print_req_error: 92 callbacks suppressed [ 463.784164][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 463.799545][ C1] buffer_io_error: 138 callbacks suppressed [ 463.799555][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 463.825707][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 463.834884][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 463.842709][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 463.851821][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 463.859618][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 463.868730][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 463.927712][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 463.937153][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 463.945704][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 463.953739][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 463.977532][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 463.985914][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 463.995222][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.003833][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 464.013037][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 464.023197][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 464.033522][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 464.043668][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 464.053683][ T8617] ldm_validate_partition_table(): Disk read failed. [ 464.062310][ T8617] Dev nbd0: unable to read RDB block 0 [ 464.069016][ T8617] nbd0: unable to read partition table [ 464.088696][ T8617] ldm_validate_partition_table(): Disk read failed. [ 464.138000][ T8617] Dev nbd0: unable to read RDB block 0 [ 464.145638][ T8617] nbd0: unable to read partition table [ 464.186129][ T9043] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 464.301131][ T9043] bond2: entered promiscuous mode [ 464.329364][ T9043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.459779][ T9045] bond2: (slave bridge6): making interface the new active one [ 464.467622][ T9045] bridge6: entered promiscuous mode [ 464.477755][ T9045] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 465.152294][ T9053] fuse: Unknown parameter 'group_i00000000000000000000' [ 465.747386][ T5782] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 465.798324][ T9041] Bluetooth: hci4: command tx timeout [ 466.599394][ T5782] usb 2-1: not running at top speed; connect to a high speed hub [ 467.499449][ T5782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 467.524425][ T5782] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 467.540299][ T9035] chnl_net:caif_netlink_parms(): no params data found [ 467.547360][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.573864][ T5782] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 467.877602][ T9041] Bluetooth: hci4: command tx timeout [ 467.892497][ T5782] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 469.627408][ T5782] usb 2-1: USB disconnect, device number 12 [ 469.739358][ T9083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.746108][ T9083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.768164][ T5782] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 469.839106][ T5782] garmin_gps 2-1:1.0: device disconnected [ 469.881006][ T9085] 9pnet_virtio: no channels available for device syz [ 469.958442][ T9041] Bluetooth: hci4: command tx timeout [ 470.339480][ T9095] program syz.1.893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.350598][ T9095] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.369451][ T9095] syz0: rxe_newlink: already configured on bond_slave_1 [ 471.039699][ T9090] sctp: failed to load transform for md5: -2 [ 471.361931][ T3467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.548276][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.566005][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.591875][ T9035] bridge_slave_0: entered allmulticast mode [ 471.631945][ T9035] bridge_slave_0: entered promiscuous mode [ 471.651646][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.659215][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.666484][ T9035] bridge_slave_1: entered allmulticast mode [ 471.674022][ T9035] bridge_slave_1: entered promiscuous mode [ 471.952129][ T3467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.220182][ T9041] Bluetooth: hci4: command tx timeout [ 472.291699][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.369154][ T3467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.748612][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.201006][ T3467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.327014][ T9114] fuse: Unknown parameter 'group_i00000000000000000000' [ 474.169984][ T9035] team0: Port device team_slave_0 added [ 474.334883][ T9035] team0: Port device team_slave_1 added [ 474.370840][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.377921][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.417519][ T9035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.470736][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.494709][ T9123] rt1719: probe of 0-0049 failed with error -5 [ 474.502144][ T9123] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 474.512324][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.539188][ T9035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.718181][ T5923] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 474.774269][ T9035] hsr_slave_0: entered promiscuous mode [ 474.789347][ T9035] hsr_slave_1: entered promiscuous mode [ 474.934739][ T5923] usb 1-1: not running at top speed; connect to a high speed hub [ 474.969487][ T5923] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 475.027440][ T5923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 475.069743][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.078196][ T9140] program syz.3.