last executing test programs: 11.3484271s ago: executing program 3 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000080010000) openat(r1, &(0x7f0000004400)='./bus\x00', 0x463142, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000300)={0x2bb6, 0x6, 0xeaf}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a840000", @ANYRES16=r3, @ANYRES64=0x0, @ANYRES32, @ANYRES8=0x0], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r2, @ANYBLOB="7bb2b6db7eff0000006c36e847059f87c2cba4dcd51668c7494bc3085c220c00003293c559b5a1f7886e69c30663292af1cfa46b33cdd882e747286c8dceeb77f8124b2095c9e5b2367eecc30058"], 0x40}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0xa00810, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}) 9.700109827s ago: executing program 3 (id=197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000200b7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"/88], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0xc00c5512, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000040)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r6, &(0x7f00000004c0)="3f030200000000000000000089e9aaa911d7c2290f2b86dd", 0x18, 0x0, &(0x7f00000003c0)={0x11, 0x2, r7, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x78) inotify_init1(0x0) close(0xffffffffffffffff) 9.465785398s ago: executing program 3 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0xfffffffffffffe78, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xd4600000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)}], 0x1}}], 0x1, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="3f398000ed08070f00dd849b45409445fefc424d461f8031e1a4a911441827eb5cdb57ce64e20d2c333467ee172416391ecd9b5489c50699f1", 0x39}, {0x0}], 0x2, 0x6, 0x40) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000680)) syz_genetlink_get_family_id$nl80211(0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 6.844327566s ago: executing program 1 (id=208): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000440)=@canfd={{}, 0x0, 0x2, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x3a}, 0x2}, 0x4000000) 6.519839957s ago: executing program 1 (id=210): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x45a5, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 4.150444665s ago: executing program 1 (id=216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x3, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0x7, 0x1, 0x6, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb77a17d}], &(0x7f00000002c0)='syzkaller\x00', 0x15, 0xed, &(0x7f0000000700)=""/237, 0x41100, 0x1, '\x00', 0x0, @fallback=0x19, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x80000001, 0x31}, 0x10, 0x0, r3, 0x0, &(0x7f0000000380)=[r0, r0, r2, r2], &(0x7f00000003c0), 0x10, 0x6, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x420080, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltaction={0x20c, 0x31, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1537}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x229}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x20004041) 3.415569484s ago: executing program 0 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080), 0xfffffe13) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,chacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c", 0xf) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x1e8640, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r10, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f000001f8c0)=ANY=[@ANYBLOB="aeaaaaaaaaaaffffffffffff88644500003c000000210006907800000000ac1e00"/74], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000000101040d00801400018008000100e000000108000200e00000010c00028005000100000000080c0018800800014000000000"], 0x44}, 0x1, 0x0, 0x0, 0x240000d0}, 0x4084) 2.962140513s ago: executing program 4 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_set$pid(0x2, 0x0, 0x2004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x808) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/9, 0x9) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) 2.959453472s ago: executing program 2 (id=223): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000002060108000034e40000000000000000050005000a000000050001000600000005000400000000000900020073797a31000000000d000300686173683a6e6574000000000c0007800800124000000000086df1c2ca7aa6486fb3fe31942982cfa3d6f90117b6d181d1da0b3e647d5a73b015890a7ddb2fe0192844d382af2bba74a6d2962e1e1f857367e84280ca64894b84db17d088ef64b6cf8e970dfc2db147f98571494cc462f049ec9be9f3471834c429bde7efffe4b62263"], 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e006c3c0000000000000000000000000000000000ff020000000000000000000000000001000300000000000005020000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xfffffe01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x11, &(0x7f0000000000), 0x4) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000001b40)={&(0x7f0000001800)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) 2.930722713s ago: executing program 1 (id=224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0cfeffff18000001000006000000f1ff09000000000000001000090008001e00feffffff"], 0x24}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000600569dbcda8d25f420800000000000000d2c945141ae22904e5375f21867d6d1ffae5f8de991ae438f48600a686be8f85dbfa4c4f4e0932185ef37a4af9d3c7daa18c6ed61da2f114b069c06862f5e0c36e234e6a5ef72ab38f4742dd53cb4ff3f58135c38b6eb98a92f7a48941838b20fd5c7644c0a4bc3ecf74076d1ac6bc7550078d11023d2682fb39f218eafa6c0edc4402b473c37d5fb1c91c134d57e700ca535294a47d983f07a838cc5045f60474b9185e8a"]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x6}, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001180)={0x0, 0x80, 0x0, 0xab, 0xfc, 0x6, 0x7, 0xb, 0x7f, 0x6e, 0x0, 0x3, 0x0, 0x8}, 0xe) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}, {0x0, 0x1000000}], 0x0, 0x0, 0x7, 0x0, 0x6}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.920620139s ago: executing program 0 (id=225): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x66) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r2]) write$binfmt_aout(r1, 0x0, 0x0) 1.919986064s ago: executing program 2 (id=226): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.91963045s ago: executing program 4 (id=227): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1.745389717s ago: executing program 4 (id=228): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x20008040) 1.715848753s ago: executing program 3 (id=229): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010200000000401abf620600000005000100070000000900020073797a300000000005000500020000000c0007800800124000000000050004000000000010000300686173683a69702c6d616300"], 0x54}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24040840) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100fdffffffa0ab00001d00000008", @ANYBLOB="0c002f800800010000000000"], 0x28}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) 1.428515425s ago: executing program 4 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20c0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0xffffffff, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x200000000000011, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000100)={0x7e, 0x31364d4e, 0x3, @discrete={0xfffffffd, 0xec8}}) 1.235742543s ago: executing program 4 (id=231): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001200000300080000000000000a0b000000004e2200000000fdffffff00000000ba060000030000000200000000000000ffffffea4278f7a871321a0ca5cb08b231cc2895efa8ddba9a21666e2b4c230c23b10aa95cc842042798b1b5ba0144b4a90d200c479905da32202b23edb12a980765e54a8c36a021368013e0cbbe70e2c299cd6f14d73bc360d155381294429447fe8aee9e7f5a3f9381526c2cd5611387778f441ae8a7f33f63cf0b5310cf57f0b93812b4e1c5628c208deceb753a4402460de185ae59", @ANYRES32=0x0, @ANYBLOB="01000000000000000010000000000000"], 0x4c}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r6, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.117068027s ago: executing program 1 (id=232): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000080)=0x7bb, 0x4) 1.029986066s ago: executing program 2 (id=233): clock_adjtime(0x0, 0x0) 1.029371868s ago: executing program 0 (id=234): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 944.750964ms ago: executing program 1 (id=235): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) epoll_create1(0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000005d6f63378f4324220c000000060000000200000000000013"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/228, 0x0, 0xe4, 0x0, 0x4000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) ioctl$TIOCNOTTY(r3, 0x5422) r5 = dup(r3) r6 = io_uring_setup(0x17ba, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r8, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r8, 0xc0506107, &(0x7f0000000200)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xd0}) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000080)) 900.420001ms ago: executing program 2 (id=236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x0, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 836.923434ms ago: executing program 0 (id=237): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 790.481652ms ago: executing program 2 (id=238): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001200000300080000000000000a0b000000004e2200000000fdffffff00000000ba060000030000000200000000000000ffffffea4278f7a871321a0ca5cb08b231cc2895efa8ddba9a21666e2b4c230c23b10aa95cc842042798b1b5ba0144b4a90d200c479905da32202b23edb12a980765e54a8c36a021368013e0cbbe70e2c299cd6f14d73bc360d155381294429447fe8aee9e7f5a3f9381526c2cd5611387778f441ae8a7f33f63cf0b5310cf57f0b93812b4e1c5628c208deceb753a4402460de185ae59", @ANYRES32=0x0, @ANYBLOB="01000000000000000010000000000000"], 0x4c}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r6, 0x5602, &(0x7f00000004c0)={0x0, 0x5, 0x4, 0x7, 0x81}) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) 648.238513ms ago: executing program 0 (id=239): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2fc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @private=0xa010100, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x49}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "00000100cbd047da9ca965f96ad58a1f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bf0bc37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x79}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x9, 0x2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x0, [0x6, 0x0, 0x0, 0x0, 0x1], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x358) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r3, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) r4 = io_uring_setup(0x6e5b, &(0x7f0000000280)={0x0, 0x89db, 0x40, 0x0, 0x3d7}) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x5}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x4) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x3, &(0x7f0000000040)=""/110, &(0x7f0000000340)=0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000240), 0x4) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x44) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000001c0)={0x0, 0x10, 0x8, &(0x7f0000000100)={0x0, "07a5ba199fea49e4ebf055f4f325c34c037e77d6f4782685cdcba0097d6dc93be5"}}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r1) 549.884349ms ago: executing program 2 (id=240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x61) getdents(r0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000d00)=ANY=[@ANYBLOB='changeprofie &'], 0x280) 273.56433ms ago: executing program 4 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x41015500, 0x0) 234.667331ms ago: executing program 3 (id=242): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x180000, @loopback}, 0x1c) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 107.993215ms ago: executing program 0 (id=243): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdir(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000500)=""/4096, 0x1000) 0s ago: executing program 3 (id=244): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 52.738736][ T5830] cgroup: Unknown subsys name 'net' [ 52.888140][ T5830] cgroup: Unknown subsys name 'cpuset' [ 52.895986][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.187542][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.898547][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.907195][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.915473][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.923158][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.931036][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.931071][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.938893][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.947121][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.952664][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.960435][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.974195][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.981668][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.990227][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.997349][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.997910][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.009343][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.012583][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.020321][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.026099][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.041587][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.044120][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.061608][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.069576][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.069989][ T5161] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.096261][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.096345][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.110542][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.112564][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.134763][ T5860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.149754][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.449344][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 58.590948][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 58.629809][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 58.687275][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 58.697096][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 58.719983][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.727448][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.734824][ T5844] bridge_slave_0: entered allmulticast mode [ 58.742226][ T5844] bridge_slave_0: entered promiscuous mode [ 58.780439][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.787781][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.794902][ T5844] bridge_slave_1: entered allmulticast mode [ 58.801966][ T5844] bridge_slave_1: entered promiscuous mode [ 58.880467][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.921841][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.940178][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.947586][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.954759][ T5848] bridge_slave_0: entered allmulticast mode [ 58.961763][ T5848] bridge_slave_0: entered promiscuous mode [ 58.991919][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.999621][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.007452][ T5846] bridge_slave_0: entered allmulticast mode [ 59.013954][ T5846] bridge_slave_0: entered promiscuous mode [ 59.027587][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.034809][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.042328][ T5848] bridge_slave_1: entered allmulticast mode [ 59.049368][ T5848] bridge_slave_1: entered promiscuous mode [ 59.072335][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.080091][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.087614][ T5851] bridge_slave_0: entered allmulticast mode [ 59.094183][ T5851] bridge_slave_0: entered promiscuous mode [ 59.101103][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.108581][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.115886][ T5858] bridge_slave_0: entered allmulticast mode [ 59.122421][ T5858] bridge_slave_0: entered promiscuous mode [ 59.130067][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.137407][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.144541][ T5846] bridge_slave_1: entered allmulticast mode [ 59.151236][ T5846] bridge_slave_1: entered promiscuous mode [ 59.168873][ T5844] team0: Port device team_slave_0 added [ 59.185387][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.194824][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.202508][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.210004][ T5851] bridge_slave_1: entered allmulticast mode [ 59.216619][ T5851] bridge_slave_1: entered promiscuous mode [ 59.222984][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.230505][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.237666][ T5858] bridge_slave_1: entered allmulticast mode [ 59.244176][ T5858] bridge_slave_1: entered promiscuous mode [ 59.258662][ T5844] team0: Port device team_slave_1 added [ 59.267960][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.279099][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.320123][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.337556][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.384319][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.395216][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.406825][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.417220][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.424162][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.450340][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.466711][ T5846] team0: Port device team_slave_0 added [ 59.474848][ T5848] team0: Port device team_slave_0 added [ 59.482817][ T5848] team0: Port device team_slave_1 added [ 59.520197][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.527237][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.553500][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.571656][ T5846] team0: Port device team_slave_1 added [ 59.585307][ T5851] team0: Port device team_slave_0 added [ 59.593968][ T5851] team0: Port device team_slave_1 added [ 59.611733][ T5858] team0: Port device team_slave_0 added [ 59.659402][ T5858] team0: Port device team_slave_1 added [ 59.672371][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.679680][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.705744][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.718218][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.725184][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.751448][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.763537][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.770848][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.797030][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.808659][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.815854][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.841874][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.872412][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.879580][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.905556][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.922715][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.929918][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.956088][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.977739][ T5844] hsr_slave_0: entered promiscuous mode [ 59.984143][ T5844] hsr_slave_1: entered promiscuous mode [ 60.011344][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.018492][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.045295][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.058634][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.066529][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.066587][ T5856] Bluetooth: hci1: command tx timeout [ 60.092475][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.125824][ T5848] hsr_slave_0: entered promiscuous mode [ 60.132348][ T5848] hsr_slave_1: entered promiscuous mode [ 60.138721][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.146736][ T5856] Bluetooth: hci0: command tx timeout [ 60.152621][ T5848] Cannot create hsr debugfs directory [ 60.179767][ T5846] hsr_slave_0: entered promiscuous mode [ 60.186458][ T5846] hsr_slave_1: entered promiscuous mode [ 60.192448][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.200452][ T5846] Cannot create hsr debugfs directory [ 60.225631][ T5856] Bluetooth: hci2: command tx timeout [ 60.225668][ T5847] Bluetooth: hci4: command tx timeout [ 60.237324][ T5860] Bluetooth: hci3: command tx timeout [ 60.247499][ T5858] hsr_slave_0: entered promiscuous mode [ 60.253701][ T5858] hsr_slave_1: entered promiscuous mode [ 60.263457][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.271108][ T5858] Cannot create hsr debugfs directory [ 60.327790][ T5851] hsr_slave_0: entered promiscuous mode [ 60.334237][ T5851] hsr_slave_1: entered promiscuous mode [ 60.340559][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.348261][ T5851] Cannot create hsr debugfs directory [ 