last executing test programs: 6.634299484s ago: executing program 4 (id=223): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x7, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x6e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x56, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b"}}}}, 0x7c) 6.475927122s ago: executing program 2 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 6.467907125s ago: executing program 3 (id=228): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff}) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.612777676s ago: executing program 0 (id=231): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.524020346s ago: executing program 2 (id=232): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x2, 0x7}) 5.448147125s ago: executing program 1 (id=233): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 5.4478773s ago: executing program 2 (id=234): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x0, 0xb, 0xe0, 0x0, 0x0, 0x2, 0x0}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x7, &(0x7f0000001040), &(0x7f0000000000)=0x4) 5.447785893s ago: executing program 3 (id=235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8910, &(0x7f00000000c0)={0x0, 0x576c, 0x0, 0x7ff, 0x0, "5dee000000594000"}) 5.447564322s ago: executing program 4 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2], 0x28}}, 0x0) 4.43452082s ago: executing program 4 (id=237): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3e, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000006c0)="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", 0x170}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f", 0xb3}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1", 0x10}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 4.410070423s ago: executing program 1 (id=238): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) 4.010069275s ago: executing program 1 (id=239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) setresuid(0x0, 0xee00, 0x0) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff}) shmctl$SHM_UNLOCK(r4, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.007409378s ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0], 0x4c}}, 0x0) 3.18165278s ago: executing program 0 (id=241): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 3.075856912s ago: executing program 2 (id=242): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0, r3}, 0x18) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'bond_slave_1\x00'}}, 0x1e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000200)={0x0, 0x4, 0x4}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 3.075559287s ago: executing program 1 (id=243): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) 3.062899025s ago: executing program 3 (id=244): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x2, 0x7}) 3.051959998s ago: executing program 0 (id=245): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f7, 0x800, 0x10000, 0x2000000}, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 3.031368253s ago: executing program 4 (id=246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x8040) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x401eb94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x18844, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 2.919869725s ago: executing program 1 (id=247): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f00000000c0)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x2ae) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18001d000bb200000000000ff964344f2204"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x40100) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 2.624729764s ago: executing program 3 (id=248): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1.954730615s ago: executing program 0 (id=249): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) 1.954576959s ago: executing program 2 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) 1.4727159s ago: executing program 3 (id=251): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x0, 0xb, 0xe0, 0x0, 0x0, 0x2, 0x0}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x7, &(0x7f0000001040), &(0x7f0000000000)=0x4) 1.351912561s ago: executing program 4 (id=252): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e755044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.094700969s ago: executing program 0 (id=253): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xad000903) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) accept4(r3, 0x0, 0x0, 0x80000) 898.945182ms ago: executing program 1 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) setresuid(0x0, 0xee00, 0x0) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff}) shmctl$SHM_UNLOCK(r4, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 894.823402ms ago: executing program 2 (id=255): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x0) 74.763763ms ago: executing program 3 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) 0s ago: executing program 0 (id=257): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 34.904884][ T6477] cgroup: Unknown subsys name 'net' [ 35.104116][ T6477] cgroup: Unknown subsys name 'cpuset' [ 35.107615][ T6477] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.403392][ T6477] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.891213][ T6504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.892603][ T6504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.893183][ T6504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.893826][ T6504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.894425][ T6504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.894800][ T6504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.895682][ T6506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.895939][ T6506] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.896167][ T6506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.896340][ T6506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.896482][ T6506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.897098][ T6506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.897651][ T6506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.898000][ T6506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.898463][ T6506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.899006][ T6506] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.900288][ T6506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.900506][ T6506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.900992][ T6506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.901272][ T6506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.902110][ T6506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.902783][ T6506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.903021][ T6506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.906693][ T6503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.911691][ T6503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.267198][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 37.336397][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 37.343834][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 37.445881][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 37.464525][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 37.483388][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.485560][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.488067][ T6487] bridge_slave_0: entered allmulticast mode [ 37.491334][ T6487] bridge_slave_0: entered promiscuous mode [ 37.519597][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.519691][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.519822][ T6487] bridge_slave_1: entered allmulticast mode [ 37.521077][ T6487] bridge_slave_1: entered promiscuous mode [ 37.569912][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.570131][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.570200][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.570351][ T6495] bridge_slave_0: entered allmulticast mode [ 37.572322][ T6495] bridge_slave_0: entered promiscuous mode [ 37.573623][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.573666][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.573767][ T6495] bridge_slave_1: entered allmulticast mode [ 37.574632][ T6495] bridge_slave_1: entered promiscuous mode [ 37.616778][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.636411][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.636483][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.636663][ T6489] bridge_slave_0: entered allmulticast mode [ 37.637505][ T6489] bridge_slave_0: entered promiscuous mode [ 37.639274][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.639319][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.639442][ T6489] bridge_slave_1: entered allmulticast mode [ 37.640372][ T6489] bridge_slave_1: entered promiscuous mode [ 37.687528][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.711513][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.713329][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.727737][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.749126][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.750807][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.750927][ T6488] bridge_slave_0: entered allmulticast mode [ 37.751846][ T6488] bridge_slave_0: entered promiscuous mode [ 37.768615][ T6487] team0: Port device team_slave_0 added [ 37.771996][ T6487] team0: Port device team_slave_1 added [ 37.773947][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.775294][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.775412][ T6490] bridge_slave_0: entered allmulticast mode [ 37.776271][ T6490] bridge_slave_0: entered promiscuous mode [ 37.777583][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.777639][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.777742][ T6490] bridge_slave_1: entered allmulticast mode [ 37.778627][ T6490] bridge_slave_1: entered promiscuous mode [ 37.790417][ T6489] team0: Port device team_slave_0 added [ 37.791260][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.791334][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.791427][ T6488] bridge_slave_1: entered allmulticast mode [ 37.792493][ T6488] bridge_slave_1: entered promiscuous mode [ 37.802559][ T6495] team0: Port device team_slave_0 added [ 37.820946][ T6489] team0: Port device team_slave_1 added [ 37.835004][ T6495] team0: Port device team_slave_1 added [ 