last executing test programs: 1m40.788831878s ago: executing program 3 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m38.576564333s ago: executing program 3 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a2ca186608b74f1"}]}]}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000340), 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000019940)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x40) recvmmsg(r2, &(0x7f0000019980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x20000020, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000019a00), &(0x7f0000019a40)=0x4) memfd_secret(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 1m37.295606793s ago: executing program 3 (id=431): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x0, 0x18, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000500)={0x0, 0x18, 0x26, "601a92ed0fd872c10aaba127814fef40cd453af94f4739c2ad3ba3f44ad7339966ca63a54153"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m33.38436528s ago: executing program 3 (id=437): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='THAWED\x00', 0x7) 1m33.211174768s ago: executing program 3 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf250a0080cdff000001000000001400020000000068fff12a314da39100000000000000ffff7f000001050015000200000014dbb5987e5e1d5de20e47c30590f84ac90530c97e71828717f4f313835d0b51972b5139141b0494dc08ae4c44eea4fd631244c7455a5431"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000300)="120000000300000000", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='synaptics-smbus', 0xf) read$FUSE(r4, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1000, 0x5, 0x5, 0x401, 0x8}, &(0x7f00000001c0)=0x98) sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 1m32.30473798s ago: executing program 3 (id=443): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/4096, 0x20001b80}, {&(0x7f0000001500)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x578410eb) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001580)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001600)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001640), 0x0, 0x0) read$msr(r2, &(0x7f0000001680)=""/102392, 0x18ff8) io_setup(0x2, &(0x7f000001a680)=0x0) io_submit(r3, 0x1, &(0x7f000001a6c0)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 1m27.623511605s ago: executing program 2 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 1m24.946499527s ago: executing program 2 (id=458): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m22.013024805s ago: executing program 2 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 1m20.436886195s ago: executing program 2 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 1m17.23679584s ago: executing program 2 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf250a0080cdff000001000000001400020000000068fff12a314da39100000000000000ffff7f000001050015000200000014dbb5987e5e1d5de20e47c30590f84ac90530c97e71828717f4f313835d0b51972b5139141b0494dc08ae4c44eea4fd631244c7455a5431"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000300)="120000000300000000", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='synaptics-smbus', 0xf) read$FUSE(r4, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1000, 0x5, 0x5, 0x401, 0x8}, &(0x7f00000001c0)=0x98) sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 1m16.379763716s ago: executing program 32 (id=443): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/4096, 0x20001b80}, {&(0x7f0000001500)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x578410eb) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001580)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001600)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001640), 0x0, 0x0) read$msr(r2, &(0x7f0000001680)=""/102392, 0x18ff8) io_setup(0x2, &(0x7f000001a680)=0x0) io_submit(r3, 0x1, &(0x7f000001a6c0)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 1m13.653168293s ago: executing program 2 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r4, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0) 1m6.073720712s ago: executing program 1 (id=482): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000180)="3f000000010003", 0x7) 1m5.367315584s ago: executing program 1 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 1m4.087049234s ago: executing program 1 (id=484): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_freezer_state(r0, 0x0, 0x0) 1m1.179270459s ago: executing program 1 (id=486): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa74d, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget\x00', 0x4) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000001480)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000001500)=0x0, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000015c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000005a40)=[{}], 0x1, 0xdf4, 0x0, 0x0) 1m1.022253655s ago: executing program 1 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00006b0000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) 58.391370962s ago: executing program 33 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r4, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0) 58.347407247s ago: executing program 1 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 57.601749322s ago: executing program 34 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 48.111592336s ago: executing program 4 (id=472): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000003c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000400)={{@host}, 0x80000000000000, 0x2800000000000000, 0x1, 0x10001}) 47.847571223s ago: executing program 4 (id=500): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa74d, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget\x00', 0x4) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000001480)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000001500)=0x0, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000015c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000005a40)=[{}], 0x1, 0xdf4, 0x0, 0x0) 47.77269432s ago: executing program 4 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x3, 0x9}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x42) 47.38082834s ago: executing program 4 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 46.910375038s ago: executing program 35 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x400003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) 12.7058365s ago: executing program 5 (id=563): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x749}) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102368, 0x18fe0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000192c0)={0x140000008}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000019340)=[{&(0x7f0000019380)=""/163, 0xa3}], 0x1) 10.101961684s ago: executing program 7 (id=567): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7, 0x2000002, 0x80010, r0, 0x20000000) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000001c0)={0x0, 0xfbcc, 0x400, 0x2, 0x391}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25bc, 0x4, 0x1, 0x2f9, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d69, 0x80000, 0x3, 0xe, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5e6, 0x80, 0x2, 0x2b0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf312, 0x0, 0x0, 0x1b8, 0x0, r0}}], 0x4, &(0x7f00000024c0)={0x2e, 0x1, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x2, 0xb39, 0x0, &(0x7f00000014c0)=@buf_512="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"}}, &(0x7f0000002540)) syz_ublk_setup_io_uring(0x6825, 0x0, 0x0, 0x0, &(0x7f0000002680)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000a00)={{0x10001, 0x4, 0xfffff800, 0x1, 0x81}, &(0x7f00000007c0)=[{}, {}, {}]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000240)={'virt_wifi0\x00', @random="0200"}) syz_ublk_add_dev(r0, r4, r5, r6, &(0x7f0000002700)={0x2e, 0x3, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0xf6dc74c649d199a5, 0x7, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000026c0)=@any_dev={0x4, 0xf5b, 0x0, 0x0, 0x1000, 0xaf2, r1, 0x0, 0x3}}}, &(0x7f0000002780)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x10) 9.614767513s ago: executing program 6 (id=568): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="76147583ddd0569ba56a88a85993", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 9.491335456s ago: executing program 6 (id=569): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000019540)='./cgroup/../file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000019640)=0x79, 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0xd, &(0x7f00000196c0)={0xc800, 0xffffffff}) setreuid(0x0, 0xee01) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d", 0x96, 0x10000485, 0x0, 0x0) 9.469653558s ago: executing program 5 (id=571): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) capset(&(0x7f00000006c0)={0x20071026}, &(0x7f0000000700)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc010}}], 0x2, 0x40000) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000680)=@attr_other={0x0, 0xfb, 0x8, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x28181) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) mount(0x0, &(0x7f0000000180)='./sys_sec\x00', 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000580)=""/141, &(0x7f0000000640)=0x8d) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0xbf, 0x0) 8.141436003s ago: executing program 6 (id=572): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000003c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000400)={{@host}, 0x80000000000000, 0x2800000000000000, 0x1, 0x10001}) 7.928825044s ago: executing program 5 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00006b0000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) 6.89186105s ago: executing program 5 (id=575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) io_cancel(0x0, 0x0, 0x0) 6.831439676s ago: