last executing test programs: 2m40.610025421s ago: executing program 3 (id=526): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x700, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) tkill(r2, 0x1000c) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2m38.479415943s ago: executing program 2 (id=536): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 2m36.141860039s ago: executing program 2 (id=537): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) 2m36.051071937s ago: executing program 5 (id=539): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}, r3}}, 0x48) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r10 = syz_open_dev$usbmon(0x0, 0x51c, 0x4000) ioctl$MON_IOCT_RING_SIZE(r10, 0x9204, 0xf0ffa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) 2m32.920657084s ago: executing program 5 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m32.365315696s ago: executing program 3 (id=546): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 2m30.540310731s ago: executing program 4 (id=549): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 2m30.530245511s ago: executing program 3 (id=550): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) shutdown(r1, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$kcm(r0, 0x0, 0x894) readv(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000000)=0x1) 2m29.881388067s ago: executing program 5 (id=551): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f00000001c0)={0x57, &(0x7f0000000300)=""/87}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2m29.254486218s ago: executing program 4 (id=552): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0086401, &(0x7f00000001c0)={0x57, &(0x7f0000000300)=""/87}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2m28.557216588s ago: executing program 5 (id=554): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0086401, &(0x7f00000001c0)={0x57, &(0x7f0000000300)=""/87}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2m27.441012702s ago: executing program 4 (id=555): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES16=r1], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315542, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m27.418948283s ago: executing program 3 (id=556): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}, r3}}, 0x48) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r10 = syz_open_dev$usbmon(0x0, 0x51c, 0x4000) ioctl$MON_IOCT_RING_SIZE(r10, 0x9204, 0xf0ffa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) 2m26.228888755s ago: executing program 5 (id=558): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x700, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) tkill(r2, 0x1000c) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2m26.133775391s ago: executing program 3 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m26.076673272s ago: executing program 4 (id=560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) semget$private(0x0, 0x3, 0x4) syz_io_uring_setup(0x88e, 0x0, &(0x7f0000000000), 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1001b}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x40}}, 0x404a014) 2m24.692133016s ago: executing program 2 (id=562): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 2m23.749504379s ago: executing program 3 (id=564): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m22.37480345s ago: executing program 2 (id=566): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f00000001c0)={0x57, &(0x7f0000000300)=""/87}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2m20.425908786s ago: executing program 2 (id=569): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 2m19.451775931s ago: executing program 2 (id=571): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000400000007000000000100000fc8b8f2ad30c9a33714f1dab5638dce6acae51e9cdb997d2aabcf633641fadd63d8c9cbaff6417ecbf434755966b6d15af362ff00000000000000e54f398b5a5519c6774bc6e685f2a5aff4f5371dafe690a113b0bf6e2d6ade8d93d0574c6e2d20f20678a3b7edcbc80387edd863cf239d56d7f9e9cb4b99564e5e4dceaec98e2ce8352788ba1ff154e740986aa96395f59ec830c7e807ca7a27bd008156e2846050cdcd79abc23762cf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000010011000"/27], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad4300000000000020c015"], 0x14}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) 2m19.4483975s ago: executing program 4 (id=572): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/fscreate\x00') write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0xffff, 0x4, 0x0, 0x7fffffff, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0xfffffffffffffe84, 0xfa00, @id_resuseaddr={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x0, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x83}, 0x2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="201c8138e58c6c3c5baa807b295e2bd797206eeeb67d637d1352924d11157a11655764447a8258348599418981577cc9334d3a6208462a7cc72aaa58517474fc09", &(0x7f00000003c0)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0xcc4c5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 2m6.422037617s ago: executing program 32 (id=564): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m6.186948615s ago: executing program 33 (id=558): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x700, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) tkill(r2, 0x1000c) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2m4.131492127s ago: executing program 34 (id=571): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000400000007000000000100000fc8b8f2ad30c9a33714f1dab5638dce6acae51e9cdb997d2aabcf633641fadd63d8c9cbaff6417ecbf434755966b6d15af362ff00000000000000e54f398b5a5519c6774bc6e685f2a5aff4f5371dafe690a113b0bf6e2d6ade8d93d0574c6e2d20f20678a3b7edcbc80387edd863cf239d56d7f9e9cb4b99564e5e4dceaec98e2ce8352788ba1ff154e740986aa96395f59ec830c7e807ca7a27bd008156e2846050cdcd79abc23762cf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000010011000"/27], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad4300000000000020c015"], 0x14}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) 2m3.212790013s ago: executing program 35 (id=572): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/fscreate\x00') write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0xffff, 0x4, 0x0, 0x7fffffff, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0xfffffffffffffe84, 0xfa00, @id_resuseaddr={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x0, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x83}, 0x2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="201c8138e58c6c3c5baa807b295e2bd797206eeeb67d637d1352924d11157a11655764447a8258348599418981577cc9334d3a6208462a7cc72aaa58517474fc09", &(0x7f00000003c0)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0xcc4c5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 34.137354533s ago: executing program 7 (id=744): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_op_set_cto\x00', r0, 0x0, 0x81}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100003040000000000dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="000800001169fb0225c87d4c46afa7048a000000001c0012800b0001006d616373656300000c00028205000a00930000008ea881ae0fcfd3a325b58b5752aca7697dd8c67975a0a2aa584feeb4c6e25a1a9b808a7f590fab82e76d5273ed52d19352a92939f853d07eb3ba452caa05b6a52509ece1515ee5"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 27.536732309s ago: executing program 7 (id=754): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000180)) 25.941859432s ago: executing program 7 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x8000) 23.65728234s ago: executing program 7 (id=761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) semget$private(0x0, 0x3, 0x4) syz_io_uring_setup(0x88e, 0x0, &(0x7f0000000000), 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x1001b}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x40}}, 0x404a014) 21.443450841s ago: executing program 1 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1, 0xd, 0x3, 0x4}, {0x8001, 0x1e, 0x10, 0xcc}]}, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0x2020) 21.239100035s ago: executing program 7 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) 17.376364607s ago: executing program 9 (id=767): epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r4, 0x9, 0x0) 16.022710228s ago: executing program 9 (id=768): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) 14.916623338s ago: executing program 8 (id=769): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca1, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) ptrace$setregs(0x1a, 0x0, 0xba, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 14.137748414s ago: executing program 8 (id=770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000180)) 13.905338351s ago: executing program 8 (id=773): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) 10.837347776s ago: executing program 9 (id=776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) semget$private(0x0, 0x3, 0x4) syz_io_uring_setup(0x88e, 0x0, &(0x7f0000000000), 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x1001b}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x40}}, 0x404a014) 10.156482956s ago: executing program 6 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 7.285369296s ago: executing program 0 (id=780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05075a0c"], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x1, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r4, 0x0) splice(r0, 0x0, r3, 0x0, 0xbb2b, 0x10) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0xa) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x4) 7.139386042s ago: executing program 1 (id=781): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 7.05242602s ago: executing program 9 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030329bd7000000000100a0001e508000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x4) 6.987372381s ago: executing program 8 (id=783): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) 6.901585679s ago: executing program 7 (id=784): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r6 = socket$inet(0x2, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000035c0), 0x168003, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket(0x23, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.906350051s ago: executing program 0 (id=785): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x6) 5.235146915s ago: executing program 1 (id=786): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 5.23401654s ago: executing program 9 (id=787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) 5.182645394s ago: executing program 8 (id=788): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) 5.182163524s ago: executing program 6 (id=789): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x38, 0x1403, 0x6c08c44bda12f87d, 0xfffffffd, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x4, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) 5.01335333s ago: executing program 0 (id=790): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r2, r2, 0x2) fsetxattr$security_ima(r2, 0x0, 0x0, 0x0, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x317, 0xfffffffd, 0x34, 0x9, 0x2}, 0x9c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000300)) 4.85245279s ago: executing program 6 (id=791): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) 4.357951019s ago: executing program 1 (id=792): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 3.202101727s ago: executing program 6 (id=793): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7ac3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2.530425654s ago: executing program 0 (id=794): semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e31, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 2.496828944s ago: executing program 1 (id=795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) semget$private(0x0, 0x3, 0x4) syz_io_uring_setup(0x88e, 0x0, &(0x7f0000000000), 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x1001b}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x40}}, 0x404a014) 1.260300413s ago: executing program 1 (id=796): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f00000001c0)={0x57, &(0x7f0000000300)=""/87}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.209383836s ago: executing program 6 (id=797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05075a0c"], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x1, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r4, 0x0) splice(r0, 0x0, r3, 0x0, 0xbb2b, 0x10) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0xa) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x4) 1.085774606s ago: executing program 0 (id=798): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) 433.43033ms ago: executing program 0 (id=799): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) eventfd2(0xff, 0x80001) 403.457915ms ago: executing program 9 (id=800): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/fib_triestat\x00') lseek(r3, 0x6, 0x0) 311.345578ms ago: executing program 8 (id=801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340), &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000940)=ANY=[], 0xff2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 0s ago: executing program 6 (id=802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d11867", 0x7f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r0, 0xfffff000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd46, 0x1, 0x0, 0xffffffffffffff71}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 86.847209][ T5828] cgroup: Unknown subsys name 'net' [ 86.966607][ T5828] cgroup: Unknown subsys name 'cpuset' [ 86.976080][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.542545][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.132756][ T24] cfg80211: failed to load regulatory.db [ 91.644857][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.678000][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.686433][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.693842][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.700657][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.702528][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.709124][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.723113][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.730361][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.731564][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.740324][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.752314][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.759732][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.768369][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.776029][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.779915][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.783623][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.798120][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.799034][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.805206][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.813886][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.819572][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.827491][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.834203][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.841724][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.848015][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.878722][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.911296][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.918717][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.934660][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.767514][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 92.948701][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.974623][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 93.036381][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 93.088152][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 93.187900][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 93.295491][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.304334][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.311840][ T5843] bridge_slave_0: entered allmulticast mode [ 93.319313][ T5843] bridge_slave_0: entered promiscuous mode [ 93.378360][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.386302][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.393898][ T5843] bridge_slave_1: entered allmulticast mode [ 93.401602][ T5843] bridge_slave_1: entered promiscuous mode [ 93.507187][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.518133][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.525386][ T5840] bridge_slave_0: entered allmulticast mode [ 93.533836][ T5840] bridge_slave_0: entered promiscuous mode [ 93.585953][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.593352][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.600500][ T5844] bridge_slave_0: entered allmulticast mode [ 93.608812][ T5844] bridge_slave_0: entered promiscuous mode [ 93.635508][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.653863][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.661317][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.668434][ T5840] bridge_slave_1: entered allmulticast mode [ 93.676635][ T5840] bridge_slave_1: entered promiscuous mode [ 93.700971][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.708065][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.715763][ T5851] bridge_slave_0: entered allmulticast mode [ 93.723342][ T5851] bridge_slave_0: entered promiscuous mode [ 93.746386][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.753683][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.762243][ T5844] bridge_slave_1: entered allmulticast mode [ 93.769769][ T5844] bridge_slave_1: entered promiscuous mode [ 93.779570][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.828077][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.835416][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.843523][ T5851] bridge_slave_1: entered allmulticast mode [ 93.851164][ T5851] bridge_slave_1: entered promiscuous mode [ 93.858207][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.865537][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.873311][ T5845] bridge_slave_0: entered allmulticast mode [ 93.880896][ T5845] bridge_slave_0: entered promiscuous mode [ 93.931926][ T5847] Bluetooth: hci5: command tx timeout [ 93.931931][ T5856] Bluetooth: hci4: command tx timeout [ 93.936874][ T5859] Bluetooth: hci1: command tx timeout [ 93.941746][ T5856] Bluetooth: hci0: command tx timeout [ 93.965228][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.989446][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.997299][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.004899][ T5845] bridge_slave_1: entered allmulticast mode [ 94.011179][ T5856] Bluetooth: hci2: command tx timeout [ 94.011390][ T5856] Bluetooth: hci3: command tx timeout [ 94.025088][ T5845] bridge_slave_1: entered promiscuous mode [ 94.066834][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.079802][ T5843] team0: Port device team_slave_0 added [ 94.090065][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.098447][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.106382][ T5841] bridge_slave_0: entered allmulticast mode [ 94.114113][ T5841] bridge_slave_0: entered promiscuous mode [ 94.122723][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.129862][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.137244][ T5841] bridge_slave_1: entered allmulticast mode [ 94.145510][ T5841] bridge_slave_1: entered promiscuous mode [ 94.155096][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.196302][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.207635][ T5843] team0: Port device team_slave_1 added [ 94.247887][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.261639][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.274293][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.380462][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.424023][ T5844] team0: Port device team_slave_0 added [ 94.447008][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.464806][ T5840] team0: Port device team_slave_0 added [ 94.473529][ T5851] team0: Port device team_slave_0 added [ 94.482082][ T5840] team0: Port device team_slave_1 added [ 94.507265][ T5845] team0: Port device team_slave_0 added [ 94.515720][ T5844] team0: Port device team_slave_1 added [ 94.539684][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.546900][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.574198][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.589162][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.646508][ T5851] team0: Port device team_slave_1 added [ 94.654813][ T5845] team0: Port device team_slave_1 added [ 94.676378][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.683781][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.710245][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.744999][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.752296][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.778390][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.822407][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.829409][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.855919][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.869006][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.876291][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.902672][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.930562][ T5841] team0: Port device team_slave_0 added [ 94.939630][ T5841] team0: Port device team_slave_1 added [ 94.947264][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.954449][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.981257][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.054200][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.061552][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.088233][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.100294][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.107534][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.138609][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.197306][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.205126][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.231321][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.245158][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.252347][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.278451][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.290287][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.297644][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.323975][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.381685][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.388681][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.415243][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.473279][ T5844] hsr_slave_0: entered promiscuous mode [ 95.479927][ T5844] hsr_slave_1: entered promiscuous mode [ 95.493776][ T5843] hsr_slave_0: entered promiscuous mode [ 95.500451][ T5843] hsr_slave_1: entered promiscuous mode [ 95.506850][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.515702][ T5843] Cannot create hsr debugfs directory [ 95.561766][ T5840] hsr_slave_0: entered promiscuous mode [ 95.568218][ T5840] hsr_slave_1: entered promiscuous mode [ 95.574702][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.582821][ T5840] Cannot create hsr debugfs directory [ 95.611581][ T5841] hsr_slave_0: entered promiscuous mode [ 95.618159][ T5841] hsr_slave_1: entered promiscuous mode [ 95.624496][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.632166][ T5841] Cannot create hsr debugfs directory [ 95.829712][ T5845] hsr_slave_0: entered promiscuous mode [ 95.837122][ T5845] hsr_slave_1: entered promiscuous mode [ 95.843728][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.851407][ T5845] Cannot create hsr debugfs directory [ 95.922967][ T5851] hsr_slave_0: entered promiscuous mode [ 95.929414][ T5851] hsr_slave_1: entered promiscuous mode [ 95.936496][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.944167][ T5851] Cannot create hsr debugfs directory [ 96.011147][ T5859] Bluetooth: hci1: command tx timeout [ 96.016607][ T5859] Bluetooth: hci5: command tx timeout [ 96.022615][ T5856] Bluetooth: hci0: command tx timeout [ 96.028044][ T5856] Bluetooth: hci4: command tx timeout [ 96.092710][ T5856] Bluetooth: hci3: command tx timeout [ 96.098224][ T5859] Bluetooth: hci2: command tx timeout [ 96.522917][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.551493][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.564012][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.605797][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.687329][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.700056][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.722155][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.757689][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.818515][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.837001][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.863983][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.876405][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.986422][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.023616][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.063420][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.076136][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.092592][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.117408][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.148882][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.176361][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.183587][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.249946][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.257156][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.273538][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.333132][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.340105][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.352427][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.369564][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.437849][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.445015][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.503817][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.519138][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.526303][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.555926][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.572834][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.600502][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.612337][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.739876][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.760652][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.835804][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.843003][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.888370][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.957884][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.965109][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.995615][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.002829][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.048720][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.055946][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.084545][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.091861][ T5859] Bluetooth: hci4: command tx timeout [ 98.097331][ T5859] Bluetooth: hci5: command tx timeout [ 98.104109][ T5856] Bluetooth: hci0: command tx timeout [ 98.109525][ T5856] Bluetooth: hci1: command tx timeout [ 98.168111][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.176269][ T5856] Bluetooth: hci2: command tx timeout [ 98.182706][ T5859] Bluetooth: hci3: command tx timeout [ 98.200586][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.226331][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.233506][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.276996][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.292444][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.316491][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.323705][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.406168][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.445477][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.536175][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.628977][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.636187][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.657226][ T5843] veth0_vlan: entered promiscuous mode [ 98.696329][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.703510][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.748476][ T5843] veth1_vlan: entered promiscuous mode [ 98.858961][ T5841] veth0_vlan: entered promiscuous mode [ 98.934110][ T5843] veth0_macvtap: entered promiscuous mode [ 98.967523][ T5841] veth1_vlan: entered promiscuous mode [ 99.022584][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.107573][ T5843] veth1_macvtap: entered promiscuous mode [ 99.175416][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.210600][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.272457][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.320441][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338096][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.349414][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.366006][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.378877][ T5841] veth0_macvtap: entered promiscuous mode [ 99.400819][ T5841] veth1_macvtap: entered promiscuous mode [ 99.510359][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.526515][ T5840] veth0_vlan: entered promiscuous mode [ 99.603572][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.643135][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.661413][ T5840] veth1_vlan: entered promiscuous mode [ 99.702083][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.719037][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.728275][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.743137][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.857482][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.957415][ T5840] veth0_macvtap: entered promiscuous mode [ 99.969443][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.979890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.004447][ T5840] veth1_macvtap: entered promiscuous mode [ 100.035555][ T5844] veth0_vlan: entered promiscuous mode [ 100.114226][ T5844] veth1_vlan: entered promiscuous mode [ 100.137399][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.173405][ T5856] Bluetooth: hci1: command tx timeout [ 100.178957][ T5852] Bluetooth: hci0: command tx timeout [ 100.185378][ T5847] Bluetooth: hci4: command tx timeout [ 100.191274][ T5859] Bluetooth: hci5: command tx timeout [ 100.207149][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.213459][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.216660][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.251759][ T5859] Bluetooth: hci2: command tx timeout [ 100.257218][ T5859] Bluetooth: hci3: command tx timeout [ 100.268733][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.283792][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.292605][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.301832][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.344323][ T5844] veth0_macvtap: entered promiscuous mode [ 100.369467][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.423258][ T5851] veth0_vlan: entered promiscuous mode [ 100.456904][ T5844] veth1_macvtap: entered promiscuous mode [ 100.467626][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.484545][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.525458][ T5845] veth0_vlan: entered promiscuous mode [ 100.547805][ T5845] veth1_vlan: entered promiscuous mode [ 100.599904][ T5845] veth0_macvtap: entered promiscuous mode [ 100.617329][ T5845] veth1_macvtap: entered promiscuous mode [ 100.657574][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.680710][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.697581][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.710581][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.720712][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.729661][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.004442][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.274972][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.417658][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.435608][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.444522][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.455392][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.468603][ T5851] veth1_vlan: entered promiscuous mode [ 101.500479][ T5851] veth0_macvtap: entered promiscuous mode [ 101.512546][ T5851] veth1_macvtap: entered promiscuous mode [ 101.645656][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.668105][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.692755][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.785062][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.808269][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.929076][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.962736][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.016626][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.072421][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.084117][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.100512][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.111343][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.233350][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.296151][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.429276][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.448914][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.528720][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.549476][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.626177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.672890][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.807871][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.851734][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.944625][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.979595][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.571506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.632624][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.113369][ T6041] vxfs: WRONG superblock magic 00000000 at 1 [ 106.121397][ T6041] vxfs: WRONG superblock magic 00000000 at 8 [ 106.127438][ T6041] vxfs: can't find superblock. [ 108.322676][ T6059] vxfs: WRONG superblock magic 00000000 at 1 [ 108.322980][ T6059] vxfs: WRONG superblock magic 00000000 at 8 [ 108.323000][ T6059] vxfs: can't find superblock. [ 109.291366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.299574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.321737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 109.673605][ T6072] : entered promiscuous mode [ 110.149607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 110.247496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.347504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.823643][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 110.893630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.950638][ T6070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.051866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.465601][ T6081] vxfs: WRONG superblock magic 00000000 at 1 [ 111.473260][ T6081] vxfs: WRONG superblock magic 00000000 at 8 [ 111.479272][ T6081] vxfs: can't find superblock. [ 111.492152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.218791][ T6102] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 114.241952][ T6097] syzkaller1: entered promiscuous mode [ 114.247500][ T6097] syzkaller1: entered allmulticast mode [ 114.390380][ T6112] netlink: 48 bytes leftover after parsing attributes in process `syz.5.38'. [ 115.933163][ T6125] vxfs: WRONG superblock magic 00000000 at 1 [ 115.940100][ T6125] vxfs: WRONG superblock magic 00000000 at 8 [ 115.946360][ T6125] vxfs: can't find superblock. [ 119.879537][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 120.508885][ T6165] loop6: detected capacity change from 0 to 524287999 [ 124.037995][ T6150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.847737][ T6181] vxfs: WRONG superblock magic 00000000 at 1 [ 125.855385][ T6181] vxfs: WRONG superblock magic 00000000 at 8 [ 125.861521][ T6181] vxfs: can't find superblock. [ 126.344496][ T6212] syzkaller1: entered promiscuous mode [ 126.566933][ T6212] syzkaller1: entered allmulticast mode [ 126.739076][ T6218] vxfs: WRONG superblock magic 00000000 at 1 [ 126.747179][ T6218] vxfs: WRONG superblock magic 00000000 at 8 [ 126.753403][ T6218] vxfs: can't find superblock. [ 132.119006][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.126083][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.552486][ T6266] vxfs: WRONG superblock magic 00000000 at 1 [ 132.560197][ T6266] vxfs: WRONG superblock magic 00000000 at 8 [ 132.567008][ T6266] vxfs: can't find superblock. [ 134.942555][ T6278] : entered promiscuous mode [ 136.129894][ T6287] loop6: detected capacity change from 0 to 524287999 [ 143.144207][ T6335] block nbd0: NBD_DISCONNECT [ 143.152931][ T6335] block nbd0: Disconnected due to user request. [ 143.196654][ T6335] block nbd0: shutting down sockets [ 144.773375][ T6340] syzkaller1: entered promiscuous mode [ 144.778867][ T6340] syzkaller1: entered allmulticast mode [ 145.969264][ T6358] lo speed is unknown, defaulting to 1000 [ 145.969355][ T6358] lo speed is unknown, defaulting to 1000 [ 145.970895][ T6358] lo speed is unknown, defaulting to 1000 [ 145.975180][ T6358] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.984675][ T6358] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 146.462786][ T6358] lo speed is unknown, defaulting to 1000 [ 146.464504][ T6358] lo speed is unknown, defaulting to 1000 [ 146.466219][ T6358] lo speed is unknown, defaulting to 1000 [ 146.467664][ T6358] lo speed is unknown, defaulting to 1000 [ 146.469222][ T6358] lo speed is unknown, defaulting to 1000 [ 146.470734][ T6358] lo speed is unknown, defaulting to 1000 [ 149.482163][ T6371] 9pnet_fd: Insufficient options for proto=fd [ 157.481360][ T30] audit: type=1326 audit(1753751781.904:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67c98e9a9 code=0x7ffc0000 [ 161.148263][ T30] audit: type=1326 audit(1753751781.904:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd67c98e9a9 code=0x7ffc0000 [ 161.511106][ T30] audit: type=1326 audit(1753751781.904:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67c98e9a9 code=0x7ffc0000 [ 163.045780][ T6470] siw: device registration error -23 [ 164.280437][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.5.139'. [ 164.961882][ T5859] Bluetooth: unknown link type 108 [ 164.967221][ T5859] Bluetooth: hci4: connection err: -111 [ 165.801191][ T9] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 167.361555][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 167.403950][ T9] usb 5-1: config 0 has no interface number 0 [ 167.434368][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.508505][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 168.611185][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 168.655729][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 168.727803][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 168.758206][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.808003][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 168.854366][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.772651][ T9] usb 5-1: config 0 descriptor?? [ 169.779264][ T9] usb 5-1: can't set config #0, error -71 [ 169.788450][ T9] usb 5-1: USB disconnect, device number 2 [ 172.270988][ T5935] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.443754][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 172.493655][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.512942][ T5935] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 172.522493][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.534751][ T5935] usb 6-1: config 0 descriptor?? [ 172.771531][ T5935] usbhid 6-1:0.0: can't add hid device: -71 [ 172.784416][ T5935] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 172.816068][ T5935] usb 6-1: USB disconnect, device number 2 [ 173.253016][ T6558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.162'. [ 173.358555][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 175.389602][ T6571] process 'syz.0.168' launched './file0' with NULL argv: empty string added [ 180.996590][ T6620] tipc: Started in network mode [ 181.004398][ T6620] tipc: Node identity 4ebba3cd3591, cluster identity 4711 [ 182.265235][ T6628] Bluetooth: MGMT ver 1.23 [ 182.602044][ T6620] tipc: Enabled bearer , priority 0 [ 182.647052][ T6633] lo speed is unknown, defaulting to 1000 [ 183.065469][ T6608] tipc: Disabling bearer [ 183.135715][ T6639] syzkaller1: entered promiscuous mode [ 183.155709][ T6639] syzkaller1: entered allmulticast mode [ 183.496305][ T6643] 9pnet_virtio: no channels available for device syz [ 183.813062][ T6649] block nbd4: NBD_DISCONNECT [ 184.051766][ T6653] block nbd2: NBD_DISCONNECT [ 184.338335][ T5859] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.346127][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.371283][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 185.519744][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.346976][ T5935] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.372918][ T5935] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.430140][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.489969][ T5935] usb 4-1: config 0 descriptor?? [ 188.551777][ T5935] usb 4-1: string descriptor 0 read error: -71 [ 188.601138][ T5935] usb 4-1: USB disconnect, device number 2 [ 188.751043][ T6696] block nbd4: NBD_DISCONNECT [ 188.808617][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 188.836025][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 188.930025][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 189.967257][ T6698] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 190.056526][ T6711] netlink: 52 bytes leftover after parsing attributes in process `syz.4.212'. [ 190.079292][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 190.087344][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 190.095771][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 190.111892][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 190.131172][ T6711] unsupported nlmsg_type 40 [ 190.177059][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 190.223972][ T6698] hsr0 speed is unknown, defaulting to 1000 [ 191.495125][ T6729] binder: BINDER_SET_CONTEXT_MGR already set [ 191.538331][ T6729] binder: 6726:6729 ioctl 4018620d 200000004a80 returned -16 [ 191.572551][ T6733] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 192.676754][ T6744] can0: slcan on ttyS3. [ 193.534409][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.540920][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.742637][ T6739] can0 (unregistered): slcan off ttyS3. [ 193.932677][ T30] audit: type=1326 audit(1753751818.314:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67efd8e9a9 code=0x7ffc0000 [ 194.027178][ T30] audit: type=1326 audit(1753751818.314:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67efd8e9a9 code=0x7ffc0000 [ 194.049160][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.062979][ T30] audit: type=1326 audit(1753751818.324:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f67efd8e9a9 code=0x7ffc0000 [ 194.093481][ T30] audit: type=1326 audit(1753751818.324:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67efd8e9a9 code=0x7ffc0000 [ 194.115450][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.260422][ T30] audit: type=1326 audit(1753751818.324:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67efd8e9a9 code=0x7ffc0000 [ 194.282483][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.743783][ T6777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 196.109717][ T6774] vlan1: entered promiscuous mode [ 196.115029][ T6774] vlan1: entered allmulticast mode [ 196.120132][ T6774] veth0_vlan: entered allmulticast mode [ 196.127979][ T6774] syz.2.234 (6774) used greatest stack depth: 17992 bytes left [ 197.615484][ T6805] random: crng reseeded on system resumption [ 205.219386][ T6889] overlayfs: missing 'workdir' [ 205.824043][ T6900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 205.830790][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.961913][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 205.987343][ T6907] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 205.993938][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.044381][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 206.067360][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 206.089550][ T6900] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 206.096164][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.310965][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 206.370907][ T1553] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 206.533918][ T6900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 206.611783][ T6907] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 206.618410][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.701134][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 206.815524][ T6900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 206.822129][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 206.943221][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 207.027711][ T6907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.094776][ T6900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.101099][ T6924] random: crng reseeded on system resumption [ 207.472732][ T6900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.567556][ T6906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.619600][ T6900] vhci_hcd vhci_hcd.0: port 0 already used [ 207.969565][ T6927] vhci_hcd: connection closed [ 207.970239][ T6925] vhci_hcd: connection closed [ 207.975200][ T6908] vhci_hcd: connection closed [ 207.979909][ T6913] vhci_hcd: connection closed [ 207.989794][ T12] vhci_hcd: stop threads [ 208.002230][ T6902] vhci_hcd: connection reset by peer [ 208.019061][ T12] vhci_hcd: release socket [ 208.059768][ T12] vhci_hcd: disconnect device [ 208.108957][ T12] vhci_hcd: stop threads [ 208.113277][ T12] vhci_hcd: release socket [ 208.133571][ T12] vhci_hcd: disconnect device [ 208.166470][ T12] vhci_hcd: stop threads [ 208.206445][ T12] vhci_hcd: release socket [ 208.223496][ T12] vhci_hcd: disconnect device [ 208.257893][ T12] vhci_hcd: stop threads [ 208.281438][ T12] vhci_hcd: release socket [ 208.298044][ T12] vhci_hcd: disconnect device [ 208.326324][ T12] vhci_hcd: stop threads [ 208.352926][ T12] vhci_hcd: release socket [ 208.358984][ T12] vhci_hcd: disconnect device [ 210.118088][ T6956] siw: device registration error -23 [ 211.378918][ T6974] syzkaller1: entered promiscuous mode [ 211.384555][ T6974] syzkaller1: entered allmulticast mode [ 211.701075][ T1553] vhci_hcd: vhci_device speed not set [ 215.437820][ T5935] usb usb34-port1: attempt power cycle [ 216.981261][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 216.987346][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 216.992325][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 216.994824][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 216.999556][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.217253][ T5935] usb usb34-port1: unable to enumerate USB device [ 217.289566][ T7015] netlink: 388 bytes leftover after parsing attributes in process `syz.2.310'. [ 217.676621][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 217.947738][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 218.396796][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.468505][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.481667][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 