last executing test programs: 24m34.711717542s ago: executing program 32 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 11m14.129547547s ago: executing program 33 (id=1871): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{0xdc, 0x58}, 'port0\x00', 0x84, 0x800, 0x912, 0x80, 0x6, 0x6, 0x5, 0x0, 0x4, 0xb0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') writev(r4, &(0x7f0000000e40)=[{0x0}], 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10m32.179239412s ago: executing program 4 (id=1990): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x4, 0x0, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7800, 0x2, 0x8}}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) 10m31.043298648s ago: executing program 4 (id=1995): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 10m29.282896983s ago: executing program 4 (id=1998): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@local, @rand_addr=0x64010101, 0x1, "223b4f8a1490c83040e2b1bb4394efce52ba3d2b8d52fe7d639959798cdbbb19", 0x0, 0x1, 0xddb, 0x7f}, 0x3c) 10m24.609564571s ago: executing program 4 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) lseek(r3, 0x100000001, 0x0) 10m23.401898688s ago: executing program 4 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) landlock_restrict_self(0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 10m22.412878562s ago: executing program 4 (id=2006): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4b07, 0x0, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000ac0)={0x1, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0xe8, 0x8, 0xbe4c, 0x2, 0x1, 0x8}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x1573ef0fb27557ec, 0x165) fcntl$notify(r4, 0x402, 0x14) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_ax25_SIOCADDRT(r5, 0x8916, 0x0) 10m7.31606984s ago: executing program 34 (id=2006): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4b07, 0x0, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000ac0)={0x1, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0xe8, 0x8, 0xbe4c, 0x2, 0x1, 0x8}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x1573ef0fb27557ec, 0x165) fcntl$notify(r4, 0x402, 0x14) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_ax25_SIOCADDRT(r5, 0x8916, 0x0) 6m20.890790283s ago: executing program 7 (id=2628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0x34b}], 0x1, 0x1c0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) r4 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x8103, 0x10, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m18.481016538s ago: executing program 7 (id=2633): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) gettid() syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 6m16.472584377s ago: executing program 7 (id=2640): openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020cfe0560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba", 0x54, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/243, 0xf3}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m15.747609517s ago: executing program 7 (id=2642): mount(0x0, 0x0, 0x0, 0x18001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6m15.129066766s ago: executing program 7 (id=2645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0x34b}], 0x1, 0x1c0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) r4 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x8103, 0x10, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m13.740410046s ago: executing program 7 (id=2648): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x11}}, 0x10) 5m58.045847612s ago: executing program 35 (id=2648): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x11}}, 0x10) 5m55.744782295s ago: executing program 6 (id=2689): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0xf4) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = open(0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_RUN(r0, 0xae80, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776", 0x3}], 0x2) 5m54.465010984s ago: executing program 6 (id=2691): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) mount(0x0, 0x0, 0x0, 0x10f482a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x48, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2000c010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x7}, {}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5m52.326041745s ago: executing program 6 (id=2700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x907, 0x0, &(0x7f0000000000), &(0x7f0000000300)) r7 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5m51.599009005s ago: executing program 6 (id=2703): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5001000010003306000000000000000000000000000000000000000000ffffffff009c80010000200000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000100008029bd7000000000000a0002000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002004e2100"/264], 0x150}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00"/43]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$sndseq(r1, &(0x7f0000000000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m50.442832552s ago: executing program 6 (id=2707): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0xcc100, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(r1, &(0x7f0000000340)='sched\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 5m48.658848797s ago: executing program 6 (id=2709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffe7a, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x3e, 0x5a, 0x0, 0x0, 0x0, 0x7fffc, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000880)=""/246) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe00", 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000180)={0x1, @pix_mp={0x2, 0x5, 0x34565559, 0x0, 0x7, [{0x2, 0x1}, {0x4, 0x2}, {0x3ff, 0x3}, {0x4, 0xca}, {0x0, 0x7f}, {0x8, 0x8}, {0x1, 0xe92}, {0x7fffffff, 0x400}], 0x8, 0x6, 0x8, 0x0, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000100)=0x40) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) 5m32.25434352s ago: executing program 36 (id=2709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffe7a, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x3e, 0x5a, 0x0, 0x0, 0x0, 0x7fffc, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000880)=""/246) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe00", 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000180)={0x1, @pix_mp={0x2, 0x5, 0x34565559, 0x0, 0x7, [{0x2, 0x1}, {0x4, 0x2}, {0x3ff, 0x3}, {0x4, 0xca}, {0x0, 0x7f}, {0x8, 0x8}, {0x1, 0xe92}, {0x7fffffff, 0x400}], 0x8, 0x6, 0x8, 0x0, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000100)=0x40) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) 4m35.999007033s ago: executing program 3 (id=2877): syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 4m35.804472056s ago: executing program 3 (id=2880): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m35.584371529s ago: executing program 3 (id=2882): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xe90}, 0x10) r1 = socket(0x1e, 0x4, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}], 0x1}, 0x20000000) 4m35.204297304s ago: executing program 3 (id=2883): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x200000, 0x0, 0xd426, 0x100, 0x1}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 4m32.539597661s ago: executing program 3 (id=2892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000001480)=[{&(0x7f0000000140)=""/235, 0xc}], 0x1) 4m8.508690312s ago: executing program 3 (id=2895): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x66a23100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00"/48], 0xfdef) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x2008, r2}, 0x14) setrlimit(0x6, &(0x7f0000000000)={0x0, 0x6}) r3 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000001100)={0x1, 0x0, [{0x0, 0x1000, 0x5, 0xd, 0x6f677948, 0x656e6975, 0x6}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10000}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r10, 0x4b63, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x6000)=nil, 0x6000}, 0x2}) 3m52.875007577s ago: executing program 37 (id=2895): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x66a23100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00"/48], 0xfdef) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x2008, r2}, 0x14) setrlimit(0x6, &(0x7f0000000000)={0x0, 0x6}) r3 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000001100)={0x1, 0x0, [{0x0, 0x1000, 0x5, 0xd, 0x6f677948, 0x656e6975, 0x6}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10000}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r10, 0x4b63, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x6000)=nil, 0x6000}, 0x2}) 3m49.476973193s ago: executing program 8 (id=3003): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m48.98652562s ago: executing program 8 (id=3005): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 3m48.046611113s ago: executing program 8 (id=3006): syz_open_dev$sndctrl(&(0x7f0000000000), 0x10001d, 0x4841c1) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x800) socket(0x21, 0x6, 0x0) r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r4, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x4161, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000380)=0x5, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3m47.250254374s ago: executing program 8 (id=3009): syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r0 = socket(0x10, 0x80003, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)}, 0x40800) socket(0x1e, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) 3m41.287037116s ago: executing program 8 (id=3020): socket$kcm(0x21, 0x2, 0xa) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) msgsnd(0x0, &(0x7f0000000d00)=ANY=[], 0x401, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, 0x0, 0x8030) mount$bind(0x0, 0x0, 0x0, 0x20000, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) utime(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 3m39.817998396s ago: executing program 8 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) socket$netlink(0x10, 0x3, 0x4) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x2, r8}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r6, 0x8, r9) 3m24.388438709s ago: executing program 38 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) socket$netlink(0x10, 0x3, 0x4) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x2, r8}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r6, 0x8, r9) 7.99400145s ago: executing program 5 (id=3730): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 7.99277953s ago: executing program 0 (id=3731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x0, 0x2ff, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x8, 0x2]}, @NL80211_ATTR_FRAME={0x25, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x2, 0xb84}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x2}}, @void, @val, @val={0x3, 0x1, 0x9d}, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x850) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.862988671s ago: executing program 5 (id=3732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 7.691016294s ago: executing program 5 (id=3734): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0xcc100, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0x0, &(0x7f0000000340)='sched\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.846038266s ago: executing program 1 (id=3735): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x1f4, 0x200}) 6.652774688s ago: executing program 0 (id=3737): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=@newtaction={0x18, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x47dc, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r7 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x3, 0x0) 6.56689993s ago: executing program 1 (id=3738): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x28000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x8, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 5.859022669s ago: executing program 9 (id=3741): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000480)="ba", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) 5.734886081s ago: executing program 9 (id=3743): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x16, 0x8, 0x3, 0x5, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d6, 0x1, 0x5, 0x14, 0x1, 0x20000001}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x4, 0x4}]}, 0x28}}, 0x4) 5.434190595s ago: executing program 1 (id=3744): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff000008"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f0000000040)=@sack_info={r6, 0xce8, 0xc}, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r6, 0x101, 0xf, 0x6, 0x7, 0x1}, &(0x7f0000001080)=0x14) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 5.382916936s ago: executing program 9 (id=3745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000200)=0x6, 0x4) 4.855490273s ago: executing program 5 (id=3746): socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) statx(r1, 0x0, 0x1000, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a836"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000100a0080202000", @ANYRES32=0x0, @ANYRES16], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, 0x0) 4.766937564s ago: executing program 2 (id=3747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x0, 0x2ff, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x8, 0x2]}, @NL80211_ATTR_FRAME={0x25, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x2, 0xb84}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x2}}, @void, @val, @val={0x3, 0x1, 0x9d}, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x850) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.618937276s ago: executing program 9 (id=3748): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @multicast2}, &(0x7f00000000c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r3, 0x0, r2}) 3.807276587s ago: executing program 5 (id=3749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0x34b}], 0x1, 0x1c0, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x8103, 0x10, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.746266308s ago: executing program 9 (id=3750): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r5, r7, 0x0, 0x7ffff004) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write(r4, &(0x7f0000000000)="e6cd3eb12aa06cea743213171bb8891a69d9f2ecfd926affa5b8832b291d383b312dae79abd7fab9a19cd22d8d0748b2c3ba41464189a258bde1648bd2fd6eba8133ce05d420d2fb14b31a12736fdbe55ce2", 0x52) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x10003, 0x1, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r8 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) sendto$unix(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0x6000) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000080)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000100)=0xffff) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x78) close(r0) 3.502822591s ago: executing program 1 (id=3751): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x2, 0x0, 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x334) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, r3, &(0x7f0000000140)={0x125181, 0x0, 0x3}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}) r8 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r8) 3.435416552s ago: executing program 2 (id=3752): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) r2 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x1ffe, 0x0, 0x0, 0x0, 0x0) 3.314227234s ago: executing program 0 (id=3753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 2.422883046s ago: executing program 9 (id=3754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@empty, @in6=@private2, 0x4e23, 0x5, 0x4e22, 0x81, 0x2, 0x20, 0xc0, 0x89}, {0x0, 0x2, 0x6, 0x9, 0x2, 0xff, 0x4, 0xfffffffffffff801}, {0x9, 0xffffffffffff8001, 0x8, 0x7f}, 0x100, 0x6e6bbb, 0x2, 0x0, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x6c}, 0xa, @in6=@loopback, 0x3506, 0x1, 0x0, 0x8, 0x2, 0x9, 0x69cd}}, 0xe4) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0xf0f024, 0x408}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x200000000000004b, 0x1}}, 0x3c) open$dir(&(0x7f0000000240)='./file0\x00', 0x20e02, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355420000000000000109022400010000000009040000010300050009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, '^'}, @main=@item_012={0x2, 0x0, 0x9, "20ca"}, @main=@item_012={0x0, 0x0, 0xb}, @local]}}, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x55af) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 2.010954912s ago: executing program 2 (id=3755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/236, 0xec}, {&(0x7f0000001a40)=""/120, 0x78}, {&(0x7f0000001ac0)=""/195, 0xc3}, {&(0x7f0000001bc0)=""/165, 0xa5}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000100, 0x0) 1.982055642s ago: executing program 0 (id=3756): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0xcc100, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0x0, &(0x7f0000000340)='sched\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.472652829s ago: executing program 1 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x5, 0x16}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) pread64(r2, &(0x7f0000000000)=""/14, 0xe, 0xfffffffc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)="49d0e0d5cbace50aa6843310b2819d2a870f233769fbc880cb4b8f17a5264ee2ac61460ab8ddc01ad14e5ba80bde6aa50ec1eec29127286aa1e87a724024c7e0906da9ca8a93d3326bc710cebe78d293b1d3032de6fec9e0c1d300", 0x5b) 1.130367974s ago: executing program 5 (id=3758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xebff5d0857818f7f}, 0x4000) r2 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r3, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x4, 0x3f}]}]}}]}, 0xb0}, 0x1, 0x7a00}, 0x4000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r5 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) 1.058850855s ago: executing program 2 (id=3759): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r6, r6], &(0x7f0000000580)}) 945.554466ms ago: executing program 2 (id=3760): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) statx(r2, 0x0, 0x1000, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x106f) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a836"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000100a0080202000", @ANYRES32=0x0, @ANYRES16], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0x21, 0x0, 0x0) 928.156666ms ago: executing program 0 (id=3761): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44.869129ms ago: executing program 0 (id=3762): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="0100b228bd70"], 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4048806) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.367319ms ago: executing program 2 (id=3763): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) 0s ago: executing program 1 (id=3764): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'cbc(blowfish)\x00'}}}, 0xe0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x0, {0x7, 0x23, 0x106, 0xb}}) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 013451][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1259.115482][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1260.106204][T15082] device veth1_vlan entered promiscuous mode [ 1260.144953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1260.274427][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1260.294433][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1260.534943][T15082] device veth0_macvtap entered promiscuous mode [ 1261.415144][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1261.680788][T15082] device veth1_macvtap entered promiscuous mode [ 1261.709688][T15082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.720683][T15082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.731027][T15082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.741895][T15082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.752095][T15082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.764888][T15082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.776676][T15082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.784366][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1261.795060][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1261.890687][T15082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.211032][T15082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.324768][T15082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.392346][T15082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.624792][T15082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.635412][T15082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.647149][T15082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.655019][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1262.668285][T15082] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.741629][T15082] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.782347][T15082] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.791091][T15082] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.841593][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1262.870741][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1263.319718][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.348393][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.396041][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1263.894201][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.905413][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.992195][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1267.104241][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 1267.164015][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 1268.242758][T15536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2840'. [ 1271.428925][T15568] netlink: 'syz.8.2848': attribute type 1 has an invalid length. [ 1271.436833][T15568] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2848'. [ 1272.390199][T15574] device batadv_slave_0 entered promiscuous mode [ 1272.838675][T15582] x_tables: unsorted underflow at hook 1 [ 1273.540098][T15567] device batadv_slave_0 left promiscuous mode [ 1275.052350][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2854'. [ 1277.868995][T15621] netlink: 'syz.5.2860': attribute type 1 has an invalid length. [ 1277.877260][T15621] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2860'. [ 1278.868985][T15626] netlink: 'syz.9.2862': attribute type 1 has an invalid length. [ 1278.892640][ T4186] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1278.902614][ T4186] CPU: 0 PID: 4186 Comm: kworker/u5:8 Not tainted 5.15.183-syzkaller #0 [ 1278.910939][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1278.920992][ T4186] Workqueue: hci4 hci_rx_work [ 1278.925709][ T4186] Call Trace: [ 1278.928984][ T4186] [ 1278.931921][ T4186] dump_stack_lvl+0x168/0x230 [ 1278.936609][ T4186] ? show_regs_print_info+0x20/0x20 [ 1278.941914][ T4186] ? load_image+0x3b0/0x3b0 [ 1278.946444][ T4186] sysfs_create_dir_ns+0x252/0x280 [ 1278.951559][ T4186] ? __lock_acquire+0x7c60/0x7c60 [ 1278.956585][ T4186] ? sysfs_warn_dup+0xa0/0xa0 [ 1278.961275][ T4186] ? le_conn_complete_evt+0xcbc/0x1590 [ 1278.966861][ T4186] ? hci_event_packet+0xe05/0x12f0 [ 1278.971977][ T4186] ? process_one_work+0x863/0x1000 [ 1278.977088][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 1278.982297][ T4186] kobject_add_internal+0x662/0xd00 [ 1278.987521][ T4186] kobject_add+0x152/0x210 [ 1278.991952][ T4186] ? kobject_init+0x1d0/0x1d0 [ 1278.996638][ T4186] ? klist_children_get+0x50/0x50 [ 1279.001661][ T4186] ? get_device_parent+0x121/0x3f0 [ 1279.006777][ T4186] device_add+0x483/0xfb0 [ 1279.011106][ T4186] hci_conn_add_sysfs+0xd1/0x1e0 [ 1279.016047][ T4186] le_conn_complete_evt+0xcbc/0x1590 [ 1279.021425][ T4186] ? cs_le_create_conn+0x5e0/0x5e0 [ 1279.026531][ T4186] ? __mutex_trylock_common+0x14f/0x250 [ 1279.032074][ T4186] hci_le_meta_evt+0x289/0x3b80 [ 1279.036952][ T4186] ? hci_event_packet+0x36d/0x12f0 [ 1279.042053][ T4186] ? hci_event_packet+0x2e2/0x12f0 [ 1279.047586][ T4186] ? __lock_acquire+0x7c60/0x7c60 [ 1279.052634][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 1279.058695][ T4186] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1279.064340][ T4186] ? mark_lock+0x94/0x320 [ 1279.068665][ T4186] ? mutex_unlock+0x10/0x10 [ 1279.073177][ T4186] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1279.079172][ T4186] ? lock_chain_count+0x20/0x20 [ 1279.084021][ T4186] ? __rwlock_init+0x140/0x140 [ 1279.088777][ T4186] hci_event_packet+0xe05/0x12f0 [ 1279.093714][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 1279.098912][ T4186] ? rcu_lock_release+0x20/0x20 [ 1279.103761][ T4186] ? hci_send_to_monitor+0x9c/0x4a0 [ 1279.108958][ T4186] hci_rx_work+0x255/0xa10 [ 1279.113382][ T4186] process_one_work+0x863/0x1000 [ 1279.118331][ T4186] ? worker_detach_from_pool+0x240/0x240 [ 1279.123956][ T4186] ? lockdep_hardirqs_off+0x70/0x100 [ 1279.129255][ T4186] ? _raw_spin_lock_irq+0xab/0xe0 [ 1279.134273][ T4186] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1279.139657][ T4186] ? wq_worker_running+0x97/0x170 [ 1279.144692][ T4186] worker_thread+0xaa8/0x12a0 [ 1279.149462][ T4186] kthread+0x436/0x520 [ 1279.153518][ T4186] ? rcu_lock_release+0x20/0x20 [ 1279.158359][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 1279.162938][ T4186] ret_from_fork+0x1f/0x30 [ 1279.167380][ T4186] [ 1279.193821][ T4186] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1279.208618][ T4186] Bluetooth: hci4: failed to register connection device [ 1280.477685][T15640] x_tables: unsorted underflow at hook 1 [ 1282.648101][T15670] xt_hashlimit: max too large, truncated to 1048576 [ 1283.380082][T15670] xt_hashlimit: overflow, try lower: 33554673/0 [ 1284.580339][T15688] capability: warning: `syz.5.2874' uses 32-bit capabilities (legacy support in use) [ 1285.278396][T15706] x_tables: unsorted underflow at hook 1 [ 1285.416055][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 1285.445107][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 1285.509753][T15695] ceph: No mds server is up or the cluster is laggy [ 1285.553133][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 1285.595704][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 1285.813705][T15720] tipc: Started in network mode [ 1285.833537][T15720] tipc: Node identity 4, cluster identity 4711 [ 1285.864064][T15720] tipc: Node number set to 4 [ 1285.875031][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 1285.881236][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 1287.092408][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.101302][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.110227][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.119375][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.128577][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.137692][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.146849][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.156086][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.165213][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.174362][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1287.393446][T15733] vivid-008: kernel_thread() failed [ 1289.766724][T15771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.869509][T15771] device bridge_slave_1 left promiscuous mode [ 1290.892375][T15771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.953420][T15786] binder: 15785:15786 unknown command 1074553619 [ 1291.112499][T15786] binder: 15785:15786 ioctl c0306201 200000000640 returned -22 [ 1294.545946][T15808] chnl_net:caif_netlink_parms(): no params data found [ 1295.632814][ T4219] Bluetooth: hci0: command 0x0409 tx timeout [ 1296.005133][T15808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.036739][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.069982][T15808] device bridge_slave_0 entered promiscuous mode [ 1296.104546][T15808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.127253][T15808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.157525][T15808] device bridge_slave_1 entered promiscuous mode [ 1296.248198][T15808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.283613][T15808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.428534][T15808] team0: Port device team_slave_0 added [ 1296.466703][T15808] team0: Port device team_slave_1 added [ 1296.514538][T15865] tmpfs: Unknown parameter 'usrquota' [ 1296.632640][T15808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.639630][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.997298][T15873] xt_hashlimit: max too large, truncated to 1048576 [ 1297.004372][T15873] xt_hashlimit: overflow, try lower: 33554673/0 [ 1297.034568][T15808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.310609][T15808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.407820][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.485846][T15808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.581760][T15808] device hsr_slave_0 entered promiscuous mode [ 1297.632685][T15808] device hsr_slave_1 entered promiscuous mode [ 1297.640139][T15808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1297.648211][T15808] Cannot create hsr debugfs directory [ 1297.655352][T15882] tipc: Started in network mode [ 1297.660276][T15882] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1297.712489][T10744] Bluetooth: hci0: command 0x041b tx timeout [ 1298.564022][T10744] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1298.572493][T10744] Bluetooth: hci3: Injecting HCI hardware error event [ 1298.579744][ T4186] Bluetooth: hci3: hardware error 0x00 [ 1298.591311][T15882] tipc: Enabled bearer , priority 10 [ 1298.990169][ T4216] tipc: Node number set to 4269801488 [ 1299.697247][T15808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.792422][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 1300.216118][T15808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.309763][T15808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.539207][T15808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.786974][T15923] xt_hashlimit: max too large, truncated to 1048576 [ 1300.793647][T15923] xt_hashlimit: overflow, try lower: 33554673/0 [ 1300.867549][ T4442] tipc: Left network mode [ 1301.098738][T15930] x_tables: unsorted underflow at hook 1 [ 1302.173725][T10744] Bluetooth: hci0: command 0x0419 tx timeout [ 