executing program 7 (id=577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = fsopen(&(0x7f0000000380)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/232, 0xe8}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./file1\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa0242, 0x8) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbea6, 0x100, 0xfffffffe, 0xfffffffd}, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r6, 0x0, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r6}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x4000, 0x0, 0x32d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0xffff, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 5.9067268s ago: executing program 0 (id=578): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001800), 0x161042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 5.244331837s ago: executing program 0 (id=579): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5.11545994s ago: executing program 7 (id=580): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x749}) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102368, 0x18fe0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000192c0)={0x140000008}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000019340)=[{&(0x7f0000019380)=""/163, 0xa3}], 0x1) 5.020069259s ago: executing program 0 (id=581): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000019540)='./cgroup/../file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000019640)=0x79, 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0xd, &(0x7f00000196c0)={0xc800, 0xffffffff}) setreuid(0x0, 0xee01) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e", 0x97, 0x10000485, 0x0, 0x0) 3.701224944s ago: executing program 0 (id=582): openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newnexthop={0x28, 0x68, 0x800, 0x70bd27, 0x0, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000540)='./mnt\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'rose0\x00', 0x112}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000640)={'geneve1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x591, 0xe0, 0xd6}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc2b) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'rose0\x00', 0x102}) 3.611623263s ago: executing program 6 (id=583): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.407173583s ago: executing program 6 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00006b0000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) 3.24344007s ago: executing program 5 (id=585): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7, 0x2000002, 0x80010, r0, 0x20000000) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000001c0)={0x0, 0xfbcc, 0x400, 0x2, 0x391}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25bc, 0x4, 0x1, 0x2f9, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d69, 0x80000, 0x3, 0xe, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5e6, 0x80, 0x2, 0x2b0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf312, 0x0, 0x0, 0x1b8, 0x0, r0}}], 0x4, &(0x7f00000024c0)={0x2e, 0x1, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x2, 0xb39, 0x0, &(0x7f00000014c0)=@buf_512="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"}}, &(0x7f0000002540)) syz_ublk_setup_io_uring(0x6825, 0x0, 0x0, 0x0, &(0x7f0000002680)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000a00)={{0x10001, 0x4, 0xfffff800, 0x1, 0x81}, &(0x7f00000007c0)=[{}, {}, {}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000240)={'virt_wifi0\x00', @random="0200"}) syz_ublk_add_dev(r0, r3, r4, r5, &(0x7f0000002700)={0x2e, 0x3, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0xf6dc74c649d199a5, 0x7, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000026c0)=@any_dev={0x4, 0xf5b, 0x0, 0x0, 0x1000, 0xaf2, r1, 0x0, 0x3}}}, &(0x7f0000002780)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x10) 2.016580424s ago: executing program 6 (id=586): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) accept4(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x800) read$msr(r4, &(0x7f0000001380)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6) sched_setaffinity(r3, 0x8, &(0x7f000001a380)=0x4000007) fsopen(&(0x7f000001a3c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='mnt\x00', 0x1f9) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000340)={0x0, 0xd000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.246202383s ago: executing program 0 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x87) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000000)) io_uring_setup(0x3454, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000340)={0x2, 0x3, 0x0, 0x1}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={r7, 0x84, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x8f2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000004c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.246061583s ago: executing program 7 (id=588): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002700)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002740)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) syz_open_dev$radio(&(0x7f00000027c0), 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000002800), 0x2, 0x141102) writev(r1, &(0x7f0000002840)=[{&(0x7f0000002880)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f00000028c0)=""/236, 0xec) socket(0x23, 0x800, 0x0) add_key(&(0x7f0000002a40)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000002cc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa0000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002f00)={0x79, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38) ioctl$DM_DEV_REMOVE(r2, 0xc138fd04, &(0x7f00000032c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 223.599927ms ago: executing program 5 (id=589): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 124.133147ms ago: executing program 0 (id=590): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000019540)='./cgroup/../file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000019640)=0x79, 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0xd, &(0x7f00000196c0)={0xc800, 0xffffffff}) setreuid(0x0, 0xee01) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e", 0x97, 0x10000485, 0x0, 0x0) 68.221562ms ago: executing program 7 (id=591): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000003c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000400)={{@host}, 0x80000000000000, 0x2800000000000000, 0x1, 0x10001}) 0s ago: executing program 7 (id=592): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. syzkaller login: [ 68.287857][ T5766] cgroup: Unknown subsys name 'net' [ 68.419866][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.786970][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.143698][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.152195][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.172514][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.180610][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.188316][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.195791][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.338151][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.346863][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.353401][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 71.359936][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.360816][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.393337][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.394655][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.407367][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.414891][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.424501][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.435221][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.474486][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.480998][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.488617][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.503014][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.523108][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.524728][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 71.536318][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.545193][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.554689][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.603226][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.611487][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.620908][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.630805][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.638665][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.646028][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.673880][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 71.679651][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.742857][ T5789] (null): rxe_set_mtu: Set mtu to 1024 [ 71.748646][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.825575][ T5778] infiniband rxe0: set active [ 71.833412][ T5778] infiniband rxe0: added rxe_eth0 [ 71.853941][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.908838][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.984902][ T5778] RDS/IB: rxe0: added [ 71.989449][ T5778] smc: adding ib device rxe0 with port count 1 [ 72.024675][ T5778] smc: ib device rxe0 port 1 has pnetid [ 72.069172][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.157724][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.280009][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 72.339580][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 72.590577][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.658780][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.681503][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.704969][ T5784] bridge_slave_0: entered allmulticast mode [ 72.714852][ T5784] bridge_slave_0: entered promiscuous mode [ 72.744067][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.751249][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.775916][ T5781] bridge_slave_0: entered allmulticast mode [ 72.783318][ T5781] bridge_slave_0: entered promiscuous mode [ 72.791564][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.802140][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.809763][ T5781] bridge_slave_1: entered allmulticast mode [ 72.817123][ T5781] bridge_slave_1: entered promiscuous mode [ 72.831184][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.838814][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.846713][ T5784] bridge_slave_1: entered allmulticast mode [ 72.854178][ T5784] bridge_slave_1: entered promiscuous mode [ 72.877662][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 72.904756][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.931103][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.940636][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.951340][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.000818][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.024509][ T5444] infiniband rxe0: set active [ 73.066002][ T5781] team0: Port device team_slave_0 added [ 73.086326][ T5781] team0: Port device team_slave_1 added [ 73.122078][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.157766][ T5784] team0: Port device team_slave_0 added [ 73.164656][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.171610][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.197903][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.211048][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.218102][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.244081][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.269711][ T5784] team0: Port device team_slave_1 added [ 73.292764][ T5096] Bluetooth: hci0: command tx timeout [ 73.352524][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.359726][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.367138][ T5789] bridge_slave_0: entered allmulticast mode [ 73.375271][ T5789] bridge_slave_0: entered promiscuous mode [ 73.386030][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.393309][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.400452][ T5789] bridge_slave_1: entered allmulticast mode [ 73.408319][ T5789] bridge_slave_1: entered promiscuous mode [ 73.415755][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.422815][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.448892][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.461730][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.468793][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.494716][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.539372][ T5096] Bluetooth: hci1: command tx timeout [ 73.561898][ T5781] hsr_slave_0: entered promiscuous mode [ 73.568259][ T5781] hsr_slave_1: entered promiscuous mode [ 73.591393][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.604176][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.622818][ T5096] Bluetooth: hci2: command tx timeout [ 73.656659][ T5784] hsr_slave_0: entered promiscuous mode [ 73.664011][ T5784] hsr_slave_1: entered promiscuous mode [ 73.670036][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.678012][ T5784] Cannot create hsr debugfs directory [ 73.731268][ T5789] team0: Port device team_slave_0 added [ 73.741499][ T5789] team0: Port device team_slave_1 added [ 73.772680][ T5096] Bluetooth: hci3: command tx timeout [ 73.787864][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.795345][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.821363][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.862770][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 73.874157][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.881102][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.908322][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.052250][ T5789] hsr_slave_0: entered promiscuous mode [ 74.059199][ T5789] hsr_slave_1: entered promiscuous mode [ 74.065855][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.073510][ T5789] Cannot create hsr debugfs directory [ 74.167550][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.178329][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.186104][ T5778] bridge_slave_0: entered allmulticast mode [ 74.194680][ T5778] bridge_slave_0: entered promiscuous mode [ 74.218533][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.225819][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.233526][ T5778] bridge_slave_1: entered allmulticast mode [ 74.240210][ T5778] bridge_slave_1: entered promiscuous mode [ 74.278691][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.292043][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.341405][ T5778] team0: Port device team_slave_0 added [ 74.373352][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.399576][ T5778] team0: Port device team_slave_1 added [ 74.406701][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.419188][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.428564][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.502772][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.509737][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.536073][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.569102][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.576170][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.602507][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.616143][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.630110][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.651819][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.669992][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.740283][ T5778] hsr_slave_0: entered promiscuous mode [ 74.747315][ T5778] hsr_slave_1: entered promiscuous mode [ 74.753772][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.761319][ T5778] Cannot create hsr debugfs directory [ 74.787746][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.821778][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.845462][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.855597][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.048914][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.058043][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.076562][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.086686][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.112986][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.161878][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.177231][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.188946][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.204390][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.211620][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.221536][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.228670][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.259984][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.282243][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.289388][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.306564][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.344624][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.351730][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.361704][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.368828][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.382812][ T5096] Bluetooth: hci0: command tx timeout [ 75.400282][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.407431][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.508853][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.519699][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.602088][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.625125][ T5096] Bluetooth: hci1: command tx timeout [ 75.656061][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.692779][ T5096] Bluetooth: hci2: command tx timeout [ 75.731547][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.738753][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.784543][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.792188][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.862782][ T5096] Bluetooth: hci3: command tx timeout [ 75.950758][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.006779][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.119110][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.133713][ T5781] veth0_vlan: entered promiscuous mode [ 76.139806][ T5784] veth0_vlan: entered promiscuous mode [ 76.198635][ T5781] veth1_vlan: entered promiscuous mode [ 76.210485][ T5784] veth1_vlan: entered promiscuous mode [ 76.304400][ T5781] veth0_macvtap: entered promiscuous mode [ 76.313130][ T5784] veth0_macvtap: entered promiscuous mode [ 76.326975][ T5784] veth1_macvtap: entered promiscuous mode [ 76.338879][ T5781] veth1_macvtap: entered promiscuous mode [ 76.364452][ T5789] veth0_vlan: entered promiscuous mode [ 76.381281][ T5789] veth1_vlan: entered promiscuous mode [ 76.392171][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.408721][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.427857][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.440096][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.453648][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.481623][ T5789] veth0_macvtap: entered promiscuous mode [ 76.495960][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.504444][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.518214][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.530441][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.551276][ T5789] veth1_macvtap: entered promiscuous mode [ 