218.492611][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.502401][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.517001][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.529956][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.551503][ T24] usb 2-1: Manufacturer: syz [ 218.613355][ T24] usb 2-1: config 0 descriptor?? [ 219.250915][ T24] rc_core: IR keymap rc-hauppauge not found [ 219.339859][ T24] Registered IR keymap rc-empty [ 219.514011][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.145194][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.210590][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 220.367683][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 221.021569][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.040927][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.060936][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.109117][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.203955][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.281130][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.331049][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.393779][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.441105][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.493432][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.727687][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 221.740339][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.754159][ T24] usb 2-1: USB disconnect, device number 2 [ 225.864357][ T7100] lo speed is unknown, defaulting to 1000 [ 225.874502][ T7100] hsr0 speed is unknown, defaulting to 1000 [ 226.463028][ T7104] could not allocate digest TFM handle cryptd(blake2b-160) [ 229.171027][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 230.161304][ T5862] block nbd2: Receive control failed (result -32) [ 230.237799][ T7154] block nbd2: shutting down sockets [ 230.388890][ T7170] siw: device registration error -23 [ 231.586676][ T7180] loop6: detected capacity change from 0 to 524287999 [ 232.807586][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 233.071188][ T7189] lo speed is unknown, defaulting to 1000 [ 233.137392][ T7189] hsr0 speed is unknown, defaulting to 1000 [ 234.433716][ T5862] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 235.696270][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 236.740146][ T5862] block nbd2: Receive control failed (result -32) [ 236.740614][ T7216] block nbd2: shutting down sockets [ 236.851679][ T7227] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 236.885072][ T7227] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 236.903714][ T7227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 236.935881][ T7227] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 236.943964][ T7227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 237.541986][ T7232] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.375'. [ 238.171563][ T7234] lo speed is unknown, defaulting to 1000 [ 238.239128][ T7234] hsr0 speed is unknown, defaulting to 1000 [ 240.132217][ T7252] vxfs: WRONG superblock magic 00000000 at 1 [ 240.139820][ T7252] vxfs: WRONG superblock magic 00000000 at 8 [ 240.145899][ T7252] vxfs: can't find superblock. [ 246.021013][ T5935] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 246.287030][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 246.301584][ T5935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.326437][ T5935] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 247.020843][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.034454][ T5935] usb 6-1: Product: syz [ 247.038638][ T5935] usb 6-1: Manufacturer: syz [ 247.064202][ T7276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.070348][ T7276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.074137][ T5935] usb 6-1: SerialNumber: syz [ 247.102015][ T5935] usb 6-1: config 0 descriptor?? [ 247.891631][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 248.113427][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 248.224960][ T7276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.236913][ T7276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.248130][ T7270] qnx6: unable to read the first superblock [ 248.336523][ T7276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.343330][ T5935] gs_usb 6-1:0.0: Configuring for 44 interfaces [ 248.349693][ T5935] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 248.357761][ T5935] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 248.451490][ T7276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.534598][ T7276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.567030][ T7276] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.575831][ T5935] usb 6-1: USB disconnect, device number 3 [ 248.615577][ T7276] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 248.643506][ T7276] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 248.666898][ T7276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.680013][ T7307] siw: device registration error -23 [ 248.700861][ T7276] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 250.170895][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 250.250958][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.261639][ T7276] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 250.311689][ T7324] random: crng reseeded on system resumption [ 250.418932][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 250.578053][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 250.650985][ T5862] Bluetooth: hci5: command 0x0406 tx timeout [ 250.731575][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 251.093166][ T7324] netlink: 'syz.5.398': attribute type 4 has an invalid length. [ 251.339659][ T7341] vxfs: WRONG superblock magic 00000000 at 1 [ 251.346061][ T7341] vxfs: WRONG superblock magic 00000000 at 8 [ 251.353438][ T7341] vxfs: can't find superblock. [ 251.781568][ T7323] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 253.138462][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.144570][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 253.150588][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 253.156669][ T5862] Bluetooth: hci5: command 0x0406 tx timeout [ 253.162752][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 255.171327][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.177660][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.211297][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.996263][ T7375] TCP: TCP_TX_DELAY enabled [ 257.581988][ T7373] program syz.4.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.593160][ T7373] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.950703][ T7407] netlink: 10 bytes leftover after parsing attributes in process `syz.2.421'. [ 262.103745][ T5852] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 263.455491][ T30] audit: type=1326 audit(1753751887.824:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67efd8e9a9 code=0x0 [ 263.477257][ T7417] lo speed is unknown, defaulting to 1000 [ 263.479207][ T7417] hsr0 speed is unknown, defaulting to 1000 [ 265.911956][ T30] audit: type=1326 audit(1753751890.344:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67c98e9a9 code=0x7ffc0000 [ 266.036864][ T30] audit: type=1326 audit(1753751890.364:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd67c98e9a9 code=0x7ffc0000 [ 266.120521][ T30] audit: type=1326 audit(1753751890.364:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67c98e9a9 code=0x7ffc0000 [ 267.379361][ T7459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.651002][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 267.822847][ T24] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 267.842200][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.887623][ T24] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 267.902202][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.924570][ T24] usb 2-1: Product: syz [ 267.935588][ T24] usb 2-1: Manufacturer: syz [ 267.944557][ T24] usb 2-1: SerialNumber: syz [ 267.963371][ T24] usb 2-1: config 0 descriptor?? [ 268.190224][ T7459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.437'. [ 268.230443][ T24] redrat3 2-1:0.0: Couldn't find all endpoints [ 268.259237][ T24] usb 2-1: USB disconnect, device number 3 [ 268.532740][ T7474] random: crng reseeded on system resumption [ 268.651532][ T7475] block nbd5: NBD_DISCONNECT [ 268.682532][ T7475] block nbd5: Disconnected due to user request. [ 268.860993][ T7481] fuse: Bad value for 'fd' [ 268.892100][ T7475] block nbd5: shutting down sockets [ 268.910880][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 269.260888][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 269.332784][ T24] usb 2-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 269.502128][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.684881][ T7474] netlink: 'syz.0.440': attribute type 4 has an invalid length. [ 269.727589][ T24] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 269.951024][ T24] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 271.041849][ T5956] lo speed is unknown, defaulting to 1000 [ 271.047718][ T5956] syz0: Port: 1 Link DOWN [ 271.060346][ T24] usb 2-1: Product: syz [ 271.294969][ T24] usb 2-1: Manufacturer: syz [ 271.385664][ T24] usb 2-1: SerialNumber: syz [ 271.452231][ T24] usb 2-1: config 0 descriptor?? [ 271.476725][ T24] usb 2-1: can't set config #0, error -71 [ 271.500086][ T24] usb 2-1: USB disconnect, device number 4 [ 276.638600][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 284.131395][ T7567] block nbd0: NBD_DISCONNECT [ 284.136118][ T7567] block nbd0: Disconnected due to user request. [ 284.162879][ T7567] block nbd0: shutting down sockets [ 285.398482][ T7581] netlink: 10 bytes leftover after parsing attributes in process `syz.2.473'. [ 286.402092][ T7591] vivid-004: kernel_thread() failed [ 291.091044][ T7636] Zero length message leads to an empty skb [ 291.108321][ T7636] program syz.5.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.272725][ T7636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.331338][ T7640] block nbd0: NBD_DISCONNECT [ 292.336382][ T7640] block nbd0: Disconnected due to user request. [ 292.384497][ T7640] block nbd0: shutting down sockets [ 292.384905][ T7645] netlink: 10 bytes leftover after parsing attributes in process `syz.5.490'. [ 297.347825][ T30] audit: type=1326 audit(1753751921.754:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eff78e9a9 code=0x7ffc0000 [ 297.440982][ T30] audit: type=1326 audit(1753751921.754:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8eff78e9a9 code=0x7ffc0000 [ 297.463386][ T30] audit: type=1326 audit(1753751921.754:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eff78e9a9 code=0x7ffc0000 [ 297.732690][ T7686] overlayfs: failed to resolve './file0': -2 [ 304.034745][ T7730] ======================================================= [ 304.034745][ T7730] WARNING: The mand mount option has been deprecated and [ 304.034745][ T7730] and is ignored by this kernel. Remove the mand [ 304.034745][ T7730] option from the mount to silence this warning. [ 304.034745][ T7730] ======================================================= [ 311.368649][ T7775] vxfs: WRONG superblock magic 00000000 at 1 [ 311.375483][ T7775] vxfs: WRONG superblock magic 00000000 at 8 [ 311.381554][ T7775] vxfs: can't find superblock. [ 312.772976][ T7794] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 312.800935][ T7794] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.832824][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 316.415699][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.422527][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.620398][ T7833] syzkaller1: entered promiscuous mode [ 317.625998][ T7833] syzkaller1: entered allmulticast mode [ 320.700411][ T7855] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 327.409207][ T7905] vxfs: WRONG superblock magic 00000000 at 1 [ 327.586177][ T7905] vxfs: WRONG superblock magic 00000000 at 8 [ 328.071912][ T7905] vxfs: can't find