last executing test programs: 7m26.276035008s ago: executing program 2 (id=3): syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x2, 0x15, 0x1, 0x0, 0x7, 0xd09f, &(0x7f0000000040)="081fda14f356e1"}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 7m10.296674513s ago: executing program 32 (id=3): syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x2, 0x15, 0x1, 0x0, 0x7, 0xd09f, &(0x7f0000000040)="081fda14f356e1"}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 5m31.796096294s ago: executing program 4 (id=145): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) clock_gettime(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0x3a) unshare(0x20000400) bind$alg(r4, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw-twofish-3way,sha384-generic)\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) 5m28.953220677s ago: executing program 4 (id=148): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 5m21.518752656s ago: executing program 4 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000062000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300), 0x9, 0x2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x6b1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x44, 0x11, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @empty}, {[@routing={0x2b, 0x6, 0x2, 0x6, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x22}, @loopback]}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000400000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x3, 0xaa, &(0x7f00000000c0)=""/170}, 0x94) 5m19.709473969s ago: executing program 4 (id=160): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@enum={0x2, 0x7, 0x0, 0x6, 0x4, [{0xc}, {0x2, 0x8}, {0x10, 0x5}, {0x8, 0xb}, {0xb, 0x9}, {0xe, 0x3}, {0x6, 0x1}]}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0xc, 0xffff}, {0x5, 0x1}]}, @struct={0x6, 0x4, 0x0, 0x4, 0x0, 0x4, [{0x7, 0x4, 0xfffffffc}, {0xb, 0x1, 0x2}, {0xc, 0x2, 0x5}, {0x2, 0x4, 0x9}]}]}, {0x0, [0x0]}}, &(0x7f0000000680)=""/114, 0xb7, 0x72, 0x1, 0x1000, 0x10000}, 0x28) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r8, 0xffffffffffffffff, 0x11, 0x0, r8}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x2d}, {0x6, "8f23e93dbf411511a1d7b45070ff1def0737a9ab0f480b1b371bbe5806bd4d543c193412e9d770a6b18c79ff0253b4b40e390a967b85c8c3586c23c6b762e2dc"}}}}, 0x47) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r9 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x1c, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 5m17.519207532s ago: executing program 4 (id=163): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd27}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 5m14.840977346s ago: executing program 4 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) getpid() fsopen(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x48000) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r5, 0x208) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0xb4, 0x0, 0x0, @tick=0x8, {0x0, 0x1}, {0x0, 0x4}, @addr={0x9, 0x4}}], 0x1c) 4m57.000749071s ago: executing program 33 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) getpid() fsopen(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x48000) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r5, 0x208) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0xb4, 0x0, 0x0, @tick=0x8, {0x0, 0x1}, {0x0, 0x4}, @addr={0x9, 0x4}}], 0x1c) 16.141118096s ago: executing program 0 (id=482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x894, 0x3a7b, 0x0, &(0x7f0000000040)={[0xff]}, 0x8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syncfs(r1) mount(&(0x7f0000000380)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x20014, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) 14.524478322s ago: executing program 0 (id=493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) r4 = epoll_create1(0x0) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0xfffffffe}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x4, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x0, 0x0, 0xe}, {{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp6\x00') sendfile(r9, 0xffffffffffffffff, &(0x7f0000000700)=0x4, 0x8000) r10 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r12 = dup(r11) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newchain={0x2c, 0x64, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x2, 0xa}, {0x3, 0xf5ff9762a755a828}}, [@TCA_CHAIN={0x8, 0xb, 0x401}]}, 0x2c}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="80", 0x1}) 13.759824712s ago: executing program 1 (id=486): mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a040000000000c5192c2a7e1ab6247d79c90703e7f9fe0fe6f07cbe6d76785d5cfb4f1e575f89bd5b8f28f1ad8f095afddbdb00b00b8bd0c5531565571c3ec4838c4c6824b664468a4a77f3422a324f0e2129"], 0x0, 0x26}, 0x28) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) r5 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r5, 0xb) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r9, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 12.373904918s ago: executing program 1 (id=487): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3ff}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x40040830) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x3, 0x800, 0x1, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, 0x0) io_uring_enter(0xffffffffffffffff, 0x5e2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0), 0xa0000, 0x0) 12.309323074s ago: executing program 3 (id=488): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000002540)={0xddcdc000, 0xffff1000, 0x1, 0x358cfa5c6090f344, 0x87f2}) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RWALK(r0, &(0x7f0000000300)={0x8b, 0x6f, 0x1, {0xa, [{0x0, 0x1, 0x5}, {0x4, 0x4, 0x1000}, {0x80, 0x1, 0x5}, {0x40, 0x2, 0x1}, {0x10, 0x1, 0x8}, {0x0, 0x3, 0x4}, {0x20, 0x1, 0x4}, {0x0, 0x1}, {0x20, 0x3, 0x8}, {0x2, 0x2, 0x7}]}}, 0x8b) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0xc044040) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020900090200000000000000fedbdf25a76a8e12fc7229656e1eae9283ab286cd119f33e091c75c07ff3c9a85353519874e9caa4a83eeb3304a1bcb89115"], 0x10}}, 0x0) timer_delete(0x0) close(0x3) syz_clone3(&(0x7f000001aa80)={0x200090000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0), {0x16}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000400)=""/189, &(0x7f000001aa40)=[0xffffffffffffffff], 0x1}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000400)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*'], 0xa) 9.613547337s ago: executing program 0 (id=489): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(&(0x7f0000000940)={0xe134, 0x0, 0x1}, 0xfffffffffffffff0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x24000484) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.510835625s ago: executing program 1 (id=490): r0 = syz_io_uring_setup(0x445e, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd_index=0x4, 0x1, {0x0, r0}, 0x1, 0x7, 0x0, {0x0, r3}}) r4 = syz_io_uring_setup(0x512d, 0x0, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) io_uring_enter(r4, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x1e, &(0x7f0000000080)=0xff, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r9, r8, 0x0, 0x20000023893) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 9.509709051s ago: executing program 3 (id=491): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x684e, &(0x7f00000000c0)={0x0, 0x9b97, 0x8000, 0x1, 0x2a9}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa509, 0x1000, 0x2, 0xbfdffffc, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000280)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000300)="e99d136e181f7535c1ceaf29dea9c5cc", 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000580)=0x777, 0x4) r3 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x4) r6 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000140)="4259f2", 0x3}, {&(0x7f0000000200)="179890", 0x3}], 0x2) r7 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x2, 0x3d7}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c14000000000000000000008400130000000000000000000000000000000000000f0f000000000000000f000000000000008b90397000000000000000000000000400000000000000000000000f0f00000000000000040000000000000b040000000000000003000000000000000f00000000000000010000000f00"/160], 0xa0}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) 8.419538981s ago: executing program 0 (id=492): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r2 = syz_io_uring_setup(0x110, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="84010000000000009c110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b"], &(0x7f0000000080)='GPL\x00', 0x0, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) 7.480184216s ago: executing program 1 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x894, 0x3a7b, 0x0, &(0x7f0000000040)={[0xff]}, 0x8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syncfs(r1) mount(&(0x7f0000000380)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x20014, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) 7.479614504s ago: executing program 3 (id=495): prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa}, 0x0) r0 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000191c0)={0x0, r0, r0}, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf252100000008000300", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) unshare(0x2040400) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000240)={0x2c, 0x20}, 0x60) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) 7.282147224s ago: executing program 0 (id=496): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x81) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sched_setattr(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, 0x0, 0x0, 0x8) r8 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x400, 0x3, 0x1f5, 0x0, r7}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.179222225s ago: executing program 3 (id=497): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) listen(0xffffffffffffffff, 0xfffffffc) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setxattr$incfs_id(0x0, &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x8925, 0x0) 5.668339094s ago: executing program 1 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "00fcff000700", "068000", "0093417d00"}, 0x28) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x2710}}) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000020080000000000000000010000000000000044000500"/132], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x8040600) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) sendto$inet6(r2, 0x0, 0x0, 0x20000045, 0x0, 0x0) syz_clone(0x220000, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.109646613s ago: executing program 3 (id=499): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, r5, 0x358, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRESHEX=r2, @ANYRES32=r6], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) 2.091756495s ago: executing program 1 (id=500): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40440) set_mempolicy_home_node(&(0x7f0000462000/0x1000)=nil, 0x1000, 0x200000000000004, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) kexec_load(0xff0e, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) ioctl$NBD_DO_IT(r0, 0xab03) 1.921235263s ago: executing program 0 (id=501): prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa}, 0x0) r0 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000191c0)={0x0, r0, r0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) unshare(0x2040400) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x20}, 0x60) 0s ago: executing program 3 (id=502): syz_usb_connect(0xc, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x40000083, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xb8}}, 0xc011) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0}, 0x20002880) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000040)=@id, 0x10) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) kernel console output (not intermixed with test programs): lave_1): Enslaving as an active interface with an up link [ 94.528502][ T5847] team0: Port device team_slave_0 added [ 94.538480][ T5847] team0: Port device team_slave_1 added [ 94.559494][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.564891][ T5846] Bluetooth: hci0: command tx timeout [ 94.567676][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.599105][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.634713][ T5837] Bluetooth: hci4: command tx timeout [ 94.634762][ T5840] Bluetooth: hci2: command tx timeout [ 94.640394][ T5846] Bluetooth: hci1: command tx timeout [ 94.696733][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.705250][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.712598][ T5835] bridge_slave_0: entered allmulticast mode [ 94.719995][ T5835] bridge_slave_0: entered promiscuous mode [ 94.725217][ T5846] Bluetooth: hci3: command tx timeout [ 94.729111][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.738764][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.746015][ T5835] bridge_slave_1: entered allmulticast mode [ 94.753101][ T5835] bridge_slave_1: entered promiscuous mode [ 94.763462][ T5842] team0: Port device team_slave_0 added [ 94.773526][ T5842] team0: Port device team_slave_1 added [ 94.796840][ T5834] team0: Port device team_slave_0 added [ 94.891823][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.899301][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.925278][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.938419][ T5834] team0: Port device team_slave_1 added [ 94.976189][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.986506][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.993494][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.020093][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.032183][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.039884][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.066192][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.111914][ T5836] hsr_slave_0: entered promiscuous mode [ 95.119224][ T5836] hsr_slave_1: entered promiscuous mode [ 95.130204][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.158053][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.165250][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.191566][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.229014][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.236213][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.263012][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.329617][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.337230][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.363604][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.387669][ T5835] team0: Port device team_slave_0 added [ 95.413372][ T5847] hsr_slave_0: entered promiscuous mode [ 95.419897][ T5847] hsr_slave_1: entered promiscuous mode [ 95.427120][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.435295][ T5847] Cannot create hsr debugfs directory [ 95.469928][ T5835] team0: Port device team_slave_1 added [ 95.482361][ T5842] hsr_slave_0: entered promiscuous mode [ 95.488971][ T5842] hsr_slave_1: entered promiscuous mode [ 