76.561085][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.570513][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.584127][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.593208][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.608448][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.617643][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.627240][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.636147][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.684016][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.694602][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.705067][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.715647][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.728061][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.766587][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.778820][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.790529][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.802541][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.816872][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.854845][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.870701][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.881469][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.890686][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.981921][ T5778] veth0_vlan: entered promiscuous mode [ 77.014442][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.023848][ T5778] veth1_vlan: entered promiscuous mode [ 77.024928][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.075569][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.085920][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.117789][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.127173][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.150757][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.166406][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.228641][ T5778] veth0_macvtap: entered promiscuous mode [ 77.249779][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.255952][ T5778] veth1_macvtap: entered promiscuous mode [ 77.298682][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.301351][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.307244][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.331918][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.369629][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.398015][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.408144][ T5096] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 77.412509][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.426929][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.438914][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.449487][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.459523][ T5096] Bluetooth: hci0: command tx timeout [ 77.469168][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.506325][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.517890][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.529792][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.540556][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.551033][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.562350][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.574854][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.586384][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.596596][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.611633][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.621510][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.693518][ T5096] Bluetooth: hci1: command tx timeout [ 77.720605][ T5877] syzkaller0: entered promiscuous mode [ 77.730152][ T5877] syzkaller0: entered allmulticast mode [ 77.758205][ T5877] tipc: Started in network mode [ 77.766361][ T5877] tipc: Node identity 4aacea80fec6, cluster identity 4711 [ 77.779050][ T5877] tipc: Enabled bearer , priority 0 [ 77.799085][ T5877] tipc: Resetting bearer [ 77.809782][ T5876] tipc: Resetting bearer [ 77.836849][ T5876] tipc: Disabling bearer [ 77.944780][ T5096] Bluetooth: hci3: command tx timeout [ 77.992954][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.000810][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.760499][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.776065][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.328987][ T5096] Bluetooth: hci0: command tx timeout [ 80.335101][ T5780] Bluetooth: hci1: command tx timeout [ 80.340516][ T5780] Bluetooth: hci3: command tx timeout [ 81.211732][ T5904] ======================================================= [ 81.211732][ T5904] WARNING: The mand mount option has been deprecated and [ 81.211732][ T5904] and is ignored by this kernel. Remove the mand [ 81.211732][ T5904] option from the mount to silence this warning. [ 81.211732][ T5904] ======================================================= [ 81.247766][ T5904] tmpfs: Unknown parameter '00000000000000000006' [ 81.994949][ T5780] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 82.013557][ T5780] Bluetooth: hci2: Injecting HCI hardware error event [ 82.021439][ T5096] Bluetooth: hci2: hardware error 0x00 [ 82.612912][ T28] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 82.816708][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 83.536256][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 83.546944][ T28] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 83.556135][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.759764][ T5925] syzkaller0: entered promiscuous mode [ 83.767842][ T5925] syzkaller0: entered allmulticast mode [ 83.801775][ T5925] tipc: Enabled bearer , priority 0 [ 83.854721][ T5925] tipc: Resetting bearer [ 83.873044][ T5924] tipc: Resetting bearer [ 83.950196][ T5924] tipc: Disabling bearer [ 84.932457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.192424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.282427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 85.312430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.492427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.572427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.593002][ T5096] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 85.612895][ T28] pegasus: probe of 2-1:1.0 failed with error -32 [ 85.672670][ T28] usb 2-1: USB disconnect, device number 2 [ 85.801397][ T23] tipc: Node number set to 3026905728 [ 85.816432][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.673149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.082731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.256317][ T971] cfg80211: failed to load regulatory.db [ 91.055355][ T5984] syzkaller0: entered promiscuous mode [ 91.060875][ T5984] syzkaller0: entered allmulticast mode [ 91.144113][ T5984] tipc: Started in network mode [ 91.164561][ T5984] tipc: Node identity 02507f051c93, cluster identity 4711 [ 91.793155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 92.202702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.372146][ T5984] tipc: Enabled bearer , priority 0 [ 92.560642][ T5981] tipc: Resetting bearer [ 92.697240][ T5998] tmpfs: Unknown parameter '00000000000000000006' [ 93.767228][ T6008] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.817225][ T5981] tipc: Disabling bearer [ 93.922660][ T5845] tipc: Node number set to 516128517 [ 95.311164][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 95.320813][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.437187][ T971] IPVS: starting estimator thread 0... [ 101.484399][ T6055] syzkaller0: entered promiscuous mode [ 101.502716][ T6055] syzkaller0: entered allmulticast mode [ 101.568474][ T6055] tipc: Started in network mode [ 101.578479][ T6058] IPVS: using max 20 ests per chain, 48000 per kthread [ 101.594621][ T6055] tipc: Node identity f2f281df707a, cluster identity 4711 [ 101.616428][ T6055] tipc: Enabled bearer , priority 0 [ 101.660032][ T6055] tipc: Resetting bearer [ 101.722824][ T6054] tipc: Resetting bearer [ 102.641790][ T6054] tipc: Disabling bearer [ 120.784019][ T6158] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 120.790874][ T6158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.823642][ T6158] vhci_hcd vhci_hcd.0: Device attached [ 120.854536][ T6162] vhci_hcd: connection closed [ 120.856318][ T49] vhci_hcd: stop threads [ 120.892992][ T49] vhci_hcd: release socket [ 120.897481][ T49] vhci_hcd: disconnect device [ 124.388712][ T6180] syzkaller1: entered promiscuous mode [ 124.399157][ T6180] syzkaller1: entered allmulticast mode [ 124.866794][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 124.876337][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 126.133867][ T6193] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.709242][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.717151][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.249183][ T6252] syzkaller0: entered promiscuous mode [ 140.277178][ T6252] syzkaller0: entered allmulticast mode [ 140.332786][ T6256] tipc: Enabled bearer , priority 0 [ 140.420469][ T6251] tipc: Resetting bearer [ 140.547809][ T6251] tipc: Disabling bearer [ 142.627161][ T6268] device-mapper: clone: Destination device (ram3) discard unsupported: Disabling discard passdown. [ 154.742364][ C0] sched: RT throttling activated [ 159.832532][ T27] audit: type=1807 audit(1794121481.028:2): UNKNOWN=ap res=0 [ 159.839977][ T27] audit: type=1802 audit(1794121481.028:3): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.114" res=0 errno=0 [ 159.918415][ T6348] ima: policy update failed [ 159.943278][ T27] audit: type=1802 audit(1794121481.158:4): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.114" res=0 errno=0 [ 169.330895][ T27] audit: type=1326 audit(1794121490.538:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.0.123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa94c79fb19 code=0x0 [ 169.354145][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.286078][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 