60.610678][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.620845][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.653351][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.672448][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.705450][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.722417][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.734867][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.751717][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.803955][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.813685][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.838625][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.851128][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.908635][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.933685][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.946420][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.958877][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.972290][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.987908][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.007107][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.016960][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.029971][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.104583][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.149121][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.156445][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.167292][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.174401][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.240312][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.264236][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.281013][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.324149][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.338716][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.348557][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.360528][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.367651][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.381310][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.388438][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.405152][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.421614][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.428766][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.438770][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.445927][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.466732][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.473794][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.487476][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.494601][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.543166][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.621781][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.628934][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.650670][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.657829][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.763285][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.808214][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.904527][ T5844] veth0_vlan: entered promiscuous mode [ 61.929083][ T5844] veth1_vlan: entered promiscuous mode [ 61.992151][ T5844] veth0_macvtap: entered promiscuous mode [ 62.024747][ T5844] veth1_macvtap: entered promiscuous mode [ 62.060437][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.093729][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.132884][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.146783][ T5860] Bluetooth: hci1: command tx timeout [ 62.153002][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.164180][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.173661][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.182923][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.191938][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.211494][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.226100][ T5860] Bluetooth: hci0: command tx timeout [ 62.297292][ T5848] veth0_vlan: entered promiscuous mode [ 62.306418][ T5860] Bluetooth: hci2: command tx timeout [ 62.311882][ T5847] Bluetooth: hci3: command tx timeout [ 62.311892][ T5856] Bluetooth: hci4: command tx timeout [ 62.328015][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.354727][ T5851] veth0_vlan: entered promiscuous mode [ 62.382798][ T5858] veth0_vlan: entered promiscuous mode [ 62.402173][ T5848] veth1_vlan: entered promiscuous mode [ 62.454222][ T5858] veth1_vlan: entered promiscuous mode [ 62.464199][ T5851] veth1_vlan: entered promiscuous mode [ 62.481722][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.495129][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.569528][ T5848] veth0_macvtap: entered promiscuous mode [ 62.581578][ T5858] veth0_macvtap: entered promiscuous mode [ 62.603225][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.612802][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.618790][ T5858] veth1_macvtap: entered promiscuous mode [ 62.642107][ T5851] veth0_macvtap: entered promiscuous mode [ 62.657594][ T5848] veth1_macvtap: entered promiscuous mode [ 62.668254][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.685988][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.700257][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.713448][ T5851] veth1_macvtap: entered promiscuous mode [ 62.727467][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.754394][ T5846] veth0_vlan: entered promiscuous mode [ 62.763135][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.773827][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.785049][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.794074][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.806791][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.816784][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.828115][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.838926][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.849513][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.860413][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.870696][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.881275][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.892447][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.910776][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.919975][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.928889][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.937696][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.960053][ T5846] veth1_vlan: entered promiscuous mode [ 62.979407][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.000599][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.015274][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.025581][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.246922][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.257601][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.268562][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.280897][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.291400][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.434298][ T5934] Zero length message leads to an empty skb [ 63.524237][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.593255][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.988989][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.005537][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.015379][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.032743][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.043856][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.061093][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.075020][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.098039][ T5846] veth0_macvtap: entered promiscuous mode [ 64.139687][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.153880][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.166635][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.175352][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.184493][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.193855][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.207490][ T5846] veth1_macvtap: entered promiscuous mode [ 64.225696][ T5847] Bluetooth: hci1: command tx timeout [ 64.386015][ T5847] Bluetooth: hci4: command tx