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.277613][ T9140] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 476.656644][ T5923] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 476.708790][ T9138] (null): rxe_set_mtu: Set mtu to 1024 [ 476.716257][ T9138] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 476.881452][ T5923] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 476.899338][ T9143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 476.905956][ T9143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 476.995700][ T5923] usb 1-1: USB disconnect, device number 10 [ 477.085637][ T5923] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 477.154139][ T5923] garmin_gps 1-1:1.0: device disconnected [ 477.877811][ T9035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.044606][ T9035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.090207][ T9035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.136672][ T9035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.238457][ T9165] fuse: Unknown parameter 'group_i00000000000000000000' [ 479.688659][ T3467] dvmrp6 (unregistering): left allmulticast mode [ 481.089193][ T5819] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 481.127045][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.117674][ T9191] program syz.3.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.287550][ T9191] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.577438][ T9191] (null): rxe_set_mtu: Set mtu to 1024 [ 482.583208][ T9191] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 484.143315][ T9035] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.204634][ T9035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.215382][ T9035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.234815][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.242025][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.340425][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.347700][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.497473][ T9215] program syz.0.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.717374][ T9215] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 486.027536][ T9215] (null): rxe_set_mtu: Set mtu to 1024 [ 486.033369][ T9215] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 486.230395][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.280077][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.349466][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.400910][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.463430][ T3467] bridge_slave_1: left allmulticast mode [ 486.518957][ T3467] bridge_slave_1: left promiscuous mode [ 486.525100][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.637097][ T3467] bridge_slave_0: left allmulticast mode [ 486.660920][ T3467] bridge_slave_0: left promiscuous mode [ 486.667004][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.717862][ T9231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.724424][ T9231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 487.646346][ T3467] veth1_macvtap: left promiscuous mode [ 487.664640][ T3467] veth0_macvtap: left promiscuous mode [ 487.682019][ T3467] veth1_vlan: left promiscuous mode [ 488.027201][ T3467] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 488.041689][ T3467] bridge1 (unregistering): left promiscuous mode [ 488.374339][ T3467] bond1 (unregistering): Released all slaves [ 490.026197][ T3467] team0 (unregistering): Port device vlan0 removed [ 490.354125][ T9266] md: could not open device unknown-block(1,0). [ 490.521802][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 490.600394][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 490.645052][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.719487][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.131999][ T3467] bond0 (unregistering): Released all slaves [ 491.217057][ T9237] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 491.225093][ T9237] netlink: 17 bytes leftover after parsing attributes in process `syz.3.922'. [ 491.499909][ T9283] binder: 9282:9283 ioctl 401c7012 0 returned -22 [ 491.509552][ T9283] 9pnet_virtio: no channels available for device syz [ 491.518935][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 491.613328][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.408385][ T9295] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.414990][ T9295] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 493.912017][ T9313] tipc: Started in network mode [ 493.917716][ T9313] tipc: Node identity 9e73c24e53be, cluster identity 4711 [ 493.925512][ T9313] tipc: Enabled bearer , priority 10 [ 493.945445][ T9311] tipc: Resetting bearer [ 494.064365][ T9311] tipc: Disabling bearer [ 494.221548][ T9035] veth0_vlan: entered promiscuous mode [ 494.298294][ T9035] veth1_vlan: entered promiscuous mode [ 494.383564][ T9035] veth0_macvtap: entered promiscuous mode [ 494.431996][ T9035] veth1_macvtap: entered promiscuous mode [ 494.496680][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.543053][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.567336][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.605480][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.627380][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.657323][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.679778][ T9330] binder: 9328:9330 ioctl 401c7012 0 returned -22 [ 494.688407][ T9330] 9pnet_virtio: no channels available for device syz [ 494.696091][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 494.722152][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.881341][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.898054][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.908638][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.924797][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.938317][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.949225][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.962356][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.448470][ T9035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.598823][ T9035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.777777][ T9035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.821590][ T9035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.055480][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.111304][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.625346][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.756634][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.298316][ T9364] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.304912][ T9364] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 501.571481][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.770909][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.515258][ T9421] netlink: 'syz.4.952': attribute type 4 has an invalid length. [ 509.693483][ T9474] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.700059][ T9474] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 511.609443][ T9502] md: could not open device unknown-block(1,0). [ 521.415260][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 521.678713][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 526.203618][ T9609] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.212685][ T9609] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.970478][ T9609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.066342][ T9609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.376250][ T9609] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.391560][ T9609] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.402788][ T9609] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.417520][ T9609] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.642294][ T9677] program syz.4.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.652388][ T9677] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 527.677817][ T9677] (null): rxe_set_mtu: Set mtu to 1024 [ 527.685212][ T9677] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 528.460514][ T9682] nbd: must specify at least one socket [ 528.699566][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 532.323987][ T9706] program syz.0.1019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.333865][ T9706] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 532.344973][ T9706] (null): rxe_set_mtu: Set mtu to 1024 [ 532.350846][ T9706] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 534.507900][ T9728] syz.0.1027[9728]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 534.669753][ T9734] program syz.1.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.679426][ T9734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 534.690231][ T5924] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 534.690250][ T9734] syz0: rxe_newlink: already configured on bond_slave_1 [ 534.847325][ T9672] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 534.938456][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 535.014063][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 535.120247][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 535.282386][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.322317][ T5924] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 535.354526][ T5924] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 535.617917][ T5924] usb 5-1: USB disconnect, device number 2 [ 535.665292][ T5924] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 535.692496][ T9672] usb 1-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x3B, skipping [ 535.732226][ T5924] garmin_gps 5-1:1.0: device disconnected [ 536.460034][ T9672] usb 1-1: config 0 interface 0 has no altsetting 0 [ 536.504025][ T9672] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 536.527453][ T9672] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 536.535837][ T9672] usb 1-1: Product: syz [ 536.541694][ T9672] usb 1-1: Manufacturer: syz [ 536.546537][ T9672] usb 1-1: SerialNumber: syz [ 536.568050][ T9672] usb 1-1: config 0 descriptor?? [ 536.573817][ T9728] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 536.754259][ T9672] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 536.812212][ T5436] veth0_macvtap: left promiscuous mode [ 536.923403][ T9601] udevd[9601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.850303][ T5924] usb 1-1: USB disconnect, device number 12 [ 538.125322][ T9771] nbd: must specify at least one socket [ 538.686041][ T49] rpcbind: server 127.0.0.1 not responding, timed out [ 538.916682][ T9781] program syz.4.