last executing test programs: 14.32824205s ago: executing program 1 (id=17): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = fanotify_init(0x40, 0x80000) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0xad0, 0x207, 0x2, 0xf6, "03000001000000000800feffff8214ff012000", 0x808, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) fsmount(r2, 0x0, 0x1) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/171, 0xab}], 0x1) 12.218622755s ago: executing program 1 (id=21): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000340)=[{r0, 0xd2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x4, 0x29dc5, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 11.948548893s ago: executing program 3 (id=22): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 11.688557881s ago: executing program 1 (id=23): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0xffff, 0x400002) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000640)={{r1}, "ce84f746ae7da73add6bfa2ab811c7a9e0d7d2695a4c1d3ec58050fb568f47573a6a07a978e4ae3c047bbad2a558f6688301104cb676b751264d855054216195d2a13fa3fe625036c07937ff7bc6d44034acac4e54289c71af9de2140a5e494dd081af521a6941f0af4a8a03f133ff569acf3ac89c746556c9bf3e4de150c8390b07390e6ec301c486ca193e04a51ae5f8f83bb342dab2f089c9f384c382cd0c159ed62730a25261e8b7c41cde5e615f33daf3aa91f370acab56681962f6030b1e5c784a07811199e42a15760608e13175033f102099673734e0e3ad14680a31a42eba88476560181418df2d358ac5878fb2f2df442ac1fde567cda98160c23a741147f4e3ea79a147cf1bab3aa5b541ef5afd3d3ea3a6c930916da5163e4224870c4451df48b24e7af2d33ca37ba2a6a2fa6b9fb2c0f8db6717db0ae00d7c5c4430a87c48291866aa58573b0e4364695df6796906c406da39565a848c9ac7076b046c91350d875f4402681633420e8173315c77a7a86c2104f9b7a7a5e83a2d9891757633ee051b94c7e1e256605250b9a45112c3f1494633022574ccb70cf08929fe57d28b0740f7eed889200eb18a8080f01a728ab365b09f29f6b16d13da0aaa2d75063dbd42a27adbd1fbd06efc25a77fdd8a8d76f482f0684a0489e9b9a20a97601761a038e38be65bd55c9e48f182bb9417bb8bad4880cb1dc96e7f3fb702bea4e933a858a37252fb939728e8d6b3897eed07cd86cbad1aa64a9dc418bc23557976362e2b84063539b93a348774e8bd5f531fd7902ff8079b7c4886944a2010d9238833ef1a97cdc33086ce7cbfab29a19f1e94f836b1faada73d7432ed553c27e7aeffe346348113965344a8de3e6dc6dd534b4cdf94fdbfa57b9a48ec7adbd55c56e5719cbecb5dff9c51bd2ea9de2becea402b6819183603b8f524f1f848507413280abf6a01a03aa1f8409d3577537f6efcb7ded902e3e86a5b810c30d30a83b37a62af3aa31a29b0c4ada94572c9ea6c948701e1c8bc21c30a7a045fb5eea18c51fdbe9c2f6def1f6fe1b2debdd93bc9512901d60faadda368b3e7c8aaeb36691d73650d9caa7b2bcdb219abac50975ae053af0b8bb5f196a247454efd91ffffa0b2b1e02420af2ccf391bfc337513de6d620c68b34aa2c36bd9b52e7104c5b438eba90f263d2541cf15463cff5404e4861857e8404e23f2c0428e069f0d8b18c0dcc8525d34535c7e638deb927bcb8e783075b3d99851d878cbb4228f4d0f90a1c63fb3d1a13b47213d43581a8d9655314c8877c9ac6a7bf896edd62626550450ea84bf5527796821531a6a624e157bee62601aef8d3b02a8634409c6ac6007ce41b946ef3625f7ebceb369a77ab3f0d57f5c67e1490363dd5c3f1fbba5b8ef87284ee3c31f1c7414c41f557179dfead28500e310fb25fb10f80ab035906443094818da6030b88e2de834d7e31d75eacecd138e034d178e06d85c4620b28e559c82ce8bdc86866093c8efc52c881e76f323a3192a28aa98e67244b25c4ad7b31650edf2c389a6400c5d5c70c388c05061806c752cf0aba481871704e0e988ac3d298aaae3d4e54cdb96f518848d14599f8b8ae2f9a7d217753b87e36409b1f9bafd36abed93d28660edb47182e26ce721d1bf474e4de9c1db6b5d53323d16c9454ce3563bf93238f8b7411777c545e9fd879c7e6dfd64ee9b0ea857924afd145e3496e12d85e180ab87a1b1d0a4ffac54aed5b70694b1bf3fd7498e3e04d09861713d28c4e1e554210b051e4aa78ff81bf0426719c7d7129806bd67a6e68d08f492ef01844b9d1d3bad2e8103b4ff61fae7221abd499a1310391907e266d0f04d7d07b6a92cfedc3cb01dce100a1f22dc9e649648fe4a90da9727a5b3cd147074b2bfd2861a48197a9850028c981429dd1827fd9ca12c0ef3f326065cfaf1ddc4c78e091fa71c79579a32c35578436800ed35155fd56a889421e5f3a9848cb40c506cae02a9d4a2519038bb5978e71f5cc665eaf58f563e60151b25764897a4d2cae0e684738eb8d622a85da836219ce29c3524a45fecf27a86bee12403dd05c6c5daf9b3c059e35228f93ad35dd87544d3e770797f5e594c5faa31fedf34a1739361a75842dcd3fc8330631cd55902e4eae906d42e5cddea0ee12b459face0e29fb0978e922ff865b37120b6bb617b6a55acdf8fbf4e468080b7f42e64bccda2b42e1151e24086e2c4a2c0819556a66faae5e9ffac90db397ccfd974c8faa74b2b8127b665725e55f9ed991e93b7e7f57496d0ceab15581185488692f1db1d72f5f2872e542f5af727ca0923d2e5bfaad755915637362351b4e15376e3cde0ebce78119ce535fd5083e7117bc8fa80d8af6a96d7ac42ba1495439405302bfd6f4ab829739bcf639cbc86dfae3699f8253f3f0cd62f181040ee27884730e35ec66c4618f88aabc889709e426e395d7d9051a8d3a186d8cf1fd90c5e43845792737b7fd4034c06be4600d12c146bc6557232daaff44203b83f5ad662a0329e9e4fc8402500066655952c2659f18a89aa677f1d1e95f381cb070d0a036ab3cfc0b00137da64703ff9cd223187982e11107b786b34a603a27f5e2b53e1c5522eb717add2a9cae501b1e73f9a1a8103c015988d929bee8d770b6512609480ab9bac79e5761a1b6bc851063f064c3a9253d5049410afd0c8684094102eac70f4c2333db28efebe541473d36f83f15e9606aa7f4f65c010e676109578289ade8f386f329881f1b01fc6bc526597d02d1a590915974855caa0a9c256c2c3e2da9f135dc0b3485fb4f3a86faa72b17c018a98e34bfb82a6ed621240e96e6348c6faee69cefcffaa7c75282960579465d62ba4b459d96574635a8b66d462264875ab0f991f52185e2283fbdadbe8b87f98c2cf803b84ece484ecf9e1dc530d4b5dcf8f50704178d1deefd6d3f40148de61432914949872b159c2ca8b5977533067ccd084a3dc1fc47683d69f038e8e6fb61e5412a101b4a7d727c3ebc0c96be0ba2ee4a3b44825212d1e85ddbed632164fe227060226c405da69b149d2be3435b1f760f58a33a56292114e4a0537d1b042c69a32dd229b8eab4e304defa349f7ba583d51d500761b258345cb098312462e96772ee3c868509cc678d8419beb2ac10837cbff081e76aafafaa1ea21cce7b5c05fbe3515459f97ea16f9238cc6285fce6b83b1c40d1f8b236063c3d07fdf11c17ac6183893d757bf2f3cbfa4ec9a95022813fe1102d90f33be27235a42d47e0ea435d85f5fef8e3a933bc90271ffaf7c2095ed829de46e30b482527b967b84ba4c20a118151957b6bef6ad005f8c62b8d69c8f136d75fd6081118c2ba3679b2d2242b67e8b13077a3b16f9d9f02fa255bda4dbe126b5ae3e7c5818e6225c6a43d94b23d267bb15afe98deac9d99dca1fa2d7073900287619637f6b0445cd63c207db6ef6674c653491ac7558199602707eb2e0b0cc6573ac00178c8abdcafa7b6dd5df689b