superblock. [ 332.239900][ T7945] random: crng reseeded on system resumption [ 345.156952][ T7967] siw: device registration error -23 [ 345.962012][ T7973] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 346.862916][ T7978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.729485][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.757261][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.765174][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.777219][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.791989][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.941405][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.964485][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.991762][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.013198][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.024278][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.177349][ T7995] lo speed is unknown, defaulting to 1000 [ 351.018984][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.029229][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.037403][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.771732][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.781596][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.802263][ T7997] lo speed is unknown, defaulting to 1000 [ 351.815761][ T7995] hsr0 speed is unknown, defaulting to 1000 [ 351.842757][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.922068][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.930623][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.939883][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.943599][ T5847] Bluetooth: hci6: command tx timeout [ 351.948084][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.091756][ T5852] Bluetooth: hci7: command tx timeout [ 352.249988][ T7997] hsr0 speed is unknown, defaulting to 1000 [ 353.600384][ T1156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.757352][ T8007] lo speed is unknown, defaulting to 1000 [ 353.809406][ T1156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.837798][ T8007] hsr0 speed is unknown, defaulting to 1000 [ 353.853496][ T5852] Bluetooth: hci2: command tx timeout [ 353.900008][ T8003] lo speed is unknown, defaulting to 1000 [ 353.918281][ T8023] Invalid source name [ 353.932188][ T8003] hsr0 speed is unknown, defaulting to 1000 [ 353.970767][ T1156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.014732][ T5852] Bluetooth: hci3: command tx timeout [ 354.020291][ T5862] Bluetooth: hci6: command tx timeout [ 354.137618][ T1156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.171240][ T5862] Bluetooth: hci7: command tx timeout [ 354.448977][ T8033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.592'. [ 354.601731][ T7995] chnl_net:caif_netlink_parms(): no params data found [ 354.725805][ T1156] bridge_slave_1: left allmulticast mode [ 354.734806][ T1156] bridge_slave_1: left promiscuous mode [ 354.741316][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.754120][ T1156] bridge_slave_0: left allmulticast mode [ 354.759800][ T1156] bridge_slave_0: left promiscuous mode [ 354.765759][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.145798][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.158311][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.172278][ T1156] bond0 (unregistering): Released all slaves [ 355.302945][ T7997] chnl_net:caif_netlink_parms(): no params data found [ 355.349185][ T8041] syzkaller1: entered promiscuous mode [ 355.355010][ T8041] syzkaller1: entered allmulticast mode [ 355.685004][ T8053] fuse: Bad value for 'fd' [ 355.765934][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.794300][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.811846][ T7995] bridge_slave_0: entered allmulticast mode [ 355.819820][ T7995] bridge_slave_0: entered promiscuous mode [ 355.933739][ T5862] Bluetooth: hci2: command tx timeout [ 355.954251][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.969853][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.985735][ T7995] bridge_slave_1: entered allmulticast mode [ 356.000300][ T7995] bridge_slave_1: entered promiscuous mode [ 356.019347][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 356.091119][ T5862] Bluetooth: hci6: command tx timeout [ 356.097050][ T5862] Bluetooth: hci3: command tx timeout [ 356.169037][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 356.230602][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.237965][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.250108][ T7997] bridge_slave_0: entered allmulticast mode [ 356.256160][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 356.258787][ T7997] bridge_slave_0: entered promiscuous mode [ 356.269560][ T5862] Bluetooth: hci7: command tx timeout [ 356.280199][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.360169][ T1156] hsr_slave_0: left promiscuous mode [ 356.367461][ T1156] hsr_slave_1: left promiscuous mode [ 356.384721][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.399542][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.424439][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.439538][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.446987][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 356.471071][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.491256][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.497347][ T1156] veth1_macvtap: left promiscuous mode [ 356.500358][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.509267][ T1156] veth0_macvtap: left promiscuous mode [ 356.524954][ T1156] veth1_vlan: left promiscuous mode [ 356.530335][ T1156] veth0_vlan: left promiscuous mode [ 356.537977][ T24] usb 1-1: config 0 descriptor?? [ 356.765189][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 357.067023][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 357.109668][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 357.274524][ T5927] usb 1-1: USB disconnect, device number 2 [ 357.491235][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.498488][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.513855][ T7997] bridge_slave_1: entered allmulticast mode [ 357.529785][ T7997] bridge_slave_1: entered promiscuous mode [ 357.575391][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.759137][ T1553] hsr0 speed is unknown, defaulting to 1000 [ 357.774397][ T1553] infiniband syz2: ib_query_port failed (-19) [ 357.876281][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.016420][ T5862] Bluetooth: hci2: command tx timeout [ 358.037546][ T7995] team0: Port device team_slave_0 added [ 358.131195][ T8090] siw: device registration error -23 [ 358.181405][ T5852] Bluetooth: hci3: command tx timeout [ 358.187921][ T5862] Bluetooth: hci6: command tx timeout [ 358.330882][ T5862] Bluetooth: hci7: command tx timeout [ 358.715055][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.756515][ T7995] team0: Port device team_slave_1 added [ 359.022727][ T7997] team0: Port device team_slave_0 added [ 359.063140][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.081118][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.088500][ T8003] bridge_slave_0: entered allmulticast mode [ 359.096995][ T8003] bridge_slave_0: entered promiscuous mode [ 359.105943][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.125100][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.172371][ T8003] bridge_slave_1: entered allmulticast mode [ 359.208327][ T8003] bridge_slave_1: entered promiscuous mode [ 359.287880][ T7997] team0: Port device team_slave_1 added [ 359.340724][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.360673][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.393223][ T7995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.498770][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.511356][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.518648][ T8007] bridge_slave_0: entered allmulticast mode [ 359.533646][ T8007] bridge_slave_0: entered promiscuous mode [ 359.587882][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.595038][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.650856][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.683121][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.692639][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.751910][ T7995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.783434][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.795442][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.803051][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.812077][ T8007] bridge_slave_1: entered allmulticast mode [ 359.820038][ T8007] bridge_slave_1: entered promiscuous mode [ 359.828183][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.835672][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.864575][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.902658][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.993073][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.063674][ T8102] vxfs: WRONG superblock magic 00000000 at 1 [ 360.071592][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.084083][ T8102] vxfs: WRONG superblock magic 00000000 at 8 [ 360.091582][ T5862] Bluetooth: hci2: command tx timeout [ 360.117515][ T8102] vxfs: can't find superblock. [ 360.251124][ T5862] Bluetooth: hci3: command tx timeout [ 360.332645][ T8003] team0: Port device team_slave_0 added [ 360.384978][ T8007] team0: Port device team_slave_0 added [ 360.427263][ T7995] hsr_slave_0: entered promiscuous mode [ 360.459546][ T7995] hsr_slave_1: entered promiscuous mode [ 360.478459][ T7995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.505713][ T7995] Cannot create hsr debugfs directory [ 360.560660][ T7997] hsr_slave_0: entered promiscuous mode [ 360.592129][ T7997] hsr_slave_1: entered promiscuous mode [ 360.598552][ T7997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.631042][ T7997] Cannot create hsr debugfs directory [ 360.639036][ T8003] team0: Port device team_slave_1 added [ 360.730039][ T8007] team0: Port device team_slave_1 added [ 361.001900][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.009115][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.069883][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.180658][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.201560][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.262665][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.359492][ T1133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.605281][ T8110] syzkaller1: entered promiscuous mode [ 361.617131][ T8110] syzkaller1: entered allmulticast mode [ 361.635053][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.665584][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.774608][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.819689][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.855512][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.038685][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.225762][ T1133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.432448][ T1133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.725603][ T8007] hsr_slave_0: entered promiscuous mode [ 362.739699][ T8007] hsr_slave_1: entered promiscuous mode [ 362.746485][ T8007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.754377][ T8007] Cannot create hsr debugfs directory [ 362.802293][ T1133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.839558][ T8003] hsr_slave_0: entered promiscuous mode [ 362.858790][ T8003] hsr_slave_1: entered promiscuous mode [ 362.870211][ T8003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.887133][ T8003] Cannot create hsr debugfs directory [ 363.767674][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 363.967897][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 364.107269][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 364.439293][ T8148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 364.927272][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 364.977309][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.056321][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.109442][ T1133] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.146839][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.208899][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.247273][ T1133] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.268662][ T7995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.290180][ T7995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.347114][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.380267][ T1133] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.398688][ T7995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.412408][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.440323][ T7995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.464388][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.491866][ T1133] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.552387][ T8148] hsr0 speed is unknown, defaulting to 1000 [ 365.680596][ T7997] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 365.735691][ T7997] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 365.811754][ T7997] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 365.895402][ T7997] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.868927][ T8003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.975975][ T8003] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 369.411863][ T1133] bridge_slave_1: left allmulticast mode [ 369.418560][ T1133] bridge_slave_1: left promiscuous mode [ 369.458782][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.589276][ T1133] bridge_slave_0: left allmulticast mode [ 369.621521][ T1133] bridge_slave_0: left promiscuous mode [ 369.627469][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.669741][ T8225] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 369.669853][ T1133] bridge_slave_1: left allmulticast mode [ 369.720767][ T1133] bridge_slave_1: left promiscuous mode [ 369.727676][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.755356][ T1133] bridge_slave_0: left allmulticast mode [ 369.772743][ T1133] bridge_slave_0: left promiscuous mode [ 369.778585][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.846376][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 371.087129][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.099055][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.115658][ T1133] bond0 (unregistering): Released all slaves [ 371.376767][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.389590][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.399930][ T1133] bond0 (unregistering): Released all slaves [ 371.421267][ T8003] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 371.433275][ T8003] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 371.451603][ T8225] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 371.962867][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.045735][ T8251] siw: device registration error -23 [ 372.332549][ T8007] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 373.083553][ T8007] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 373.263520][ T8007] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 373.283611][ T8007] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 373.313463][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.335052][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.389464][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.396649][ T7298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.478197][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.485423][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.493147][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 373.632977][ T1133] hsr_slave_0: left promiscuous mode [ 373.643711][ T1133] hsr_slave_1: left promiscuous mode [ 373.649861][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.657821][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.666786][ T5935] usb 1-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 373.678290][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.684761][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.690884][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.713048][ T5935] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 373.734235][ T1133] hsr_slave_0: left promiscuous mode [ 373.735997][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.752838][ T1133] hsr_slave_1: left promiscuous mode [ 373.756152][ T5935] usb 1-1: Product: syz [ 373.758908][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.766969][ T5935] usb 1-1: Manufacturer: syz [ 373.776006][ T5935] usb 1-1: SerialNumber: syz [ 373.781568][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.803062][ T5935] usb 1-1: config 0 descriptor?? [ 373.803381][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.825750][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.904341][ T1133] veth1_macvtap: left promiscuous mode [ 373.910694][ T1133] veth0_macvtap: left promiscuous mode [ 373.918363][ T1133] veth1_vlan: left promiscuous mode [ 373.924288][ T1133] veth0_vlan: left promiscuous mode [ 373.936112][ T1133] veth1_macvtap: left promiscuous mode [ 373.941993][ T1133] veth0_macvtap: left promiscuous mode [ 373.947689][ T1133] veth1_vlan: left promiscuous mode [ 373.953685][ T1133] veth0_vlan: left promiscuous mode [ 374.027697][ T8260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'. [ 374.065100][ T5935] redrat3 1-1:0.0: Couldn't find all endpoints [ 374.092125][ T5935] usb 1-1: USB disconnect, device number 3 [ 374.701756][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 374.744971][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 377.982949][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.995574][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.064122][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 378.111830][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 379.155312][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.227752][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.234971][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.294758][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.302048][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.594924][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.753863][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.869976][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.942464][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.949674][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.124604][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.131853][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.206732][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.314742][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.321932][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.379684][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.387248][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.813129][ T8323] vxfs: WRONG superblock magic 00000000 at 1 [ 380.820909][ T8323] vxfs: WRONG superblock magic 00000000 at 8 [ 380.826950][ T8323] vxfs: can't find superblock. [ 381.011439][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.314569][ T8003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.345552][ T8007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.051704][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.506004][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.559447][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.863935][ T7995] veth0_vlan: entered promiscuous mode [ 383.034219][ T7995] veth1_vlan: entered promiscuous mode [ 383.297227][ T7995] veth0_macvtap: entered promiscuous mode [ 383.394827][ T7995] veth1_macvtap: entered promiscuous mode [ 383.539300][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.596017][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.664543][ T7995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.751231][ T7995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.760437][ T7995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.831072][ T7995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.938397][ T8007] veth0_vlan: entered promiscuous mode [ 385.547565][ T7997] veth0_vlan: entered promiscuous mode [ 385.950145][ T7997] veth1_vlan: entered promiscuous mode [ 386.060100][ T8007] veth1_vlan: entered promiscuous mode [ 386.164905][ T8003] veth0_vlan: entered promiscuous mode [ 386.258038][ T8003] veth1_vlan: entered promiscuous mode [ 386.276880][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.438511][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.547911][ T8003] veth0_macvtap: entered promiscuous mode [ 386.596702][ T8405] siw: device registration error -23 [ 386.688265][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.710305][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.722696][ T8003] veth1_macvtap: entered promiscuous mode [ 386.858244][ T7997] veth0_macvtap: entered promiscuous mode [ 386.938762][ T8007] veth0_macvtap: entered promiscuous mode [ 386.976881][ T7997] veth1_macvtap: entered promiscuous mode [ 387.029874][ T8007] veth1_macvtap: entered promiscuous mode [ 387.118246][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.159378][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.287710][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.344724][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.427249][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.478841][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.506774][ T8003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.598770][ T8003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.629567][ T8003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.656448][ T8003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.707120][ T7997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.733807][ T7997] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.764985][ T7997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.800001][ T7997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.858519][ T8007] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.882965][ T8007] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.917169][ T8007] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.934137][ T8007] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.642762][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.650629][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.752611][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.791510][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.023396][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.048198][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.123551][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.142309][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.375755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.405746][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.076668][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.110668][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.421186][ T5862] Bluetooth: hci2: connection err: -111 [ 395.763272][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.8.659'. [ 395.994019][ T8491] vivid-006: kernel_thread() failed [ 396.403567][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 396.915850][ T8503] siw: device registration error -23 [ 398.722153][ T971] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 398.883411][ T971] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 399.413305][ T971] usb 9-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.760972][ T971] usb 9-1: config 2 interface 0 has no altsetting 0 [ 402.019855][ T971] usb 9-1: string descriptor 0 read error: -71 [ 402.026244][ T971] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 402.090985][ T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.188296][ T971] usb 9-1: can't set config #2, error -71 [ 402.251815][ T971] usb 9-1: USB disconnect, device number 2 [ 403.801954][ T8556] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 404.013301][ T8560] bpq0: entered allmulticast