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.926515][ T9781] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 538.938277][ T9781] (null): rxe_set_mtu: Set mtu to 1024 [ 538.944148][ T9781] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 539.072693][ T9782] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 539.105500][ T9783] binder: 9779:9783 ioctl 401c7012 0 returned -22 [ 539.113785][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 539.226439][ T9782] bond1: entered promiscuous mode [ 539.238458][ T9782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.307154][ T9788] bond1: (slave bridge2): making interface the new active one [ 539.315095][ T9788] bridge2: entered promiscuous mode [ 539.326990][ T9788] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 540.321029][ T9797] md: could not open device unknown-block(1,0). [ 540.348640][ T9801] binder: 9799:9801 ioctl 401c7012 0 returned -22 [ 540.356238][ T9801] 9pnet_virtio: no channels available for device syz [ 540.363988][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 540.833908][ T9821] binder: 9820:9821 ioctl 401c7012 0 returned -22 [ 542.138814][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 542.450096][ T9837] program syz.1.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.459678][ T9837] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 542.470851][ T9837] syz0: rxe_newlink: already configured on bond_slave_1 [ 542.605524][ T9839] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 542.662362][ T9839] bond1: entered promiscuous mode [ 542.674942][ T9839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.956295][ T9842] bond1: (slave bridge1): making interface the new active one [ 542.964254][ T9842] bridge1: entered promiscuous mode [ 542.973663][ T9842] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 545.428474][ T9860] binder: 9859:9860 ioctl 401c7012 0 returned -22 [ 545.445980][ T9860] 9pnet_virtio: no channels available for device syz [ 545.454658][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 545.750946][ T9857] syz.4.1055 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 545.958634][ T9873] ======================================================= [ 545.958634][ T9873] WARNING: The mand mount option has been deprecated and [ 545.958634][ T9873] and is ignored by this kernel. Remove the mand [ 545.958634][ T9873] option from the mount to silence this warning. [ 545.958634][ T9873] ======================================================= [ 546.986818][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.087055][ T9890] fuse: Bad value for 'rootmode' [ 548.563195][ T9888] program syz.1.1063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.572849][ T9888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 548.583041][ T9888] syz0: rxe_newlink: already configured on bond_slave_1 [ 550.130810][ T9927] pim6reg: entered allmulticast mode [ 550.164055][ T9927] pim6reg: left allmulticast mode [ 551.896072][ T9940] binder: 9938:9940 ioctl 401c7012 0 returned -22 [ 551.904441][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 552.080647][ T9953] fuse: Bad value for 'rootmode' [ 555.110343][ T9982] binder: 9981:9982 ioctl 401c7012 0 returned -22 [ 555.123828][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 555.144282][ T9988] fuse: Bad value for 'rootmode' [ 557.367671][T10006] program syz.1.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.377105][T10006] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 557.387275][T10006] syz0: rxe_newlink: already configured on bond_slave_1 [ 557.647791][T10012] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 558.542428][T10012] bond3: entered promiscuous mode [ 558.548005][T10012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.736479][T10018] bond3: (slave bridge7): making interface the new active one [ 558.744282][T10018] bridge7: entered promiscuous mode [ 558.759848][T10018] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 560.116597][T10026] program syz.0.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.126106][T10026] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 560.136309][T10026] (null): rxe_set_mtu: Set mtu to 1024 [ 560.142093][T10026] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 561.666668][T10044] fuse: Unknown parameter 'use00000000000000000000' [ 561.691406][T10040] pim6reg: entered allmulticast mode [ 561.698283][T10041] pim6reg: left allmulticast mode [ 562.063905][T10049] program syz.0.