64a89d8faade6a1792f2c943f01359e384bc65187f1748e726bd14de3c5f10b7ef3e123b8fb119ce3cdb77f39d70c41403f3ab5dea69a67e24be6679ead316841d060133f6dcec6b5e6f4930ad5e9a2943f71d7b82a2567419b4ef0b3eab4667cd79b9f514eae63d1c74926b64e921be13e236aa3eae7a7e7289485f6c9070288b4781709ef0b6c45d7572241a1da1c3928f7fe01e4d416536b7066c2f75f587d1d089c65574b2731812abc74195cfddae96025516feb25889f171d5f828c7c6aba1a71f59ac25317f2bf994498d9ba345aaeb82de8e33a73ae1f333377079ea5aeb41a5bcf6bf34ad9a3347abb88dbbdecf3cd4943a04c8d0b5578320b49558a38c3798c1e0f76a78f9de1f221e058ac9832e7a4d811180677419cf4516d75fbded6eafea3d4c7d991d1d0a686f05724a008d5c40c683c9100376aad1c00b52bf5224f84d8db29d397dfbb74eeb4932a9a14ccd3d7aee3399f5e6781476c6eac60a70f5bd1d8d813621ecbb0a46cabc11c8745ae036b6cdf2dcd350a1792ec056fef930cdca74a3de40f5cc11309d8fb3aea8e5336f7095d51ef0383c53b0781b51bfbc9fc239dcfb38e01a6b4178cf97048eb0e9b0b687f227b6e1a0a1f5be6be9293d1e186fb108051207c37ac5ac35db562a71d443a0b63a781a3562a3b5fafc68e130deedbf0af3b78fc34addefe8ba6d5231e79926d0dbbc76fd2944a1c2580a52cd6e2b336a2572fb5e02db4a06e20990b0a80354d4bbd22a42f585c09f796cbb65175aaf4b8617f1d77e1600d5d751ed1bee8319e15b24f9785fd752d77e913ad198df1acb8182298b828c70c66c523b85d74b7d98b4ebd197b787aeda4730f7aba79180256338d78b6d594ba72c22ef0d0605b33f4bff291a1afebafb2303040cf904f2a96ad071c1658e31b4015ce4997449986244b9df9f28b5bb95b4e29ec120dacf051f4f9e97d77cf47039cd415ef6365291ea441ec6b1a8454850faa39acfedd3fb84921acac15f09a1a19367eb9997e13b50657e9733a251f4b64bf51b2799a016285e9337d62535457add862f724424761160e705b9d2aec07180c2c7e45bb2387ca2fe0ccc06f338c4ae215180c7b424dcfb6a2426c886ecae02623cd6da827fce501bb8de98cb6a8bfc4a4a98be95903eb94e61506971eb177c0de3da2330b315a3cfb1061ab62113532675d561afcf2205a2dd20da30fdfd04131b7c41c37677d30def9c42513109c17e78bc28f8f43e337ded62cc173815db0d2c5a839ed05c566899208c48ba887f44ca90c215f61f15a131ccb84e84d8faa9714b1282165efc08cae85a5f5ce2822018af5374c4eb9763145ec243ffe02e8a5eeb786d747ea54f65906dba0dbdabdad9519ddfb0cfd53394f881b5079ad161325f3c7622301c77af35c355ff9c9b7f648cbd6ebf07609be6e84f408704367c48684e3f5c562ccb287d886ab34e226a727e6c4dd9ef5d429f018b72dc6202cc3ac131cfba37e3bee4e9d3fd6143d97337807690bcf8e8857e5b9493c8d26d2c293857c98948ce7d993f3f522b5969aef47d00f40b708ba0f9f6a8dd0f2c662194a009cbd5411e64a5b96be112068db5bb1ed0167f48a21503755de2ca9ec52695d26c737e0c300afc0462a2ee8a02f7fcaf7365faf455cfc7717264c74cc351dcaaaa8e977849a023bd3d7fbad7137f81bdc9aa36012f93c0519735a68dd92dc7aa2f78d8fdc222d16ea9696f22cf3c91649eb7b873a7c069634a69dd11c1b8d3de44464a80409699222a35b7637f6bd57bf89ebbdc0fbca064f0590ae23b5c9f3f5bc28d0fa5f77263ddc07a544595737fbbe02aa075f27dd1c2d1baadf2bc3a605168d26c092803fe0a2c136fc9ee65d2a36c201fb67bf2873bc7b4ad38f49bd0218db81b8b205ca391d90da5599c9e6d5ccedaea2fd3366beeffc3ac1b319350303970ad6e986d00e9e0a2bd4db8a15b552ea8d0ac428a6d3f57901469ca8b95a150e4cf645bf49b40c86dc6e80fbe5468fcb2385a925b65754eb96b97e5d120e0277a9dc407d5e12794771a7238273e5a79b19c1a27c1fdee3b7cbfea2ffbc3813f220a0f1f3003a3c83f670b51eaf0a324b70b7ab0859e85e27e4b2ffc9614026f140fdb41e1f6ac05f15d558c4895f33a665f2272635171af0eb10df0b7e7fe0efcb8e5daa4fbc44d3b8c02540bf2b420ae2472ba5535a7dca0a8dfa480ebec2f5ed0efdb82eb8bd08e6687cb0ed7400237a8a09e2184b4"}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'pcl816\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x8001]}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x2, 0xeb, 0x5}, {0x4, 0xd0, 0x10, 0x6}, {0x2, 0x80, 0x1a, 0x5}, {0x401, 0xff, 0x4, 0x50ae}, {0x8, 0x4, 0x5}]}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/1, 0x1}], 0x1, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.637985662s ago: executing program 0 (id=24): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x50110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x94) syz_open_dev$vim2m(0x0, 0x1, 0x2) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='minix\x00', 0x220c004, 0x0) unshare(0x68040200) 10.910770085s ago: executing program 3 (id=25): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x60, 0x32, 0x400, 0x8070bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) lseek(r6, 0x4, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) fsopen(0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="31a1b1bb81a6", 'wlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 8.690855163s ago: executing program 1 (id=26): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) 8.508392169s ago: executing program 3 (id=27): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, &(0x7f0000000400)=[{&(0x7f0000000300)=""/55, 0x37}], 0x1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/209, 0xd1}], 0x1, 0x0) 6.690442184s ago: executing program 3 (id=28): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) close_range(r5, r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.631803006s ago: executing program 0 (id=29): pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.384359464s ago: executing program 0 (id=31): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 6.034704074s ago: executing program 2 (id=32): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000340)=[{r0, 0xd2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 5.440573553s ago: executing program 0 (id=33): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 5.101883943s ago: executing program 1 (id=34): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0xffff, 0x400002) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000640)={{r1}, "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"}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'pcl816\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x8001]}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x2, 0xeb, 0x5}, {0x4, 0xd0, 0x10, 0x6}, {0x2, 0x80, 0x1a, 0x5}, {0x401, 0xff, 0x4, 0x50ae}, {0x8, 0x4, 0x5}]}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/1, 0x1}], 0x1, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.308310567s ago: executing