95.496141][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.503813][ T5842] Cannot create hsr debugfs directory [ 95.563754][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.571103][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.597415][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.610369][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.618146][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.644227][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.720632][ T5834] hsr_slave_0: entered promiscuous mode [ 95.727101][ T5834] hsr_slave_1: entered promiscuous mode [ 95.733156][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.740788][ T5834] Cannot create hsr debugfs directory [ 95.942740][ T5835] hsr_slave_0: entered promiscuous mode [ 95.949943][ T5835] hsr_slave_1: entered promiscuous mode [ 95.956978][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.964640][ T5835] Cannot create hsr debugfs directory [ 96.369686][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.393422][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.409435][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.441633][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.511133][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.530218][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.540628][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.554533][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.634691][ T5846] Bluetooth: hci0: command tx timeout [ 96.658067][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.678214][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.689717][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.702237][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.714946][ T5846] Bluetooth: hci1: command tx timeout [ 96.714977][ T5840] Bluetooth: hci4: command tx timeout [ 96.720378][ T5846] Bluetooth: hci2: command tx timeout [ 96.794266][ T5846] Bluetooth: hci3: command tx timeout [ 96.877014][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.889293][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.901038][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.912753][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.011697][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.047597][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.063078][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.077875][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.104491][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.116252][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.170276][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.177572][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.239206][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.246363][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.293245][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.347671][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.368654][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.398834][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.406023][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.462527][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.469750][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.495796][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.520370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.527716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.562163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.569369][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.631761][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.800305][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.857674][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.880109][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.887381][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.910355][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.970168][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.977885][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.006858][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.014240][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.057294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.064508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.186639][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.246632][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.466671][ T5842] veth0_vlan: entered promiscuous mode [ 98.511615][ T5842] veth1_vlan: entered promiscuous mode [ 98.578316][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.597793][ T5836] veth0_vlan: entered promiscuous mode [ 98.698020][ T5836] veth1_vlan: entered promiscuous mode [ 98.717075][ T5846] Bluetooth: hci0: command tx timeout [ 98.771400][ T5842] veth0_macvtap: entered promiscuous mode [ 98.795196][ T5846] Bluetooth: hci4: command tx timeout [ 98.795508][ T5840] Bluetooth: hci1: command tx timeout [ 98.800679][ T5846] Bluetooth: hci2: command tx timeout [ 98.837980][ T5842] veth1_macvtap: entered promiscuous mode [ 98.873268][ T5836] veth0_macvtap: entered promiscuous mode [ 98.880320][ T5846] Bluetooth: hci3: command tx timeout [ 98.940493][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.972154][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.013826][ T5836] veth1_macvtap: entered promiscuous mode [ 99.041672][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.078904][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.091543][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.100514][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.109575][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.133045][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.156955][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.205700][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.237184][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.246491][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.257248][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266397][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.428549][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.440176][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.452574][ T5834] veth0_vlan: entered promiscuous mode [ 99.511164][ T5835] veth0_vlan: entered promiscuous mode [ 99.520974][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.529743][ T5835] veth1_vlan: entered promiscuous mode [ 99.540601][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.591488][ T5834] veth1_vlan: entered promiscuous mode [ 99.608565][ T5847] veth0_vlan: entered promiscuous mode [ 99.628428][ T5937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.642263][ T5937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.701939][ T5847] veth1_vlan: entered promiscuous mode [ 99.741506][ T5835] veth0_macvtap: entered promiscuous mode [ 99.758888][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.771155][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.781577][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.802043][ T5834] veth0_macvtap: entered promiscuous mode [ 99.814899][ T5834] veth1_macvtap: entered promiscuous mode [ 99.838951][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.871251][ T5835] veth1_macvtap: entered promiscuous mode [ 99.899872][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.925400][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.934738][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.943480][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.958243][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.037039][ T5847] veth0_macvtap: entered promiscuous mode [ 100.070925][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.399444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.501891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.604774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.613064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.796433][ T5846] Bluetooth: hci0: command tx timeout [ 100.875569][ T5837] Bluetooth: hci4: command tx timeout [ 100.881787][ T5840] Bluetooth: hci1: command tx timeout [ 100.888846][ T5846] Bluetooth: hci2: command tx timeout [ 100.954507][ T5846] Bluetooth: hci3: command tx timeout [ 101.423428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.513299][ T5847] veth1_macvtap: entered promiscuous mode [ 101.565475][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.593348][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.681388][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.792804][ T5965] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 101.934172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.037441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.046496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.140251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.243143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.047559][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.056687][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.066549][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.081848][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.162517][ T5967] vivid-007: ================= START STATUS ================= [ 103.178746][ T5967] vivid-007: Enable Output Cropping: [ 103.195982][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.213655][ T5967] true [ 103.216723][ T5967] vivid-007: Enable Output Composing: true [ 103.222694][ T5967] vivid-007: Enable Output Scaler: true [ 103.228432][ T5967] vivid-007: Tx RGB Quantization Range: Automatic [ 103.232589][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.245825][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.254706][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.288917][ T5967] vivid-007: Transmit Mode: HDMI [ 103.309824][ T5967] vivid-007: Hotplug Present: 0x00000000 [ 103.316077][ T5967] vivid-007: RxSense Present: 0x00000000 [ 103.322015][ T5967] vivid-007: EDID Present: 0x00000000 [ 103.327881][ T5967] vivid-007: ================== END STATUS ================== [ 105.160615][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.273799][ T5977] mkiss: ax0: crc mode is auto. [ 105.296173][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.350712][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.373480][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.641088][ T5982] Bluetooth: MGMT ver 1.23 [ 105.797339][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.129846][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.277008][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.334720][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.588820][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.628451][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.732657][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.789800][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.917966][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 108.154680][ T5993] block device autoloading is deprecated and will be removed. [ 110.057956][ T5990] tmpfs: Bad value for 'mpol' [ 111.195570][ T6006] lo speed is unknown, defaulting to 1000 [ 111.201668][ T6006] lo speed is unknown, defaulting to 1000 [ 111.209910][ T6006] lo speed is unknown, defaulting to 1000 [ 111.223456][ T6006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.242882][ T6006] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 111.905230][ T6007] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 111.911979][ T6007] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.920943][ T6007] vhci_hcd vhci_hcd.0: Device attached [ 112.246036][ T6008] vhci_hcd: connection closed [ 112.254916][ T5960] vhci_hcd: stop threads [ 112.267897][ T6006] lo speed is unknown, defaulting to 1000 [ 112.299637][ T5960] vhci_hcd: release socket [ 112.306883][ T5960] vhci_hcd: disconnect device [ 112.312081][ T6006] lo speed is unknown, defaulting to 1000 [ 113.806693][ T6006] lo speed is unknown, defaulting to 1000 [ 113.867919][ T6006] lo speed is unknown, defaulting to 1000 [ 113.938461][ T6006] lo speed is unknown, defaulting to 1000 [ 117.140042][ T6046] Zero length message leads to an empty skb [ 118.583665][ T6052] input: syz0 as /devices/virtual/input/input5 [ 121.444505][ T6067] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 124.149912][ T6082] sctp: [Deprecated]: syz.3.27 (pid 6082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.149912][ T6082] Use struct sctp_sack_info instead [ 125.056461][ T6088] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 125.170262][ T6088] CIFS mount error: No usable UNC path provided in device string! [ 125.170262][ T6088] [ 125.181996][ T6088] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.410231][ T6101] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.478566][ T6105] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 127.517239][ T6105] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 128.125322][ T30] audit: type=1326 audit(1755648265.911:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 128.238665][ T6109] sctp: [Deprecated]: syz.3.33 (pid 6109) Use of int in maxseg socket option. [ 128.238665][ T6109] Use struct sctp_assoc_value instead [ 128.560462][ T5826] IPVS: starting estimator thread 0... [ 128.594133][ T30] audit: type=1326 audit(1755648265.911:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 128.694254][ T6112] IPVS: using max 45 ests per chain, 108000 per kthread [ 128.721041][ T30] audit: type=1326 audit(1755648265.911:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 128.814047][ T30] audit: type=1326 audit(1755648265.911:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 129.014039][ T30] audit: type=1326 audit(1755648265.911:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 129.081804][ T6116] tmpfs: Unknown parameter 'quot' [ 129.096839][ T6116] syz.0.34: attempt to access beyond end of device [ 129.096839][ T6116] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.110200][ T6116] SQUASHFS error: Failed to read block 0x0: -5 [ 129.116876][ T6116] unable to read squashfs_super_block [ 129.984617][ T30] audit: type=1326 audit(1755648265.911:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 130.008533][ T30] audit: type=1326 audit(1755648265.921:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 130.079927][ T30] audit: type=1326 audit(1755648265.921:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 130.183482][ T30] audit: type=1326 audit(1755648265.921:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 130.769029][ T30] audit: type=1326 audit(1755648265.921:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x7ffc0000 [ 131.509898][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.971929][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.981200][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.994551][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.008583][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.017428][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.120025][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129120][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.170031][ T6142] (syz.0.40,6142,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 133.178849][ T6142] (syz.0.40,6142,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 133.220214][ T6142] Bluetooth: Invalid esc byte 0x02 [ 133.809642][ T6138] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 133.819357][ T6138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 133.829521][ T6138] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.982956][ T6138] syz.1.38 (6138) used greatest stack depth: 19432 bytes left [ 133.992420][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 133.992437][ T30] audit: type=1800 audit(1755648271.791:27): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.38" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 134.244090][ T5846] Bluetooth: hci1: command tx timeout [ 134.608558][ T6134] lo speed is unknown, defaulting to 1000 [ 134.762987][ T6154] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.569088][ T1157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.544377][ T5846] Bluetooth: hci1: command tx timeout [ 138.654206][ T5846] Bluetooth: hci1: command tx timeout [ 138.733264][ T1157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.714154][ T5846] Bluetooth: hci1: command tx timeout [ 140.796437][ T5996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.806784][ T6172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.814154][ T6172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.884329][ T6176] tmpfs: Unknown parameter 'quot' [ 140.900000][ T6176] syz.3.45: attempt to access beyond end of device [ 140.900000][ T6176] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 140.914627][ T6176] SQUASHFS error: Failed to read block 0x0: -5 [ 140.921151][ T6176] unable to read squashfs_super_block [ 141.620030][ T6172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.688649][ T6172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.695125][ T6172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.722394][ T6172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.740008][ T1157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.912181][ T6172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.919284][ T6172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.934287][ T6172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.946178][ T6172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.952537][ T6172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.124013][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.145906][ T6034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.362133][ T6172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.402117][ T6172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.410229][ T6172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.444974][ T6172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.474937][ T1157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.768868][ T6191] can0: slcan on ttyS3. [ 143.780662][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.945473][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.004832][ T6191] can0 (unregistered): slcan off ttyS3. [ 144.036107][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 144.380809][ T6202] (syz.4.51,6202,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 144.389518][ T6202] (syz.4.51,6202,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 144.767965][ T6205] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 144.776167][ T6205] netlink: 224 bytes leftover after parsing attributes in process `syz.3.52'. [ 145.194072][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.269807][ T6210] overlayfs: overlapping lowerdir path [ 145.331992][ T6211] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 145.434651][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.863996][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.994249][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.074250][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 147.285827][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.303917][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.548717][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.164189][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.173575][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.182344][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 148.299593][ T6222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 148.306199][ T6222] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.388070][ T6226] CIFS: iocharset name too long [ 148.477417][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.515123][ T6222] vhci_hcd vhci_hcd.0: Device attached [ 148.584843][ T6222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.667035][ T6227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.698032][ T6228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.714782][ T1157] bridge_slave_1: left allmulticast mode [ 148.720846][ T1157] bridge_slave_1: left promiscuous mode [ 148.751165][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.774299][ T5826] vhci_hcd: vhci_device speed not set [ 148.781161][ T6222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.800549][ T6222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.827133][ T1157] bridge_slave_0: left allmulticast mode [ 148.843345][ T1157] bridge_slave_0: left promiscuous mode [ 148.856820][ T6222] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(18) [ 148.863462][ T6222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.874912][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.893754][ T5826] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 148.901159][ T6222] vhci_hcd vhci_hcd.0: Device attached [ 149.070724][ T6222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 149.113071][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'. [ 149.182839][ T6222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 149.204748][ T6235] syz.0.57 (6235): attempted to duplicate a private mapping with mremap. This is not supported. [ 149.546955][ T6239] netlink: 64 bytes leftover after parsing attributes in process `syz.4.58'. [ 149.674496][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.163135][ T6231] vhci_hcd: connection closed [ 150.197234][ T6224] vhci_hcd: connection reset by peer [ 150.223971][ T197] vhci_hcd: stop threads [ 150.228448][ T197] vhci_hcd: release socket [ 150.290477][ T197] vhci_hcd: disconnect device [ 150.323896][ T197] vhci_hcd: stop threads [ 150.328262][ T197] vhci_hcd: release socket [ 150.349324][ T197] vhci_hcd: disconnect device [ 150.656160][ T6246] tmpfs: Unknown parameter 'quot' [ 150.670131][ T6246] syz.1.59: attempt to access beyond end of device [ 150.670131][ T6246] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 150.684767][ T6246] SQUASHFS error: Failed to read block 0x0: -5 [ 150.691199][ T6246] unable to read squashfs_super_block [ 151.651523][ T6244] block nbd4: shutting down sockets [ 152.742728][ T6258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.264663][ T5826] vhci_hcd: vhci_device speed not set [ 156.332377][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.351194][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.846447][ T6266] overlayfs: overlapping lowerdir path [ 158.859749][ T6272] process 'syz.4.65' launched './file0' with NULL argv: empty string added [ 158.897343][ T6270] overlayfs: failed to resolve './file1': -2 [ 159.911598][ T6274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.919269][ T6274] IPv6: NLM_F_CREATE should be set when creating new route [ 161.509562][ T6290] netlink: 64 bytes leftover after parsing attributes in process `syz.0.70'. [ 162.019926][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 162.959271][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.187743][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 163.204950][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.679532][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.796861][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.903193][ T1157] bond0 (unregistering): Released all slaves [ 163.970898][ T6134] chnl_net:caif_netlink_parms(): no params data found [ 164.544313][ T6300] warning: `syz.1.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 165.226003][ T6309] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.517311][ T6321] (syz.3.74,6321,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 166.525987][ T6321] (syz.3.74,6321,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 166.567998][ T6321] Bluetooth: Invalid esc byte 0x02 [ 167.118401][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.451970][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.463442][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.474548][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 167.483759][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.635186][ T6328] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 168.174577][ T10] usb 2-1: config 0 descriptor?? [ 168.633503][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 169.273609][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.294845][ T6034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.406561][ T10] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 169.539697][ T10] cp2112 0003:10C4:EA90.0001: error requesting version [ 169.643777][ T10] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 169.884972][ T10] usb 2-1: USB disconnect, device number 2 [ 169.886403][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.044126][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.078839][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.294738][ T6134] bridge_slave_0: entered allmulticast mode [ 170.376280][ T6134] bridge_slave_0: entered promiscuous mode [ 170.459734][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.504797][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.640742][ T6134] bridge_slave_1: entered allmulticast mode [ 170.652028][ T6134] bridge_slave_1: entered promiscuous mode [ 171.538936][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 171.864426][ T6365] netlink: 64 bytes leftover after parsing attributes in process `syz.0.81'. [ 173.624689][ T6374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.915887][ T6381] No source specified [ 174.674131][ T6381] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 174.676691][ T6378] capability: warning: `syz.0.87' uses deprecated v2 capabilities in a way that may be insecure [ 174.683507][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.739407][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.190179][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.575808][ T6375] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 178.084147][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.105428][ T6389] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.047271][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.485425][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.523368][ T1157] hsr_slave_0: left promiscuous mode [ 180.641463][ T1157] hsr_slave_1: left promiscuous mode [ 180.648009][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.656216][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.667970][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.675640][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.713000][ T1157] veth1_macvtap: left promiscuous mode [ 180.719128][ T1157] veth0_macvtap: left promiscuous mode [ 180.725210][ T1157] veth1_vlan: left promiscuous mode [ 180.731747][ T1157] veth0_vlan: left promiscuous mode [ 181.021452][ T6409] ubi31: attaching mtd0 [ 181.051864][ T6409] ubi31: scanning is finished [ 181.056993][ T6409] ubi31: empty MTD device detected [ 181.591346][ T6409] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 182.050970][ T6415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.342223][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 183.432742][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 183.975644][ T5837] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 184.968132][ T6134] team0: Port device team_slave_0 added [ 185.008890][ T6134] team0: Port device team_slave_1 added [ 185.644427][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.657222][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.779449][ T6441] sctp: failed to load transform for md5: -2 [ 187.814243][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.250826][ T6457] netlink: 'syz.1.101': attribute type 21 has an invalid length. [ 188.261069][ T6457] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.215556][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 191.857774][ T6467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.071095][ T6496] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.865079][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.878720][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.088598][ T6498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 193.095381][ T6498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.116973][ T6498] vhci_hcd vhci_hcd.0: Device attached [ 193.166923][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.216371][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.251133][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.277053][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.285398][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.365044][ T43] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 193.492489][ T6503] vhci_hcd: connection reset by peer [ 193.505620][ T49] vhci_hcd: stop threads [ 193.518871][ T49] vhci_hcd: release socket [ 193.538840][ T49] vhci_hcd: disconnect device [ 193.566498][ T6508] lo speed is unknown, defaulting to 1000 [ 194.714564][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.403552][ T5837] Bluetooth: hci5: command tx timeout [ 196.829357][ T6538] loop6: detected capacity change from 0 to 3 [ 196.896171][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.907254][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.917989][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.927741][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.939200][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.948219][ T6538] ldm_validate_partition_table(): Disk read failed. [ 196.956449][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.971805][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.982068][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.993052][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 197.002543][ T6538] Dev loop6: unable to read RDB block 0 [ 197.009430][ T6538] Buffer I/O error on dev loop6, logical block 0, async page read [ 197.019370][ T6538] loop6: unable to read partition table [ 197.027300][ T6538] loop6: partition table beyond EOD, truncated [ 197.034268][ T6538] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 197.075748][ T5983] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 197.332570][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 197.431354][ T1157] bridge_slave_1: left allmulticast mode [ 197.443940][ T1157] bridge_slave_1: left promiscuous mode [ 197.449952][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.523945][ T5837] Bluetooth: hci5: command 0x041b