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.073483][T10049] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 562.083817][T10049] (null): rxe_set_mtu: Set mtu to 1024 [ 562.089579][T10049] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 563.002696][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.009447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.631914][T10080] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 566.642473][T10080] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 566.727331][ T3467] rpcbind: server 127.0.0.1 not responding, timed out [ 567.104652][T10103] netlink: 'syz.0.1110': attribute type 4 has an invalid length. [ 569.022876][T10145] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 571.046364][ T34] rpcbind: server 127.0.0.1 not responding, timed out [ 571.108484][T10145] bond4: entered promiscuous mode [ 571.113868][T10145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.130782][T10150] bond4: (slave bridge8): making interface the new active one [ 571.143048][T10150] bridge8: entered promiscuous mode [ 571.151735][T10150] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 571.555128][T10157] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 577.104806][T10210] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 578.192731][T10210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.146322][T10215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.277721][T10215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.377400][T10215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.437556][T10215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.480617][T10215] bond1: (slave geneve2): making interface the new active one [ 579.580125][T10215] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 586.763114][T10299] nbd1: detected capacity change from 0 to 63 [ 586.799569][ T9041] block nbd1: Receive control failed (result -32) [ 586.809601][ T1061] block nbd1: Dead connection, failed to find a fallback [ 586.821512][ T1061] block nbd1: shutting down sockets [ 586.827650][ T1061] blk_print_req_error: 93 callbacks suppressed [ 586.827667][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.843361][ T1061] buffer_io_error: 138 callbacks suppressed [ 586.843374][ T1061] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.857986][ T1061] Buffer I/O error on dev nbd1, logical block 1, async page read [ 586.866282][ T1061] Buffer I/O error on dev nbd1, logical block 2, async page read [ 586.874168][ T1061] Buffer I/O error on dev nbd1, logical block 3, async page read [ 586.882238][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.891525][ T1061] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.899342][ T1061] Buffer I/O error on dev nbd1, logical block 1, async page read [ 586.907766][ T1061] Buffer I/O error on dev nbd1, logical block 2, async page read [ 586.915510][ T1061] Buffer I/O error on dev nbd1, logical block 3, async page read [ 586.923613][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.932858][ T1061] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.940802][ T1061] Buffer I/O error on dev nbd1, logical block 1, async page read [ 586.948887][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.958199][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.967513][ T1061] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.976718][ T1061] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 586.986068][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.995360][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.004744][ T1061] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.016254][ T9760] ldm_validate_partition_table(): Disk read failed. [ 587.024849][ T9760] Dev nbd1: unable to read RDB block 0 [ 587.032674][ T9760] nbd1: unable to read partition table [ 587.061773][ T9760] ldm_validate_partition_table(): Disk read failed. [ 587.153752][ T9760] Dev nbd1: unable to read RDB block 0 [ 587.279578][ T9760] nbd1: unable to read partition table [ 587.891898][T10315] dummy0: entered promiscuous mode [ 587.950664][T10315] macvtap1: entered promiscuous mode [ 587.965958][T10315] dummy0: left promiscuous mode [ 590.681533][ T9036] Bluetooth: hci4: command 0x0406 tx timeout [ 590.900127][T10356] nbd0: detected capacity change from 0 to 63 [ 591.008846][ T9041] block nbd0: Receive control failed (result -32) [ 591.051146][ T55] block nbd0: Dead connection, failed to find a fallback [ 591.060465][ T55] block nbd0: shutting down sockets [ 591.161936][ T9760] ldm_validate_partition_table(): Disk read failed. [ 591.341389][ T9760] Dev nbd0: unable to read RDB block 0 [ 591.508660][ T9760] nbd0: unable to read partition table [ 591.830391][ T9760] ldm_validate_partition_table(): Disk read failed. [ 591.861701][ T55] blk_print_req_error: 178 callbacks suppressed [ 591.861720][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.879458][ T55] buffer_io_error: 234 callbacks suppressed [ 591.879484][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 591.936234][ T1061] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 591.946786][ T1061] Buffer I/O error on dev nbd0, logical block 1, async page read [ 591.955138][ T1061] Buffer I/O error on dev nbd0, logical block 2, async page read [ 591.963322][ T1061] Buffer I/O error on dev nbd0, logical block 3, async page read [ 591.971757][ T1061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 591.981175][ T1061] Buffer I/O error on dev nbd0, logical block 0, async page read [ 591.989420][ T1061] Buffer I/O error on dev nbd0, logical block 1, async page read [ 592.000030][ T1061] Buffer I/O error on dev nbd0, logical block 2, async page read [ 592.008042][ T1061] Buffer I/O error on dev nbd0, logical block 3, async page read [ 592.016110][ T1061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 592.025836][ T1061] Buffer I/O error on dev nbd0, logical block 0, async page read [ 592.034532][ T1061] Buffer I/O error on dev nbd0, logical block 1, async page read [ 592.042800][ T1061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 