program 0 (id=35): syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a09240205"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400019070000000000000025037c"], 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 4.298437558s ago: executing program 2 (id=36): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x40000000000017a, 0x40840) 4.128719353s ago: executing program 2 (id=37): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 4.034048875s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/210, &(0x7f0000000140)=0xd2) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000003a935c5ae399bdc73afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff02020001000000f6ffffff0501c89600000500b6da89dfeee5b5a4ff729cd8a09075d8f46096cf5a7c5bcba72b180d7ec95b661aa7c845a1b8230641277349e7f8add15af861c5e8cca4"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x210800, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "dc016d847281bccc3819f06bb4058484"}, 0x11, 0x2) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 2.29253372s ago: executing program 3 (id=39): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000003c0), 0x800, &(0x7f0000000440)={[{@upperdir}], [{@subj_role={'subj_role', 0x3d, '&-(-.'}}, {@euid_lt={'euid<', r2}}]}) landlock_restrict_self(r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.098406815s ago: executing program 2 (id=40): r0 = socket(0x2a, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x100) 1.92436984s ago: executing program 2 (id=41): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 1.30090449s ago: executing program 2 (id=42): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) 1.27529322s ago: executing program 0 (id=43): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x17}, 0x12000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x5, @raw_data="f761dfcc11a4a9b0393c1f68a4542ed6e0967b36fee8e33df43c587483d21b6bfcd254a22082b81d73a93c0476ac5bed78d2f632f4783a17efdc061135eeab96251549b70453ab90b1cfb2ed7b9b0a411ba99fd5b753b1621f182eb5b4e42c501826dc84c885c3f427cd5317d3e19a94ed4586113ca6732783473dacdf9a6ce1d633d29c3482341dd0702ecbd332136c19dd4566b4f000ef61ae7f3893a4b1fa2c1c0d282eff05ec2c846a26f09e7fdf5bce1532889527ce5c0525e6c20718d2912e57cc4f2ca7c5"}) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x4f, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x2, 0x0, 0x3d, 0x66, 0x0, 0xa0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xfe, 0x0, {0x8, 0x4, 0x1, 0x1, 0x18, 0x68, 0x7, 0xbd, 0x2, 0x8, @private=0xa010100, @remote, {[@timestamp={0x44, 0xc, 0x4f, 0x0, 0x3, [0xc, 0x7]}]}}, "84"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_IFNAME={0x14, 0x3, 'wg0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x44}}, 0x0) 0s ago: executing program 3 (id=44): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 72.814588][ T5763] cgroup: Unknown subsys name 'net' [ 72.947894][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.598334][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.086176][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.109736][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.119745][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.128136][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.140948][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.149491][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.180698][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.192775][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.199846][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.200980][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.208167][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.215698][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.224229][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.230668][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.236787][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.243704][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.251188][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.257394][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.301279][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.314504][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.324527][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.338458][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.348020][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.361284][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.704558][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.860751][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.868589][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.876412][ T5777] bridge_slave_0: entered allmulticast mode [ 76.883328][ T5777] bridge_slave_0: entered promiscuous mode [ 76.898134][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.905558][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.912841][ T5777] bridge_slave_1: entered allmulticast mode [ 76.919822][ T5777] bridge_slave_1: entered promiscuous mode [ 76.941268][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.970100][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.027188][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.039123][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.119267][ T5777] team0: Port device team_slave_0 added [ 77.145214][ T5777] team0: Port device team_slave_1 added [ 77.161741][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 77.202886][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.209932][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.236153][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.248736][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.256793][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.264331][ T5774] bridge_slave_0: entered allmulticast mode [ 77.271317][ T5774] bridge_slave_0: entered promiscuous mode [ 