timeout [ 64.406471][ T5847] Bluetooth: hci3: command tx timeout [ 64.412410][ T5847] Bluetooth: hci2: command tx timeout [ 64.693045][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.781282][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.931574][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.939908][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.960870][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.978352][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.994810][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.007377][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.020302][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.039617][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.049881][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.060795][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.077557][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.143078][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.165993][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.184802][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.222871][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.233704][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.244217][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.254494][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.265207][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.275921][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.286548][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.298764][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.328623][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.349304][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.361763][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.373188][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.392323][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.416581][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.636600][ T5860] Bluetooth: hci0: command tx timeout [ 66.269014][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.290168][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.310249][ T5860] Bluetooth: hci1: command tx timeout [ 66.324295][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.333210][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.828932][ T5860] Bluetooth: hci2: command tx timeout [ 66.849994][ T5860] Bluetooth: hci3: command tx timeout [ 66.855956][ T5860] Bluetooth: hci4: command tx timeout [ 66.943547][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.025993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.083581][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.138704][ T29] audit: type=1326 audit(1730503564.115:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.160444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.549440][ T29] audit: type=1326 audit(1730503564.125:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.571818][ T29] audit: type=1326 audit(1730503564.125:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.594527][ T29] audit: type=1326 audit(1730503564.125:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.616748][ T29] audit: type=1326 audit(1730503564.125:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.638895][ T29] audit: type=1326 audit(1730503564.125:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.660865][ T29] audit: type=1326 audit(1730503564.135:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 67.683172][ T29] audit: type=1326 audit(1730503564.135:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 69.225180][ T29] audit: type=1326 audit(1730503566.235:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 69.481489][ T29] audit: type=1326 audit(1730503566.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 69.580915][ T5959] loop1: detected capacity change from 0 to 32768 [ 69.635869][ T5959] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10 (5959) [ 69.728644][ T5959] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 69.740280][ T5959] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 69.776113][ T5921] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.786405][ T5959] BTRFS info (device loop1): using free-space-tree [ 70.100825][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 70.110182][ T5921] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 70.119963][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.078091][ T5921] usb 5-1: config 0 has no interface number 0 [ 71.084257][ T5921] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 71.095347][ T5921] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 71.105273][ T5921] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.118737][ T5921] usb 5-1: config 0 interface 52 has no altsetting 0 [ 72.027235][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.034753][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.158091][ T5921] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 72.184478][ T5921] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 72.272433][ T5959] BTRFS error (device loop1): open_ctree failed [ 72.411362][ T5921] usb 5-1: Manufacturer: syz [ 72.427449][ T5921] usb 5-1: config 0 descriptor?? [ 73.382231][ T5921] usb 5-1: Can not set alternate setting to 1, error: -71 [ 73.389779][ T5921] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 73.519135][ T5921] usb 5-1: USB disconnect, device number 2 [ 75.373574][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 75.373593][ T29] audit: type=1326 audit(1730503572.355:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 75.420454][ T29] audit: type=1326 audit(1730503572.355:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 75.446212][ T29] audit: type=1326 audit(1730503572.355:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 75.562103][ T29] audit: type=1326 audit(1730503572.355:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 75.590102][ T29] audit: type=1326 audit(1730503572.355:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 75.895658][ T29] audit: type=1326 audit(1730503572.355:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 75.922784][ T29] audit: type=1326 audit(1730503572.355:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 77.125601][ T1203] cfg80211: failed to load regulatory.db [ 80.856065][ T6072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.895927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.904599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.984460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.086816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.124423][ T6075] loop4: detected capacity change from 0 to 2048 [ 81.175898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.185274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.211134][ T29] audit: type=1326 audit(1730503578.225:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 81.418040][ T29] audit: type=1326 audit(1730503578.285:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 81.487679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 81.625594][ T29] audit: type=1326 audit(1730503578.315:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 81.808463][ T29] audit: type=1326 audit(1730503578.315:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 81.833563][ T29] audit: type=1326 audit(1730503578.315:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 81.856186][ T29] audit: type=1326 