1302.186458][T15808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1302.242846][T15808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1302.897293][T15808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1302.930949][T15808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1303.141866][T15808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.168624][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1303.191329][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1303.249908][T15808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.334730][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1303.367407][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1303.448624][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.455897][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.481401][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1303.497045][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1303.566402][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1303.624666][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.631752][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.659862][T15960] __nla_validate_parse: 42 callbacks suppressed [ 1303.659936][T15960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2933'. [ 1303.714421][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1303.824859][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1303.846086][ T7806] libceph: connect (1)[c::]:6789 error -101 [ 1303.852158][ T7806] libceph: mon0 (1)[c::]:6789 connect error [ 1303.903498][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1303.922627][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1303.933827][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1303.955085][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1304.002222][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.035823][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1304.045261][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1304.055332][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1304.072850][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1304.098289][T15808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1304.206565][T15960] ceph: No mds server is up or the cluster is laggy [ 1304.352881][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 1304.359063][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 1304.797695][T15983] x_tables: unsorted underflow at hook 1 [ 1305.032348][ T7806] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1305.316771][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.352582][ T7806] usb 9-1: Using ep0 maxpacket: 8 [ 1305.363760][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.428815][ T4442] device batadv0 left promiscuous mode [ 1305.607753][ T4442] device hsr_slave_0 left promiscuous mode [ 1305.712101][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.765753][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.781887][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.792062][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.810716][ T4442] device bridge_slave_1 left promiscuous mode [ 1305.822780][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.831646][ T4442] device bridge_slave_0 left promiscuous mode [ 1305.838114][ T7806] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1305.852297][ T7806] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1305.860766][ T7806] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1305.870331][ T7806] usb 9-1: config 250 has no interface number 0 [ 1305.876772][ T7806] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1305.877048][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.888480][ T7806] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1305.906608][ T7806] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1305.917150][ T7806] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1305.941226][ T7806] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1305.974393][ T4442] device veth1_macvtap left promiscuous mode [ 1305.982694][ T4442] device veth0_macvtap left promiscuous mode [ 1306.269282][ T4442] device veth1_vlan left promiscuous mode [ 1306.275905][ T4442] device veth0_vlan left promiscuous mode [ 1306.700260][ T7806] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1306.972437][ T7806] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1307.000114][ T7806] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1307.043574][T16021] xt_hashlimit: max too large, truncated to 1048576 [ 1307.050186][T16021] xt_hashlimit: overflow, try lower: 33554673/0 [ 1307.062765][ T7806] usb 9-1: Product: syz [ 1307.067102][ T7806] usb 9-1: SerialNumber: syz [ 1307.245242][ T7806] hub 9-1:250.228: bad descriptor, ignoring hub [ 1307.251530][ T7806] hub: probe of 9-1:250.228 failed with error -5 [ 1307.471579][ T4442] team0 (unregistering): Port device geneve0 removed [ 1307.473943][ T7806] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1307.872007][ T4442] team0 (unregistering): Port device team_slave_1 removed [ 1307.905351][ T4442] team0 (unregistering): Port device team_slave_0 removed [ 1308.099537][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1308.109617][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1308.131404][T15808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.256682][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1308.310306][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1308.367715][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1308.387981][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1308.420438][T15808] device veth0_vlan entered promiscuous mode [ 1308.431784][T16043] sctp: [Deprecated]: syz.9.2949 (pid 16043) Use of int in maxseg socket option. [ 1308.431784][T16043] Use struct sctp_assoc_value instead [ 1308.450139][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1308.468686][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1308.923774][T15808] device veth1_vlan entered promiscuous mode [ 1309.000137][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1309.010631][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1309.020063][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1309.030919][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1309.060309][T15808] device veth0_macvtap entered promiscuous mode [ 1309.102541][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1309.122484][T15808] device veth1_macvtap entered promiscuous mode [ 1309.236051][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.290783][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.308692][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.501201][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.540131][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.570369][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.753969][T15808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.776524][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.828368][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.886360][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.945942][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.005098][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.015868][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.045772][T15808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.066663][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1310.077914][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1310.087048][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1310.096693][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1310.137011][T15808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.153763][T15808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.168206][T15808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.180065][T15808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.688361][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.737366][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.783833][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.871237][T16081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2955'. [ 1310.950688][ T8836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1311.038198][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.361591][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1313.546964][ T7806] usb 9-1: USB disconnect, device number 3 [ 1313.600085][ T7806] usblp0: removed [ 1315.357421][T16134] x_tables: unsorted underflow at hook 1 [ 1316.294094][T16139] af_packet: tpacket_rcv: packet too big, clamped from 8 to 4294967272. macoff=96 [ 1317.312367][ T4219] Bluetooth: hci1: command 0x0409 tx timeout [ 1317.699066][T16154] input: syz0 as /devices/virtual/input/input48 [ 1319.015746][T16129] chnl_net:caif_netlink_parms(): no params data found [ 1319.403052][T16077] Bluetooth: hci1: command 0x041b tx timeout [ 1319.830686][T16129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.866041][T16129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.911390][T16129] device bridge_slave_0 entered promiscuous mode [ 1319.959351][T16129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.022526][T16129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.052012][T16129] device bridge_slave_1 entered promiscuous mode [ 1320.240480][T16129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.278118][T16129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.289767][T16129] team0: Port device team_slave_0 added [ 1321.454570][T16129] team0: Port device team_slave_1 added [ 1321.472380][ T4219] Bluetooth: hci1: command 0x040f tx timeout [ 1321.765770][T16129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.929970][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.955934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.012460][T16129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.034682][T16129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.041900][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.333356][T16129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.646313][T16212] could not allocate digest TFM handle cbcmac-aes-neon [ 1322.825575][T16129] device hsr_slave_0 entered promiscuous mode [ 1322.917403][T16129] device hsr_slave_1 entered promiscuous mode [ 1323.553952][ T4218] Bluetooth: hci1: command 0x0419 tx timeout [ 1323.852471][T16077] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1324.583370][T16077] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1324.692292][T16077] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1324.812388][T16077] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 1325.012661][T16077] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1325.021754][T16077] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.068678][T16077] usb 9-1: Product: syz [ 1325.099309][T16077] usb 9-1: Manufacturer: syz [ 1325.104331][T16077] usb 9-1: SerialNumber: syz [ 1325.144949][T16227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1325.514564][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.523494][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.532473][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.541383][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.550330][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.559256][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.568351][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.577298][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.586211][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.595161][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1325.940680][T16077] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1326.142305][ C0] usblp0: nonzero read bulk status received: -71 [ 1326.147996][T16227] usblp0: error -71 reading from printer [ 1326.163772][ T4254] usb 9-1: USB disconnect, device number 4 [ 1326.168444][ T4254] usblp0: removed [ 1326.173128][T16129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1326.190369][T16129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1326.193438][T16129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1326.214944][T16129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1326.622038][T16129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.684349][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1326.704713][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1326.742178][T16129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.807061][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1326.853771][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1326.882758][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.889940][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.135533][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1327.167965][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1327.440115][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1327.571253][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.578440][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.834315][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1328.027837][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1328.231627][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1328.376619][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1328.502720][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1328.528942][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1328.757966][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1328.816563][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1328.887821][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1328.923981][T16129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1329.006813][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1329.015213][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1329.043223][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1329.982611][T16129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.989784][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1329.999469][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1330.094927][ T4442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.296936][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1330.359933][T16308] tmpfs: Unknown parameter 'quota' [ 1330.360547][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1330.502192][ T4442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.550859][T16319] trusted_key: encrypted_key: insufficient parameters specified [ 1330.567677][T16295] chnl_net:caif_netlink_parms(): no params data found [ 1330.602129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1330.628098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1330.726392][ T4219] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1331.502340][ T4219] usb 10-1: Using ep0 maxpacket: 16 [ 1331.672927][ T4218] Bluetooth: hci2: command 0x0409 tx timeout [ 1331.770472][ T4442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.797255][T16319] netlink: 'syz.5.3000': attribute type 10 has an invalid length. [ 1331.814743][T16319] __nla_validate_parse: 41 callbacks suppressed [ 1331.814761][T16319] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3000'. [ 1331.980535][T16129] device veth0_vlan entered promiscuous mode [ 1331.991361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1332.008330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1332.037456][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.046693][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.055684][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.064675][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.073758][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.082697][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.091670][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.100628][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.109562][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1332.176991][ T4219] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1332.194718][ T4219] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1332.224289][ T4442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.231111][ T4219] usb 10-1: Product: syz [ 1332.249261][ T4219] usb 10-1: Manufacturer: syz [ 1333.112497][ T4219] usb 10-1: SerialNumber: syz [ 1333.124034][ T4219] usb 10-1: config 0 descriptor?? [ 1333.138781][T16129] device veth1_vlan entered promiscuous mode [ 1333.661282][ T4219] usb 10-1: USB disconnect, device number 2 [ 1333.916026][ T4589] Bluetooth: hci2: command 0x041b tx timeout [ 1334.035251][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1334.787506][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1334.925129][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.932801][T16295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.959168][T16295] device bridge_slave_0 entered promiscuous mode [ 1334.974234][T16129] device veth0_macvtap entered promiscuous mode [ 1334.998750][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1335.008304][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.030049][T16295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.053590][T16295] device bridge_slave_1 entered promiscuous mode [ 1335.103901][T16129] device veth1_macvtap entered promiscuous mode [ 1335.323317][T16295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.420615][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.493504][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.563776][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.563867][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.563956][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.563971][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.564057][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.564136][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.567045][T16129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.569299][T16295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.715009][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1335.735507][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1335.815745][T16295] team0: Port device team_slave_0 added [ 1335.837788][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.865090][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.896249][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.945312][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.955824][ T4589] Bluetooth: hci2: command 0x040f tx timeout [ 1335.978500][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.996601][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.053676][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.082326][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.133655][T16129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.144779][T16295] team0: Port device team_slave_1 added [ 1336.214653][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1336.231070][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1336.394211][T16129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.406097][T16129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.414906][T16129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.424259][T16129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.439376][T16295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.447108][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.482654][T16295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.519114][T16384] binder: 16383:16384 ioctl c018620c 200000000000 returned -1 [ 1336.868222][T16295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.915990][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.257952][T16295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.916703][T16295] device hsr_slave_0 entered promiscuous mode [ 1337.933829][T16393] 9pnet_virtio: no channels available for device @ [ 1338.027986][T16295] device hsr_slave_1 entered promiscuous mode [ 1338.124269][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 1338.178552][T16295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1338.215424][T16295] Cannot create hsr debugfs directory [ 1338.464674][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.497903][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.574140][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1338.607491][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.665019][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.903117][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1341.182784][T16440] __nla_validate_parse: 43 callbacks suppressed [ 1341.182849][T16440] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3020'. [ 1343.137527][T16469] tmpfs: Unknown parameter 'grpquota' [ 1343.180197][T16469] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3025'. [ 1343.221507][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3025'. [ 1343.708940][ T4442] device hsr_slave_0 left promiscuous mode [ 1343.732983][ T4442] device hsr_slave_1 left promiscuous mode [ 1343.757979][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.794583][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.866738][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.940321][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.022059][ T4442] device bridge_slave_1 left promiscuous mode [ 1344.075486][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.168023][ T4442] device bridge_slave_0 left promiscuous mode [ 1344.220453][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.323341][ T4442] device veth1_macvtap left promiscuous mode [ 1344.329435][ T4442] device veth0_macvtap left promiscuous mode [ 1344.342519][ T4442] device veth1_vlan left promiscuous mode [ 1344.348354][ T4442] device veth0_vlan left promiscuous mode [ 1344.748522][ T4442] team0 (unregistering): Port device team_slave_1 removed [ 1344.798716][ T4442] team0 (unregistering): Port device team_slave_0 removed [ 1344.828531][ T4442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.889172][ T4442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.929697][ T4442] bond0 (unregistering): Released all slaves [ 1346.002559][T16458] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1346.252381][T16458] usb 1-1: Using ep0 maxpacket: 8 [ 1346.638999][T16497] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3031'. [ 1346.692838][T16458] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1346.726923][T16458] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1346.806552][T16458] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1346.886598][T16458] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1347.006465][T16458] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.154887][T16458] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1347.236249][T16458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.833044][T16458] usb 1-1: can't set config #16, error -71 [ 1348.921774][T16458] usb 1-1: USB disconnect, device number 11 [ 1349.221334][T16295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1349.248530][T16295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1349.271609][T16295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1349.299036][T16295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1349.587817][T16295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.603416][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1349.611929][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1349.622331][ T4216] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1349.646490][T16295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.676060][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1349.703038][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1349.728303][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.735470][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.748031][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1349.763659][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1349.773385][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.780467][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.842998][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1349.861056][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1349.902444][ T4216] usb 10-1: Using ep0 maxpacket: 8 [ 1349.921487][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1349.986455][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1350.063054][ T4216] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1350.076969][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1350.083673][ T4216] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1350.111013][ T4216] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.144950][ T4216] usb 10-1: config 0 descriptor?? [ 1350.149738][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1350.255889][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1350.336195][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1350.373662][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1350.414693][ T4216] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1350.415763][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1350.513177][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1350.548514][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 1350.548531][ T26] audit: type=1800 audit(2000000193.315:147): pid=16544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3038" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1350.564410][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1350.696992][T16295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1351.242114][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1351.255974][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1351.290640][T16295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.408592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1351.433237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1351.540639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1351.573490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1351.600017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1351.627764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1351.653312][T16295] device veth0_vlan entered promiscuous mode [ 1351.706545][T16295] device veth1_vlan entered promiscuous mode [ 1351.768106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1351.793113][ T4255] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1351.851872][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1351.894060][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1351.934597][T16295] device veth0_macvtap entered promiscuous mode [ 1352.016245][T16295] device veth1_macvtap entered promiscuous mode [ 1352.052391][ T4255] usb 1-1: Using ep0 maxpacket: 8 [ 1352.103752][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.125793][ T4218] usb 10-1: USB disconnect, device number 3 [ 1352.143720][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.172562][ T4255] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1352.188295][ T4255] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1352.218667][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.252386][ T4255] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1352.272306][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.277374][ T4255] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1352.336275][ T4255] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1352.338222][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.374565][ T4255] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1352.399883][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.404154][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.431800][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.459699][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.500237][T16295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.532503][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1352.540839][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1352.544207][T16580] overlayfs: failed to resolve './file1': -2 [ 1352.609074][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1352.649676][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1352.699397][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.722470][ T4255] usb 1-1: GET_CAPABILITIES returned 0 [ 1352.728189][ T4255] usbtmc 1-1:16.0: can't read capabilities [ 1352.736974][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.751252][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.768366][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.951769][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.091297][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.222513][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.361235][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.473173][ T4255] Bluetooth: hci4: command 0x0406 tx timeout [ 1353.527771][T16295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.586660][ T4255] usb 1-1: USB disconnect, device number 12 [ 1353.625129][T16586] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3044'. [ 1354.124803][T16586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.184354][T16586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.204262][T16586] bond0 (unregistering): Released all slaves [ 1355.250333][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1355.259251][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1355.287185][T16295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.297558][T16295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.307900][T16295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.317519][T16295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.677588][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.697352][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.762582][ T4218] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1356.605704][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1356.822205][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.830782][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.846490][T16625] x_tables: unsorted underflow at hook 1 [ 1356.922090][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1356.972467][ T4218] usb 1-1: config 252 has an invalid interface number: 186 but max is 0 [ 1357.001674][ T4218] usb 1-1: config 252 has no interface number 0 [ 1357.329305][ T26] audit: type=1326 audit(2000000200.095:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9393e969 code=0x7ffc0000 [ 1357.352096][ T4218] usb 1-1: New USB device found, idVendor=0403, idProduct=bcd8, bcdDevice=27.67 [ 1357.406945][ T4218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.452424][T16636] netlink: 'syz.2.2998': attribute type 4 has an invalid length. [ 1357.481187][ T26] audit: type=1326 audit(2000000200.145:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e93940887 code=0x7ffc0000 [ 1357.489102][ T4218] usb 1-1: Product: syz [ 1357.503518][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.574203][ T26] audit: type=1326 audit(2000000200.145:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8e939407fc