tx timeout [ 197.535962][ T1157] bridge_slave_0: left allmulticast mode [ 197.541752][ T1157] bridge_slave_0: left promiscuous mode [ 197.548322][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.603927][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 197.644954][ T5983] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 198.497288][ T5960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.511032][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.579475][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.590055][ T5205] ldm_validate_partition_table(): Disk read failed. [ 198.639840][ T5983] usb 5-1: config 0 descriptor?? [ 198.647341][ T43] vhci_hcd: vhci_device speed not set [ 198.654622][ T5205] Dev loop6: unable to read RDB block 0 [ 198.711419][ T5205] loop6: unable to read partition table [ 198.717477][ T5983] usb 5-1: can't set config #0, error -71 [ 198.729001][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.734083][ T5205] loop6: partition table beyond EOD, truncated [ 198.748989][ T5983] usb 5-1: USB disconnect, device number 2 [ 198.823638][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.976093][ T9] IPVS: starting estimator thread 0... [ 199.104561][ T6550] IPVS: using max 24 ests per chain, 57600 per kthread [ 199.173998][ T1157] bond0 (unregistering): Released all slaves [ 199.608959][ T5837] Bluetooth: hci5: command 0x041b tx timeout [ 200.236848][ T5837] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 201.285255][ T6544] lo speed is unknown, defaulting to 1000 [ 201.489749][ T6549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.714797][ T5837] Bluetooth: hci5: command 0x041b tx timeout [ 202.470812][ T6577] fuse: Bad value for 'fd' [ 202.690224][ T43] IPVS: starting estimator thread 0... [ 202.703414][ T6549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.752016][ T6549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.814014][ T6578] IPVS: using max 25 ests per chain, 60000 per kthread [ 202.859551][ T6549] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.913595][ T6549] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 202.922677][ T6549] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 202.989100][ T6549] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 203.169925][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 203.310250][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 203.643495][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.630188][ T6597] syz.4.122: attempt to access beyond end of device [ 204.630188][ T6597] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 204.753888][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.774530][ T5960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.792299][ T6597] syz.4.122: attempt to access beyond end of device [ 204.792299][ T6597] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 204.815288][ T6597] Mount JFS Failure: -5 [ 205.396960][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.401596][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 205.408348][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.409179][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 205.811658][ T6607] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.124'. [ 206.368139][ T6608] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 206.374822][ T6608] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 206.432245][ T6608] vhci_hcd vhci_hcd.0: Device attached [ 206.667295][ T926] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 206.777592][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.693942][ T5837] Bluetooth: hci5: command 0x041b tx timeout [ 207.814829][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 207.869818][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.944065][ T6508] bridge_slave_0: entered allmulticast mode [ 207.951309][ T6508] bridge_slave_0: entered promiscuous mode [ 208.696695][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.703989][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.712590][ T6508] bridge_slave_1: entered allmulticast mode [ 208.722754][ T6508] bridge_slave_1: entered promiscuous mode [ 208.781813][ T6622] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.791120][ T6622] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.800494][ T6622] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.809300][ T6622] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.966688][ T6610] vhci_hcd: connection reset by peer [ 208.979264][ T12] vhci_hcd: stop threads [ 208.993095][ T12] vhci_hcd: release socket [ 209.044231][ T12] vhci_hcd: disconnect device [ 210.209797][ T5837] Bluetooth: hci5: command 0x041b tx timeout [ 210.325484][ T6636] tty tty1: ldisc open failed (-12), clearing slot 0 [ 210.486552][ T6638] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 210.493109][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.512668][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 210.693605][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.723234][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.994116][ T5846] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 211.563938][ T10] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 211.577091][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.588287][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.849161][ T926] vhci_hcd: vhci_device speed not set [ 212.017382][ T6508] team0: Port device team_slave_0 added [ 212.100499][ T6653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.382178][ T6508] team0: Port device team_slave_1 added [ 213.150254][ T6640] vhci_hcd: connection reset by peer [ 213.184593][ T36] vhci_hcd: stop threads [ 213.201267][ T36] vhci_hcd: release socket [ 213.223966][ T36] vhci_hcd: disconnect device [ 215.557523][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.718636][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.745867][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.174332][ T5837] Bluetooth: hci5: command 0x041b tx timeout [ 216.794027][ T10] vhci_hcd: vhci_device speed not set [ 216.856504][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.923989][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.960474][ T5996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.056814][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.554121][ T6675] sctp: failed to load transform for md5: -4 [ 217.694904][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.494898][ T6695] ufs: You didn't specify the type of your ufs filesystem [ 218.494898][ T6695] [ 218.494898][ T6695] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 218.494898][ T6695] [ 218.494898][ T6695] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 218.526522][ T6695] ufs: ufstype=old is supported read-only [ 218.535300][ T6695] syz.1.138: attempt to access beyond end of device [ 218.535300][ T6695] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 220.441569][ T6508] hsr_slave_0: entered promiscuous mode [ 220.476780][ T6508] hsr_slave_1: entered promiscuous mode [ 220.483351][ T6508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.558569][ T6508] Cannot create hsr debugfs directory [ 223.485707][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.540466][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.050166][ T6737] fuse: Bad value for 'fd' [ 226.548046][ T6743] netlink: 'syz.1.147': attribute type 27 has an invalid length. [ 226.588806][ T6743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.405648][ T6508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.453538][ T6508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.505372][ T6508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.180732][ T6752] input: syz0 as /devices/virtual/input/input6 [ 228.538390][ T6508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.114822][ T6598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.490208][ T6754] mmap: syz.4.148 (6754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 229.515163][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.148'. [ 229.602988][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.710326][ T6771] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.151'. [ 230.583091][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.779577][ T6773] random: crng reseeded on system resumption [ 231.407454][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.508077][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.515325][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.537303][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.544503][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.906555][ T6785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.876455][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.656273][ T6598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.813482][ T5846] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 238.379235][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.919262][ T5960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.004360][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.150732][ T6859] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 243.229959][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 245.195063][ T5846] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 245.775291][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'. [ 247.936178][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.535497][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.451190][ T6906] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 251.459131][ T6906] netlink: 224 bytes leftover after parsing attributes in process `syz.0.173'. [ 253.603987][ T6914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 253.610747][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 253.619795][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 253.631757][ T6916] vhci_hcd: connection closed [ 253.638793][ T49] vhci_hcd: stop threads [ 253.676345][ T1157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.200801][ T49] vhci_hcd: release socket [ 254.232765][ T6599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.255949][ T49] vhci_hcd: disconnect device [ 254.274288][ T5970] vhci_hcd: vhci_device speed not set [ 254.501309][ T926] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 254.536995][ T926] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 254.612820][ T926] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 257.824993][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.980073][ T926] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 259.083626][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.093069][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.101310][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.109038][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.117429][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.846546][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.862100][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.896407][ T6935] fido_id[6935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.191910][ T6932] lo speed is unknown, defaulting to 1000 [ 260.517147][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.569508][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.195077][ T5846] Bluetooth: hci1: command tx timeout [ 263.579523][ T5846] Bluetooth: hci1: command tx timeout [ 264.314702][ T6958] Illegal XDP return value 4294967274 on prog (id 58) dev N/A, expect packet loss! [ 264.814037][ T5983] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 265.121193][ T5983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.563369][ T5983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.603917][ T5983] usb 2-1: string descriptor 0 read error: -71 [ 265.608852][ T5846] Bluetooth: hci1: command tx timeout [ 265.633961][ T5983] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 265.950076][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.749453][ T5983] usb 2-1: can't set config #1, error -71 [ 267.747365][ T5846] Bluetooth: hci1: command tx timeout [ 268.055668][ T5983] usb 2-1: USB disconnect, device number 3 [ 271.212746][ T6982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.333839][ T6982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.340916][ T6982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.354622][ T6982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.496784][ T6982] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 271.753117][ T6982] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 272.642351][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.668244][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.883604][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.999483][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.011685][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.197131][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.354353][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.360729][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.443849][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.096266][ T5851] Bluetooth: hci4: command 0x1003 tx timeout [ 274.102794][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.772208][ T5837] Bluetooth: hci5: command tx timeout [ 275.779389][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.850912][ T6985] lo speed is unknown, defaulting to 1000 [ 276.478838][ T7024] rdma_rxe: rxe_newlink: failed to add lo [ 277.366864][ T7024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.749611][ T6932] chnl_net:caif_netlink_parms(): no params data found [ 277.835382][ T5837] Bluetooth: hci5: command tx timeout [ 277.841778][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.500160][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 278.837982][ T30] audit: type=1326 audit(1755648416.541:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.1.