audit(1730503578.315:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 82.044205][ T29] audit: type=1326 audit(1730503578.325:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 82.107879][ T29] audit: type=1326 audit(1730503578.375:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 83.120443][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.232825][ T6075] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.925412][ T6107] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 86.038588][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.075820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.360235][ T6114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.366466][ T6114] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 88.060967][ T6114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.710708][ T6114] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 88.746852][ T29] audit: type=1326 audit(1730503585.705:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 88.925874][ T29] audit: type=1326 audit(1730503585.705:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.125780][ T29] audit: type=1326 audit(1730503585.715:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.147939][ T29] audit: type=1326 audit(1730503585.725:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.187593][ T29] audit: type=1326 audit(1730503585.725:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.210651][ T29] audit: type=1326 audit(1730503585.725:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.236394][ T29] audit: type=1326 audit(1730503585.725:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.259661][ T29] audit: type=1326 audit(1730503585.725:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 89.284020][ T6141] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 89.384519][ T6114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.408872][ T6114] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 89.484412][ T6114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.503706][ T6114] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 89.957815][ T6114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.975659][ T6114] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 91.086379][ T29] audit: type=1326 audit(1730503588.105:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 91.187518][ T6156] loop3: detected capacity change from 0 to 2048 [ 91.266116][ T29] audit: type=1326 audit(1730503588.105:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9117e719 code=0x7ffc0000 [ 92.580309][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.741296][ T6156] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.786603][ T6177] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.841095][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.435868][ T6229] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.992835][ T6241] kvm: emulating exchange as write [ 103.191229][ T57] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.675763][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 103.723323][ T57] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 103.751910][ T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.802248][ T57] usb 4-1: config 0 has no interface number 0 [ 103.815602][ T57] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 103.841690][ T57] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 103.880565][ T57] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.957051][ T57] usb 4-1: config 0 interface 52 has no altsetting 0 [ 104.515727][ T57] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 104.525057][ T57] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 104.533344][ T57] usb 4-1: Manufacturer: syz [ 104.541986][ T57] usb 4-1: config 0 descriptor?? [ 106.877644][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 106.877692][ T29] audit: type=1326 audit(1730503603.605:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 107.076262][ T29] audit: type=1326 audit(1730503603.605:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 107.168374][ T29] audit: type=1326 audit(1730503603.615:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 107.203939][ T29] audit: type=1326 audit(1730503603.615:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 107.252763][ T29] audit: type=1326 audit(1730503603.615:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 108.075753][ T29] audit: type=1326 audit(1730503603.615:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 108.097903][ T29] audit: type=1326 audit(1730503603.615:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 108.185078][ T29] audit: type=1326 audit(1730503603.615:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5017e719 code=0x7ffc0000 [ 108.503254][ T57] usb 4-1: Can not set alternate setting to 1, error: -71 [ 108.510562][ T57] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 108.544745][ T57] usb 4-1: USB disconnect, device number 2 [ 110.381038][ T6324] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.860635][ T29] audit: type=1326 audit(1730503628.875:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 132.258944][ T29] audit: type=1326 audit(1730503628.875:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 132.295828][ T29] audit: type=1326 audit(1730503628.875:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 132.329896][ T29] audit: type=1326 audit(1730503628.875:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 132.919986][ T29] audit: type=1326 audit(1730503628.875:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 133.061685][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.066604][ T29] audit: type=1326 audit(1730503628.875:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 133.070913][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.098278][ T29] audit: type=1326 audit(1730503628.875:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 133.121199][ T29] audit: type=1326 audit(1730503628.875:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8490f7e719 code=0x7ffc0000 [ 133.157221][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.926193][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 133.945427][ T25] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 134.001344][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.013415][ T25] usb 4-1: config 0 has no interface number 0 [ 134.030231][ T25] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 134.061509][ T25] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 134.155064][ T25] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.168089][ T25] usb 4-1: config 0 interface 52 has no altsetting 0 [ 134.576954][ T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 134.589665][ T25] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 134.599028][ T25] usb 4-1: Manufacturer: syz [ 135.165291][ T25] usb 4-1: config 0 descriptor?? [ 135.227553][ T25] usb 4-1: can't set config #0, error -71 [ 135.237790][ T25] usb 4-1: USB disconnect, device number 3 [ 137.425379][ T5850] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.605736][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 137.983157][ T5850] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 138.014226][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.040735][ T5850] usb 3-1: config 0 has no interface number 0 [ 138.058360][ T5850] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 138.070655][ T5850] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 138.085836][ T5850] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.124869][ T5850] usb 3-1: config 0 interface 52 has no altsetting 0 [ 138.160267][ T5850] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 138.170967][ T6586] overlayfs: failed to resolve './file1': -2 [ 138.192059][ T5850] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 138.223221][ T5850] usb 3-1: Manufacturer: syz [ 138.238991][ T5850] usb 3-1: config 0 descriptor?? [ 138.595830][ T6589] warning: `syz.0.