code=0x7ffc0000 [ 1357.741338][ T4218] usb 1-1: Manufacturer: syz [ 1357.746391][ T26] audit: type=1326 audit(2000000200.145:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8e93940734 code=0x7ffc0000 [ 1357.811110][ T4218] usb 1-1: SerialNumber: syz [ 1357.883982][ T4218] ftdi_sio 1-1:252.186: FTDI USB Serial Device converter detected [ 1357.913660][ T26] audit: type=1326 audit(2000000200.145:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8e93940734 code=0x7ffc0000 [ 1357.985914][ T4218] usb 1-1: Detected FT-X [ 1358.452988][ T4218] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1358.482583][ T4218] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1358.523389][ T4218] ftdi_sio 1-1:252.186: GPIO initialisation failed: -71 [ 1358.551212][ T26] audit: type=1326 audit(2000000200.145:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e9393d5ca code=0x7ffc0000 [ 1358.569333][ T4218] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1358.573461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1358.631815][ T4218] usb 1-1: USB disconnect, device number 13 [ 1358.657950][ T4218] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1358.684321][ T4218] ftdi_sio 1-1:252.186: device disconnected [ 1359.014026][ T4442] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.547683][ T26] audit: type=1326 audit(2000000200.145:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9393e969 code=0x7ffc0000 [ 1359.570100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1359.572592][ T4216] Bluetooth: hci0: command 0x0409 tx timeout [ 1359.593163][ T26] audit: type=1326 audit(2000000200.145:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9393e969 code=0x7ffc0000 [ 1359.622405][ T26] audit: type=1326 audit(2000000200.145:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9393e969 code=0x7ffc0000 [ 1359.657285][ T26] audit: type=1326 audit(2000000200.145:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9393e969 code=0x7ffc0000 [ 1360.036241][ T4442] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.122173][ T4442] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.273524][ T4255] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1360.275080][ T4442] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.350768][T16638] chnl_net:caif_netlink_parms(): no params data found [ 1360.561445][ T4255] usb 3-1: Using ep0 maxpacket: 8 [ 1360.633019][T16676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1360.682451][ T4255] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1360.691600][ T4255] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1360.701563][ T4255] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1360.712052][ T4255] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1360.722378][ T4255] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.736688][ T4255] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1360.745926][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.791607][T16638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.824016][T16638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.858088][T16638] device bridge_slave_0 entered promiscuous mode [ 1361.029868][ T4255] usb 3-1: GET_CAPABILITIES returned 0 [ 1361.035645][ T4255] usbtmc 3-1:16.0: can't read capabilities [ 1362.033410][ T4218] Bluetooth: hci0: command 0x041b tx timeout [ 1362.263540][T16638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.277299][T16638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.303357][T16638] device bridge_slave_1 entered promiscuous mode [ 1362.347534][T16693] netlink: 'syz.9.3063': attribute type 1 has an invalid length. [ 1362.374013][T16693] netlink: 'syz.9.3063': attribute type 4 has an invalid length. [ 1362.381927][T16693] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.3063'. [ 1362.435604][T16638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.466772][T16638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.507966][T16701] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 1362.582476][T16683] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1362.599741][ T4255] usb 3-1: USB disconnect, device number 2 [ 1362.680303][T16638] team0: Port device team_slave_0 added [ 1362.700413][ T4186] block nbd9: Receive control failed (result -107) [ 1362.729631][T16704] nbd9: detected capacity change from 0 to 12 [ 1362.747172][T12351] block nbd9: Dead connection, failed to find a fallback [ 1362.754888][T12351] block nbd9: shutting down sockets [ 1362.763586][T12351] print_req_error: 9 callbacks suppressed [ 1362.763599][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1362.782408][T12351] buffer_io_error: 8 callbacks suppressed [ 1362.782432][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1362.797628][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1362.808566][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1362.850534][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1362.861850][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1362.869977][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1362.880986][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1362.994008][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1363.004989][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1363.015264][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1363.026337][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1363.035494][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1363.047530][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1363.056152][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1363.067190][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1363.075340][T16263] ldm_validate_partition_table(): Disk read failed. [ 1363.135397][T16638] team0: Port device team_slave_1 added [ 1363.137697][T12351] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1363.152985][T12351] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1363.164134][ T1092] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1363.175377][ T1092] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1363.234396][T16263] Dev nbd9: unable to read RDB block 0 [ 1363.259151][T16263] nbd9: unable to read partition table [ 1363.278610][T16263] nbd9: partition table beyond EOD, truncated [ 1363.298177][T16263] ldm_validate_partition_table(): Disk read failed. [ 1363.314291][T16263] Dev nbd9: unable to read RDB block 0 [ 1363.339401][T16263] nbd9: unable to read partition table [ 1363.341253][T16638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.345254][T16263] nbd9: partition table beyond EOD, truncated [ 1363.361063][T16715] ldm_validate_partition_table(): Disk read failed. [ 1363.371253][T16715] Dev nbd9: unable to read RDB block 0 [ 1363.377555][T16715] nbd9: unable to read partition table [ 1363.383946][T16715] nbd9: partition table beyond EOD, truncated [ 1363.391781][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1363.520856][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=5, location=5 [ 1363.538866][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=4, location=4 [ 1363.577279][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.605462][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=3, location=3 [ 1363.626502][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1363.639535][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=5, location=5 [ 1363.652866][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=4, location=4 [ 1363.792516][T16638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.829294][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=3, location=3 [ 1363.866730][T16638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.881867][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=5, location=5 [ 1363.904246][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.911193][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=4, location=4 [ 1363.981274][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=3, location=3 [ 1364.031686][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1364.067791][T16638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.093463][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=2, location=2 [ 1364.112384][ T4218] Bluetooth: hci0: command 0x040f tx timeout [ 1364.163970][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=1, location=1 [ 1364.250925][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=0, location=0 [ 1364.322642][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1364.357785][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=2, location=2 [ 1364.383877][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=1, location=1 [ 1364.395977][T16638] device hsr_slave_0 entered promiscuous mode [ 1364.398898][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=0, location=0 [ 1364.459470][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=2, location=2 [ 1364.472601][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=1, location=1 [ 1364.483361][T16638] device hsr_slave_1 entered promiscuous mode [ 1364.502313][T16638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.510233][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=0, location=0 [ 1364.538714][T16638] Cannot create hsr debugfs directory [ 1364.545084][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1364.605853][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=0, location=0 [ 1364.639621][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1364.702428][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=0, location=0 [ 1364.724086][T16715] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=0, location=0 [ 1364.744511][T16715] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1364.984794][ T4442] device hsr_slave_0 left promiscuous mode [ 1364.992631][ T4442] device hsr_slave_1 left promiscuous mode [ 1365.014098][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.032418][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.068099][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.098186][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.126430][ T4442] device bridge_slave_1 left promiscuous mode [ 1365.146176][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.172010][ T4442] device bridge_slave_0 left promiscuous mode [ 1365.199241][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.266203][ T4442] device veth1_macvtap left promiscuous mode [ 1365.285250][ T4442] device veth0_macvtap left promiscuous mode [ 1365.303568][ T4442] device veth1_vlan left promiscuous mode [ 1365.309415][ T4442] device veth0_vlan left promiscuous mode [ 1366.093996][ T4442] team0 (unregistering): Port device team_slave_1 removed [ 1366.129634][ T4442] team0 (unregistering): Port device team_slave_0 removed [ 1366.192515][ T4159] Bluetooth: hci0: command 0x0419 tx timeout [ 1366.755302][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.761771][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.826255][T16750] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3072'. [ 1368.287950][ T4215] Bluetooth: hci0: command 0x1407 tx timeout [ 1369.620057][T16638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1369.706862][T16638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1369.867781][T16638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1369.878601][T16638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1370.352522][ T4215] Bluetooth: hci0: command 0x1407 tx timeout [ 1370.370836][T16638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.365817][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1371.375077][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1371.415782][T16638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.453856][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1371.463574][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1371.485634][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.492811][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.519263][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 1371.545373][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1371.559869][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1371.570630][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1371.591466][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.598637][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.686606][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1371.772385][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1371.834414][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1371.928267][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1371.995278][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1372.019892][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1372.033761][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1372.043955][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1372.055923][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1372.073038][T16638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1372.089041][T16638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1372.101251][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1372.115216][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1372.451351][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1373.690593][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1373.752680][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1373.767665][T16638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.008036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1374.159238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1374.980563][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1374.998942][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1375.043351][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1375.229334][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1375.260820][T16638] device veth0_vlan entered promiscuous mode [ 1375.344085][T16638] device veth1_vlan entered promiscuous mode [ 1375.362403][ T4255] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1375.603675][ T4255] usb 3-1: Using ep0 maxpacket: 32 [ 1375.732480][ T4255] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1375.752360][ T4216] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1376.032966][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 1376.123499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1376.153251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1376.184709][ T4216] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1376.198098][T16638] device veth0_macvtap entered promiscuous mode [ 1376.226251][T16638] device veth1_macvtap entered promiscuous mode [ 1376.232900][ T4255] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1376.272635][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1376.280847][ T4255] usb 3-1: Product: syz [ 1376.335686][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.361034][ T4255] usb 3-1: Manufacturer: syz [ 1376.380081][ T4255] usb 3-1: SerialNumber: syz [ 1376.387470][ T4255] usb 3-1: config 0 descriptor?? [ 1376.392871][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.417270][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.432680][T16858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1376.449955][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.453313][ T4255] hub 3-1:0.0: bad descriptor, ignoring hub [ 1376.462693][ T4216] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1376.492164][ T4255] hub: probe of 3-1:0.0 failed with error -5 [ 1376.498785][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.509412][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1376.531360][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.560362][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.582718][ T4216] usb 1-1: Product: syz [ 1376.586916][ T4216] usb 1-1: Manufacturer: syz [ 1376.591357][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.591513][ T4216] usb 1-1: SerialNumber: syz [ 1376.613927][T16638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.622406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1376.638476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1376.669094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1376.711306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1376.730473][ T4216] usb 1-1: config 0 descriptor?? [ 1376.755664][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.772626][T16868] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1376.801497][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.807199][ T4216] hub 1-1:0.0: bad descriptor, ignoring hub [ 1376.839447][ T4216] hub: probe of 1-1:0.0 failed with error -5 [ 1376.844426][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.857312][ T4216] chaoskey 1-1:0.0: Unable to register with hwrng [ 1376.877209][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.894140][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.909155][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.921999][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.939260][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.961197][T16638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.005235][T16638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.028957][T16638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.068677][T16638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.127122][T16638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.239042][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1377.269252][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1377.550160][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.575523][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.646343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1377.696932][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.731416][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.798767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1377.912556][ T4217] usb 1-1: USB disconnect, device number 14 [ 1379.775408][T16933] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 1379.783314][T16933] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3102'. [ 1380.790531][ T4442] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.801141][ T4442] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1380.869148][ T4442] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.879719][ T4442] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1381.077401][ T4442] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.088127][ T4442] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1381.161076][ T4442] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.232195][ T4442] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1381.321404][T16936] chnl_net:caif_netlink_parms(): no params data found [ 1381.626348][T16936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.639192][T16936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.666020][T16936] device bridge_slave_0 entered promiscuous mode [ 1381.726428][T16936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.749157][T16936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.782047][T16936] device bridge_slave_1 entered promiscuous mode [ 1381.814352][ T4255] usb 3-1: USB disconnect, device number 3 [ 1381.869794][T16936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.927856][T16936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.118534][ T4442] tipc: Disabling bearer [ 1382.126123][ T4442] tipc: Left network mode [ 1382.311347][T16936] team0: Port device team_slave_0 added [ 1383.820599][ T4216] Bluetooth: hci3: command 0x0409 tx timeout [ 1385.614689][T16965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1385.829791][T16965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.858477][T16965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.898606][T16965] bond0 (unregistering): Released all slaves [ 1385.928951][T16936] team0: Port device team_slave_1 added [ 1386.173253][T16936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.489929][T16936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.518185][T12922] Bluetooth: hci3: command 0x041b tx timeout [ 1387.207088][T16936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.394353][T16936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.442326][T16936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.312427][T16936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.343376][ T8277] Bluetooth: hci3: command 0x040f tx timeout [ 1389.468408][T16936] device hsr_slave_0 entered promiscuous mode [ 1389.480705][T16936] device hsr_slave_1 entered promiscuous mode [ 1389.498132][T16936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1389.553586][T16936] Cannot create hsr debugfs directory [ 1391.283781][ T4442] device hsr_slave_0 left promiscuous mode [ 1391.291105][ T4442] device hsr_slave_1 left promiscuous mode [ 1391.297676][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.305503][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.314304][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.322031][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.335682][ T4442] device bridge_slave_1 left promiscuous mode [ 1391.344924][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.365230][ T4442] device bridge_slave_0 left promiscuous mode [ 1391.372082][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.451497][ T4442] device veth1_macvtap left promiscuous mode [ 1391.460145][ T4442] device veth0_macvtap left promiscuous mode [ 1391.466589][ T4442] device veth1_vlan left promiscuous mode [ 1391.484223][ T4442] device veth0_vlan left promiscuous mode [ 1391.552605][ T4216] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1392.064483][ T4217] Bluetooth: hci3: command 0x0419 tx timeout [ 1392.880815][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 1393.066934][ T4442] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1393.082662][ T4216] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1393.092072][ T4216] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1393.111495][ T4216] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1393.140095][ T4216] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1393.194047][ T4216] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1393.217048][ T4442] bond1 (unregistering): Released all slaves [ 1393.320894][ T4442] team0 (unregistering): Port device geneve0 removed [ 1393.358143][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1393.358160][ T26] audit: type=1326 audit(2000000236.125:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17042 comm="syz.9.3133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x0 [ 1393.386845][ T4216] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1393.406851][ T4216] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1393.454956][ T4216] usb 1-1: Product: syz [ 1393.468441][ T4216] usb 1-1: Manufacturer: syz [ 1393.486476][ T4216] usb 1-1: SerialNumber: syz [ 1393.511506][ T4216] usb 1-1: config 0 descriptor?? [ 1393.568536][ T4216] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1393.631665][ T4216] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1393.660458][ T4442] team0 (unregistering): Port device team_slave_1 removed [ 1393.721151][ T4442] team0 (unregistering): Port device team_slave_0 removed [ 1393.852998][ T4216] usb 1-1: USB disconnect, device number 15 [ 1393.870245][ T4216] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1394.957371][T16936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1394.983979][T16936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1395.064954][T16936] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1395.123515][T16936] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1396.762092][T16936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.849440][T16936] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.074949][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1397.183713][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1397.303616][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1397.503070][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1397.542883][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.550017][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.558369][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.583228][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.591811][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.598963][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.606908][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1397.618255][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1397.627356][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1397.637459][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1397.649136][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1397.660544][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1397.670236][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1397.679252][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1397.690321][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1397.710593][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1397.719758][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.746948][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1397.784056][T16936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1398.304849][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3147'. [ 1399.112000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1399.162696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1399.215838][T16936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.247211][ T4217] Bluetooth: hci0: command 0x1407 tx timeout [ 1401.824815][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1401.850268][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1401.939539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1401.969461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1402.007768][T16936] device veth0_vlan entered promiscuous mode [ 1402.026887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1402.060159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1402.100873][T16936] device veth1_vlan entered promiscuous mode [ 1402.184406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1402.199219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1402.221098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1402.250485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1403.136084][T16936] device veth0_macvtap entered promiscuous mode [ 1403.146034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1403.175364][T16936] device veth1_macvtap entered promiscuous mode [ 1403.283415][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.322269][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.362332][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.422454][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.464416][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.522273][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.564472][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.622263][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.656760][T16936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.683071][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.831439][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.851887][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.865729][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.893814][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.926208][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.948698][T16936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.979906][T16936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.012290][T16936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.035216][T17194] block nbd2: shutting down sockets [ 1404.073171][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1404.103034][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1404.122569][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1404.141883][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1404.165088][T16936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.224267][T16936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.278250][T16936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.338038][T16936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.449779][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3165'. [ 1405.583080][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.600313][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.695223][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1405.917620][ T4217] Bluetooth: hci0: command 0x1407 tx timeout [ 1405.924970][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.934982][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.945036][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1406.181520][T17220] ======================================================= [ 1406.181520][T17220] WARNING: The mand mount option has been deprecated and [ 1406.181520][T17220] and is ignored by this kernel. Remove the mand [ 1406.181520][T17220] option from the mount to silence this warning. [ 1406.181520][T17220] ======================================================= [ 1406.222567][T17220] 9pnet_virtio: no channels available for device syz [ 1406.326043][ T26] audit: type=1326 audit(2000000249.095:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1406.483956][T17230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1406.484084][T17230] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1406.522829][T17230] vhci_hcd vhci_hcd.0: Device attached [ 1406.762414][ T4216] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1406.977457][ T26] audit: type=1326 audit(2000000249.745:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.072771][ T26] audit: type=1326 audit(2000000249.745:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.160812][ T26] audit: type=1326 audit(2000000249.745:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.252260][ T26] audit: type=1326 audit(2000000249.745:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.348173][T17231] vhci_hcd: connection reset by peer [ 1407.353952][T17246] block nbd1: shutting down sockets [ 1407.363153][ T4478] vhci_hcd: stop threads [ 1407.367492][ T4478] vhci_hcd: release socket [ 1407.384158][ T26] audit: type=1326 audit(2000000249.745:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.427502][ T4478] vhci_hcd: disconnect device [ 1407.485377][ T26] audit: type=1326 audit(2000000249.745:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.578293][ T26] audit: type=1326 audit(2000000249.745:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.652106][ T26] audit: type=1326 audit(2000000249.745:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1407.782058][ T26] audit: type=1326 audit(2000000249.745:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1408.364219][T17267] input: syz1 as /devices/virtual/input/input50 [ 1410.984600][T17298] block nbd2: shutting down sockets [ 1411.053513][T17306] input: syz1 as /devices/virtual/input/input51 [ 1411.872413][ T4216] vhci_hcd: vhci_device speed not set [ 1415.273052][T17373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1416.002609][T17374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3195'. [ 1423.184228][T17474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3215'. [ 1424.707884][T17490] overlayfs: failed to resolve './file1': -2 [ 1427.903886][T17533] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3227'. [ 1428.195406][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.201794][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.862328][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1429.862345][ T26] audit: type=1326 audit(2000000272.605:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.9.