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e18ebe9 code=0x0 [ 279.914044][ T5851] Bluetooth: hci5: command tx timeout [ 281.993962][ T5851] Bluetooth: hci5: command tx timeout [ 286.846093][ T7068] overlayfs: failed to resolve './file1': -2 [ 287.330603][ T6599] bridge_slave_1: left allmulticast mode [ 287.343369][ T6599] bridge_slave_1: left promiscuous mode [ 287.391052][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.430337][ T6599] bridge_slave_0: left allmulticast mode [ 287.493862][ T6599] bridge_slave_0: left promiscuous mode [ 287.504316][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.201770][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.213028][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.227269][ T6599] bond0 (unregistering): Released all slaves [ 289.415665][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.422983][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.432436][ T6932] bridge_slave_0: entered allmulticast mode [ 289.445571][ T6932] bridge_slave_0: entered promiscuous mode [ 289.467114][ T7083] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.483631][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.493366][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.411724][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.419120][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.427065][ T6932] bridge_slave_1: entered allmulticast mode [ 290.438199][ T6932] bridge_slave_1: entered promiscuous mode [ 292.006578][ T6599] hsr_slave_0: left promiscuous mode [ 292.022912][ T6599] hsr_slave_1: left promiscuous mode [ 292.029326][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.113234][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.522896][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 293.427806][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 293.794216][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 294.474052][ T5837] Bluetooth: hci5: command 0x0405 tx timeout [ 297.217243][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.337536][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 297.545328][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.912831][ T30] audit: type=1326 audit(1755648436.691:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 299.530693][ T30] audit: type=1326 audit(1755648436.691:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 299.791347][ T30] audit: type=1326 audit(1755648436.691:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 299.889547][ T30] audit: type=1326 audit(1755648436.691:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 299.929679][ T6932] team0: Port device team_slave_0 added [ 299.942089][ T30] audit: type=1326 audit(1755648436.691:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 300.234131][ T30] audit: type=1326 audit(1755648436.691:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 300.459208][ T30] audit: type=1326 audit(1755648436.691:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 300.490927][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.505820][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.513296][ T6985] bridge_slave_0: entered allmulticast mode [ 300.634537][ T30] audit: type=1326 audit(1755648436.691:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 300.683622][ T30] audit: type=1326 audit(1755648436.701:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 300.709986][ T6985] bridge_slave_0: entered promiscuous mode [ 300.778580][ T7157] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 301.330341][ T30] audit: type=1326 audit(1755648436.711:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 301.524452][ T6932] team0: Port device team_slave_1 added [ 302.125673][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.525199][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.537089][ T6985] bridge_slave_1: entered allmulticast mode [ 302.656354][ T6985] bridge_slave_1: entered promiscuous mode [ 302.738183][ T7160] delete_channel: no stack [ 304.050591][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.182008][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.337684][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.644468][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.679064][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.723867][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.833955][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.877231][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.365886][ T7194] binder: 7190:7194 ioctl c0306201 2000000003c0 returned -22 [ 307.905068][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 308.111069][ T6985] team0: Port device team_slave_0 added [ 308.534700][ T6932] hsr_slave_0: entered promiscuous mode [ 308.559694][ T6932] hsr_slave_1: entered promiscuous mode [ 308.654723][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.697866][ T6932] Cannot create hsr debugfs directory [ 309.376125][ T6985] team0: Port device team_slave_1 added [ 309.771251][ T5851] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 311.548624][ T6599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.800050][ T6599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.536013][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.543163][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.185808][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.101038][ T6599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.157838][ T6599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.034519][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.041707][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.054330][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.088881][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.099318][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.107253][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.115766][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.230269][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.802412][ T6599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.853730][ T6599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.440633][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.917636][ T5837] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 317.927630][ T5837] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 318.243935][ T5837] Bluetooth: hci1: command tx timeout [ 320.639145][ T5837] Bluetooth: hci1: command tx timeout [ 321.202800][ T5837] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 322.186076][ T6599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.275947][ T6599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.838334][ T5837] Bluetooth: hci1: command tx timeout [ 322.906329][ T7238] lo speed is unknown, defaulting to 1000 [ 323.089030][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.098469][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.107155][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.116316][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.130044][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.972398][ T5851] Bluetooth: hci1: command tx timeout [ 325.199325][ T5851] Bluetooth: hci4: command tx timeout [ 325.232308][ T7301] ptrace attach of "./syz-executor exec"[5836] was attempted by " [ 326.831411][ T7309] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 326.934587][ T7309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.249'. [ 326.943904][ T7309] netlink: 'syz.3.249': attribute type 2 has an invalid length. [ 326.951922][ T7309] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 326.959992][ T7309] netlink: 2 bytes leftover after parsing attributes in process `syz.3.249'. [ 327.274432][ T7302] syz_tun: entered allmulticast mode [ 327.294501][ T7302] syz_tun: left allmulticast mode [ 327.299831][ T5851] Bluetooth: hci4: command tx timeout [ 327.386008][ T7288] lo speed is unknown, defaulting to 1000 [ 329.360783][ T5851] Bluetooth: hci4: command tx timeout [ 331.433973][ T5851] Bluetooth: hci4: command tx timeout [ 332.746022][ T6599] bridge_slave_1: left allmulticast mode [ 332.751828][ T6599] bridge_slave_1: left promiscuous mode [ 332.821616][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.496554][ T6599] bridge_slave_0: left allmulticast mode [ 334.564635][ T6599] bridge_slave_0: left promiscuous mode [ 334.612168][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.150648][ T7345] Bluetooth: MGMT ver 1.23 [ 336.778407][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 336.790040][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 337.826160][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.844480][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.861055][ T6599] bond0 (unregistering): Released all slaves [ 340.662261][ T7238] chnl_net:caif_netlink_parms(): no params data found [ 341.274603][ T7381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 341.369496][ T7380] tmpfs: Bad value for 'mpol' [ 347.190830][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 349.456461][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.585215][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.835026][ T7238] bridge_slave_0: entered allmulticast mode [ 349.884394][ T7238] bridge_slave_0: entered promiscuous mode [ 350.276762][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.544622][ T7437] CIFS mount error: No usable UNC path provided in device string! [ 350.544622][ T7437] [ 350.555325][ T7437] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 350.823576][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.833542][ T7238] bridge_slave_1: entered allmulticast mode [ 350.848517][ T7238] bridge_slave_1: entered promiscuous mode [ 351.230786][ T7438] SET target dimension over the limit! [ 352.587377][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.645527][ T6599] hsr_slave_0: left promiscuous mode [ 352.653063][ T6599] hsr_slave_1: left promiscuous mode [ 352.664876][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.723825][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.746948][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.813288][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.904338][ T7459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 353.939563][ T7457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 353.940868][ T7459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 353.946138][ T7457] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 353.972672][ T7457] vhci_hcd vhci_hcd.0: Device attached [ 353.985801][ T6599] veth1_macvtap: left promiscuous mode [ 353.987875][ T7457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 354.004371][ T7457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 354.015531][ T7457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 354.019884][ T6599] veth0_macvtap: left promiscuous mode [ 354.035808][ T7457] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 354.042494][ T7457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.046221][ T6599] veth1_vlan: left promiscuous mode [ 354.070711][ T7457] vhci_hcd vhci_hcd.0: Device attached [ 354.094959][ T7457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 354.105746][ T7457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 354.119402][ T7458] vhci_hcd: connection closed [ 354.119576][ T7461] vhci_hcd: connection closed [ 354.125239][ T49] vhci_hcd: stop threads [ 354.143948][ T49] vhci_hcd: release socket [ 354.149003][ T49] vhci_hcd: disconnect device [ 354.154414][ T9] vhci_hcd: vhci_device speed not set [ 354.171188][ T49] vhci_hcd: stop threads [ 354.180625][ T49] vhci_hcd: release socket [ 354.191452][ T49] vhci_hcd: disconnect device [ 354.246206][ T7468] evm: overlay not supported [ 354.424952][ T6599] veth0_vlan: left promiscuous mode [ 355.767652][ T7478] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 355.775156][ T7478] overlayfs: failed to set xattr on upper [ 355.780958][ T7478] overlayfs: ...falling back to redirect_dir=nofollow. [ 355.788451][ T7478] overlayfs: ...falling back to index=off. [ 355.794692][ T7478] overlayfs: ...falling back to uuid=null. [ 356.504935][ T7480] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 358.503547][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 358.552271][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 359.023227][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.031297][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.039545][ T7288] bridge_slave_0: entered allmulticast mode [ 359.047813][ T7288] bridge_slave_0: entered promiscuous mode [ 359.064292][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.107200][ T7477] lo speed is unknown, defaulting to 1000 [ 359.113104][ T7477] lo speed is unknown, defaulting to 1000 [ 359.119935][ T7477] lo speed is unknown, defaulting to 1000 [ 359.135196][ T7477] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 359.168747][ T7477] lo speed is unknown, defaulting to 1000 [ 359.176989][ T7477] lo speed is unknown, defaulting to 1000 [ 359.184504][ T7477] lo speed is unknown, defaulting to 1000 [ 359.191684][ T7477] lo speed is unknown, defaulting to 1000 [ 359.199078][ T7477] lo speed is unknown, defaulting to 1000 [ 359.206198][ T7477] lo speed is unknown, defaulting to 1000 [ 359.213240][ T7477] lo speed is unknown, defaulting to 1000 [ 359.327419][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.339531][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.346930][ T7288] bridge_slave_1: entered allmulticast mode [ 359.361787][ T7288] bridge_slave_1: entered promiscuous mode [ 361.302821][ T7498] block device autoloading is deprecated and will be removed. [ 362.225725][ T7505] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 363.302783][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 363.302815][ T30] audit: type=1326 audit(1755648501.211:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.3.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165058ebe9 code=0x0 [ 364.829449][ T7238] team0: Port device team_slave_0 added [ 364.945325][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.997601][ T7238] team0: Port device team_slave_1 added [ 365.172969][ T7527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.407218][ T7534] afs: Unknown parameter '01777777777777777777777' [ 369.202455][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.332694][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.340341][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.422203][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.811728][ T7288] team0: Port device team_slave_0 added [ 371.057819][ T7288] team0: Port device team_slave_1 added [ 372.752539][ T7557] tipc: Started in network mode [ 372.763411][ T6599] IPVS: stop unused estimator thread 0... [ 372.773797][ T7557] tipc: Node identity ac14140f, cluster identity 4711 [ 372.800960][ T7557] tipc: New replicast peer: 255.255.255.255 [ 372.817168][ T7557] tipc: Enabled bearer , priority 10 [ 373.472822][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.520162][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.567208][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.627642][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.636298][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.644821][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.652851][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.693654][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.720259][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.728316][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.754455][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.854073][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.993461][ T43] tipc: Node number set to 2886997007 [ 374.469739][ T7576] overlayfs: upper fs does not support tmpfile. [ 374.842995][ T6599] bridge_slave_1: left allmulticast mode [ 374.860140][ T6599] bridge_slave_1: left promiscuous mode [ 374.880677][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.896546][ T6599] bridge_slave_0: left allmulticast mode [ 374.902947][ T7583] netlink: 200 bytes leftover after parsing attributes in process `syz.3.298'. [ 374.914214][ T6599] bridge_slave_0: left promiscuous mode [ 374.920175][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.117945][ T7583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.298'. [ 375.145452][ T6599] bridge_slave_1: left allmulticast mode [ 375.151240][ T6599] bridge_slave_1: left promiscuous mode [ 