77.289623][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.296839][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.304110][ T5774] bridge_slave_1: entered allmulticast mode [ 77.311607][ T5774] bridge_slave_1: entered promiscuous mode [ 77.325057][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.332294][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.358322][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.396256][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.403833][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.411623][ T5780] bridge_slave_0: entered allmulticast mode [ 77.418427][ T5780] bridge_slave_0: entered promiscuous mode [ 77.474885][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.482325][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.489908][ T5780] bridge_slave_1: entered allmulticast mode [ 77.496857][ T5780] bridge_slave_1: entered promiscuous mode [ 77.515954][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.531225][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.560687][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.567880][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.575409][ T5784] bridge_slave_0: entered allmulticast mode [ 77.582430][ T5784] bridge_slave_0: entered promiscuous mode [ 77.621444][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.628596][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.636335][ T5784] bridge_slave_1: entered allmulticast mode [ 77.643629][ T5784] bridge_slave_1: entered promiscuous mode [ 77.664793][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.677640][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.692226][ T5774] team0: Port device team_slave_0 added [ 77.718666][ T5777] hsr_slave_0: entered promiscuous mode [ 77.726171][ T5777] hsr_slave_1: entered promiscuous mode [ 77.746062][ T5774] team0: Port device team_slave_1 added [ 77.798008][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.833894][ T5780] team0: Port device team_slave_0 added [ 77.840633][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.847884][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.875668][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.889307][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.916580][ T5780] team0: Port device team_slave_1 added [ 77.932638][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.940007][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.966241][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.016282][ T5784] team0: Port device team_slave_0 added [ 78.026202][ T5784] team0: Port device team_slave_1 added [ 78.038533][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.045987][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.072394][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.085623][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.092657][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.118819][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.166021][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.173083][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.199030][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.210524][ T51] Bluetooth: hci0: command tx timeout [ 78.249065][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.256189][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.282480][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.289864][ T51] Bluetooth: hci1: command tx timeout [ 78.334528][ T5774] hsr_slave_0: entered promiscuous mode [ 78.341478][ T5774] hsr_slave_1: entered promiscuous mode [ 78.347801][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.356077][ T5774] Cannot create hsr debugfs directory [ 78.382499][ T51] Bluetooth: hci2: command tx timeout [ 78.396081][ T5780] hsr_slave_0: entered promiscuous mode [ 78.403076][ T5780] hsr_slave_1: entered promiscuous mode [ 78.409245][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.416878][ T5780] Cannot create hsr debugfs directory [ 78.444004][ T5784] hsr_slave_0: entered promiscuous mode [ 78.449660][ T51] Bluetooth: hci3: command tx timeout [ 78.456722][ T5784] hsr_slave_1: entered promiscuous mode [ 78.463116][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.470956][ T5784] Cannot create hsr debugfs directory [ 78.829900][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.842075][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.859698][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.880940][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.940893][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.958684][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.968914][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.996067][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.062753][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.076266][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.097477][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.116424][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.217302][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.225087][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.252831][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.262735][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.285115][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.327095][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.338511][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.371544][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.379114][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.423944][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.440826][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.448118][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.480949][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.488110][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.512974][