592.052096][ T9760] Dev nbd0: unable to read RDB block 0 [ 592.058981][ T1061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.092209][ T9041] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 592.112137][ T1061] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 592.121737][ T1061] I/O error, dev nbd0, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.132177][ T1061] I/O error, dev nbd0, sector 26 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 592.141692][ T1061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.151842][ T9760] nbd0: unable to read partition table [ 594.621413][T10381] pim6reg: entered allmulticast mode [ 594.659138][T10381] pim6reg: left allmulticast mode [ 600.879281][T10412] nbd4: detected capacity change from 0 to 63 [ 600.891356][ T9041] block nbd4: Receive control failed (result -32) [ 600.908369][ T55] block nbd4: Dead connection, failed to find a fallback [ 600.915497][ T55] block nbd4: shutting down sockets [ 600.920844][ T55] blk_print_req_error: 27 callbacks suppressed [ 600.920859][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 600.936488][ T55] buffer_io_error: 42 callbacks suppressed [ 600.936505][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.988468][ T1061] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 600.999690][ T1061] Buffer I/O error on dev nbd4, logical block 1, async page read [ 601.017406][ T1061] Buffer I/O error on dev nbd4, logical block 2, async page read [ 601.025278][ T1061] Buffer I/O error on dev nbd4, logical block 3, async page read [ 601.037697][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.052637][ T1061] Buffer I/O error on dev nbd4, logical block 0, async page read [ 601.061381][ T1061] Buffer I/O error on dev nbd4, logical block 1, async page read [ 601.069373][ T1061] Buffer I/O error on dev nbd4, logical block 2, async page read [ 601.077177][ T1061] Buffer I/O error on dev nbd4, logical block 3, async page read [ 601.085498][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.094790][ T1061] Buffer I/O error on dev nbd4, logical block 0, async page read [ 601.102798][ T1061] Buffer I/O error on dev nbd4, logical block 1, async page read [ 601.111082][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.120608][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.130100][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.139486][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.149360][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.158517][ T9760] ldm_validate_partition_table(): Disk read failed. [ 601.165261][ T1061] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 601.177774][ T9760] Dev nbd4: unable to read RDB block 0 [ 601.185499][ T9760] nbd4: unable to read partition table [ 601.209414][ T9760] ldm_validate_partition_table(): Disk read failed. [ 601.229497][ T9760] Dev nbd4: unable to read RDB block 0 [ 601.257379][ T9760] nbd4: unable to read partition table [ 601.824738][T10444] pim6reg: entered allmulticast mode [ 601.840984][T10444] pim6reg: left allmulticast mode [ 605.422534][ T28] audit: type=1800 audit(1786933412.317:2): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1181" name="nexus" dev="configfs" ino=21076 res=0 errno=0 [ 613.514459][T10553] binder: 10546:10553 ioctl 401c7012 0 returned -22 [ 613.527499][T10553] 9pnet_virtio: no channels available for device syz [ 613.544391][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 619.448416][T10604] binder: 10601:10604 ioctl 401c7012 0 returned -22 [ 619.459223][T10604] 9pnet_virtio: no channels available for device syz [ 619.470139][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 624.302857][T10649] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 624.450091][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.456498][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.769460][T10664] binder: 10656:10664 ioctl 401c7012 0 returned -22 [ 624.787623][T10664] 9pnet_virtio: no channels available for device syz [ 624.803019][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 627.849542][T10679] md: could not open device unknown-block(1,0). [ 630.826762][T10701] dummy0: entered promiscuous mode [ 630.840906][T10701] macvtap1: entered promiscuous mode [ 630.948960][T10701] dummy0: left promiscuous mode [ 632.289000][T10724] 9pnet_virtio: no channels available for device syz [ 632.303276][T10724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1226'. [ 634.140975][T10723] pim6reg: entered allmulticast mode [ 634.147055][T10722] pim6reg: left allmulticast mode [ 634.775554][T10736] CacheFiles: Empty directory specified [ 634.798340][T10736] CacheFiles: No cache directory specified [ 634.876446][T10738] binder: 10732:10738 ioctl 401c7012 0 returned -22 [ 634.889041][T10738] 9pnet_virtio: no channels available for device syz [ 634.905740][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 635.788897][T10741] md: could not open device unknown-block(1,0). [ 636.968550][T10764] dummy0: entered promiscuous mode [ 636.974376][T10764] macvtap1: entered promiscuous mode [ 637.005338][ T28] audit: type=1800 audit(1786933443.907:3): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1234" name="file0" dev="overlay" ino=1677 res=0 errno=0 [ 637.033106][T10764] dummy0: left promiscuous mode [ 639.168424][T10785] CacheFiles: Empty directory specified [ 639.175517][T10785] CacheFiles: No cache directory