375.329871][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.340799][ T6599] bridge_slave_0: left allmulticast mode [ 375.356192][ T6599] bridge_slave_0: left promiscuous mode [ 375.498781][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.509568][ T7587] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 375.524144][ T7587] netlink: 224 bytes leftover after parsing attributes in process `syz.3.298'. [ 376.152540][ T5837] Bluetooth: hci5: command tx timeout [ 376.422017][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.438653][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.460867][ T6599] bond0 (unregistering): Released all slaves [ 376.659930][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.756258][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.832300][ T6599] bond0 (unregistering): Released all slaves [ 377.033495][ T7567] lo speed is unknown, defaulting to 1000 [ 377.681162][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 377.711387][ T7567] lo speed is unknown, defaulting to 1000 [ 377.746484][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.881412][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.076042][ T6599] hsr_slave_0: left promiscuous mode [ 378.332454][ T5837] Bluetooth: hci5: command tx timeout [ 378.485785][ T7614] ALSA: mixer_oss: invalid OSS volume 'LI' [ 379.026623][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.220183][ T7611] vivid-000: disconnect [ 379.252848][ T6599] hsr_slave_1: left promiscuous mode [ 379.443786][ T7604] vivid-000: reconnect [ 379.570453][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.624775][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.873336][ T7618] syz.1.304: attempt to access beyond end of device [ 379.873336][ T7618] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 379.886322][ T7618] (syz.1.304,7618,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 379.894016][ T7618] (syz.1.304,7618,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 379.901283][ T7618] (syz.1.304,7618,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 379.910034][ T7618] (syz.1.304,7618,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 381.006048][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 381.117223][ T5837] Bluetooth: hci5: command tx timeout [ 381.366114][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 382.192267][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.213304][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.222677][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.231658][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.241274][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.313567][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 382.352542][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 382.557743][ T7288] hsr_slave_0: entered promiscuous mode [ 382.565301][ T7288] hsr_slave_1: entered promiscuous mode [ 382.571967][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.580182][ T7288] Cannot create hsr debugfs directory [ 382.663939][ T7621] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 382.685523][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.694159][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.739601][ T7621] bridge0: entered allmulticast mode [ 382.863275][ T7623] syz.3.306 (7623) used obsolete PPPIOCDETACH ioctl [ 383.183220][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 383.197439][ T5837] Bluetooth: hci5: command tx timeout [ 384.131230][ T7647] lo speed is unknown, defaulting to 1000 [ 384.141675][ T7647] lo speed is unknown, defaulting to 1000 [ 384.292330][ T7662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.320582][ T5837] Bluetooth: hci1: command tx timeout [ 385.918922][ T7674] sctp: [Deprecated]: syz.0.312 (pid 7674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.918922][ T7674] Use struct sctp_sack_info instead [ 386.398060][ T5837] Bluetooth: hci1: command tx timeout [ 386.723997][ C1] llc_process_tmr_ev: timer called on closed connection [ 388.482362][ T5837] Bluetooth: hci1: command tx timeout [ 388.679524][ T7693] input: syz0 as /devices/virtual/input/input10 [ 390.420705][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 390.557723][ T5837] Bluetooth: hci1: command tx timeout [ 392.133953][ T5837] Bluetooth: hci2: unexpected event for opcode 0x041b [ 392.360027][ T7706] team0: Port device team_slave_0 removed [ 392.624219][ T7567] chnl_net:caif_netlink_parms(): no params data found [ 392.810381][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 397.168202][ T7752] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 398.809163][ T6599] bridge_slave_1: left allmulticast mode [ 398.921353][ T6599] bridge_slave_1: left promiscuous mode [ 398.931409][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.063659][ T6599] bridge_slave_0: left allmulticast mode [ 399.075594][ T6599] bridge_slave_0: left promiscuous mode [ 399.091740][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.354247][ T7778] xt_l2tp: v2 sid > 0xffff: 262144 [ 401.083277][ T6599] bridge_slave_1: left allmulticast mode [ 401.136241][ T6599] bridge_slave_1: left promiscuous mode [ 401.142303][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.256343][ T6599] bridge_slave_0: left allmulticast mode [ 401.290170][ T6599] bridge_slave_0: left promiscuous mode [ 401.474222][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.338092][ T7788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.452975][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.893608][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.125860][ T6599] bond0 (unregistering): Released all slaves [ 405.480287][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.516972][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.710888][ T6599] bond0 (unregistering): Released all slaves [ 406.634857][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.651583][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.677912][ T7567] bridge_slave_0: entered allmulticast mode [ 406.688214][ T7567] bridge_slave_0: entered promiscuous mode [ 406.709629][ T7824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.336'. [ 406.719928][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.733934][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.741328][ T7567] bridge_slave_1: entered allmulticast mode [ 406.766139][ T7567] bridge_slave_1: entered promiscuous mode [ 407.232307][ T7829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.957567][ T7567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.975181][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.982552][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.997726][ T7647] bridge_slave_0: entered allmulticast mode [ 408.006372][ T7647] bridge_slave_0: entered promiscuous mode [ 408.023325][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.033057][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.052029][ T7647] bridge_slave_1: entered allmulticast mode [ 408.061583][ T7647] bridge_slave_1: entered promiscuous mode [ 408.263868][ T6599] hsr_slave_0: left promiscuous mode [ 409.223147][ T7839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.346'. [ 409.232411][ T6599] hsr_slave_1: left promiscuous mode [ 409.233396][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.625154][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.673090][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.318404][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 411.839780][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 413.236922][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 413.271482][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 413.450330][ T7567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.478643][ T7844] sit0: entered promiscuous mode [ 413.495972][ T7844] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 413.503880][ T7844] netlink: 1 bytes leftover after parsing attributes in process `syz.3.340'. [ 413.521351][ T7863] : entered promiscuous mode [ 413.893154][ T7870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.900696][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 413.908453][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 413.915881][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 415.539215][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.064165][ T7870] netlink: 80 bytes leftover after parsing attributes in process `syz.0.347'. [ 416.147499][ T7567] team0: Port device team_slave_0 added [ 416.164780][ T7880] Cannot find add_set index 0 as target [ 416.695957][ T7567] team0: Port device team_slave_1 added [ 416.729096][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.006340][ T7886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.350'. [ 417.108125][ T7886] netlink: 'syz.0.350': attribute type 27 has an invalid length. [ 417.393382][ T7890] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 417.401320][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'. [ 417.411007][ T7890] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 417.418722][ T7890] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 417.426455][ T7890] netlink: 2 bytes leftover after parsing attributes in process `syz.1.351'. [ 418.175260][ T7647] team0: Port device team_slave_0 added [ 418.480581][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.520288][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.583871][ T7567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.607588][ T7647] team0: Port device team_slave_1 added [ 418.665453][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.672457][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.774254][ T7567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.816610][ T7904] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 420.312790][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.344235][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.710018][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.746445][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.886323][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.923173][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.972200][ T7913] tmpfs: Cannot enable quota on remount [ 422.772118][ T7917] xt_nat: multiple ranges no longer supported [ 423.587436][ T7567] hsr_slave_0: entered promiscuous mode [ 423.608213][ T7567] hsr_slave_1: entered promiscuous mode [ 423.641636][ T7567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.661018][ T7567] Cannot create hsr debugfs directory [ 426.346986][ T7647] hsr_slave_0: entered promiscuous mode [ 428.517803][ T7647] hsr_slave_1: entered promiscuous mode [ 428.524320][ T7647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.532560][ T7647] Cannot create hsr debugfs directory [ 428.654901][ T7931] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 429.478921][ T7931] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 429.634341][ T7931] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 429.872584][ T7931] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 429.901847][ T7931] geneve2: entered allmulticast mode [ 431.838332][ T7647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.855742][ T7647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 431.958503][ T7647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.040769][ T7647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.982674][ T30] audit: type=1804 audit(1755648571.241:64): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.369" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 434.076631][ T30] audit: type=1800 audit(1755648571.241:65): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.369" name="/" dev="fuse" ino=1 res=0 errno=0 [ 434.260975][ T30] audit: type=1800 audit(1755648571.251:66): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.369" name="/" dev="fuse" ino=1 res=0 errno=0 [ 436.945810][ T5960] bridge_slave_1: left allmulticast mode [ 436.951812][ T5960] bridge_slave_1: left promiscuous mode [ 436.965334][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.248517][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 438.266109][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 438.276785][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 438.289459][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.341938][ T5960] bridge_slave_0: left allmulticast mode [ 438.400152][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.437136][ T5960] bridge_slave_0: left promiscuous mode [ 438.453584][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.104240][ T5970] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 439.247200][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.284777][ T5970] usb 2-1: no configurations [ 439.304528][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.312351][ T5970] usb 2-1: can't read configurations, error -22 [ 439.330360][ T5960] bond0 (unregistering): Released all slaves [ 439.365835][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 439.458690][ T5970] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 439.833887][ T5970] usb 2-1: device not accepting address 5, error -71 [ 439.906532][ T5970] usb usb2-port1: attempt power cycle [ 440.331787][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.349660][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 440.570929][ T5851] Bluetooth: hci4: command tx timeout [ 441.105144][ T8011] lo speed is unknown, defaulting to 1000 [ 441.595137][ T5960] hsr_slave_0: left promiscuous mode [ 441.617963][ T5960] hsr_slave_1: left promiscuous mode [ 441.676639][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.877312][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.634020][ T5851] Bluetooth: hci4: command tx timeout [ 443.051587][ T30] audit: type=1326 audit(1755648581.031:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8046 comm="syz.0.