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.520266][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.531575][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.595026][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.632856][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.640018][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.675038][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.682318][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.833349][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.910029][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.937110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.944363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.983204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.990495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.073121][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.154741][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.292803][ T51] Bluetooth: hci0: command tx timeout [ 80.305737][ T5777] veth0_vlan: entered promiscuous mode [ 80.336678][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.370423][ T51] Bluetooth: hci1: command tx timeout [ 80.381242][ T5777] veth1_vlan: entered promiscuous mode [ 80.440116][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.449930][ T51] Bluetooth: hci2: command tx timeout [ 80.503090][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.530110][ T51] Bluetooth: hci3: command tx timeout [ 80.537151][ T5774] veth0_vlan: entered promiscuous mode [ 80.575760][ T5774] veth1_vlan: entered promiscuous mode [ 80.594970][ T5777] veth0_macvtap: entered promiscuous mode [ 80.635022][ T5777] veth1_macvtap: entered promiscuous mode [ 80.653222][ T5784] veth0_vlan: entered promiscuous mode [ 80.687386][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.703299][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.719278][ T5780] veth0_vlan: entered promiscuous mode [ 80.730246][ T5784] veth1_vlan: entered promiscuous mode [ 80.738983][ T5774] veth0_macvtap: entered promiscuous mode [ 80.753379][ T5774] veth1_macvtap: entered promiscuous mode [ 80.764289][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.775026][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.784305][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.793421][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822709][ T5780] veth1_vlan: entered promiscuous mode [ 80.855889][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.867804][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.881902][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.913962][ T5780] veth0_macvtap: entered promiscuous mode [ 80.927096][ T5780] veth1_macvtap: entered promiscuous mode [ 80.955649][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.967090][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.979040][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.008598][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025813][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.035629][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.044509][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.099262][ T5784] veth0_macvtap: entered promiscuous mode [ 81.121615][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.123472][ T5784] veth1_macvtap: entered promiscuous mode [ 81.137763][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.164424][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.176450][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.186747][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.197529][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.210258][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.251710][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.268217][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.280944][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.291544][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.303163][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.315556][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.324330][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.333610][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.342464][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.371290][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.376762][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.379467][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.395774][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.408566][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.421041][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.431552][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.442177][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.454370][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.465549][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.476209][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.487459][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.499624][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.510470][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.522351][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.533492][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.584537][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.630096][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.639560][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.648396][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.658748][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.667575][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.762955][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.801023][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.280791][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.288758][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.370685][ T51] Bluetooth: hci0: command tx timeout [ 82.450159][ T51] Bluetooth: hci1: command tx timeout [ 82.530846][ T51] Bluetooth: hci2: command tx timeout [ 82.590011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.597914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.610411][ T51] Bluetooth: hci3: command tx timeout [ 83.031581][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.069598][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.377974][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.408262][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.039147][ T5862] ======================================================= [ 84.039147][ T5862] WARNING: The mand mount option has been deprecated and [ 84.039147][ T5862] and is ignored by this kernel. Remove the mand [ 84.039147][ T5862] option from the mount to silence this warning. [ 84.039147][ T5862] ======================================================= [ 84.451129][ T51] Bluetooth: hci0: command tx timeout [ 84.595113][ T51] Bluetooth: hci1: command tx timeout [ 84.609971][ T51] Bluetooth: hci2: command tx timeout [ 84.694815][ T51] Bluetooth: hci3: command tx timeout [ 84.703899][ T56] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.981727][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 85.010316][ T56] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 85.019002][ T56] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 85.050054][ T56] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 85.070202][ T56] usb 1-1: config 166 has no interface number 0 [ 85.080486][ T56] usb 1-1: config 166 has no interface number 1 [ 85.087259][ T56] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 85.118621][ T56] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 85.289369][ T56] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 85.300944][ T56] usb 1-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 85.315598][ T56] usb 1-1: config 166 interface 177 has no altsetting 0 [ 85.322761][ T56] usb 1-1: config 166 interface 34 has no altsetting 0 [ 85.367906][ T56] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 85.435720][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.491240][ T56] usb 1-1: Product: syz [ 85.582423][ T56] usb 1-1: Manufacturer: syz [ 85.604811][ T56] usb 1-1: SerialNumber: syz [ 86.121316][ T56] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 86.259674][ T56] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 86.547802][ T56] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 86.559506][ T56] usb 1-1: No valid video chain found. [ 86.572430][ T56] usb 1-1: USB disconnect, device number 2 [ 86.946725][ C1] Unknown status report in ack skb [ 87.862744][ T5896] syz.1.17: attempt to access beyond end of device [ 87.862744][ T5896] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 87.877048][ T5896] syz.1.17: attempt to access beyond end of device [ 87.877048][ T5896] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 87.890975][ T5896] Mount JFS Failure: -5 [ 92.339088][ T23] cfg80211: failed to load regulatory.db [ 93.192726][ T5935] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5936] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5935] [ 97.086484][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.129770][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.720634][ T5966] syz.3.28 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.901136][ T5966] use of bytesused == 0 is deprecated and will be removed in the future, [ 97.910937][ T5966] use the actual size instead. [ 98.812319][ T23] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 98.839508][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.859928][ T23] usb 1-1: config 0 has no interface number 0 [ 98.872261][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 98.882860][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.903027][ T23] usb 1-1: Product: syz [ 98.907274][ T23] usb 1-1: Manufacturer: syz [ 98.912609][ T23] usb 1-1: SerialNumber: syz [ 98.946956][ T23] usb 1-1: config 0 descriptor?? [ 99.176668][ T23] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 99.196116][ T23] usb 1-1: No valid video chain found. [ 99.216208][ T23] usb 1-1: USB disconnect, device number 3 [ 100.199167][ T5985] overlay: Bad value for 'upperdir' [ 100.294200][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.632011][ T56] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 100.729603][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.916443][ T56] usb 1-1: config 0 descriptor?? [ 101.307876][ T5991] netlink: 72 bytes leftover after parsing attributes in process `syz.2.42'. [ 101.317062][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 101.327621][ T5991] Zero length message leads to an empty skb [ 101.629435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.507739][ C0] ------------[ cut here ]------------ [ 102.513347][ C0] WARNING: CPU: 0 PID: 5995 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 102.523401][ C0] Modules linked in: [ 102.527304][ C0] CPU: 0 PID: 5995 Comm: syz.0.43 Not tainted syzkaller #0 [ 102.534544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.544634][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 102.550991][ C0] Code: f7 4c 89 ef e8 b0 a4 c2 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 7b c6 84 f7 0f 0b e9 61 f8 ff ff e8 6f c6 84 f7 <0f> 0b e9 85 fb ff ff e8 63 c6 84 f7 48 c7 c7 40 50 64 8e 4c 89 e6 [ 102.570626][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 102.576703][ C0] RAX: ffffffff8a021ee1 RBX: dffffc0000000000 RCX: ffff888025d48000 [ 102.584698][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.592694][ C0] RBP: 0000000000000000 R08: ffff888025d48000 R09: 0000000000000003 [ 102.600688][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cd4e440 [ 102.608657][ C0] R13: ffff888029c98824 R14: ffff88805cd4e930 R15: ffff888029c98800 [ 102.616789][ C0] FS: 