170.313057][ T5847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.906446][ T5847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.243126][ T5847] usb 2-1: string descriptor 0 read error: -71 [ 172.280410][ T5847] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 172.332409][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.390466][ T5847] usb 2-1: can't set config #1, error -71 [ 172.424566][ T5847] usb 2-1: USB disconnect, device number 3 [ 177.547074][ T6443] Zero length message leads to an empty skb [ 181.700448][ T27] audit: type=1807 audit(1794121502.908:6): UNKNOWN=ap res=0 [ 181.910024][ T27] audit: type=1802 audit(1794121502.908:7): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.141" res=0 errno=0 [ 182.285766][ T6454] ima: policy update failed [ 182.290393][ T27] audit: type=1802 audit(1794121503.498:8): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.141" res=0 errno=0 [ 185.952905][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 186.782592][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 186.801692][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.812758][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.833371][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 186.842570][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.850627][ T23] usb 4-1: SerialNumber: syz [ 186.950224][ T23] usb 4-1: 0:2 : does not exist [ 186.989128][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.392585][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 187.474167][ T5847] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 187.482297][ T5847] usb 2-1: config 0 has no interface number 0 [ 187.542462][ T5847] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 187.562683][ T5847] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 187.602677][ T5847] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 187.622475][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.642477][ T5847] usb 2-1: Product: syz [ 187.649714][ T5847] usb 2-1: Manufacturer: syz [ 187.672629][ T5847] usb 2-1: SerialNumber: syz [ 187.698188][ T5847] usb 2-1: config 0 descriptor?? [ 187.723345][ T6490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 187.745400][ T6490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 187.993307][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 188.017546][ T6490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.059230][ T6490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.070659][ T23] usb 4-1: USB disconnect, device number 2 [ 188.132126][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.324656][ T5847] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 191.202272][ T5847] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 191.283159][ T5847] asix: probe of 2-1:0.34 failed with error -71 [ 191.294930][ T5847] usb 2-1: USB disconnect, device number 4 [ 194.460386][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466823][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.667324][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 196.667708][ T6553] Bluetooth: hci1: command 0x0406 tx timeout [ 196.674056][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 201.451482][ T6584] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 202.592724][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 202.782554][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 202.813217][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.824444][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.850769][ T5872] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 202.860037][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.872622][ T5872] usb 1-1: SerialNumber: syz [ 202.891404][ T5872] usb 1-1: 0:2 : does not exist [ 203.772253][ T5872] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 203.906602][ T5872] usb 1-1: USB disconnect, device number 2 [ 204.127452][ T6596] udevd[6596]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.577440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.848419][ T5847] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 206.074589][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.382653][ T5847] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.391594][ T5847] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 207.423206][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.528947][ T5847] usb 2-1: config 0 descriptor?? [ 207.562638][ T5847] usb 2-1: can't set config #0, error -71 [ 207.611785][ T5847] usb 2-1: USB disconnect, device number 5 [ 209.325192][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.182'. [ 209.669899][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 216.922482][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 217.222627][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 217.283008][ T5845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.322441][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.367084][ T5845] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 217.386625][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.422416][ T5845] usb 3-1: SerialNumber: syz [ 217.471832][ T5845] usb 3-1: 0:2 : does not exist [ 217.759624][ T5845] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 217.873556][ T5845] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 217.922837][ T5845] usb 3-1: USB disconnect, device number 2 [ 218.010819][ T6657] udevd[6657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.764406][ T6708] comedi comedi0: dt2815: I/O port conflict (0x5,2) [ 232.739756][ T6723] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 232.739756][ T6723] [ 232.753850][ T6723] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 232.768112][ T6723] CIFS: Attempting to mount //127.0.0.1/share [ 233.701818][ T6723] CIFS: VFS: cifs_mount failed w/return code = -512 [ 238.075056][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 238.395664][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.416902][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.452379][ T8] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 238.494007][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.887301][ T8] usb 1-1: config 0 descriptor?? [ 238.993065][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 239.022863][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 239.056711][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 239.114008][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 239.155934][ T8] usb 1-1: media controller created [ 239.168921][ T6738] dvb-usb: bulk message failed: -22 (3/0) [ 239.193591][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.249884][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 239.282589][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 239.323276][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 239.368500][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 240.555935][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 240.576748][ T8] usb 1-1: USB disconnect, device number 3 [ 241.688456][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 241.715340][ T6762] syzkaller0: entered promiscuous mode [ 241.720846][ T6762] syzkaller0: entered allmulticast mode [ 241.761895][ T6762] tipc: Enabled bearer , priority 0 [ 241.837479][ T6766] tipc: Resetting bearer [ 241.860897][ T6759] tipc: Resetting bearer [ 241.973692][ T6759] tipc: Disabling bearer [ 247.212482][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 247.412817][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 247.424584][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.442902][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.478466][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 247.487816][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.496060][ T5872] usb 3-1: SerialNumber: syz [ 247.517785][ T5872] usb 3-1: 0:2 : does not exist [ 247.542539][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 247.745863][ T23] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 247.765730][ T23] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 247.809226][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.832151][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.841826][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 247.852453][ T23] usb 2-1: Product: syz [ 247.856916][ T23] usb 2-1: Manufacturer: syz [ 247.861774][ T23] usb 2-1: SerialNumber: syz [ 247.884198][ T23] usb 2-1: config 0 descriptor?? [ 247.890346][ T6796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 248.155044][ T23] usb 2-1: selecting invalid altsetting 0 [ 248.170115][ T5872] usb 3-1: USB disconnect, device number 3 [ 248.235080][ T6794] udevd[6794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.335628][ T5872] usb 2-1: USB disconnect, device number 6 [ 252.957096][ T6827] syzkaller0: entered promiscuous mode [ 252.972715][ T6827] syzkaller0: entered allmulticast mode [ 253.006799][ T6827] tipc: Enabled bearer , priority 0 [ 253.061492][ T6827] tipc: Resetting bearer [ 253.109733][ T6826] tipc: Resetting bearer [ 253.276554][ T6826] tipc: Disabling bearer [ 256.034708][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 256.035363][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049247][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.340081][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 257.398371][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.423406][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.442704][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 257.472864][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.502432][ T8] usb 3-1: SerialNumber: syz [ 257.552739][ T8] usb 3-1: 0:2 : does not exist [ 257.734746][ T8] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 257.794835][ T8] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 257.836896][ T8] usb 3-1: USB