37.849906][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.859026][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.869556][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.869626][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.869653][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.880517][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.881890][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.881915][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.881941][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.898843][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.898892][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.899170][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.900356][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.900381][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.900407][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.903568][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.914167][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.914193][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.914220][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.915812][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.915837][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.915863][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.975653][ T6490] team0: Port device team_slave_0 added [ 37.979283][ T6487] hsr_slave_0: entered promiscuous mode [ 37.980259][ T6487] hsr_slave_1: entered promiscuous mode [ 37.984707][ T6488] team0: Port device team_slave_0 added [ 37.992827][ T6490] team0: Port device team_slave_1 added [ 38.013874][ T6488] team0: Port device team_slave_1 added [ 38.036487][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.036536][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.036563][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.058625][ T6495] hsr_slave_0: entered promiscuous mode [ 38.059207][ T6495] hsr_slave_1: entered promiscuous mode [ 38.059599][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.059683][ T6495] Cannot create hsr debugfs directory [ 38.068881][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.068929][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.069220][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.078459][ T6489] hsr_slave_0: entered promiscuous mode [ 38.078928][ T6489] hsr_slave_1: entered promiscuous mode [ 38.079259][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.079288][ T6489] Cannot create hsr debugfs directory [ 38.089292][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.089345][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.089392][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.123117][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.125036][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.130859][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.182293][ T6490] hsr_slave_0: entered promiscuous mode [ 38.182781][ T6490] hsr_slave_1: entered promiscuous mode [ 38.183093][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.183122][ T6490] Cannot create hsr debugfs directory [ 38.285001][ T6488] hsr_slave_0: entered promiscuous mode [ 38.285612][ T6488] hsr_slave_1: entered promiscuous mode [ 38.286558][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.286593][ T6488] Cannot create hsr debugfs directory [ 38.479870][ T6487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.490511][ T6487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.495592][ T6487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.508003][ T6487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.547806][ T6490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.552792][ T6490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.566256][ T6490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.571688][ T6490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.612473][ T6489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.616304][ T6489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.623251][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.636173][ T6489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.639907][ T6489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.659352][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.672957][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.673111][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.686970][ T6495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.710169][ T6487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.712123][ T6487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.713886][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.713933][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.722939][ T6495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.726957][ T6495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.746437][ T6495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.793140][ T6488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.797196][ T6488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.806484][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.826763][ T6488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.849114][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.851628][ T6488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.873919][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.888504][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.905529][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.905612][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.907434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.907481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.908554][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.908596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.929120][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.929214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.938180][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.959507][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.961726][ T6502] Bluetooth: hci2: command tx timeout [ 38.961888][ T6502] Bluetooth: hci4: command tx timeout [ 38.961981][ T6502] Bluetooth: hci0: command tx timeout [ 38.962088][ T6502] Bluetooth: hci1: command tx timeout [ 38.981122][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.002773][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.002846][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.018991][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.019080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.042295][ T6503] Bluetooth: hci3: command tx timeout [ 39.068337][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.079042][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.091335][ T6487] veth0_vlan: entered promiscuous mode [ 39.096098][ T6487] veth1_vlan: entered promiscuous mode [ 39.136032][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.136108][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.178701][ T6487] veth0_macvtap: entered promiscuous mode [ 39.185136][ T6487] veth1_macvtap: entered promiscuous mode [ 39.217766][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.240374][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.251272][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.251343][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.267398][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.268915][ T6487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.268974][ T6487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.269003][ T6487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.269050][ T6487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.277748][ T6488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.295559][ T6489] veth0_vlan: entered promiscuous mode [ 39.315561][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.324961][ T6489] veth1_vlan: entered promiscuous mode [ 39.349394][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.395177][ T6489] veth0_macvtap: entered promiscuous mode [ 39.398839][ T6489] veth1_macvtap: entered promiscuous mode [ 39.429439][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.438551][ T6495] veth0_vlan: entered promiscuous mode [ 39.450544][ T6495] veth1_vlan: entered promiscuous mode [ 39.474206][ T6490] veth0_vlan: entered promiscuous mode [ 39.501875][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.505305][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.526152][ T6495] veth0_macvtap: entered promiscuous mode [ 39.529991][ T6495] veth1_macvtap: entered promiscuous mode [ 39.542500][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.542612][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.543321][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.544612][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.544639][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.545168][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.546603][ T6489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546640][ T6489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546669][ T6489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546697][ T6489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.576250][ T6490] veth1_vlan: entered promiscuous mode [ 39.594822][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.596874][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.596895][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.596916][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.597686][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.599298][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.599328][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.599345][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.599365][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.599876][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.627519][ T6490] veth0_macvtap: entered promiscuous mode [ 39.635089][ T6490] veth1_macvtap: entered promiscuous mode [ 39.644290][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.647326][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.650294][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.651068][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.651090][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.651110][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.651825][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.667675][ T6495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.667746][ T6495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.667802][ T6495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.667831][ T6495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.673212][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.673245][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.694859][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.694931][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.694950][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.694969][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.694987][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.695006][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.695624][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.697094][ T6490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.697134][ T6490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.697171][ T6490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.697199][ T6490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.795332][ T6488] veth0_vlan: entered promiscuous mode [ 39.805042][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.805102][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.809270][ T6488] veth1_vlan: entered promiscuous mode [ 39.845208][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.847530][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.854877][ T6487] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.890028][ T6488] veth0_macvtap: entered promiscuous mode [ 39.898581][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.898640][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.914190][ T6488] veth1_macvtap: entered promiscuous mode [ 39.925496][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.928521][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.931479][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.934976][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.937738][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.940882][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.943638][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.946767][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.953501][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.955869][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.955936][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.955955][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.955974][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.955992][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.956025][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.956045][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.956064][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.956610][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.960328][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.960361][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.989482][ T6488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.992242][ T6488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.994702][ T6488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.997243][ T6488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.013376][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.013433][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.151987][ T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.152054][ T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.152232][ T338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.152253][ T338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.199453][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.199514][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.311737][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.312230][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.342165][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.585495][ T26] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 41.041505][ T6502] Bluetooth: hci0: command tx timeout [ 41.041790][ T6502] Bluetooth: hci4: command tx timeout [ 41.042150][ T6502] Bluetooth: hci2: command tx timeout [ 41.047674][ T6503] Bluetooth: hci1: command tx timeout [ 41.121058][ T6491] Bluetooth: hci3: command tx timeout [ 41.195119][ T26] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 41.195221][ T26] usb 1-1: config 0 has no interface number 0 [ 41.208933][ T26] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=e7.7b [ 41.208997][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.209048][ T26] usb 1-1: Product: syz [ 41.209081][ T26] usb 1-1: Manufacturer: syz [ 41.209109][ T26] usb 1-1: SerialNumber: syz [ 41.238939][ T26] usb 1-1: config 0 descriptor?? [ 41.248776][ T26] ttusb_dec_send_command: command bulk message failed: error -22 [ 41.256479][ T26] ttusb-dec 1-1:0.189: probe with driver ttusb-dec failed with error -22 [ 41.272633][ T6604] Zero length message leads to an empty skb [ 42.363483][ T6613] x_tables: duplicate underflow at hook 1 [ 42.364942][ T6613] bridge0: port 3(gretap0) entered blocking state [ 42.365086][ T6613] bridge0: port 3(gretap0) entered disabled state [ 42.365275][ T6613] gretap0: entered allmulticast mode [ 42.366504][ T6613] gretap0: entered promiscuous mode [ 42.366916][ T6613] bridge0: port 3(gretap0) entered blocking state [ 42.367042][ T6613] bridge0: port 3(gretap0) entered forwarding state [ 42.373072][ T6613] gretap0: left allmulticast mode [ 42.373118][ T6613] gretap0: left promiscuous mode [ 42.373239][ T6613] bridge0: port 3(gretap0) entered disabled state [ 42.468908][ T24] usb 1-1: USB disconnect, device number 2 [ 42.688752][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 42.957889][ T6621] sctp: [Deprecated]: syz.1.17 (pid 6621) Use of int in max_burst socket option. [ 42.957889][ T6621] Use struct sctp_assoc_value instead [ 43.231059][ T6630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.631291][ T6631] Cannot find add_set index 0 as target [ 44.010830][ T6491] Bluetooth: hci1: command tx timeout [ 44.010964][ T6491] Bluetooth: hci2: command tx timeout [ 44.011027][ T6491] Bluetooth: hci4: command tx timeout [ 44.011067][ T6491] Bluetooth: hci0: command tx timeout [ 44.011105][ T6491] Bluetooth: hci3: command tx timeout [ 44.022119][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.022366][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.117807][ T6641] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 44.262128][ T6649] Bluetooth: MGMT ver 1.23 [ 45.246102][ T6572] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.262340][ T6503] Bluetooth: hci3: command tx timeout [ 46.262382][ T6491] Bluetooth: hci0: command tx timeout [ 46.262406][ T6503] Bluetooth: hci4: command tx timeout [ 46.262441][ T6491] Bluetooth: hci2: command tx timeout [ 46.262455][ T6503] Bluetooth: hci1: command tx timeout [ 46.320737][ T6572] usb 1-1: Using ep0 maxpacket: 16 [ 46.326465][ T6572] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 46.326531][ T6572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.326561][ T6572] usb 1-1: config 0 has no interface number 0 [ 46.336560][ T6572] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 46.336618][ T6572] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 46.336659][ T6572] usb 1-1: Product: syz [ 46.336686][ T6572] usb 1-1: SerialNumber: syz [ 47.922296][ T6572] usb 1-1: config 0 descriptor?? [ 48.293348][ T6572] usb 1-1: can't set config #0, error -71 [ 48.295000][ T6572] usb 1-1: USB disconnect, device number 3 [ 48.402066][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.405709][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.475997][ T31] audit: type=1326 audit(48.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab15b728 code=0x7ffc0000 [ 48.482826][ T31] audit: type=1326 audit(48.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab15b728 code=0x7ffc0000 [ 48.489421][ T31] audit: type=1326 audit(48.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=273 compat=0 ip=0xffffab15b728 code=0x7ffc0000 [ 48.496819][ T31] audit: type=1326 audit(48.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab15b728 code=0x7ffc0000 [ 48.503291][ T31] audit: type=1326 audit(48.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab15b728 code=0x7ffc0000 [ 48.869768][ T6710] ip6erspan0: entered promiscuous mode [ 49.899921][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.907153][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.234712][ T6761] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.235692][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 50.242414][ T6751] mmap: syz.3.49 (6751) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.308087][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 51.366795][ T6790] sctp: [Deprecated]: syz.1.57 (pid 6790) Use of int in max_burst socket option. [ 51.366795][ T6790] Use struct sctp_assoc_value instead [ 53.262565][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.262818][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.475207][ T6833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.66'. [ 54.406601][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 54.516699][ T6861] ubi31: attaching mtd0 [ 54.519868][ T6861] ubi31: scanning is finished [ 54.521847][ T6861] ubi31: empty MTD device detected [ 55.884294][ T6889] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 55.891594][ T6889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.79'. [ 56.239184][ T6885] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 56.264215][ T6861] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 56.264306][ T6861] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 56.264347][ T6861] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 56.264375][ T6861] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 56.264402][ T6861] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 56.264430][ T6861] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 56.264457][ T6861] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2291750560 [ 56.264486][ T6861] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 56.284645][ T6890] ubi31: background thread "ubi_bgt31d" started, PID 6890 [ 56.359970][ T6892] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.265188][ T6498] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 57.536294][ T6498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.536369][ T6498] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.536395][ T6498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.367488][ T6491] Bluetooth: hci4: command 0x0405 tx timeout [ 58.500774][ T6498] usb 1-1: config 0 descriptor?? [ 58.847230][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.850557][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.856193][ T6927] ubi: mtd0 is already attached to ubi31 [ 59.473826][ T6498] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 59.482394][ T6498] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input2 [ 60.860121][ T6498] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 60.901598][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 61.195918][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.196242][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.269204][ T6975] ubi: mtd0 is already attached to ubi31 [ 61.467043][ T6982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.556527][ T6982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 62.033243][ T10] usb 1-1: USB disconnect, device number 4 [ 62.276294][ T6995] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.358328][ T7000] lo speed is unknown, defaulting to 1000 [ 62.358461][ T7000] lo speed is unknown, defaulting to 1000 [ 62.359435][ T7000] lo speed is unknown, defaulting to 1000 [ 62.363613][ T7000] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.939347][ T7000] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.988055][ T7000] lo speed is unknown, defaulting to 1000 [ 62.992941][ T7000] lo speed is unknown, defaulting to 1000 [ 63.020739][ T7000] lo speed is unknown, defaulting to 1000 [ 63.021472][ T7000] lo speed is unknown, defaulting to 1000 [ 63.022932][ T7000] lo speed is unknown, defaulting to 1000 [ 63.029265][ T7002] netlink: 6 bytes leftover after parsing attributes in process `syz.0.114'. [ 63.032054][ T7002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.272951][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 63.336301][ T7017] ubi: mtd0 is already attached to ubi31 [ 63.372917][ T6498] IPVS: starting estimator thread 0... [ 63.462620][ T7018] IPVS: using max 33 ests per chain, 79200 per kthread [ 64.207482][ T31] audit: type=1400 audit(63.890:7): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7009 comm="syz.2.118" path="socket:[7667]" dev="sockfs" ino=7667 [ 64.619801][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.620086][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.781269][ T2393] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.781349][ T2393] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.003374][ T7046] process 'syz.0.127' launched './file2' with NULL argv: empty string added [ 65.127827][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 65.807948][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 65.874194][ T7060] ubi: mtd0 is already attached to ubi31 [ 66.531537][ T6494] IPVS: starting estimator thread 0... [ 66.641469][ T7067] IPVS: using max 34 ests per chain, 81600 per kthread [ 66.660104][ T6493] libceph: connect (1)[c::]:6789 error -101 [ 66.662889][ T6493] libceph: mon0 (1)[c::]:6789 connect error [ 66.671935][ T6493] libceph: connect (1)[c::]:6789 error -101 [ 66.673893][ T6493] libceph: mon0 (1)[c::]:6789 connect error [ 66.768131][ T7072] ceph: No mds server is up or the cluster is laggy [ 66.772845][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.773066][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.185544][ T7101] ubi: mtd0 is already attached to ubi31 [ 67.290912][ T6493] IPVS: starting estimator thread 0... [ 67.391039][ T7102] IPVS: using max 32 ests per chain, 76800 per kthread [ 67.797459][ T7106] syzkaller1: entered promiscuous mode [ 67.799347][ T7106] syzkaller1: entered allmulticast mode [ 68.006134][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 68.476203][ T7139] ubi: mtd0 is already attached to ubi31 [ 69.117746][ T7141] syz.3.159: attempt to access beyond end of device [ 69.117746][ T7141] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 69.117870][ T7141] efs: cannot read volume header [ 69.812548][ T7166] syzkaller1: entered promiscuous mode [ 69.812619][ T7166] syzkaller1: entered allmulticast mode [ 69.845132][ T2259] cfg80211: failed to load regulatory.db [ 70.206848][ T7184] ubi: mtd0 is already attached to ubi31 [ 70.801182][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 70.936978][ T7191] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 71.157501][ T7205] lo speed is unknown, defaulting to 1000 [ 72.677968][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 74.336146][ T7272] syzkaller1: entered promiscuous mode [ 74.336216][ T7272] syzkaller1: entered allmulticast mode [ 74.376318][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 74.560511][ T7285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.211'. [ 74.960394][ T31] audit: type=1107 audit(74.400:8): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 76.875791][ T7324] syzkaller1: entered promiscuous mode [ 76.875867][ T7324] syzkaller1: entered allmulticast mode [ 76.916984][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.225'. [ 80.301738][ T7370] netlink: 44 bytes leftover after parsing attributes in process `syz.4.240'. [ 83.355106][ T7405] sctp: failed to load transform for md5: -2 [ 83.794556][ T7419] [ 83.795280][ T7419] ====================================================== [ 83.797170][ T7419] WARNING: possible circular locking dependency detected [ 83.799027][ T7419] 6.15.0-rc2-syzkaller-gc72692105976 #0 Not tainted [ 83.800788][ T7419] ------------------------------------------------------ [ 83.802836][ T7419] syz.4.252/7419 is trying to acquire lock: [ 83.804428][ T7419] ffff0000f13d0aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x44/0xa3c [ 83.807339][ T7419] [ 83.807339][ T7419] but task is already holding lock: [ 83.809354][ T7419] ffff0000f13d0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x5c/0x86c [ 83.811753][ T7419] [ 83.811753][ T7419] which lock already depends on the new lock. [ 83.811753][ T7419] [ 83.814526][ T7419] [ 83.814526][ T7419] the existing dependency chain (in reverse order) is: [ 83.817048][ T7419] [ 83.817048][ T7419] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 83.819139][ T7419] sock_set_reuseaddr+0x54/0x150 [ 83.820693][ T7419] siw_create_listen+0x12c/0xc94 [ 83.822174][ T7419] iw_cm_listen+0x148/0x200 [ 83.823622][ T7419] rdma_listen+0x830/0xaac [ 83.824999][ T7419] cma_listen_on_dev+0x318/0x624 [ 83.826495][ T7419] cma_add_one+0x584/0x9e0 [ 83.827866][ T7419] add_client_context+0x3f8/0x738 [ 83.829392][ T7419] enable_device_and_get+0x17c/0x398 [ 83.831067][ T7419] ib_register_device+0xda0/0xfe0 [ 83.832542][ T7419] siw_newlink+0x764/0xb78 [ 83.833839][ T7419] nldev_newlink+0x3f8/0x4c8 [ 83.835211][ T7419] rdma_nl_rcv+0x55c/0x7f0 [ 83.836551][ T7419] netlink_unicast+0x60c/0x824 [ 83.838041][ T7419] netlink_sendmsg+0x648/0x930 [ 83.839456][ T7419] ____sys_sendmsg+0x490/0x7b8 [ 83.840865][ T7419] ___sys_sendmsg+0x204/0x278 [ 83.842229][ T7419] __arm64_sys_sendmsg+0x184/0x238 [ 83.843773][ T7419] invoke_syscall+0x98/0x2b8 [ 83.844630][ T7418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.256'. [ 83.847497][ T7419] el0_svc_common+0x130/0x23c [ 83.848898][ T7419] do_el0_svc+0x48/0x58 [ 83.850181][ T7419] el0_svc+0x58/0x150 [ 83.851336][ T7419] el0t_64_sync_handler+0x78/0x108 [ 83.852802][ T7419] el0t_64_sync+0x198/0x19c [ 83.854215][ T7419] [ 83.854215][ T7419] -> #2 (lock#7){+.+.}-{4:4}: [ 83.856052][ T7419] __mutex_lock_common+0x1d0/0x2190 [ 83.857581][ T7419] mutex_lock_nested+0x2c/0x38 [ 83.859070][ T7419] cma_init+0x2c/0x158 [ 83.860324][ T7419] do_one_initcall+0x250/0x990 [ 83.861843][ T7419] do_initcall_level+0x154/0x214 [ 83.863350][ T7419] do_initcalls+0x84/0xf4 [ 83.864731][ T7419] do_basic_setup+0x8c/0xa0 [ 83.866146][ T7419] kernel_init_freeable+0x2dc/0x444 [ 83.867709][ T7419] kernel_init+0x24/0x1dc [ 83.869141][ T7419] ret_from_fork+0x10/0x20 [ 83.870506][ T7419] [ 83.870506][ T7419] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 83.872595][ T7419] __mutex_lock_common+0x1d0/0x2190 [ 83.874177][ T7419] mutex_lock_nested+0x2c/0x38 [ 83.875571][ T7419] rtnl_lock+0x20/0x2c [ 83.876818][ T7419] start_sync_thread+0xe0/0x2014 [ 83.878285][ T7419] do_ip_vs_set_ctl+0x3ac/0x90c [ 83.879675][ T7419] nf_setsockopt+0x270/0x290 [ 83.881069][ T7419] ip_setsockopt+0x124/0x134 [ 83.882464][ T7419] tcp_setsockopt+0xcc/0xe8 [ 83.883885][ T7419] sock_common_setsockopt+0xb0/0xcc [ 83.885405][ T7419] smc_setsockopt+0x1e0/0xb14 [ 83.886805][ T7419] do_sock_setsockopt+0x1ec/0x328 [ 83.888318][ T7419] __arm64_sys_setsockopt+0x170/0x1e0 [ 83.889865][ T7419] invoke_syscall+0x98/0x2b8 [ 83.891230][ T7419] el0_svc_common+0x130/0x23c [ 83.892617][ T7419] do_el0_svc+0x48/0x58 [ 83.893898][ T7419] el0_svc+0x58/0x150 [ 83.895194][ T7419] el0t_64_sync_handler+0x78/0x108 [ 83.896643][ T7419] el0t_64_sync+0x198/0x19c [ 83.897965][ T7419] [ 83.897965][ T7419] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 83.900352][ T7419] __lock_acquire+0x1728/0x3058 [ 83.901820][ T7419] lock_acquire+0x14c/0x2e0 [ 83.903328][ T7419] __mutex_lock_common+0x1d0/0x2190 [ 83.904888][ T7419] mutex_lock_nested+0x2c/0x38 [ 83.906322][ T7419] smc_switch_to_fallback+0x44/0xa3c [ 83.907816][ T7419] smc_sendmsg+0xf8/0x86c [ 83.909116][ T7419] __sys_sendto+0x36c/0x4f4 [ 83.910507][ T7419] __arm64_sys_sendto+0xd8/0xf8 [ 83.911998][ T7419] invoke_syscall+0x98/0x2b8 [ 83.913480][ T7419] el0_svc_common+0x130/0x23c [ 83.914867][ T7419] do_el0_svc+0x48/0x58 [ 83.916161][ T7419] el0_svc+0x58/0x150 [ 83.917461][ T7419] el0t_64_sync_handler+0x78/0x108 [ 83.918978][ T7419] el0t_64_sync+0x198/0x19c [ 83.920382][ T7419] [ 83.920382][ T7419] other info that might help us debug this: [ 83.920382][ T7419] [ 83.923200][ T7419] Chain exists of: [ 83.923200][ T7419] &smc->clcsock_release_lock --> lock#7 --> sk_lock-AF_INET [ 83.923200][ T7419] [ 83.926835][ T7419] Possible unsafe locking scenario: [ 83.926835][ T7419] [ 83.928846][ T7419] CPU0 CPU1 [ 83.930330][ T7419] ---- ---- [ 83.931790][ T7419] lock(sk_lock-AF_INET); [ 83.932993][ T7419] lock(lock#7); [ 83.934717][ T7419] lock(sk_lock-AF_INET); [ 83.936570][ T7419] lock(&smc->clcsock_release_lock); [ 83.938053][ T7419] [ 83.938053][ T7419] *** DEADLOCK *** [ 83.938053][ T7419] [ 83.940252][ T7419] 1 lock held by syz.4.252/7419: [ 83.941591][ T7419] #0: ffff0000f13d0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x5c/0x86c [ 83.944158][ T7419] [ 83.944158][ T7419] stack backtrace: [ 83.945758][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.4.252 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 83.948767][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.951528][ T7419] Call trace: [ 83.952405][ T7419] show_stack+0x2c/0x3c (C) [ 83.953613][ T7419] __dump_stack+0x30/0x40 [ 83.954790][ T7419] dump_stack_lvl+0xd8/0x12c [ 83.956088][ T7419] dump_stack+0x1c/0x28 [ 83.957258][ T7419] print_circular_bug+0x324/0x32c [ 83.958676][ T7419] check_noncircular+0x154/0x174 [ 83.960078][ T7419] __lock_acquire+0x1728/0x3058 [ 83.961416][ T7419] lock_acquire+0x14c/0x2e0 [ 83.962624][ T7419] __mutex_lock_common+0x1d0/0x2190 [ 83.964059][ T7419] mutex_lock_nested+0x2c/0x38 [ 83.965321][ T7419] smc_switch_to_fallback+0x44/0xa3c [ 83.966688][ T7419] smc_sendmsg+0xf8/0x86c [ 83.967932][ T7419] __sys_sendto+0x36c/0x4f4 [ 83.969158][ T7419] __arm64_sys_sendto+0xd8/0xf8 [ 83.970544][ T7419] invoke_syscall+0x98/0x2b8 [ 83.971817][ T7419] el0_svc_common+0x130/0x23c [ 83.973064][ T7419] do_el0_svc+0x48/0x58 [ 83.974232][ T7419] el0_svc+0x58/0x150 [ 83.975289][ T7419] el0t_64_sync_handler+0x78/0x108 [ 83.976648][ T7419] el0t_64_sync+0x198/0x19c