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fdbb8ebe9 code=0x0 [ 443.072373][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.723851][ T5851] Bluetooth: hci4: command tx timeout [ 446.430726][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.443352][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.794046][ T5840] Bluetooth: hci4: command tx timeout [ 447.195633][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 447.225428][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.258408][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 447.295352][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.307071][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.344884][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 448.635644][ T5840] Bluetooth: hci6: command 0x1003 tx timeout [ 448.642517][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 449.402494][ T8081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.410103][ T8081] IPv6: NLM_F_CREATE should be set when creating new route [ 449.417671][ T8081] IPv6: NLM_F_CREATE should be set when creating new route [ 449.425106][ T8081] IPv6: NLM_F_CREATE should be set when creating new route [ 449.435563][ T5837] Bluetooth: hci5: command tx timeout [ 451.590970][ T5837] Bluetooth: hci5: command tx timeout [ 453.363146][ T8086] delete_channel: no stack [ 453.747481][ T8072] lo speed is unknown, defaulting to 1000 [ 453.764289][ T5837] Bluetooth: hci5: command tx timeout [ 454.158575][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 455.916895][ T5837] Bluetooth: hci5: command tx timeout [ 457.572913][ T8129] trusted_key: encrypted_key: insufficient parameters specified [ 457.654498][ T8131] sctp: [Deprecated]: syz.1.395 (pid 8131) Use of int in maxseg socket option. [ 457.654498][ T8131] Use struct sctp_assoc_value instead [ 460.174891][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 461.053082][ T8151] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 461.062634][ T30] audit: type=1800 audit(1755648599.001:68): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.399" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 461.366655][ T8151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 461.969661][ T8151] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 464.377664][ T30] audit: type=1800 audit(1755648602.361:69): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.401" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 464.405514][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.562772][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.571275][ T8210] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 464.572943][ T8011] bridge_slave_0: entered allmulticast mode [ 464.587336][ T8210] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 464.599746][ T8011] bridge_slave_0: entered promiscuous mode [ 464.600145][ T8210] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 464.610829][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.421907][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.429404][ T8011] bridge_slave_1: entered allmulticast mode [ 465.437659][ T8011] bridge_slave_1: entered promiscuous mode [ 465.504454][ T8210] syz.0.401 (8210) used greatest stack depth: 18136 bytes left [ 466.185312][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.194641][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.203617][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.213422][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.223229][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.232578][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.242423][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.251613][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.260783][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 466.270011][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 467.578131][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.590750][ T8236] capability: warning: `syz.3.406' uses 32-bit capabilities (legacy support in use) [ 468.249863][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.637478][ T8265] __nla_validate_parse: 42 callbacks suppressed [ 472.637517][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 474.399975][ T8265] bridge0: left allmulticast mode [ 474.619732][ T8011] team0: Port device team_slave_0 added [ 474.812907][ T8011] team0: Port device team_slave_1 added [ 476.301923][ T8072] chnl_net:caif_netlink_parms(): no params data found [ 476.313079][ T8283] xt_CT: No such helper "syz0" [ 476.370190][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.388615][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.451403][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.647975][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.679790][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.903135][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.015450][ T30] audit: type=1326 audit(1755648614.981:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.270516][ T30] audit: type=1326 audit(1755648614.981:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.367640][ T30] audit: type=1326 audit(1755648615.031:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.464523][ T30] audit: type=1326 audit(1755648615.031:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.494519][ T30] audit: type=1326 audit(1755648615.031:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.651448][ T30] audit: type=1326 audit(1755648615.031:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.761829][ T30] audit: type=1326 audit(1755648615.031:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.785375][ T30] audit: type=1326 audit(1755648615.031:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.810804][ T30] audit: type=1326 audit(1755648615.031:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 477.833368][ T30] audit: type=1326 audit(1755648615.031:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdbb8ebe9 code=0x7ffc0000 [ 478.022764][ T8295] pim6reg: entered allmulticast mode [ 478.633629][ T8298] pim6reg: left allmulticast mode [ 479.752524][ T5837] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 481.396498][ T8011] hsr_slave_0: entered promiscuous mode [ 481.494107][ T8011] hsr_slave_1: entered promiscuous mode [ 481.554452][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.593855][ T8011] Cannot create hsr debugfs directory [ 483.467939][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.502892][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.522951][ T8072] bridge_slave_0: entered allmulticast mode [ 483.554333][ T8072] bridge_slave_0: entered promiscuous mode [ 484.641466][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.663833][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.671217][ T8072] bridge_slave_1: entered allmulticast mode [ 484.714113][ T8331] serio: Serial port ptm0 [ 484.981539][ T8072] bridge_slave_1: entered promiscuous mode [ 486.658130][ T8346] QAT: Device 7 not found [ 486.739651][ T197] bridge_slave_1: left allmulticast mode [ 486.745810][ T197] bridge_slave_1: left promiscuous mode [ 486.753136][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.107656][ T197] bridge_slave_0: left allmulticast mode [ 487.113474][ T197] bridge_slave_0: left promiscuous mode [ 487.144375][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.823276][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.890911][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 487.900646][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 488.428445][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.439538][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.450551][ T197] bond0 (unregistering): Released all slaves [ 488.477801][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.557701][ T8356] netlink: 136 bytes leftover after parsing attributes in process `syz.1.429'. [ 488.584580][ T8356] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 488.615212][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.678218][ T197] hsr_slave_0: left promiscuous mode [ 488.690379][ T197] hsr_slave_1: left promiscuous mode [ 488.698158][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.745070][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.196851][ T8368] binder_alloc: 8364: binder_alloc_buf size 12280 failed, no address space [ 489.211838][ T8368] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 489.883050][ T8377] netlink: 'syz.3.431': attribute type 11 has an invalid length. [ 490.828299][ T197] team0 (unregistering): Port device team_slave_1 removed [ 490.878685][ T197] team0 (unregistering): Port device team_slave_0 removed [ 491.581931][ T8072] team0: Port device team_slave_0 added [ 491.707328][ T8390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 491.718874][ T8390] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 492.638573][ T8072] team0: Port device team_slave_1 added [ 492.804945][ T8393] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 495.113822][ T5837] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 496.346865][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.373600][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.494420][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.746556][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.774139][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.748302][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.312870][ T8413] : entered promiscuous mode [ 500.442815][ T8072] hsr_slave_0: entered promiscuous mode [ 500.478588][ T8072] hsr_slave_1: entered promiscuous mode [ 500.530091][ T8072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.567460][ T8072] Cannot create hsr debugfs directory [ 501.760490][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.934762][ T5937] bridge_slave_1: left allmulticast mode [ 501.940503][ T5937] bridge_slave_1: left promiscuous mode [ 502.031772][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.042078][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.054892][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.133035][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 502.188012][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.195696][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.546879][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.578762][ T5937] bridge_slave_0: left allmulticast mode [ 502.588680][ T5937] bridge_slave_0: left promiscuous mode [ 502.597814][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.627031][ T8437] QAT: Device 244 not found [ 504.165871][ T926] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 504.195716][ T8439] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 504.434878][ T926] usb 2-1: Using ep0 maxpacket: 32 [ 504.586756][ T926] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 504.671596][ T926] usb 2-1: config 0 has no interface number 0 [ 504.690011][ T5840] Bluetooth: hci1: command tx timeout [ 504.740690][ T926] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 504.760276][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.771841][ T926] usb 2-1: Product: syz [ 504.776557][ T926] usb 2-1: Manufacturer: syz [ 504.781189][ T926] usb 2-1: SerialNumber: syz [ 504.810388][ T926] usb 2-1: config 0 descriptor?? [ 504.821128][ T926] smsc95xx v2.0.0 [ 504.851454][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.863414][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.875371][ T5937] bond0 (unregistering): Released all slaves [ 504.962573][ T8428] lo speed is unknown, defaulting to 1000 [ 505.128836][ T5937] hsr_slave_0: left promiscuous mode [ 505.169140][ T5937] hsr_slave_1: left promiscuous mode [ 505.181133][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.149238][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.446'. [ 506.213807][ T926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 506.225096][ T926] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 506.240584][ T926] usb 2-1: USB disconnect, device number 7 [ 506.252845][ T5840] Bluetooth: hci0: command tx timeout [ 506.290657][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.725447][ T5840] Bluetooth: hci1: command tx timeout [ 507.171694][ T8457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.426793][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.445737][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.455206][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.466848][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.476008][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.902153][ T5837] Bluetooth: hci1: command tx timeout [ 509.627858][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 509.690855][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 510.077672][ T8465] lo speed is unknown, defaulting to 1000 [ 510.555339][ T5837] Bluetooth: hci4: command tx timeout [ 510.878477][ T8481] tmpfs: Cannot enable quota on remount [ 510.953888][ T5837] Bluetooth: hci1: command tx timeout [ 511.642109][ T8486] /dev/nullb0: Can't open blockdev [ 512.641615][ T5837] Bluetooth: hci4: command tx timeout [ 514.051973][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 514.572366][ T8511] kernel profiling enabled (shift: 17) [ 514.594101][ T8511] netlink: zone id is out of range [ 514.600134][ T8511] netlink: zone id is out of range [ 514.606224][ T8511] netlink: zone id is out of range [ 514.612088][ T8511] netlink: zone id is out of range [ 514.617686][ T8511] netlink: zone id is out of range [ 514.623157][ T8511] netlink: zone id is out of range [ 514.628533][ T8511] netlink: zone id is out of range [ 514.633865][ T8511] netlink: zone id is out of range [ 514.639152][ T8511] netlink: zone id is out of range [ 514.644433][ T8511] netlink: zone id is out of range [ 515.128912][ T5837] Bluetooth: hci4: command tx timeout [ 515.147986][ T5937] bridge_slave_1: left allmulticast mode [ 515.154552][ T5937] bridge_slave_1: left promiscuous mode [ 515.466792][ T8510] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 515.552614][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.598867][ T5937] bridge_slave_0: left allmulticast mode [ 515.605741][ T5937] bridge_slave_0: left promiscuous mode [ 515.611626][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.931278][ T5837] Bluetooth: hci2: ISO packet too small [ 517.203950][ T5837] Bluetooth: hci4: command tx timeout [ 517.349163][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.501946][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.784240][ T5937] bond0 (unregistering): Released all slaves [ 518.762238][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 519.146505][ T8540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.464'. [ 519.465593][ T8532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 519.471941][ T8532] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 519.555187][ T8532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 519.561463][ T8532] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 519.573467][ T8532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.579935][ T8532] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 520.803581][ T8532] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.867338][ T8532] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 520.953880][ T5937] hsr_slave_0: left promiscuous mode [ 520.972178][ T5937] hsr_slave_1: left promiscuous mode [ 521.010489][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.114986][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.072781][ T8559] Device name cannot be null; rc = [-22] [ 523.595831][ T5951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 523.790766][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 523.799436][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 524.047452][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 526.940671][ T5951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 526.980056][ T5951] usb 4-1: too many configurations: 30, using maximum allowed: 8 [ 527.031871][ T5951] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 527.050967][ T5951] usb 4-1: can't read configurations, error -71 [ 527.273527][ T8571] befs: (nbd3): No write support. Marking filesystem read-only [ 527.285162][ T8571] syz.3.470: attempt to access beyond end of device [ 527.285162][ T8571] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 527.298465][ T8571] befs: (nbd3): unable to read superblock [ 528.500803][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.517938][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.534027][ T8428] bridge_slave_0: entered