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.127670][ T1203] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.195648][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.223727][ T29] audit: type=1400 audit(1730503637.235:73): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6585 comm="syz.4.163" [ 140.358205][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 140.388320][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.440385][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.593864][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 140.619057][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 140.632371][ T8] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 140.644707][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.688390][ T8] hub 2-1:1.0: bad descriptor, ignoring hub [ 140.694860][ T8] hub 2-1:1.0: probe with driver hub failed with error -5 [ 140.716463][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 140.728507][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 140.767191][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 140.777125][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 140.830252][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.169'. [ 141.043770][ T6612] [U]  [ 141.206760][ T5850] usb 3-1: Can not set alternate setting to 1, error: -71 [ 141.214016][ T5850] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 141.241378][ T5850] usb 3-1: USB disconnect, device number 2 [ 141.262536][ T25] usb 2-1: USB disconnect, device number 2 [ 143.634370][ T1203] usb 1-1: device descriptor read/all, error -71 [ 144.505635][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.554731][ T6675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.687180][ T5897] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 144.706610][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.725581][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.782407][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.812545][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a402, bcdDevice= 0.40 [ 144.864158][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.903543][ T5897] usb 2-1: Product: syz [ 144.923421][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 144.932676][ T5897] usb 2-1: Manufacturer: syz [ 144.947125][ T5897] usb 2-1: SerialNumber: syz [ 144.978902][ T5897] cdc_ncm 2-1:1.0: skipping garbage [ 144.989818][ T5897] cdc_ncm 2-1:1.0: skipping garbage [ 144.995056][ T5897] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 145.019225][ T5897] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 145.035554][ T5897] cdc_ncm 2-1:1.0: bind() failure [ 145.781486][ T6708] Bluetooth: MGMT ver 1.23 [ 146.321031][ T6704] input: syz0 as /devices/virtual/input/input5 [ 146.546905][ T971] usb 2-1: USB disconnect, device number 3 [ 148.455865][ T6740] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 149.098838][ T6740] team0: Port device netdevsim0 added [ 149.104758][ T6741] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 149.116010][ T6741] team0: Port device netdevsim0 removed [ 149.123300][ T6741] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.271244][ T1203] libceph: connect (1)[c::]:6789 error -101 [ 149.277758][ T1203] libceph: mon0 (1)[c::]:6789 connect error [ 150.293801][ T1203] libceph: connect (1)[c::]:6789 error -101 [ 150.300164][ T1203] libceph: mon0 (1)[c::]:6789 connect error [ 150.324640][ T6738] ceph: No mds server is up or the cluster is laggy [ 150.611473][ T6755] Bluetooth: (null): Invalid header checksum [ 150.936778][ T6765] netlink: 168 bytes leftover after parsing attributes in process `syz.2.218'. [ 151.720601][ T29] audit: type=1326 audit(1730503648.735:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 152.102976][ T6778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.221'. [ 152.633122][ T29] audit: type=1326 audit(1730503648.765:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 152.784793][ T29] audit: type=1326 audit(1730503648.765:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 152.832479][ T29] audit: type=1326 audit(1730503648.765:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 152.869424][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 152.946250][ T29] audit: type=1326 audit(1730503648.765:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 153.003787][ T29] audit: type=1326 audit(1730503648.765:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bfc180637 code=0x7ffc0000 [ 153.038517][ T29] audit: type=1326 audit(1730503648.765:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 153.069221][ T29] audit: type=1326 audit(1730503648.765:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 153.092623][ T29] audit: type=1326 audit(1730503648.765:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 153.146197][ T29] audit: type=1326 audit(1730503648.765:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3bfc17e719 code=0x7ffc0000 [ 153.415082][ T6806] netlink: 'syz.4.231': attribute type 10 has an invalid length. [ 153.423129][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.231'. [ 153.448452][ T6806] team0: Port device geneve0 added [ 153.927969][ T6825] misc userio: Invalid payload size [ 153.952209][ T6825] misc userio: No port type given on /dev/userio [ 154.206778][ T6839] overlayfs: failed to resolve './file1': -2 [ 154.646878][ T6852] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 154.703209][ T6852] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 154.730646][ T6852] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.244'. [ 154.755683][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.841227][ T6853] [ 154.843571][ T6853] ====================================================== [ 154.850577][ T6853] WARNING: possible circular locking dependency detected [ 154.857600][ T6853] 6.12.0-rc5-next-20241101-syzkaller #0 Not tainted [ 154.864167][ T6853] ------------------------------------------------------ [ 154.871162][ T6853] syz.3.244/6853 is trying to acquire lock: [ 154.877028][ T6853] ffff88807d295be0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 154.885900][ T6853] [ 154.885900][ T6853] but task is already holding lock: [ 154.893243][ T6853] ffff88802591d680 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 154.902529][ T6853] [ 154.902529][ T6853] which lock already depends on the new lock. [ 154.902529][ T6853] [ 154.912912][ T6853] [ 154.912912][ T6853] the existing dependency chain (in reverse order) is: [ 154.921907][ T6853] [ 154.921907][ T6853] -> #3 (&q->debugfs_mutex){+.+.