00007fb67860e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 102.625783][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.632426][ C0] CR2: 00007fb6785ecff8 CR3: 0000000077a41000 CR4: 00000000003506f0 [ 102.640452][ C0] Call Trace: [ 102.643732][ C0] [ 102.646574][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 102.652164][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 102.657639][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 102.664436][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 102.670007][ C0] __iterate_interfaces+0x225/0x4c0 [ 102.675213][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 102.681476][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.688676][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 102.694945][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.702006][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 102.707290][ C0] ? hw_scan_work+0xf10/0xf10 [ 102.712019][ C0] __hrtimer_run_queues+0x525/0xc10 [ 102.717250][ C0] ? hrtimer_interrupt+0x980/0x980 [ 102.722482][ C0] ? read_tsc+0x9/0x20 [ 102.726642][ C0] hrtimer_run_softirq+0x177/0x290 [ 102.731792][ C0] handle_softirqs+0x27d/0x820 [ 102.736570][ C0] ? read_tsc+0x9/0x20 [ 102.740660][ C0] ? ktime_get+0x24b/0x280 [ 102.745088][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 102.749870][ C0] ? do_softirq+0x1a0/0x1a0 [ 102.754393][ C0] __irq_exit_rcu+0xd3/0x190 [ 102.758978][ C0] ? irq_exit_rcu+0x20/0x20 [ 102.763516][ C0] irq_exit_rcu+0x9/0x20 [ 102.767755][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 102.773433][ C0] [ 102.776364][ C0] [ 102.779294][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.785474][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x80 [ 102.792266][ C0] Code: 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d a0 ce 7c 7e 65 8b 15 a1 ce 7c 7e 81 e2 00 01 ff 00 74 [ 102.811894][ C0] RSP: 0018:ffffc90004eff028 EFLAGS: 00000246 [ 102.817968][ C0] RAX: ffffffff81c0ceef RBX: 0000000000000000 RCX: ffff888025d48000 [ 102.825979][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.833978][ C0] RBP: 0000000000000010 R08: ffffffff8e8ae5ef R09: 1ffffffff1d15cbd [ 102.842012][ C0] R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: 0000000000000000 [ 102.850021][ C0] R13: dffffc0000000000 R14: ffffea0001d1ba48 R15: 1ffffd40003a3749 [ 102.858006][ C0] ? shmem_get_folio_gfp+0x114f/0x2b40 [ 102.863530][ C0] shmem_get_folio_gfp+0x114f/0x2b40 [ 102.868832][ C0] shmem_write_begin+0xf2/0x430 [ 102.873703][ C0] generic_perform_write+0x2fe/0x5c0 [ 102.878994][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 102.884816][ C0] ? down_write+0x16e/0x200 [ 102.889322][ C0] ? file_update_time+0x98/0x1a0 [ 102.894279][ C0] shmem_file_write_iter+0xfb/0x120 [ 102.899498][ C0] __kernel_write_iter+0x29f/0x6d0 [ 102.904612][ C0] ? vfs_read+0x990/0x990 [ 102.908936][ C0] ? get_dump_page+0x156/0x200 [ 102.913742][ C0] ? __asan_memset+0x22/0x40 [ 102.918351][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 102.923059][ C0] dump_user_range+0x418/0x840 [ 102.927867][ C0] ? dump_skip+0x40/0x40 [ 102.932143][ C0] ? dump_emit+0x78/0xe0 [ 102.936405][ C0] ? dump_emit+0xa6/0xe0 [ 102.940669][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 102.945621][ C0] elf_core_dump+0x320e/0x37c0 [ 102.950434][ C0] ? load_elf_binary+0x2850/0x2850 [ 102.955561][ C0] ? verify_lock_unused+0x140/0x140 [ 102.960777][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 102.965813][ C0] ? mas_next_slot+0x94c/0x980 [ 102.970614][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 102.976081][ C0] ? 0xffffffffff600000 [ 102.980260][ C0] do_coredump+0x1791/0x24a0 [ 102.984870][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 102.990014][ C0] ? lock_chain_count+0x20/0x20 [ 102.994867][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.000189][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 103.005487][ C0] get_signal+0x10da/0x1390 [ 103.010024][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 103.015590][ C0] ? get_sigframe_size+0x20/0x20 [ 103.020572][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 103.026563][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 103.032059][ C0] exit_to_user_mode_loop+0x70/0x110 [ 103.037371][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 103.042936][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 103.048397][ C0] exc_page_fault+0x8c/0x100 [ 103.053007][ C0] asm_exc_page_fault+0x26/0x30 [ 103.057856][ C0] RIP: 0033:0x7fb67779ce61 [ 103.062295][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 103.081926][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 103.088097][ C0] RAX: 0000000000000000 RBX: 00007fb677a16180 RCX: 00007fb67779ce59 [ 103.096101][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 103.104097][ C0] RBP: 00007fb677832e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.112172][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.120160][ C0] R13: 00007fb677a16218 R14: 00007fb677a16180 R15: 00007fff66879d78 [ 103.128226][ C0] [ 103.131267][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.138547][ C0] CPU: 0 PID: 5995 Comm: syz.0.43 Not tainted syzkaller #0 [ 103.145732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.155792][ C0] Call Trace: [ 103.159065][ C0] [ 103.161913][ C0] dump_stack_lvl+0x18c/0x250 [ 103.166591][ C0] ? show_regs_print_info+0x20/0x20 [ 103.171791][ C0] ? load_image+0x420/0x420 [ 103.176308][ C0] panic+0x2ca/0x720 [ 103.180210][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 103.184730][ C0] __warn+0x2e0/0x470 [ 103.188722][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 103.194451][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 103.200169][ C0] report_bug+0x2be/0x4f0 [ 103.204500][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 103.210230][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 103.216045][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 