allmulticast mode [ 528.552711][ T8428] bridge_slave_0: entered promiscuous mode [ 528.655095][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.662438][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.846786][ T8585] siw: device registration error -23 [ 529.718708][ T8428] bridge_slave_1: entered allmulticast mode [ 529.736216][ T8428] bridge_slave_1: entered promiscuous mode [ 530.435464][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.442715][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.556090][ T8465] bridge_slave_0: entered allmulticast mode [ 530.565827][ T8465] bridge_slave_0: entered promiscuous mode [ 531.677752][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.572913][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.580402][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.592057][ T8465] bridge_slave_1: entered allmulticast mode [ 536.600963][ T8465] bridge_slave_1: entered promiscuous mode [ 536.657574][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.597076][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.842601][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.882356][ T8428] team0: Port device team_slave_0 added [ 538.906551][ T8428] team0: Port device team_slave_1 added [ 540.552347][ T8465] team0: Port device team_slave_0 added [ 540.805211][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.816795][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.853793][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 540.870384][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.886543][ T8465] team0: Port device team_slave_1 added [ 540.951032][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.073200][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.102272][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.429652][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.459578][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.481042][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 541.498612][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.530953][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.547146][ T10] usb 4-1: config 0 descriptor?? [ 541.552395][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.597824][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.664209][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.671599][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.723970][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.428977][ T8428] hsr_slave_0: entered promiscuous mode [ 542.438943][ T8428] hsr_slave_1: entered promiscuous mode [ 542.446018][ T8428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.454855][ T8428] Cannot create hsr debugfs directory [ 543.191069][ T10] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 543.257839][ T10] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 543.318652][ T8465] hsr_slave_0: entered promiscuous mode [ 543.384962][ T10] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 543.485833][ T8465] hsr_slave_1: entered promiscuous mode [ 543.530568][ T10] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 543.585172][ T8465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.614457][ T10] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 543.662713][ T8465] Cannot create hsr debugfs directory [ 543.697551][ T10] usb 4-1: USB disconnect, device number 4 [ 546.959881][ T8668] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 8668 comm: syz.3.491) [ 547.239549][ T8661] net_ratelimit: 143 callbacks suppressed [ 547.239564][ T8661] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 547.296203][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 547.296236][ T30] audit: type=1800 audit(1755648684.961:111): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.491" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=18131 res=0 errno=0 [ 548.866928][ T8678] xt_connbytes: Forcing CT accounting to be enabled [ 548.874551][ T8678] set match dimension is over the limit! [ 548.939301][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 552.535845][ T8696] syz.1.498 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 553.054652][ T8691] Falling back ldisc for ptm0. [ 554.229900][ T8686] delete_channel: no stack [ 555.664155][ T8709] xt_connbytes: Forcing CT accounting to be enabled [ 555.672976][ T8709] Cannot find set identified by id 0 to match [ 557.545455][ T8713] [ 557.547948][ T8713] ====================================================== [ 557.554998][ T8713] WARNING: possible circular locking dependency detected [ 557.562103][ T8713] 6.16.0-syzkaller #0 Not tainted [ 557.567185][ T8713] ------------------------------------------------------ [ 557.574234][ T8713] syz.1.500/8713 is trying to acquire lock: [ 557.580124][ T8713] ffff8880253ca188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 557.591178][ T8713] [ 557.591178][ T8713] but task is already holding lock: [ 557.598643][ T8713] ffff8880253ca230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 557.607519][ T8713] [ 557.607519][ T8713] which lock already depends on the new lock. [ 557.607519][ T8713] [ 557.617919][ T8713] [ 557.617919][ T8713] the existing dependency chain (in reverse order) is: [ 557.626938][ T8713] [ 557.626938][ T8713] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 557.634793][ T8713] lock_acquire+0x120/0x360 [ 557.639941][ T8713] __mutex_lock+0x182/0xe80 [ 557.644982][ T8713] refcount_dec_and_mutex_lock+0x30/0xa0 [ 557.651202][ T8713] nbd_config_put+0x2c/0x790 [ 557.656321][ T8713] nbd_release+0xfe/0x140 [ 557.661174][ T8713] bdev_release+0x533/0x650 [ 557.666349][ T8713] blkdev_release+0x15/0x20 [ 557.671396][ T8713] __fput+0x449/0xa70 [ 557.675908][ T8713] fput_close_sync+0x119/0x200 [ 557.681194][ T8713] __x64_sys_close+0x7f/0x110 [ 557.686397][ T8713] do_syscall_64+0xfa/0x3b0 [ 557.691423][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.697847][ T8713] [ 557.697847][ T8713] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 557.705689][ T8713] lock_acquire+0x120/0x360 [ 557.710742][ T8713] __mutex_lock+0x182/0xe80 [ 557.715789][ T8713] __del_gendisk+0x129/0x9e0 [ 557.720925][ T8713] del_gendisk+0xe8/0x160 [ 557.725789][ T8713] loop_remove+0x42/0xc0 [ 557.730655][ T8713] loop_control_ioctl+0x4ac/0x5a0 [ 557.736216][ T8713] __se_sys_ioctl+0xfc/0x170 [ 557.741427][ T8713] do_syscall_64+0xfa/0x3b0 [ 557.746449][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.752945][ T8713] [ 557.752945][ T8713] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 557.761394][ T8713] validate_chain+0xb9b/0x2140 [ 557.767117][ T8713] __lock_acquire+0xab9/0xd20 [ 557.772311][ T8713] lock_acquire+0x120/0x360 [ 557.777331][ T8713] down_write+0x96/0x1f0 [ 557.782092][ T8713] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 557.788348][ T8713] nbd_start_device+0x16c/0xac0 [ 557.793731][ T8713] nbd_ioctl+0x636/0xeb0 [ 557.798531][ T8713] blkdev_ioctl+0x5a8/0x6d0 [ 557.803554][ T8713] __se_sys_ioctl+0xfc/0x170 [ 557.808668][ T8713] do_syscall_64+0xfa/0x3b0 [ 557.813776][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.820359][ T8713] [ 557.820359][ T8713] other info that might help us debug this: [ 557.820359][ T8713] [ 557.830824][ T8713] Chain exists of: [ 557.830824][ T8713] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 557.830824][ T8713] [ 557.845014][ T8713] Possible unsafe locking scenario: [ 557.845014][ T8713] [ 557.852636][ T8713] CPU0 CPU1 [ 557.857996][ T8713] ---- ---- [ 557.863367][ T8713] lock(&nbd->config_lock); [ 557.868047][ T8713] lock(&disk->open_mutex); [ 557.875262][ T8713] lock(&nbd->config_lock); [ 557.882367][ T8713] lock(&set->update_nr_hwq_lock); [ 557.887575][ T8713] [ 557.887575][ T8713] *** DEADLOCK *** [ 557.887575][ T8713] [ 557.895714][ T8713] 1 lock held by syz.1.500/8713: [ 557.900729][ T8713] #0: ffff8880253ca230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 557.910048][ T8713] [ 557.910048][ T8713] stack backtrace: [ 557.915933][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.1.500 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 557.915949][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.915957][ T8713] Call Trace: [ 557.915964][ T8713] [ 557.915969][ T8713] dump_stack_lvl+0x189/0x250 [ 557.915987][ T8713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.916005][ T8713] ? __pfx__printk+0x10/0x10 [ 557.916030][ T8713] ? print_lock_name+0xde/0x100 [ 557.916048][ T8713] print_circular_bug+0x2ee/0x310 [ 557.916065][ T8713] check_noncircular+0x134/0x160 [ 557.916080][ T8713] validate_chain+0xb9b/0x2140 [ 557.916093][ T8713] ? trace_sched_exit_tp+0x38/0x120 [ 557.916114][ T8713] ? __schedule+0x16c8/0x4c90 [ 557.916132][ T8713] __lock_acquire+0xab9/0xd20 [ 557.916145][ T8713] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 557.916161][ T8713] lock_acquire+0x120/0x360 [ 557.916172][ T8713] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 557.916188][ T8713] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 557.916209][ T8713] down_write+0x96/0x1f0 [ 557.916223][ T8713] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 557.916238][ T8713] ? __pfx_down_write+0x10/0x10 [ 557.916252][ T8713] ? rcu_is_watching+0x15/0xb0 [ 557.916265][ T8713] ? __mutex_lock+0xa6d/0xe80 [ 557.916277][ T8713] ? blkdev_common_ioctl+0xd6/0x2450 [ 557.916292][ T8713] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 557.916309][ T8713] ? nbd_ioctl+0x131/0xeb0 [ 557.916324][ T8713] ? __pfx___mutex_lock+0x10/0x10 [ 557.916338][ T8713] nbd_start_device+0x16c/0xac0 [ 557.916354][ T8713] ? security_capable+0x7e/0x2e0 [ 557.916371][ T8713] nbd_ioctl+0x636/0xeb0 [ 557.916388][ T8713] ? __pfx_nbd_ioctl+0x10/0x10 [ 557.916402][ T8713] ? __asan_memset+0x22/0x50 [ 557.916418][ T8713] ? smack_file_ioctl+0x24a/0x340 [ 557.916430][ T8713] ? __pfx_smack_file_ioctl+0x10/0x10 [ 557.916441][ T8713] ? __pfx_nbd_ioctl+0x10/0x10 [ 557.916457][ T8713] blkdev_ioctl+0x5a8/0x6d0 [ 557.916471][ T8713] ? __pfx_blkdev_ioctl+0x10/0x10 [ 557.916484][ T8713] ? __fget_files+0x2a/0x420 [ 557.916498][ T8713] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.916512][ T8713] ? __pfx_blkdev_ioctl+0x10/0x10 [ 557.916525][ T8713] __se_sys_ioctl+0xfc/0x170 [ 557.916543][ T8713] do_syscall_64+0xfa/0x3b0 [ 557.916556][ T8713] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.916569][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.916580][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 557.916593][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.916605][ T8713] RIP: 0033:0x7f6f9e18ebe9 [ 557.916618][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.916629][ T8713] RSP: 002b:00007f6f9ef89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.916643][ T8713] RAX: ffffffffffffffda RBX: 00007f6f9e3b6180 RCX: 00007f6f9e18ebe9 [ 557.916652][ T8713] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 557.916660][ T8713] RBP: 00007f6f9e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 557.916668][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.916675][ T8713] R13: 00007f6f9e3b6218 R14: 00007f6f9e3b6180 R15: 00007ffff9064698 [ 557.916688][ T8713] [ 558.366385][ T5837] block nbd1: Receive control failed (result -32) SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 558.414289][ T8713] block nbd1: shutting down sockets [ 559.062783][ T8183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.113793][ T8183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.250136][ T8183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.274246][ T8183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.351277][ T8183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.364128][ T8183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.450289][ T8183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.462346][ T8183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.592003][ T8183] bridge_slave_1: left allmulticast mode [ 559.598846][ T8183] bridge_slave_1: left promiscuous mode [ 559.614650][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.638266][ T8183] bridge_slave_0: left allmulticast mode [ 559.652434][ T8183] bridge_slave_0: left promiscuous mode [ 559.663569][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.892066][ T8183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.902905][ T8183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.920284][ T8183] bond0 (unregistering): Released all slaves [ 559.986080][ T8183] : left promiscuous mode [ 560.056284][ T8183] tipc: Disabling bearer [ 560.061751][ T8183] tipc: Left network mode [ 560.205408][ T8183] hsr_slave_0: left promiscuous mode [ 560.227384][ T8183] hsr_slave_1: left promiscuous mode [ 560.233317][ T8183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.244493][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.252347][ T8183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.261251][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.275221][ T8183] veth1_macvtap: left promiscuous mode [ 560.280841][ T8183] veth0_macvtap: left promiscuous mode [ 560.290562][ T8183] veth1_vlan: left promiscuous mode [ 560.296806][ T8183] veth0_vlan: left promiscuous mode [ 560.470156][ T8183] team0 (unregistering): Port device team_slave_1 removed [ 560.521704][ T8183] team0 (unregistering): Port device team_slave_0 removed [ 560.966400][ T8183] bridge_slave_1: left allmulticast mode [ 560.972244][ T8183] bridge_slave_1: left promiscuous mode [ 560.982945][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.992524][ T8183] bridge_slave_0: left allmulticast mode [ 560.999062][ T8183] bridge_slave_0: left promiscuous mode [ 561.005249][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.014834][ T8183] bridge_slave_1: left allmulticast mode [ 561.020533][ T8183] bridge_slave_1: left promiscuous mode [ 561.027311][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.041181][ T8183] bridge_slave_0: left allmulticast mode [ 561.047042][ T8183] bridge_slave_0: left promiscuous mode [ 561.052776][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.146741][ T8183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.156939][ T8183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.167040][ T8183] bond0 (unregistering): Released all slaves [ 561.239114][ T8183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.249074][ T8183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.259207][ T8183] bond0 (unregistering): Released all slaves [ 561.359471][ T8183] hsr_slave_0: left promiscuous mode [ 561.366146][ T8183] hsr_slave_1: left promiscuous mode [ 561.371994][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.382322][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.393298][ T8183] hsr_slave_0: left promiscuous mode [ 561.402222][ T8183] hsr_slave_1: left promiscuous mode [ 561.409017][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.418734][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.528276][ T8183] team0 (unregistering): Port device team_slave_1 removed [ 561.548240][ T8183] team0 (unregistering): Port device team_slave_0 removed [ 561.732547][ T8183] team0 (unregistering): Port device team_slave_1 removed [ 561.743123][ T8183] team0 (unregistering): Port device team_slave_0 removed [ 563.205768][ T1303] ieee802154 phy1 wpan1: encryption failed: -22