}-{4:4}: [ 154.929712][ T6853] lock_acquire+0x1ed/0x550 [ 154.934717][ T6853] __mutex_lock+0x1ac/0xee0 [ 154.939727][ T6853] blk_mq_init_sched+0x3fa/0x830 [ 154.945184][ T6853] elevator_init_mq+0x1d8/0x2d0 [ 154.950539][ T6853] add_disk_fwnode+0x10d/0xf80 [ 154.955816][ T6853] sd_probe+0xba6/0x1100 [ 154.960567][ T6853] really_probe+0x2b8/0xad0 [ 154.965578][ T6853] __driver_probe_device+0x1a2/0x390 [ 154.971366][ T6853] driver_probe_device+0x50/0x430 [ 154.976908][ T6853] __device_attach_driver+0x2d6/0x530 [ 154.982794][ T6853] bus_for_each_drv+0x24e/0x2e0 [ 154.988149][ T6853] __device_attach_async_helper+0x22d/0x300 [ 154.994545][ T6853] async_run_entry_fn+0xa8/0x420 [ 155.000005][ T6853] process_scheduled_works+0xa63/0x1850 [ 155.006058][ T6853] worker_thread+0x870/0xd30 [ 155.011151][ T6853] kthread+0x2f0/0x390 [ 155.015723][ T6853] ret_from_fork+0x4b/0x80 [ 155.020643][ T6853] ret_from_fork_asm+0x1a/0x30 [ 155.025915][ T6853] [ 155.025915][ T6853] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 155.034521][ T6853] lock_acquire+0x1ed/0x550 [ 155.039528][ T6853] blk_mq_submit_bio+0x1510/0x2490 [ 155.045139][ T6853] __submit_bio+0x2c2/0x560 [ 155.050143][ T6853] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 155.056273][ T6853] ext4_bio_write_folio+0x123a/0x1d70 [ 155.062149][ T6853] mpage_submit_folio+0x1af/0x230 [ 155.067688][ T6853] mpage_process_page_bufs+0x6c9/0x8d0 [ 155.073658][ T6853] mpage_prepare_extent_to_map+0xec7/0x1c80 [ 155.080062][ T6853] ext4_do_writepages+0x1243/0x3d20 [ 155.085768][ T6853] ext4_writepages+0x213/0x3c0 [ 155.091044][ T6853] do_writepages+0x35d/0x870 [ 155.096147][ T6853] __writeback_single_inode+0x14f/0x10d0 [ 155.102288][ T6853] writeback_sb_inodes+0x80c/0x1370 [ 155.107990][ T6853] __writeback_inodes_wb+0x11b/0x260 [ 155.113795][ T6853] wb_writeback+0x42f/0xbd0 [ 155.118806][ T6853] wb_workfn+0xba1/0x1090 [ 155.123643][ T6853] process_scheduled_works+0xa63/0x1850 [ 155.129697][ T6853] worker_thread+0x870/0xd30 [ 155.134795][ T6853] kthread+0x2f0/0x390 [ 155.139367][ T6853] ret_from_fork+0x4b/0x80 [ 155.144387][ T6853] ret_from_fork_asm+0x1a/0x30 [ 155.149670][ T6853] [ 155.149670][ T6853] -> #1 (jbd2_handle){++++}-{0:0}: [ 155.156952][ T6853] lock_acquire+0x1ed/0x550 [ 155.161964][ T6853] start_this_handle+0x1eb4/0x2110 [ 155.167580][ T6853] jbd2__journal_start+0x2da/0x5d0 [ 155.173195][ T6853] __ext4_journal_start_sb+0x239/0x600 [ 155.179169][ T6853] ext4_dirty_inode+0x92/0x110 [ 155.184437][ T6853] __mark_inode_dirty+0x2ee/0xe90 [ 155.189968][ T6853] touch_atime+0x413/0x690 [ 155.194888][ T6853] ext4_file_mmap+0x18c/0x540 [ 155.200067][ T6853] __mmap_region+0x2204/0x2cd0 [ 155.205334][ T6853] mmap_region+0x226/0x2c0 [ 155.210253][ T6853] do_mmap+0x8f0/0x1000 [ 155.214910][ T6853] vm_mmap_pgoff+0x214/0x430 [ 155.220007][ T6853] ksys_mmap_pgoff+0x4eb/0x720 [ 155.225282][ T6853] do_syscall_64+0xf3/0x230 [ 155.230304][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.236705][ T6853] [ 155.236705][ T6853] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 155.244242][ T6853] validate_chain+0x18ef/0x5920 [ 155.249597][ T6853] __lock_acquire+0x1397/0x2100 [ 155.254959][ T6853] lock_acquire+0x1ed/0x550 [ 155.259964][ T6853] __might_fault+0xc6/0x120 [ 155.264976][ T6853] _copy_from_user+0x2a/0xc0 [ 155.270072][ T6853] blk_trace_setup+0xd2/0x1e0 [ 155.275252][ T6853] sg_ioctl+0xa46/0x2e80 [ 155.280009][ T6853] __se_sys_ioctl+0xf9/0x170 [ 155.285107][ T6853] do_syscall_64+0xf3/0x230 [ 155.290122][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.296531][ T6853] [ 155.296531][ T6853] other info that might help us debug this: [ 155.296531][ T6853] [ 155.306742][ T6853] Chain exists of: [ 155.306742][ T6853] &mm->mmap_lock --> &q->q_usage_counter(io)#66 --> &q->debugfs_mutex [ 155.306742][ T6853] [ 155.320803][ T6853] Possible unsafe locking scenario: [ 155.320803][ T6853] [ 155.328240][ T6853] CPU0 CPU1 [ 155.333586][ T6853] ---- ---- [ 155.338931][ T6853] lock(&q->debugfs_mutex); [ 155.343508][ T6853] lock(&q->q_usage_counter(io)#66); [ 155.351385][ T6853] lock(&q->debugfs_mutex); [ 155.358473][ T6853] rlock(&mm->mmap_lock); [ 155.362873][ T6853] [ 155.362873][ T6853] *** DEADLOCK *** [ 155.362873][ T6853] [ 155.371001][ T6853] 1 lock held by syz.3.244/6853: [ 155.375916][ T6853] #0: ffff88802591d680 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 155.385645][ T6853] [ 155.385645][ T6853] stack backtrace: [ 155.391521][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.3.244 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 155.401561][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.411624][ T6853] Call Trace: [ 155.414896][ T6853] [ 155.417819][ T6853] dump_stack_lvl+0x241/0x360 [ 155.422483][ T6853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.427663][ T6853] ? __pfx__printk+0x10/0x10 [ 155.432244][ T6853] print_circular_bug+0x13a/0x1b0 [ 155.437256][ T6853] check_noncircular+0x36a/0x4a0 [ 155.442177][ T6853] ? __pfx_check_noncircular+0x10/0x10 [ 155.447617][ T6853] ? lockdep_lock+0x123/0x2b0 [ 155.452284][ T6853] validate_chain+0x18ef/0x5920 [ 155.457127][ T6853] ? __pfx_lock_release+0x10/0x10 [ 155.462135][ T6853] ? __pfx_validate_chain+0x10/0x10 [ 155.467315][ T6853] ? kernel_text_address+0xa7/0xe0 [ 155.472411][ T6853] ? __kernel_text_address+0xd/0x40 [ 155.477594][ T6853] ? mark_lock+0x9a/0x360 [ 155.481905][ T6853] ? __lock_acquire+0x1397/0x2100 [ 155.486915][ T6853] ? mark_lock+0x9a/0x360 [ 155.491226][ T6853] __lock_acquire+0x1397/0x2100 [ 155.496078][ T6853] lock_acquire+0x1ed/0x550 [ 155.500588][ T6853] ? __might_fault+0xaa/0x120 [ 155.505249][ T6853] ? __pfx_lock_acquire+0x10/0x10 [ 155.510257][ T6853] ? __pfx___might_resched+0x10/0x10 [ 155.515548][ T6853] ? blk_trace_setup+0xb0/0x1e0 [ 155.520384][ T6853] ? __pfx___mutex_lock+0x10/0x10 [ 155.525390][ T6853] ? __pfx_lock_release+0x10/0x10 [ 155.530418][ T6853] ? __might_fault+0xaa/0x120 [ 155.535080][ T6853] __might_fault+0xc6/0x120 [ 155.539569][ T6853] ? __might_fault+0xaa/0x120 [ 155.544233][ T6853] _copy_from_user+0x2a/0xc0 [ 155.548814][ T6853] blk_trace_setup+0xd2/0x1e0 [ 155.553477][ T6853] ? __lock_acquire+0x1397/0x2100 [ 155.558483][ T6853] ? __pfx_blk_trace_setup+0x10/0x10 [ 155.563759][ T6853] sg_ioctl+0xa46/0x2e80 [ 155.567985][ T6853] ? __pfx_sg_ioctl+0x10/0x10 [ 155.572665][ T6853] ? __fget_files+0x2a/0x410 [ 155.577241][ T6853] ? __fget_files+0x2a/0x410 [ 155.581816][ T6853] ? __pfx_sg_ioctl+0x10/0x10 [ 155.586475][ T6853] __se_sys_ioctl+0xf9/0x170 [ 155.591053][ T6853] do_syscall_64+0xf3/0x230 [ 155.595540][ T6853] ? clear_bhb_loop+0x35/0x90 [ 155.600208][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.606087][ T6853] RIP: 0033:0x7f844297e719 [ 155.610492][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.630080][ T6853] RSP: 002b:00007f8443756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.638478][ T6853] RAX: ffffffffffffffda RBX: 00007f8442b36058 RCX: 00007f844297e719 [ 155.646434][ T6853] RDX: 0000000020000540 RSI: 00000000c0481273 RDI: 0000000000000007 [ 155.654389][ T6853] RBP: 00007f84429f132e R08: 0000000000000000 R09: 0000000000000000 [ 155.662341][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.670292][ T6853] R13: 0000000000000000 R14: 00007f8442b36058 R15: 00007fff753ac728 [ 155.678256][ T6853] [ 155.714296][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 155.733457][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.749960][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.769673][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.777992][ T8] usb 1-1: Product: syz [ 155.783429][ T8] usb 1-1: Manufacturer: syz [ 155.792904][ T8] usb 1-1: SerialNumber: syz [ 155.806970][ T8] usb 1-1: config 0 descriptor?? [ 155.833648][ T6850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.262328][ T8] usb 1-1: USB disconnect, device number 4