mode [ 409.563363][ T8616] siw: device registration error -23 [ 413.218193][ T8646] siw: device registration error -23 [ 414.038393][ T8654] fuse: Bad value for 'fd' [ 418.193422][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 418.697698][ T10] usb 9-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 420.413070][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 420.445371][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.467699][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.501064][ T10] usb 9-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 420.510643][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.557563][ T10] usb 9-1: config 0 descriptor?? [ 420.695473][ T8711] mmap: syz.1.710 (8711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 420.993426][ T8715] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 421.081080][ T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:0909.0001/input/input6 [ 421.124821][ T8721] fuse: Bad value for 'fd' [ 422.074434][ T10] uclogic 0003:28BD:0909.0001: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.8-1/input0 [ 422.109888][ T6128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.344356][ T6128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.431860][ T9] usb 9-1: USB disconnect, device number 3 [ 425.230218][ T6128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.976850][ T6128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.124658][ T8754] program syz.0.724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.134041][ T8754] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 426.372491][ T8766] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 427.461112][ T8766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.234766][ T8797] vxfs: WRONG superblock magic 00000000 at 1 [ 430.242447][ T8797] vxfs: WRONG superblock magic 00000000 at 8 [ 430.248472][ T8797] vxfs: can't find superblock. [ 430.591299][ T6128] bridge_slave_1: left allmulticast mode [ 430.596991][ T6128] bridge_slave_1: left promiscuous mode [ 430.646149][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.914650][ T6128] bridge_slave_0: left allmulticast mode [ 430.920348][ T6128] bridge_slave_0: left promiscuous mode [ 431.113046][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.156049][ T8807] Invalid source name [ 439.420889][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.427224][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.561462][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.744'. [ 441.811897][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.834854][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.855214][ T6128] bond0 (unregistering): Released all slaves [ 442.011612][ T8860] lo speed is unknown, defaulting to 1000 [ 442.021386][ T8860] hsr0 speed is unknown, defaulting to 1000 [ 442.482273][ T6128] : left promiscuous mode [ 442.709779][ T6128] tipc: Left network mode [ 445.626557][ T8910] vxfs: WRONG superblock magic 00000000 at 1 [ 445.634008][ T8910] vxfs: WRONG superblock magic 00000000 at 8 [ 445.640056][ T8910] vxfs: can't find superblock. [ 449.150625][ T8933] random: crng reseeded on system resumption [ 451.184603][ T6128] hsr_slave_0: left promiscuous mode [ 451.281583][ T6128] hsr_slave_1: left promiscuous mode [ 451.319229][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.520900][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.556003][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.592316][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.627922][ T6128] veth1_macvtap: left promiscuous mode [ 452.678756][ T6128] veth0_macvtap: left promiscuous mode [ 452.850142][ T6128] veth1_vlan: left promiscuous mode [ 456.880315][ T8980] program syz.8.769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.889797][ T8980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 458.344406][ T8992] vxfs: WRONG superblock magic 00000000 at 1 [ 458.351662][ T8992] vxfs: WRONG superblock magic 00000000 at 8 [ 458.357693][ T8992] vxfs: can't find superblock. [ 460.252116][ T9007] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 460.259965][ T9007] netlink: 144 bytes leftover after parsing attributes in process `syz.0.774'. [ 460.282641][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.774'. [ 461.526525][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.777'. [ 461.639540][ T6128] team0 (unregistering): Port device team_slave_1 removed [ 461.675079][ T6128] team0 (unregistering): Port device team_slave_0 removed [ 464.097165][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 465.736691][ T9046] random: crng reseeded on system resumption [ 466.079811][ T9054] siw: device registration error -23 [ 466.665010][ T9046] netlink: 'syz.7.784': attribute type 4 has an invalid length. [ 466.990548][ T9073] siw: device registration error -23 [ 470.171256][ T5852] Bluetooth: hci6: unexpected event for opcode 0x0c5a [ 471.149514][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.799'. [ 471.217487][ T12] [ 471.219895][ T12] ====================================================== [ 471.226913][ T12] WARNING: possible circular locking dependency detected [ 471.233924][ T12] 6.16.0-syzkaller #0 Not tainted [ 471.238929][ T12] ------------------------------------------------------ [ 471.245945][ T12] kworker/u8:0/12 is trying to acquire lock: [ 471.252091][ T12] ffff888026f7e358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 471.261323][ T12] [ 471.261323][ T12] but task is already holding lock: [ 471.268676][ T12] ffff8880335db988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 471.278256][ T12] [ 471.278256][ T12] which lock already depends on the new lock. [ 471.278256][ T12] [ 471.288644][ T12] [ 471.288644][ T12] the existing dependency chain (in reverse order) is: [ 471.297641][ T12] [ 471.297641][ T12] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 471.306082][ T12] lock_acquire+0x120/0x360 [ 471.311107][ T12] down_write+0x96/0x1f0 [ 471.316012][ T12] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 471.322703][ T12] nbd_start_device+0x16c/0xac0 [ 471.328094][ T12] nbd_ioctl+0x636/0xeb0 [ 471.332864][ T12] blkdev_ioctl+0x5a8/0x6d0 [ 471.337882][ T12] __se_sys_ioctl+0xfc/0x170 [ 471.342989][ T12] do_syscall_64+0xfa/0x3b0 [ 471.348006][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.354408][ T12] [ 471.354408][ T12] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 471.362314][ T12] lock_acquire+0x120/0x360 [ 471.367333][ T12] __mutex_lock+0x182/0xe80 [ 471.372347][ T12] refcount_dec_and_mutex_lock+0x30/0xa0 [ 471.378497][ T12] nbd_config_put+0x2c/0x790 [ 471.383617][ T12] nbd_release+0xfe/0x140 [ 471.388458][ T12] bdev_release+0x536/0x650 [ 471.393488][ T12] blkdev_release+0x15/0x20 [ 471.398507][ T12] __fput+0x44c/0xa70 [ 471.403002][ T12] fput_close_sync+0x119/0x200 [ 471.408303][ T12] __x64_sys_close+0x7f/0x110 [ 471.413491][ T12] do_syscall_64+0xfa/0x3b0 [ 471.418504][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.424904][ T12] [ 471.424904][ T12] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 471.432720][ T12] validate_chain+0xb9b/0x2140 [ 471.437999][ T12] __lock_acquire+0xab9/0xd20 [ 471.443206][ T12] lock_acquire+0x120/0x360 [ 471.448265][ T12] __mutex_lock+0x182/0xe80 [ 471.453292][ T12] __del_gendisk+0x129/0x9e0 [ 471.458482][ T12] del_gendisk+0xe8/0x160 [ 471.463323][ T12] nbd_dev_remove_work+0x47/0xe0 [ 471.468772][ T12] process_scheduled_works+0xae1/0x17b0 [ 471.474833][ T12] worker_thread+0x8a0/0xda0 [ 471.479934][ T12] kthread+0x711/0x8a0 [ 471.484516][ T12] ret_from_fork+0x3fc/0x770 [ 471.489615][ T12] ret_from_fork_asm+0x1a/0x30 [ 471.494890][ T12] [ 471.494890][ T12] other info that might help us debug this: [ 471.494890][ T12] [ 471.505098][ T12] Chain exists of: [ 471.505098][ T12] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 471.505098][ T12] [ 471.519282][ T12] Possible unsafe locking scenario: [ 471.519282][ T12] [ 471.526725][ T12] CPU0 CPU1 [ 471.532076][ T12] ---- ---- [ 471.537423][ T12] rlock(&set->update_nr_hwq_lock); [ 471.542702][ T12] lock(&nbd->config_lock); [ 471.549817][ T12] lock(&set->update_nr_hwq_lock); [ 471.557523][ T12] lock(&disk->open_mutex); [ 471.562104][ T12] [ 471.562104][ T12] *** DEADLOCK *** [ 471.562104][ T12] [ 471.570225][ T12] 3 locks held by kworker/u8:0/12: [ 471.575333][ T12] #0: ffff8880255a2148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 471.586391][ T12] #1: ffffc90000117bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 471.598675][ T12] #2: ffff8880335db988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 471.608694][ T12] [ 471.608694][ T12] stack backtrace: [ 471.614567][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 471.614587][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.614600][ T12] Workqueue: nbd-del nbd_dev_remove_work [ 471.614626][ T12] Call Trace: [ 471.614634][ T12] [ 471.614641][ T12] dump_stack_lvl+0x189/0x250 [ 471.614666][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.614687][ T12] ? __pfx__printk+0x10/0x10 [ 471.614712][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.614732][ T12] ? print_lock_name+0xde/0x100 [ 471.614757][ T12] print_circular_bug+0x2ee/0x310 [ 471.614783][ T12] check_noncircular+0x134/0x160 [ 471.614809][ T12] validate_chain+0xb9b/0x2140 [ 471.614834][ T12] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.614860][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.614880][ T12] ? look_up_lock_class+0x74/0x170 [ 471.614900][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.614925][ T12] ? register_lock_class+0x51/0x320 [ 471.614945][ T12] __lock_acquire+0xab9/0xd20 [ 471.614966][ T12] ? __del_gendisk+0x129/0x9e0 [ 471.614988][ T12] lock_acquire+0x120/0x360 [ 471.615005][ T12] ? __del_gendisk+0x129/0x9e0 [ 471.615031][ T12] ? check_path+0x21/0x40 [ 471.615054][ T12] __mutex_lock+0x182/0xe80 [ 471.615074][ T12] ? __del_gendisk+0x129/0x9e0 [ 471.615098][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615121][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615141][ T12] ? __del_gendisk+0x129/0x9e0 [ 471.615165][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 471.615185][ T12] ? __pfx___might_resched+0x10/0x10 [ 471.615208][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615228][ T12] ? __lock_acquire+0xab9/0xd20 [ 471.615246][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615266][ T12] ? disk_del_events+0xb5/0x210 [ 471.615290][ T12] ? __del_gendisk+0xc1/0x9e0 [ 471.615314][ T12] __del_gendisk+0x129/0x9e0 [ 471.615342][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615366][ T12] ? __pfx___del_gendisk+0x10/0x10 [ 471.615391][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615411][ T12] ? down_read+0x1ad/0x2e0 [ 471.615434][ T12] del_gendisk+0xe8/0x160 [ 471.615458][ T12] nbd_dev_remove_work+0x47/0xe0 [ 471.615480][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 471.615501][ T12] process_scheduled_works+0xae1/0x17b0 [ 471.615534][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.615557][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615581][ T12] worker_thread+0x8a0/0xda0 [ 471.615613][ T12] kthread+0x711/0x8a0 [ 471.615639][ T12] ? __pfx_worker_thread+0x10/0x10 [ 471.615659][ T12] ? __pfx_kthread+0x10/0x10 [ 471.615682][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615704][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.615720][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.615740][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.615758][ T12] ? __pfx_kthread+0x10/0x10 [ 471.615782][ T12] ret_from_fork+0x3fc/0x770 [ 471.615802][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 471.615823][ T12] ? __switch_to_asm+0x39/0x70 [ 471.615846][ T12] ? __switch_to_asm+0x33/0x70 [ 471.615869][ T12] ? __pfx_kthread+0x10/0x10 [ 471.615894][ T12] ret_from_fork_asm+0x1a/0x30 [ 471.615924][ T12] [ 472.232049][ T7998] udevd[7998]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 472.311560][ T8086] udevd[8086]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 477.210952][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 477.217062][ T5859] Bluetooth: hci7: command 0x0406 tx timeout