specified [ 640.444489][ T3467] rpcbind: server 127.0.0.1 not responding, timed out [ 640.448981][T10799] binder: 10795:10799 ioctl 401c7012 0 returned -22 [ 640.461364][T10799] 9pnet_virtio: no channels available for device syz [ 640.473729][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 641.932912][T10804] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 643.232512][T10822] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 643.280566][T10819] md: could not open device unknown-block(1,0). [ 643.340830][T10826] CacheFiles: Empty directory specified [ 643.346958][T10826] CacheFiles: No cache directory specified [ 643.421400][T10822] bond5: entered promiscuous mode [ 643.426963][T10822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.459966][ T5436] veth1_vlan: left promiscuous mode [ 643.758259][T10839] netlink: 'syz.0.1250': attribute type 4 has an invalid length. [ 643.810127][T10827] bond5: (slave bridge9): making interface the new active one [ 643.850847][T10827] bridge9: entered promiscuous mode [ 643.878928][T10827] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 644.697847][T10860] binder: 10856:10860 ioctl 401c7012 0 returned -22 [ 644.709860][T10860] 9pnet_virtio: no channels available for device syz [ 644.721412][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 645.562786][T10863] [ 645.565221][T10863] ====================================================== [ 645.572290][T10863] WARNING: possible circular locking dependency detected [ 645.579369][T10863] syzkaller #0 Not tainted [ 645.583836][T10863] ------------------------------------------------------ [ 645.590901][T10863] syz.3.1255/10863 is trying to acquire lock: [ 645.597018][T10863] ffffffff8ddf69d0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_extension_bm_controls_show+0x78/0x2a0 [ 645.608425][T10863] [ 645.608425][T10863] but task is already holding lock: [ 645.615819][T10863] ffff88802ec60478 (&p->frag_sem){++++}-{3:3}, at: configfs_read_iter+0x1a5/0x570 [ 645.625140][T10863] [ 645.625140][T10863] which lock already depends on the new lock. [ 645.625140][T10863] [ 645.635570][T10863] [ 645.635570][T10863] the existing dependency chain (in reverse order) is: [ 645.644608][T10863] [ 645.644608][T10863] -> #3 (&p->frag_sem){++++}-{3:3}: [ 645.652036][T10863] down_write_killable+0xa7/0x230 [ 645.657741][T10863] configfs_rmdir+0x3e4/0x980 [ 645.663003][T10863] vfs_rmdir+0x352/0x4b0 [ 645.667827][T10863] do_rmdir+0x29f/0x590 [ 645.672541][T10863] __x64_sys_unlinkat+0xc4/0xe0 [ 645.677961][T10863] do_syscall_64+0x55/0xb0 [ 645.683037][T10863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.689528][T10863] [ 645.689528][T10863] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 645.698259][T10863] down_write+0x97/0x200 [ 645.703075][T10863] configfs_depend_item_unlocked+0x157/0x430 [ 645.709609][T10863] usbg_make_tpg+0x1f7/0x580 [ 645.714868][T10863] target_fabric_make_tpg+0xa4/0x6d0 [ 645.720729][T10863] configfs_mkdir+0x515/0x9e0 [ 645.725949][T10863] vfs_mkdir+0x2a5/0x470 [ 645.730733][T10863] do_mkdirat+0x1dc/0x450 [ 645.735599][T10863] __x64_sys_mkdirat+0x89/0xa0 [ 645.740915][T10863] do_syscall_64+0x55/0xb0 [ 645.746337][T10863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.752789][T10863] [ 645.752789][T10863] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 645.760476][T10863] __mutex_lock+0x135/0xc80 [ 645.765538][T10863] tcm_set_name+0x2a/0x90 [ 645.770416][T10863] function_make+0x199/0x350 [ 645.775603][T10863] configfs_mkdir+0x515/0x9e0 [ 645.780827][T10863] vfs_mkdir+0x2a5/0x470 [ 645.785617][T10863] do_mkdirat+0x1dc/0x450 [ 645.790487][T10863] __x64_sys_mkdirat+0x89/0xa0 [ 645.795787][T10863] do_syscall_64+0x55/0xb0 [ 645.800748][T10863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.807189][T10863] [ 645.807189][T10863] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 645.815475][T10863] __lock_acquire+0x37ef/0x7d80 [ 645.820940][T10863] lock_acquire+0x19e/0x420 [ 645.826005][T10863] __mutex_lock+0x135/0xc80 [ 645.831068][T10863] uvcg_extension_bm_controls_show+0x78/0x2a0 [ 645.837693][T10863] configfs_read_iter+0x29d/0x570 [ 645.843269][T10863] __kernel_read+0x2e5/0x730 [ 645.848409][T10863] integrity_kernel_read+0x8a/0xd0 [ 645.854136][T10863] ima_calc_file_hash+0xb1f/0x1960 [ 645.859785][T10863] ima_collect_measurement+0x4d4/0xa30 [ 645.865792][T10863] process_measurement+0x123a/0x1d50 [ 645.871622][T10863] ima_file_check+0xcc/0x110 [ 645.876796][T10863] path_openat+0x2910/0x3270 [ 645.881932][T10863] do_filp_open+0x1f2/0x430 [ 645.886977][T10863] do_sys_openat2+0x134/0x1d0 [ 645.892198][T10863] __x64_sys_openat+0x139/0x160 [ 645.897591][T10863] do_syscall_64+0x55/0xb0 [ 645.902554][T10863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.909004][T10863] [ 645.909004][T10863] other info that might help us debug this: [ 645.909004][T10863] [ 645.919255][T10863] Chain exists of: [ 645.919255][T10863] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#23 --> &p->frag_sem [ 645.919255][T10863] [ 645.933720][T10863] Possible unsafe locking scenario: [ 645.933720][T10863] [ 645.941180][T10863] CPU0 CPU1 [ 645.946558][T10863] ---- ---- [ 645.951937][T10863] rlock(&p->frag_sem); [ 645.956198][T10863] lock(&sb->s_type->i_mutex_key#23); [ 645.964208][T10863] lock(&p->frag_sem); [ 645.970901][T10863] lock(gadget_subsys.su_mutex); [ 645.975949][T10863] [ 645.975949][T10863] *** DEADLOCK *** [ 645.975949][T10863] [ 645.984106][T10863] 3 locks held by syz.3.1255/10863: [ 645.989321][T10863] #0: ffff888076e31c10 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x739/0x1d50 [ 646.000056][T10863] #1: ffff888078e7da88 (&buffer->mutex){+.