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1430.306754][T17580] x_tables: unsorted underflow at hook 1 [ 1433.991151][T17635] overlayfs: failed to resolve './file1': -2 [ 1434.002503][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1434.705516][ T4441] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1435.374721][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1435.412515][T17664] device bridge_slave_1 left promiscuous mode [ 1436.345408][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.436235][T17664] device bridge_slave_0 left promiscuous mode [ 1436.445324][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.992559][ T8277] Bluetooth: hci1: command 0x0406 tx timeout [ 1441.986765][T17708] x_tables: unsorted underflow at hook 1 [ 1442.475050][T17712] overlayfs: failed to resolve './file1': -2 [ 1448.032863][T17766] device wg1 entered promiscuous mode [ 1451.298367][T17800] overlayfs: failed to resolve './file1': -2 [ 1451.482404][ T4159] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1451.792665][ T4159] usb 3-1: Using ep0 maxpacket: 16 [ 1452.072494][ T4159] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1452.111030][ T4159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.162406][ T4159] usb 3-1: Product: syz [ 1452.166636][ T4159] usb 3-1: Manufacturer: syz [ 1452.194657][T17805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 1452.224225][ T4159] usb 3-1: SerialNumber: syz [ 1452.264614][ T4159] usb 3-1: config 0 descriptor?? [ 1452.832678][ T4159] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -110 [ 1454.594615][ T26] audit: type=1326 audit(2000000297.365:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31902b6b39 code=0x7ffc0000 [ 1454.831018][ T26] audit: type=1326 audit(2000000297.395:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31902b6b39 code=0x7ffc0000 [ 1454.853321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.055228][ T26] audit: type=1326 audit(2000000297.515:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31902b6b39 code=0x7ffc0000 [ 1455.112573][ T26] audit: type=1326 audit(2000000297.525:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31902b6b39 code=0x7ffc0000 [ 1455.193597][ T26] audit: type=1326 audit(2000000297.525:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7ffc0000 [ 1455.344367][ T26] audit: type=1326 audit(2000000297.525:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7ffc0000 [ 1455.423392][ T26] audit: type=1326 audit(2000000297.525:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7ffc0000 [ 1455.648740][ T26] audit: type=1326 audit(2000000297.525:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31902b6b39 code=0x7ffc0000 [ 1455.823482][ T26] audit: type=1326 audit(2000000297.525:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31902b6b39 code=0x7ffc0000 [ 1455.846298][ T26] audit: type=1326 audit(2000000297.525:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7ffc0000 [ 1455.872413][ T4159] Bluetooth: hci2: command 0x0406 tx timeout [ 1455.896507][ T4159] usb 3-1: USB disconnect, device number 4 [ 1458.112423][T16458] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1458.422321][T16458] usb 1-1: Using ep0 maxpacket: 8 [ 1458.572533][T16458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.628876][T16458] usb 1-1: config 0 has no interfaces? [ 1458.835966][T16458] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1458.872301][T16458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.920964][T16458] usb 1-1: Product: syz [ 1458.936001][T16458] usb 1-1: Manufacturer: syz [ 1458.944751][T16458] usb 1-1: SerialNumber: syz [ 1458.977345][T16458] usb 1-1: config 0 descriptor?? [ 1459.675396][T17865] udc-core: couldn't find an available UDC or it's busy [ 1459.722247][T17865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1462.246097][ T7806] usb 1-1: USB disconnect, device number 16 [ 1462.447240][T17917] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3314'. [ 1463.045240][T17915] overlayfs: failed to resolve './file1': -2 [ 1464.447205][ T26] kauditd_printk_skb: 72 callbacks suppressed [ 1464.447222][ T26] audit: type=1326 audit(2000000307.215:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588d6fd969 code=0x7ffc0000 [ 1464.641705][ T26] audit: type=1326 audit(2000000307.385:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f588d6fd969 code=0x7ffc0000 [ 1464.664117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.967895][ T26] audit: type=1326 audit(2000000307.385:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588d6fd969 code=0x7ffc0000 [ 1468.084820][T11501] block nbd5: Receive control failed (result -107) [ 1468.096194][T17967] block nbd5: shutting down sockets [ 1468.131528][ T26] audit: type=1326 audit(2000000307.385:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f588d6fd969 code=0x7ffc0000 [ 1468.369237][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3329'. [ 1468.709815][ T26] audit: type=1326 audit(2000000307.385:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588d6fd969 code=0x7ffc0000 [ 1468.732219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1468.747048][ T26] audit: type=1326 audit(2000000307.385:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f588d6fd969 code=0x7ffc0000 [ 1469.025989][T17988] overlayfs: failed to resolve './file1': -2 [ 1469.105044][ T26] audit: type=1326 audit(2000000311.875:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.0.3331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f588d6fd969 code=0x0 [ 1473.196764][T18042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1473.253662][T11501] block nbd2: Receive control failed (result -107) [ 1473.271324][T18039] block nbd2: shutting down sockets [ 1474.572454][ T4255] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1475.502335][ T4255] usb 1-1: Using ep0 maxpacket: 8 [ 1475.642494][ T4255] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1475.643612][T18097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3356'. [ 1475.674552][ T4255] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1475.717192][ T4255] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1475.746876][ T4255] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.811736][ T4255] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1475.831177][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.162505][ T4255] usb 1-1: GET_CAPABILITIES returned 0 [ 1476.162542][ T4255] usbtmc 1-1:16.0: can't read capabilities [ 1478.065410][T18124] usb 1-1: USB disconnect, device number 17 [ 1480.747925][ T26] audit: type=1326 audit(2000000323.515:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.461473][ T26] audit: type=1326 audit(2000000324.225:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.484036][ T4218] Bluetooth: hci0: command 0x0406 tx timeout [ 1481.510647][ T26] audit: type=1326 audit(2000000324.225:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.534724][ T26] audit: type=1326 audit(2000000324.225:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.559228][ T26] audit: type=1326 audit(2000000324.225:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.594220][ T26] audit: type=1326 audit(2000000324.225:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.622769][ T26] audit: type=1326 audit(2000000324.225:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.675952][ T26] audit: type=1326 audit(2000000324.225:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.699217][ T26] audit: type=1326 audit(2000000324.225:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1481.746813][ T26] audit: type=1326 audit(2000000324.225:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1482.044485][T18202] Attempt to restore checkpoint with obsolete wellknown handles [ 1489.315949][T18313] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1489.635607][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.644890][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.364102][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3412'. [ 1491.856426][T18380] overlayfs: failed to resolve './file1': -2 [ 1493.205718][T18421] overlayfs: failed to resolve './file1': -2 [ 1493.356866][T11501] block nbd1: Receive control failed (result -107) [ 1493.369983][T18422] block nbd1: shutting down sockets [ 1495.335715][T18468] overlayfs: failed to resolve './file1': -2 [ 1496.473631][T18124] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1496.474228][T18500] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1496.902408][T18124] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1497.082814][T18124] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1497.112365][T18511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 1497.138055][T18124] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.174145][T18124] usb 10-1: Product: syz [ 1497.193846][T18124] usb 10-1: Manufacturer: syz [ 1497.215401][T18124] usb 10-1: SerialNumber: syz [ 1498.165361][T18124] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1498.297193][T18528] overlayfs: failed to resolve './file1': -2 [ 1498.549520][T18124] usb 10-1: USB disconnect, device number 4 [ 1498.584686][T18124] usblp0: removed [ 1500.812445][T18594] input: syz1 as /devices/virtual/input/input55 [ 1505.222272][ T8277] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1506.793587][T11501] block nbd0: Receive control failed (result -107) [ 1506.837437][T18707] block nbd0: shutting down sockets [ 1506.932548][ T8277] usb 10-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1507.059568][ T8277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.072397][ T4215] Bluetooth: hci3: command 0x0406 tx timeout [ 1507.113499][ T8277] usb 10-1: config 0 descriptor?? [ 1507.165851][ T8277] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1507.366322][T18698] udc-core: couldn't find an available UDC or it's busy [ 1507.399879][T18698] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1507.582322][ T8277] gspca_sn9c20x: Write register 1000 failed -71 [ 1507.588724][ T8277] gspca_sn9c20x: Device initialization failed [ 1507.648201][ T8277] gspca_sn9c20x: probe of 10-1:0.0 failed with error -71 [ 1508.128482][ T8277] usb 10-1: USB disconnect, device number 5 [ 1509.938411][T18763] device bridge1 entered promiscuous mode [ 1510.573003][T11501] block nbd0: Receive control failed (result -107) [ 1510.587114][T17965] block nbd0: shutting down sockets [ 1511.477801][T18814] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3535'. [ 1511.498394][T18814] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3535'. [ 1512.092448][T18124] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1512.542427][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1512.542439][ T26] audit: type=1326 audit(2000000355.305:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18821 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c23c9a969 code=0x7fc00000 [ 1513.412360][T18124] usb 1-1: config 0 has no interfaces? [ 1513.425675][ T4215] Bluetooth: hci0: command 0x1407 tx timeout [ 1513.612436][T18124] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1513.621566][T18124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.675053][T18124] usb 1-1: Product: syz [ 1513.693503][T18124] usb 1-1: Manufacturer: syz [ 1513.714425][T18124] usb 1-1: SerialNumber: syz [ 1513.747809][T18124] usb 1-1: config 0 descriptor?? [ 1514.915691][ T4215] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1515.321952][ T4215] usb 10-1: Using ep0 maxpacket: 8 [ 1515.551416][ T4215] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1516.102310][ T4215] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1516.112544][ T4215] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1516.271915][ T4215] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1516.282906][ T4215] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1516.296249][ T4215] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1516.305675][ T4215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.356771][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1516.660191][ T4215] usb 10-1: usb_control_msg returned -32 [ 1516.666135][ T4215] usbtmc 10-1:16.0: can't read capabilities [ 1516.755545][T18124] usb 1-1: USB disconnect, device number 18 [ 1517.250959][ T4215] usb 10-1: USB disconnect, device number 6 [ 1518.444801][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3563'. [ 1520.512283][T16458] Bluetooth: hci0: command 0x1407 tx timeout [ 1522.107195][T19017] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1522.270338][T19029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3581'. [ 1523.011578][T19031] x_tables: unsorted underflow at hook 1 [ 1523.332521][T19047] device syzkaller1 entered promiscuous mode [ 1523.945767][T19070] fuse: Bad value for 'user_id' [ 1524.377813][T19084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1525.400429][T19092] x_tables: unsorted underflow at hook 1 [ 1525.895478][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1527.900551][T19136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1530.196854][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1532.261763][T19209] device netdevsim0 entered promiscuous mode [ 1532.302880][T19209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1532.347766][T19207] device netdevsim0 left promiscuous mode [ 1533.905392][T19248] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1534.850153][ T4215] Bluetooth: hci0: command 0x1407 tx timeout [ 1534.862266][ T26] audit: type=1326 audit(2000000377.635:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.9.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1535.572371][ T8277] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1536.642356][ T8277] usb 10-1: Using ep0 maxpacket: 8 [ 1537.195055][ T8277] usb 10-1: config 0 has no interfaces? [ 1537.367437][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1538.082989][ T8277] usb 10-1: config 0 has no interfaces? [ 1538.183024][ T8277] usb 10-1: config 0 has no interfaces? [ 1538.392313][ T8277] usb 10-1: unable to read config index 3 descriptor/all [ 1538.399412][ T8277] usb 10-1: can't read configurations, error -71 [ 1539.382330][ T26] audit: type=1326 audit(2000000382.145:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.0.