103.221762][ C0] handle_bug+0xcf/0x120 [ 103.226013][ C0] exc_invalid_op+0x1a/0x50 [ 103.230513][ C0] asm_exc_invalid_op+0x1a/0x20 [ 103.235363][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 103.241689][ C0] Code: f7 4c 89 ef e8 b0 a4 c2 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 7b c6 84 f7 0f 0b e9 61 f8 ff ff e8 6f c6 84 f7 <0f> 0b e9 85 fb ff ff e8 63 c6 84 f7 48 c7 c7 40 50 64 8e 4c 89 e6 [ 103.261374][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 103.267454][ C0] RAX: ffffffff8a021ee1 RBX: dffffc0000000000 RCX: ffff888025d48000 [ 103.275420][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.283393][ C0] RBP: 0000000000000000 R08: ffff888025d48000 R09: 0000000000000003 [ 103.291480][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cd4e440 [ 103.299454][ C0] R13: ffff888029c98824 R14: ffff88805cd4e930 R15: ffff888029c98800 [ 103.307442][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 103.313255][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 103.318970][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 103.324517][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 103.329980][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 103.336770][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 103.342324][ C0] __iterate_interfaces+0x225/0x4c0 [ 103.347540][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 103.353778][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 103.360986][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 103.367221][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 103.374240][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 103.379441][ C0] ? hw_scan_work+0xf10/0xf10 [ 103.384113][ C0] __hrtimer_run_queues+0x525/0xc10 [ 103.389314][ C0] ? hrtimer_interrupt+0x980/0x980 [ 103.394421][ C0] ? read_tsc+0x9/0x20 [ 103.398502][ C0] hrtimer_run_softirq+0x177/0x290 [ 103.403705][ C0] handle_softirqs+0x27d/0x820 [ 103.408476][ C0] ? read_tsc+0x9/0x20 [ 103.412645][ C0] ? ktime_get+0x24b/0x280 [ 103.417370][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 103.422151][ C0] ? do_softirq+0x1a0/0x1a0 [ 103.426698][ C0] __irq_exit_rcu+0xd3/0x190 [ 103.431331][ C0] ? irq_exit_rcu+0x20/0x20 [ 103.435862][ C0] irq_exit_rcu+0x9/0x20 [ 103.440134][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 103.445803][ C0] [ 103.448765][ C0] [ 103.451694][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.457684][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x80 [ 103.464451][ C0] Code: 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d a0 ce 7c 7e 65 8b 15 a1 ce 7c 7e 81 e2 00 01 ff 00 74 [ 103.484166][ C0] RSP: 0018:ffffc90004eff028 EFLAGS: 00000246 [ 103.490353][ C0] RAX: ffffffff81c0ceef RBX: 0000000000000000 RCX: ffff888025d48000 [ 103.498324][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.506312][ C0] RBP: 0000000000000010 R08: ffffffff8e8ae5ef R09: 1ffffffff1d15cbd [ 103.514279][ C0] R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: 0000000000000000 [ 103.522246][ C0] R13: dffffc0000000000 R14: ffffea0001d1ba48 R15: 1ffffd40003a3749 [ 103.530250][ C0] ? shmem_get_folio_gfp+0x114f/0x2b40 [ 103.535726][ C0] shmem_get_folio_gfp+0x114f/0x2b40 [ 103.541113][ C0] shmem_write_begin+0xf2/0x430 [ 103.545979][ C0] generic_perform_write+0x2fe/0x5c0 [ 103.551267][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 103.557065][ C0] ? down_write+0x16e/0x200 [ 103.561569][ C0] ? file_update_time+0x98/0x1a0 [ 103.566498][ C0] shmem_file_write_iter+0xfb/0x120 [ 103.571708][ C0] __kernel_write_iter+0x29f/0x6d0 [ 103.576821][ C0] ? vfs_read+0x990/0x990 [ 103.581146][ C0] ? get_dump_page+0x156/0x200 [ 103.585910][ C0] ? __asan_memset+0x22/0x40 [ 103.590499][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 103.595173][ C0] dump_user_range+0x418/0x840 [ 103.600040][ C0] ? dump_skip+0x40/0x40 [ 103.604273][ C0] ? dump_emit+0x78/0xe0 [ 103.608538][ C0] ? dump_emit+0xa6/0xe0 [ 103.612819][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 103.617838][ C0] elf_core_dump+0x320e/0x37c0 [ 103.622647][ C0] ? load_elf_binary+0x2850/0x2850 [ 103.627782][ C0] ? verify_lock_unused+0x140/0x140 [ 103.632984][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 103.638016][ C0] ? mas_next_slot+0x94c/0x980 [ 103.642812][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 103.648580][ C0] ? 0xffffffffff600000 [ 103.652784][ C0] do_coredump+0x1791/0x24a0 [ 103.657398][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 103.662524][ C0] ? lock_chain_count+0x20/0x20 [ 103.667397][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.672643][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 103.677858][ C0] get_signal+0x10da/0x1390 [ 103.682404][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 103.687958][ C0] ? get_sigframe_size+0x20/0x20 [ 103.692928][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 103.698922][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 103.704438][ C0] exit_to_user_mode_loop+0x70/0x110 [ 103.709950][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 103.715534][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 103.721105][ C0] exc_page_fault+0x8c/0x100 [ 103.725732][ C0] asm_exc_page_fault+0x26/0x30 [ 103.730593][ C0] RIP: 0033:0x7fb67779ce61 [ 103.735036][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 103.754914][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 103.761175][ C0] RAX: 0000000000000000 RBX: 00007fb677a16180 RCX: 00007fb67779ce59 [ 103.769152][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 103.777117][ C0] RBP: 00007fb677832e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.785708][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.793685][ C0] R13: 00007fb677a16218 R14: 00007fb677a16180 R15: 00007fff66879d78 [ 103.801667][ C0] [ 103.804830][ C0] Kernel Offset: disabled [ 103.809203][ C0] Rebooting in 86400 seconds..