+.}-{3:3}, at: configfs_read_iter+0x72/0x570 [ 646.009836][T10863] #2: ffff88802ec60478 (&p->frag_sem){++++}-{3:3}, at: configfs_read_iter+0x1a5/0x570 [ 646.019529][T10863] [ 646.019529][T10863] stack backtrace: [ 646.025450][T10863] CPU: 1 PID: 10863 Comm: syz.3.1255 Not tainted syzkaller #0 [ 646.032928][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.043019][T10863] Call Trace: [ 646.046400][T10863] [ 646.049422][T10863] dump_stack_lvl+0x18c/0x250 [ 646.054198][T10863] ? load_image+0x420/0x420 [ 646.058951][T10863] ? show_regs_print_info+0x20/0x20 [ 646.064186][T10863] ? print_circular_bug+0x12b/0x1a0 [ 646.069420][T10863] check_noncircular+0x2fc/0x400 [ 646.074395][T10863] ? print_deadlock_bug+0x5d0/0x5d0 [ 646.079627][T10863] ? lockdep_lock+0xf5/0x230 [ 646.084248][T10863] ? _find_first_zero_bit+0xd6/0x100 [ 646.089628][T10863] __lock_acquire+0x37ef/0x7d80 [ 646.094505][T10863] ? do_syscall_64+0x55/0xb0 [ 646.099150][T10863] ? verify_lock_unused+0x140/0x140 [ 646.104407][T10863] ? mark_lock+0x94/0x320 [ 646.108776][T10863] ? __lock_acquire+0x1336/0x7d80 [ 646.114532][T10863] lock_acquire+0x19e/0x420 [ 646.119061][T10863] ? uvcg_extension_bm_controls_show+0x78/0x2a0 [ 646.125338][T10863] ? __might_sleep+0xe0/0xe0 [ 646.129999][T10863] ? read_lock_is_recursive+0x20/0x20 [ 646.135400][T10863] __mutex_lock+0x135/0xc80 [ 646.139927][T10863] ? uvcg_extension_bm_controls_show+0x78/0x2a0 [ 646.146205][T10863] ? uvcg_extension_bm_controls_show+0x78/0x2a0 [ 646.152480][T10863] ? mutex_lock_nested+0x20/0x20 [ 646.157445][T10863] ? __alloc_pages+0x276/0x460 [ 646.162259][T10863] ? read_lock_is_recursive+0x20/0x20 [ 646.167675][T10863] ? zone_statistics+0x170/0x170 [ 646.172647][T10863] uvcg_extension_bm_controls_show+0x78/0x2a0 [ 646.178756][T10863] ? down_read+0x1ac/0x2e0 [ 646.183202][T10863] configfs_read_iter+0x29d/0x570 [ 646.188253][T10863] ? uvcg_extension_ba_source_id_store+0xad0/0xad0 [ 646.194785][T10863] __kernel_read+0x2e5/0x730 [ 646.199403][T10863] ? do_sys_openat2+0x134/0x1d0 [ 646.204282][T10863] ? __x64_sys_openat+0x139/0x160 [ 646.209330][T10863] ? rw_verify_area+0x1b0/0x1b0 [ 646.214218][T10863] integrity_kernel_read+0x8a/0xd0 [ 646.219363][T10863] ? integrity_inode_free+0x170/0x170 [ 646.224759][T10863] ima_calc_file_hash+0xb1f/0x1960 [ 646.229898][T10863] ? deref_stack_reg+0x1ab/0x230 [ 646.234875][T10863] ? is_bpf_text_address+0x26/0x2a0 [ 646.240116][T10863] ? look_up_lock_class+0x75/0x140 [ 646.245254][T10863] ? ima_alloc_tfm+0x2f0/0x2f0 [ 646.250034][T10863] ? register_lock_class+0xc4/0x8a0 [ 646.255280][T10863] ? __lock_acquire+0x1336/0x7d80 [ 646.260328][T10863] ? verify_lock_unused+0x140/0x140 [ 646.265552][T10863] ? generic_fillattr+0x2b5/0x690 [ 646.270605][T10863] ? __asan_memcpy+0x40/0x70 [ 646.275222][T10863] ? generic_fillattr+0x451/0x690 [ 646.280295][T10863] ima_collect_measurement+0x4d4/0xa30 [ 646.285792][T10863] ? ima_get_action+0xb0/0xb0 [ 646.290494][T10863] ? __mutex_trylock_common+0x160/0x270 [ 646.296080][T10863] ? rcu_is_watching+0x15/0xb0 [ 646.300874][T10863] ? __mutex_lock+0x30d/0xc80 [ 646.305609][T10863] ? ima_get_hash_algo+0x91/0x4a0 [ 646.310661][T10863] ? ima_get_cache_status+0xd0/0xd0 [ 646.315892][T10863] process_measurement+0x123a/0x1d50 [ 646.321207][T10863] ? ima_file_mmap+0x1d0/0x1d0 [ 646.326013][T10863] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 646.332192][T10863] ima_file_check+0xcc/0x110 [ 646.336831][T10863] ? ima_bprm_check+0x200/0x200 [ 646.341714][T10863] path_openat+0x2910/0x3270 [ 646.346337][T10863] ? do_filp_open+0x430/0x430 [ 646.351050][T10863] do_filp_open+0x1f2/0x430 [ 646.355588][T10863] ? vfs_tmpfile+0x620/0x620 [ 646.360214][T10863] ? _raw_spin_unlock+0x28/0x40 [ 646.365097][T10863] ? alloc_fd+0x590/0x640 [ 646.369516][T10863] do_sys_openat2+0x134/0x1d0 [ 646.374244][T10863] ? do_sys_open+0xe0/0xe0 [ 646.378695][T10863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 646.384710][T10863] ? lock_chain_count+0x20/0x20 [ 646.389582][T10863] __x64_sys_openat+0x139/0x160 [ 646.394458][T10863] do_syscall_64+0x55/0xb0 [ 646.398913][T10863] ? clear_bhb_loop+0x40/0x90 [ 646.403638][T10863] ? clear_bhb_loop+0x40/0x90 [ 646.408350][T10863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.414297][T10863] RIP: 0033:0x7f121279e0d9 [ 646.418840][T10863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.438523][T10863] RSP: 002b:00007f12135e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.447036][T10863] RAX: ffffffffffffffda RBX: 00007f1212a25fa0 RCX: 00007f121279e0d9 [ 646.455025][T10863] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 646.463036][T10863] RBP: 00007f1212835024 R08: 0000000000000000 R09: 0000000000000000 [ 646.471043][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.479041][T10863] R13: 00007f1212a26038 R14: 00007f1212a25fa0 R15: 00007ffe12a85048 [ 646.487046][T10863] [ 646.521210][ T28] audit: type=1800 audit(1786933453.407:4): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1255" name="bmControls" dev="configfs" ino=22385 res=0 errno=0 [ 646.560791][T10863] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 647.070987][T10870] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1255'.