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588d6fd969 code=0x7fc00000 [ 1539.741359][T19341] kvm [19340]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3 [ 1539.835860][T19341] kvm [19340]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3 [ 1539.925330][T19341] kvm [19340]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3 [ 1539.943522][T19354] vivid-004: ================= START STATUS ================= [ 1539.961166][T19341] kvm [19340]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 1539.975667][T11501] block nbd0: Receive control failed (result -107) [ 1539.985539][T19351] block nbd0: shutting down sockets [ 1540.005466][T19354] vivid-004: RDS Tx I/O Mode: Controls [ 1540.013311][T19354] vivid-004: RDS Program ID: 32904 [ 1540.021097][T19354] vivid-004: RDS Program Type: 3 [ 1540.028369][T19354] vivid-004: RDS PS Name: VIVID-TX [ 1540.037314][T19354] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1540.052087][T19354] vivid-004: RDS Stereo: true [ 1540.059924][T19354] vivid-004: RDS Artificial Head: false [ 1540.066691][T19354] vivid-004: RDS Compressed: false [ 1540.079210][T19354] vivid-004: RDS Dynamic PTY: false [ 1540.090709][T19354] vivid-004: RDS Traffic Announcement: false [ 1540.097786][T19354] vivid-004: RDS Traffic Program: true [ 1540.104693][T19354] vivid-004: RDS Music: true [ 1540.111491][T19354] vivid-004: ================== END STATUS ================== [ 1540.196982][T19366] netlink: 'syz.0.3666': attribute type 2 has an invalid length. [ 1540.287085][T19366] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1540.503557][T19376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1541.381058][ T26] audit: type=1326 audit(2000000384.145:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.144438][ T26] audit: type=1326 audit(2000000384.175:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.167775][ T26] audit: type=1326 audit(2000000384.175:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.192436][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1542.247544][ T26] audit: type=1326 audit(2000000384.175:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.362536][ T26] audit: type=1326 audit(2000000384.175:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.415730][ T26] audit: type=1326 audit(2000000384.175:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.553981][ T26] audit: type=1326 audit(2000000384.175:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.579378][ T26] audit: type=1326 audit(2000000384.175:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.617759][ T26] audit: type=1326 audit(2000000384.175:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1542.762570][ T26] audit: type=1326 audit(2000000384.175:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.9.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1543.543388][T19425] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1543.827080][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1544.038519][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1545.562281][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1546.534561][ T4186] block nbd9: Receive control failed (result -107) [ 1546.559070][T19496] block nbd9: shutting down sockets [ 1547.600999][ T26] kauditd_printk_skb: 157 callbacks suppressed [ 1547.601052][ T26] audit: type=1326 audit(2000000390.365:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1547.629957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.195638][ T26] audit: type=1326 audit(2000000390.415:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.398831][ T26] audit: type=1326 audit(2000000390.415:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.421347][ T26] audit: type=1326 audit(2000000390.415:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.448741][ T26] audit: type=1326 audit(2000000390.415:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.476450][ T26] audit: type=1326 audit(2000000390.415:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.610906][ T26] audit: type=1326 audit(2000000390.415:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.665542][T19537] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1548.743504][ T26] audit: type=1326 audit(2000000390.415:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1548.751941][T19537] kvm: pic: non byte read [ 1548.814153][T19537] kvm: pic: level sensitive irq not supported [ 1548.816322][T19537] kvm: pic: non byte read [ 1548.877938][ T26] audit: type=1326 audit(2000000390.415:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1549.012809][ T26] audit: type=1326 audit(2000000390.415:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319031a969 code=0x7fc00000 [ 1549.203128][ T4186] block nbd5: Receive control failed (result -107) [ 1549.218110][T19550] block nbd5: shutting down sockets [ 1549.581293][T19564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3718'. [ 1551.085165][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.102904][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.534686][ T4159] Bluetooth: hci0: command 0x1407 tx timeout [ 1552.673107][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1552.673123][ T26] audit: type=1326 audit(2000000395.445:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1552.882318][ T26] audit: type=1326 audit(2000000395.445:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1552.997148][ T26] audit: type=1326 audit(2000000395.445:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1553.090913][ T26] audit: type=1326 audit(2000000395.445:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1553.177877][T19606] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1553.222251][ T26] audit: type=1326 audit(2000000395.445:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1553.322496][ T26] audit: type=1326 audit(2000000395.445:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1553.449550][ T26] audit: type=1326 audit(2000000395.445:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1553.528302][ T26] audit: type=1326 audit(2000000395.445:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1553.620747][T19625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1553.999050][ T26] audit: type=1326 audit(2000000395.445:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1554.349253][ T26] audit: type=1326 audit(2000000395.445:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.9.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb2186969 code=0x7fc00000 [ 1556.626228][T19686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3746'. [ 1557.365984][ T4159] Bluetooth: hci0: command 0x1407 tx timeout [ 1557.881359][T19708] raw_sendmsg: syz.9.3750 forgot to set AF_INET. Fix it! [ 1558.890661][T19729] trusted_key: encrypted_key: insufficient parameters specified [ 1559.292362][T18124] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1559.682306][T18124] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.707943][T18124] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.763309][T18124] usb 10-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1559.801199][T18124] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.843274][T18124] usb 10-1: config 0 descriptor?? [ 1560.328211][T18124] uclogic 0003:5543:0042.0009: No inputs registered, leaving [ 1560.436906][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1561.197721][T18124] uclogic 0003:5543:0042.0009: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.9-1/input0 [ 1561.241507][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1561.330991][T19780] [ 1561.333341][T19780] ====================================================== [ 1561.340356][T19780] WARNING: possible circular locking dependency detected [ 1561.347385][T19780] 5.15.183-syzkaller #0 Not tainted [ 1561.352578][T19780] ------------------------------------------------------ [ 1561.359593][T19780] syz.1.3764/19780 is trying to acquire lock: [ 1561.365644][T19780] ffff888061639f90 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 1561.377028][T19780] [ 1561.377028][T19780] but task is already holding lock: [ 1561.384391][T19780] ffff888061638c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 1561.393477][T19780] [ 1561.393477][T19780] which lock already depends on the new lock. [ 1561.393477][T19780] [ 1561.403872][T19780] [ 1561.403872][T19780] the existing dependency chain (in reverse order) is: [ 1561.412876][T19780] [ 1561.412876][T19780] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1561.420603][T19780] lock_sock_nested+0x44/0x100 [ 1561.425980][T19780] smc_listen_out+0x109/0x3d0 [ 1561.431186][T19780] process_one_work+0x863/0x1000 [ 1561.436639][T19780] worker_thread+0xaa8/0x12a0 [ 1561.441835][T19780] kthread+0x436/0x520 [ 1561.442238][ T8277] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1561.446427][T19780] ret_from_fork+0x1f/0x30 [ 1561.446452][T19780] [ 1561.446452][T19780] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1561.469095][T19780] __lock_acquire+0x2c33/0x7c60 [ 1561.474468][T19780] lock_acquire+0x197/0x3f0 [ 1561.479491][T19780] __flush_work+0xdd/0x1b0 [ 1561.484425][T19780] __cancel_work_timer+0x3ac/0x520 [ 1561.490053][T19780] smc_clcsock_release+0x5c/0xe0 [ 1561.495505][T19780] __smc_release+0x398/0x500 [ 1561.500641][T19780] smc_close_non_accepted+0xd1/0x1f0 [ 1561.506440][T19780] smc_close_active+0x9d3/0xd90 [ 1561.511816][T19780] __smc_release+0x9a/0x500 [ 1561.516842][T19780] smc_release+0x2ca/0x530 [ 1561.521780][T19780] sock_close+0xd5/0x240 [ 1561.526552][T19780] __fput+0x234/0x930 [ 1561.531045][T19780] task_work_run+0x125/0x1a0 [ 1561.536154][T19780] exit_to_user_mode_loop+0x10f/0x130 [ 1561.542064][T19780] exit_to_user_mode_prepare+0xb1/0x140 [ 1561.548124][T19780] syscall_exit_to_user_mode+0x16/0x40 [ 1561.554104][T19780] do_syscall_64+0x58/0xa0 [ 1561.559033][T19780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1561.565451][T19780] [ 1561.565451][T19780] other info that might help us debug this: [ 1561.565451][T19780] [ 1561.575752][T19780] Possible unsafe locking scenario: [ 1561.575752][T19780] [ 1561.583217][T19780] CPU0 CPU1 [ 1561.588570][T19780] ---- ---- [ 1561.593922][T19780] lock(sk_lock-AF_SMC/1); [ 1561.598433][T19780] lock((work_completion)(&new_smc->smc_listen_work)); [ 1561.607882][T19780] lock(sk_lock-AF_SMC/1); [ 1561.614908][T19780] lock((work_completion)(&new_smc->smc_listen_work)); [ 1561.621849][T19780] [ 1561.621849][T19780] *** DEADLOCK *** [ 1561.621849][T19780] [ 1561.629976][T19780] 2 locks held by syz.1.3764/19780: [ 1561.635163][T19780] #0: ffff88805f122010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1561.645341][T19780] #1: ffff888061638c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 1561.654750][T19780] [ 1561.654750][T19780] stack backtrace: [ 1561.660632][T19780] CPU: 1 PID: 19780 Comm: syz.1.3764 Not tainted 5.15.183-syzkaller #0 [ 1561.668879][T19780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1561.678924][T19780] Call Trace: [ 1561.682242][T19780] [ 1561.685169][T19780] dump_stack_lvl+0x168/0x230 [ 1561.689838][T19780] ? load_image+0x3b0/0x3b0 [ 1561.694350][T19780] ? show_regs_print_info+0x20/0x20 [ 1561.699546][T19780] ? print_circular_bug+0x12b/0x1a0 [ 1561.704743][T19780] check_noncircular+0x274/0x310 [ 1561.709675][T19780] ? add_chain_block+0x940/0x940 [ 1561.714598][T19780] ? lockdep_lock+0xdc/0x1e0 [ 1561.719196][T19780] ? rcu_lock_release+0x5/0x20 [ 1561.723947][T19780] ? mark_lock+0x94/0x320 [ 1561.728267][T19780] ? mark_lock+0x94/0x320 [ 1561.732588][T19780] __lock_acquire+0x2c33/0x7c60 [ 1561.737428][T19780] ? deref_stack_reg+0xd0/0x120 [ 1561.742273][T19780] ? hlock_conflict+0x59/0x1f0 [ 1561.747139][T19780] ? check_path+0x40/0x40 [ 1561.751461][T19780] ? verify_lock_unused+0x140/0x140 [ 1561.756648][T19780] ? mark_lock+0x94/0x320 [ 1561.760979][T19780] ? __lock_acquire+0x13ad/0x7c60 [ 1561.765993][T19780] ? add_chain_block+0x940/0x940 [ 1561.770919][T19780] lock_acquire+0x197/0x3f0 [ 1561.775412][T19780] ? __flush_work+0xc1/0x1b0 [ 1561.779989][T19780] ? read_lock_is_recursive+0x10/0x10 [ 1561.785352][T19780] __flush_work+0xdd/0x1b0 [ 1561.789753][T19780] ? __flush_work+0xc1/0x1b0 [ 1561.794326][T19780] ? flush_work+0x20/0x20 [ 1561.798638][T19780] ? try_to_grab_pending+0xf3/0x7e0 [ 1561.803837][T19780] ? lockdep_hardirqs_off+0x70/0x100 [ 1561.809115][T19780] ? mark_lock+0x94/0x320 [ 1561.813454][T19780] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1561.819425][T19780] ? lock_chain_count+0x20/0x20 [ 1561.824263][T19780] ? print_unlock_imbalance_bug+0x160/0x160 [ 1561.830150][T19780] ? __cancel_work_timer+0x331/0x520 [ 1561.835425][T19780] __cancel_work_timer+0x3ac/0x520 [ 1561.840529][T19780] ? cancel_work_sync+0x20/0x20 [ 1561.845369][T19780] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1561.850831][T19780] ? lockdep_hardirqs_on+0x94/0x140 [ 1561.856057][T19780] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1561.861428][T19780] ? _local_bh_enable+0xa0/0xa0 [ 1561.866276][T19780] smc_clcsock_release+0x5c/0xe0 [ 1561.871211][T19780] __smc_release+0x398/0x500 [ 1561.875796][T19780] smc_close_non_accepted+0xd1/0x1f0 [ 1561.881080][T19780] smc_close_active+0x9d3/0xd90 [ 1561.885929][T19780] __smc_release+0x9a/0x500 [ 1561.890434][T19780] smc_release+0x2ca/0x530 [ 1561.894848][T19780] sock_close+0xd5/0x240 [ 1561.899084][T19780] ? sock_mmap+0x90/0x90 [ 1561.903321][T19780] __fput+0x234/0x930 [ 1561.907299][T19780] task_work_run+0x125/0x1a0 [ 1561.911910][T19780] exit_to_user_mode_loop+0x10f/0x130 [ 1561.917277][T19780] exit_to_user_mode_prepare+0xb1/0x140 [ 1561.922811][T19780] syscall_exit_to_user_mode+0x16/0x40 [ 1561.928271][T19780] do_syscall_64+0x58/0xa0 [ 1561.932697][T19780] ? clear_bhb_loop+0x15/0x70 [ 1561.937360][T19780] ? clear_bhb_loop+0x15/0x70 [ 1561.942025][T19780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1561.947926][T19780] RIP: 0033:0x7f319031a969 [ 1561.952333][T19780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.971954][T19780] RSP: 002b:00007f318e161038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1561.980368][T19780] RAX: 0000000000000000 RBX: 00007f3190542080 RCX: 00007f319031a969 [ 1561.988330][T19780] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1561.996313][T19780] RBP: 00007f319039cab1 R08: 0000000000000000 R09: 0000000000000000 [ 1562.004286][T19780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.012249][T19780] R13: 0000000000000001 R14: 00007f3190542080 R15: 00007ffe2a7fc318 [ 1562.020219][T19780] [ 1562.042300][ T4216] Bluetooth: hci0: command 0x1407 tx timeout [ 1562.102249][ T4215] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1562.243551][T18124] usb 10-1: USB disconnect, device number 9 [ 1562.354313][ T4215] usb 3-1: Using ep0 maxpacket: 8 [ 1562.392291][ T8277] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.408275][ T8277] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1562.425973][ T8277] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1562.436939][ T8277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.492388][ T4215] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1562.504633][ T4215] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1562.516338][ T4215] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1562.528830][ T4215] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1562.550369][ T4215] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1562.559888][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.822270][ T4215] usb 3-1: GET_CAPABILITIES returned 0 [ 1562.828315][ T4215] usbtmc 3-1:16.0: can't read capabilities [ 1562.961162][ T4215] usb 6-1: USB disconnect, device number 19 [ 1563.037841][ T8277] usb 3-1: USB disconnect, device number 5