disconnect, device number 4 [ 257.886404][ T6803] udevd[6803]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.336733][ T6868] jffs2: notice: (6868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 265.969419][ T6883] syzkaller0: entered promiscuous mode [ 265.992437][ T6883] syzkaller0: entered allmulticast mode [ 266.014897][ T6883] tipc: Enabled bearer , priority 0 [ 266.065712][ T6883] tipc: Resetting bearer [ 266.203537][ T6882] tipc: Resetting bearer [ 266.364454][ T6882] tipc: Disabling bearer [ 270.032674][ T5846] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.232384][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 270.264572][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.290766][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.321729][ T5846] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 270.352369][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.375381][ T5846] usb 2-1: SerialNumber: syz [ 270.419690][ T5846] usb 2-1: 0:2 : does not exist [ 272.608231][ T6922] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 274.967899][ T5846] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 275.017342][ T5846] usb 2-1: USB disconnect, device number 7 [ 275.098216][ T6904] udevd[6904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.616419][ T6961] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 290.102706][ T5846] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 291.574223][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.586902][ T5846] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 291.626827][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 291.672611][ T5846] usb 1-1: Product: syz [ 291.676816][ T5846] usb 1-1: Manufacturer: syz [ 292.145750][ T7009] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 292.981884][ T5846] usb 1-1: can't set config #1, error -71 [ 294.190574][ T5846] usb 1-1: USB disconnect, device number 4 [ 294.322941][ T7018] syz.0.279[7018]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 294.373444][ T7018] process 'syz.0.279' launched '/dev/fd/4/./file7/file0' with NULL argv: empty string added [ 295.650201][ T7018] netlink: 400 bytes leftover after parsing attributes in process `syz.0.279'. [ 295.697121][ T7018] Bluetooth: MGMT ver 1.22 [ 295.701929][ T7018] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 300.635783][ T7049] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 305.176369][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.291'. [ 305.185721][ T7069] netlink: 56 bytes leftover after parsing attributes in process `syz.2.291'. [ 311.344829][ T7095] syzkaller1: entered promiscuous mode [ 311.350648][ T7095] syzkaller1: entered allmulticast mode [ 313.292613][ T7101] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 316.522819][ T7115] syzkaller0: entered promiscuous mode [ 316.528329][ T7115] syzkaller0: entered allmulticast mode [ 316.562931][ T7115] tipc: Enabled bearer , priority 0 [ 316.601478][ T7115] tipc: Resetting bearer [ 317.779674][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.786080][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.815049][ T7114] tipc: Resetting bearer [ 317.932140][ T7114] tipc: Disabling bearer [ 317.966583][ T5872] tipc: Node number set to 2189984223 [ 321.992596][ T7136] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 323.407174][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'. [ 325.693188][ T7155] syzkaller1: entered promiscuous mode [ 325.698708][ T7155] syzkaller1: entered allmulticast mode [ 328.997704][ T7172] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 333.752544][ T7183] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 335.486344][ T7196] syzkaller1: entered promiscuous mode [ 335.522518][ T7196] syzkaller1: entered allmulticast mode [ 337.713027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.199115][ T7231] lo speed is unknown, defaulting to 1000 [ 344.208696][ T7231] lo speed is unknown, defaulting to 1000 [ 344.240579][ T7231] lo speed is unknown, defaulting to 1000 [ 344.352288][ T7231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 344.814814][ T7231] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 345.085740][ T7231] lo speed is unknown, defaulting to 1000 [ 345.092584][ T7231] lo speed is unknown, defaulting to 1000 [ 345.099034][ T7231] lo speed is unknown, defaulting to 1000 [ 345.106198][ T7231] lo speed is unknown, defaulting to 1000 [ 346.957608][ T7241] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 348.762606][ T7244] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 349.084507][ T7248] syzkaller1: entered promiscuous mode [ 349.107928][ T7248] syzkaller1: entered allmulticast mode [ 356.948630][ T7282] ip_tables: iptables: counters copy to user failed while replacing table [ 358.712818][ T7289] syzkaller1: entered promiscuous mode [ 358.718335][ T7289] syzkaller1: entered allmulticast mode [ 358.913607][ T7291] syzkaller0: entered promiscuous mode [ 358.922543][ T7291] syzkaller0: entered allmulticast mode [ 358.950184][ T7291] tipc: Enabled bearer , priority 0 [ 358.984038][ T7291] tipc: Resetting bearer [ 359.005723][ T7290] tipc: Resetting bearer [ 359.059877][ T7290] tipc: Disabling bearer [ 361.532570][ T7303] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 366.642453][ T56] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 367.462831][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 367.476616][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.496541][ T56] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.516659][ T56] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 367.542496][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 368.821477][ T56] usb 3-1: SerialNumber: syz [ 368.861032][ T56] usb 3-1: 0:2 : does not exist [ 369.198633][ T7345] syzkaller1: entered promiscuous mode [ 369.218449][ T7345] syzkaller1: entered allmulticast mode [ 371.012419][ T56] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 371.035868][ T56] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 371.077298][ T56] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 371.106522][ T56] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 371.127808][ T56] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 371.176860][ T56] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 371.254923][ T56] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 371.275516][ T56] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 371.295919][ T56] usb 3-1: USB disconnect, device number 5 [ 371.403467][ T7351] udevd[7351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.813218][ T7357] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 378.665591][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.671928][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.842480][ T6508] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 381.142357][ T6508] usb 3-1: Using ep0 maxpacket: 16 [ 381.160696][ T6508] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.171819][ T6508] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.188572][ T6508] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 381.198558][ T6508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.332968][ T6508] usb 3-1: SerialNumber: syz [ 381.438220][ T6508] usb 3-1: 0:2 : does not exist [ 382.248236][ T6508] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 382.264300][ T6508] usb 3-1: Warning! Unlikely big volume range (=6752), cval->res is probably wrong. [ 382.297781][ T6508] usb 3-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/6752/1 [ 382.331482][ T6508] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 382.369045][ T6508] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 382.418382][ T6508] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 383.118416][ T7405] syzkaller1: entered promiscuous mode [ 383.131735][ T6508] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 383.167651][ T7405] syzkaller1: entered allmulticast mode [ 383.176251][ T6508] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 383.236456][ T6508] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 383.265475][ T6508] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 383.300317][ T6508] usb 3-1: USB disconnect, device number 6 [ 383.348877][ T7389] udevd[7389]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.562450][ T7415] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 390.663226][ T7442] capability: warning: `syz.0.384' uses deprecated v2 capabilities in a way that may be insecure [ 392.642435][ T7449] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 394.700692][ T7457] syzkaller1: entered promiscuous mode [ 394.732353][ T7457] syzkaller1: entered allmulticast mode [ 399.282460][ T7480] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 405.754713][ T7506] syzkaller1: entered promiscuous mode [ 405.760235][ T7506] syzkaller1: entered allmulticast mode [ 406.327183][ T7519] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 412.772940][ T7545] syzkaller1: entered promiscuous mode [ 412.778455][ T7545] syzkaller1: entered allmulticast mode [ 412.997179][ T7548] gadgetfs: bound to dummy_udc driver [ 413.242311][ T7556] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 413.362342][ T971] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 413.370455][ C1] gadgetfs: connected [ 413.378469][ T971] gadgetfs: disconnected [ 413.603058][ C1] gadgetfs: connected [ 413.619336][ T971] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 413.628629][ T971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 413.656842][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.804870][ C1] gadgetfs: configuration #1 [ 415.252699][ T7546] gadgetfs: suspended from state 3 [ 415.281632][ T5847] usb 1-1: USB disconnect, device number 5 [ 415.402686][ T7546] gadgetfs: disconnected [ 418.458586][ T7582] syzkaller1: entered promiscuous mode [ 418.496839][ T7582] syzkaller1: entered allmulticast mode [ 420.600764][ T7597] syzkaller0: entered promiscuous mode [ 420.712324][ T7597] syzkaller0: entered allmulticast mode [ 420.784477][ T7597] tipc: Enabled bearer , priority 0 [ 420.851490][ T7597] tipc: Resetting bearer [ 420.935356][ T7596] tipc: Resetting bearer [ 422.320087][ T7596] tipc: Disabling bearer [ 426.032699][ T5847] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 426.252703][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 426.271650][ T5847] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.292309][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.319782][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 426.338763][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.358390][ T5847] usb 4-1: SerialNumber: syz [ 426.388411][ T5847] usb 4-1: 0:2 : does not exist [ 426.761410][ T7632] syzkaller1: entered promiscuous mode [ 426.772648][ T7632] syzkaller1: entered allmulticast mode [ 427.202321][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 427.402322][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 427.409141][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 427.425697][ T5847] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.436431][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.444885][ T5847] usb 3-1: Product: syz [ 427.449214][ T5847] usb 3-1: Manufacturer: syz [ 427.455010][ T5847] usb 3-1: SerialNumber: syz [ 427.466688][ T5847] usb 3-1: config 0 descriptor?? [ 427.661118][ T5847] usb 4-1: USB disconnect, device number 3 [ 427.862187][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.439'. [ 427.986528][ T7651] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 428.532434][ T28] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 428.798843][ T28] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 428.845534][ T28] usb 2-1: config 179 has no interface number 0 [ 428.866498][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 428.898213][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 428.949226][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 429.001320][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 429.072361][ T28] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 429.092415][ T28] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 429.132753][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.160221][ T7652] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 429.195968][ T28] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 429.244954][ T28] xpad: probe of 2-1:179.65 failed with error -5 [ 429.501258][ T28] usb 2-1: USB disconnect, device number 8 [ 430.046067][ T56] usb 3-1: USB disconnect, device number 7 [ 430.289734][ T7676] syzkaller1: entered promiscuous mode [ 430.324410][ T7676] syzkaller1: entered allmulticast mode [ 434.657796][ T7712] syzkaller1: entered promiscuous mode [ 434.735277][ T7712] syzkaller1: entered allmulticast mode [ 436.773959][ T7717] gadgetfs: bound to dummy_udc driver [ 437.808316][ T7730] syzkaller0: entered promiscuous mode [ 437.822357][ T7730] syzkaller0: entered allmulticast mode [ 437.857996][ T7730] tipc: Started in network mode [ 437.882528][ T7730] tipc: Node identity 2a23f1c842f1, cluster identity 4711 [ 437.890318][ T7730] tipc: Enabled bearer , priority 0 [ 437.955764][ T7732] tipc: Resetting bearer [ 438.052766][ T7729] tipc: Resetting bearer [ 438.397986][ T7729] tipc: Disabling bearer [ 440.312574][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.318892][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.322849][ T7747] syzkaller1: entered promiscuous mode [ 441.328453][ T7747] syzkaller1: entered allmulticast mode [ 442.087508][ T7755] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 443.685652][ T7760] gadgetfs: bound to dummy_udc driver [ 444.732439][ T5847] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 444.740169][ C0] gadgetfs: connected [ 444.747472][ T5847] gadgetfs: disconnected [ 445.619545][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.629896][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.638331][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.646326][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.656025][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.663457][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.916511][ T7770] rxe_eth0 speed is unknown, defaulting to 1000 [ 446.476390][ T7770] lo speed is unknown, defaulting to 1000 [ 446.598185][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'. [ 446.784467][ T7775] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 446.954286][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.238761][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.783651][ T5780] Bluetooth: hci4: command tx timeout [ 448.118844][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.542689][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 448.835780][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.032151][ T7787] syzkaller1: entered promiscuous mode [ 449.082344][ T7787] syzkaller1: entered allmulticast mode [ 449.716889][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.744887][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.770768][ T7770] bridge_slave_0: entered allmulticast mode [ 449.823186][ T7770] bridge_slave_0: entered promiscuous mode [ 449.852655][ T5780] Bluetooth: hci4: command tx timeout [ 449.875734][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.891431][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.898863][ T7770] bridge_slave_1: entered allmulticast mode [ 449.906333][ T7770] bridge_slave_1: entered promiscuous mode [ 450.061521][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.223047][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.535352][ T7770] team0: Port device team_slave_0 added [ 450.541636][ T49] tipc: Left network mode [ 450.567203][ T7770] team0: Port device team_slave_1 added [ 450.658855][ T7796] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 451.195605][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.230518][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.332469][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.942679][ T5780] Bluetooth: hci4: command tx timeout [ 452.023597][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.030700][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.101110][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.520028][ T7770] hsr_slave_0: entered promiscuous mode [ 452.546096][ T7770] hsr_slave_1: entered promiscuous mode [ 452.683776][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.691394][ T7770] Cannot create hsr debugfs directory [ 453.022591][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 453.232557][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 453.313013][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 453.351186][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.371747][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.395369][ T8] usb 1-1: Product: syz [ 453.412251][ T8] usb 1-1: Manufacturer: syz [ 453.430168][ T8] usb 1-1: SerialNumber: syz [ 453.464862][ T8] usb 1-1: config 0 descriptor?? [ 454.012721][ T5780] Bluetooth: hci4: command tx timeout [ 455.610852][ T7770] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.049607][ T23] usb 1-1: USB disconnect, device number 7 [ 457.112540][ T7770] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.144870][ T7770] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.169735][ T7770] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.676216][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.756302][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.819120][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.826266][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.914865][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.921989][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.983053][ T7852] syzkaller1: entered promiscuous mode [ 457.988557][ T7852] syzkaller1: entered allmulticast mode [ 458.226620][ T49] hsr_slave_0: left promiscuous mode [ 458.254224][ T49] hsr_slave_1: left promiscuous mode [ 458.293366][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.342543][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.374738][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.382187][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.466717][ T49] bridge_slave_1: left allmulticast mode [ 458.473915][ T49] bridge_slave_1: left promiscuous mode [ 458.479692][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.569792][ T49] bridge_slave_0: left allmulticast mode [ 458.603476][ T49] bridge_slave_0: left promiscuous mode [ 458.629621][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.830272][ T49] veth1_macvtap: left promiscuous mode [ 458.862709][ T49] veth0_macvtap: left promiscuous mode [ 458.893674][ T49] veth1_vlan: left promiscuous mode [ 458.942702][ T49] veth0_vlan: left promiscuous mode [ 459.971824][ T7872] gadgetfs: bound to dummy_udc driver [ 460.841586][ T49] team0 (unregistering): Port device team_slave_1 removed [ 460.900568][ T49] team0 (unregistering): Port device team_slave_0 removed [ 460.963671][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.008922][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.458615][ T49] bond0 (unregistering): Released all slaves [ 463.407460][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.683142][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.708411][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.726079][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.745022][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.759465][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 463.767414][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.831649][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.967236][ T7895] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.076291][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.281898][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.044574][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.070729][ T7895] lo speed is unknown, defaulting to 1000 [ 465.081406][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.089803][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.101668][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.112887][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.120724][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 465.128743][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.250674][ T7912] rxe_eth0 speed is unknown, defaulting to 1000 [ 465.320200][ T7770] veth0_vlan: entered promiscuous mode [ 465.340401][ T49] tipc: Left network mode [ 465.379773][ T7770] veth1_vlan: entered promiscuous mode [ 465.503541][ T7912] lo speed is unknown, defaulting to 1000 [ 465.566053][ T7770] veth0_macvtap: entered promiscuous mode [ 465.654137][ T7770] veth1_macvtap: entered promiscuous mode [ 465.688040][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.704513][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.715754][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.728099][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.758484][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.804822][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.862487][ T5788] Bluetooth: hci0: command tx timeout [ 465.945967][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.018391][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.111483][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.186759][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.259069][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.338152][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.417395][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.507484][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.557506][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 467.017247][ T7770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.032332][ T7770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.051279][ T7770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.061541][ T7770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.141434][ T7934] gadgetfs: bound to dummy_udc driver [ 467.212827][ T5788] Bluetooth: hci1: command tx timeout [ 467.431925][ T7941] syzkaller1: entered promiscuous mode [ 467.440447][ T7941] syzkaller1: entered allmulticast mode [ 467.500523][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.508819][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.517844][ T7895] bridge_slave_0: entered allmulticast mode [ 467.525174][ T7895] bridge_slave_0: entered promiscuous mode [ 467.559230][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.573479][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.580705][ T7895] bridge_slave_1: entered allmulticast mode [ 467.588667][ T7895] bridge_slave_1: entered promiscuous mode [ 468.522812][ T5788] Bluetooth: hci0: command tx timeout [ 468.570807][ T7895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.691195][ T7895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.799384][ T7895] team0: Port device team_slave_0 added [ 468.953715][ T7895] team0: Port device team_slave_1 added [ 469.012328][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.020190][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.201060][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.210800][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.249088][ T7895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.278888][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 469.302941][ T5788] Bluetooth: hci1: command tx timeout [ 469.365217][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.372941][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.399039][ T7895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.473882][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.490333][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.644986][ T5788] Bluetooth: hci0: command tx timeout [ 470.663281][ T7895] hsr_slave_0: entered promiscuous mode [ 470.671555][ T7895] hsr_slave_1: entered promiscuous mode [ 470.695828][ T7895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.707818][ T7895] Cannot create hsr debugfs directory [ 470.991102][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.016867][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.025650][ T7912] bridge_slave_0: entered allmulticast mode [ 471.039413][ T7912] bridge_slave_0: entered promiscuous mode [ 471.061018][ T49] hsr_slave_0: left promiscuous mode [ 471.068239][ T49] hsr_slave_1: left promiscuous mode [ 471.084688][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.098167][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.107792][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.121122][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.130671][ T49] bridge_slave_1: left allmulticast mode [ 471.142019][ T49] bridge_slave_1: left promiscuous mode [ 471.149809][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.166032][ T49] bridge_slave_0: left allmulticast mode [ 471.171705][ T49] bridge_slave_0: left promiscuous mode [ 471.182577][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.220363][ T49] veth1_macvtap: left promiscuous mode [ 471.226852][ T49] veth0_macvtap: left promiscuous mode [ 471.234335][ T49] veth1_vlan: left promiscuous mode [ 471.239671][ T49] veth0_vlan: left promiscuous mode [ 471.372332][ T5788] Bluetooth: hci1: command tx timeout [ 472.437057][ T49] team0 (unregistering): Port device team_slave_1 removed [ 472.471620][ T49] team0 (unregistering): Port device team_slave_0 removed [ 472.509187][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.548637][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.654707][ T5788] Bluetooth: hci0: command tx timeout [ 472.820535][ T49] bond0 (unregistering): Released all slaves [ 472.923500][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.930844][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.952531][ T7912] bridge_slave_1: entered allmulticast mode [ 472.959769][ T7912] bridge_slave_1: entered promiscuous mode [ 472.976634][ T5846] infiniband syz0: ib_query_port failed (-19) [ 473.015348][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.053864][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.112593][ T7912] team0: Port device team_slave_0 added [ 473.153927][ T7912] team0: Port device team_slave_1 added [ 473.196810][ T7986] gadgetfs: bound to dummy_udc driver [ 473.276243][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.284175][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.320590][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.362056][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.369453][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.399230][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.452357][ T5788] Bluetooth: hci1: command tx timeout [ 473.513368][ T7912] hsr_slave_0: entered promiscuous mode [ 473.519861][ T7912] hsr_slave_1: entered promiscuous mode [ 473.527965][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.535938][ T7912] Cannot create hsr debugfs directory [ 473.594390][ T49] IPVS: stop unused estimator thread 0... [ 473.618235][ T7895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 473.641264][ T7895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 473.668457][ T7895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 473.702958][ T7895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 474.010686][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.070321][ T7912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 474.214651][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.268046][ T7912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 474.291641][ T7912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 474.405267][ T7912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 474.660923][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.049522][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.167144][ T7895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.242055][ T7895] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.596429][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.603651][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.989255][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.006420][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.016487][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.025311][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.032489][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.049363][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.060447][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 476.068405][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.183779][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.225165][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.261153][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.302038][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.339410][ T8012] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.370370][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.377556][ T7910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.417728][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.452867][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.460019][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.546888][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.639267][ T7895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.012934][ T8033] gadgetfs: bound to dummy_udc driver [ 477.140610][ T49] tipc: Left network mode [ 477.292812][ T28] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 477.314208][ C1] gadgetfs: connected [ 477.332450][ T28] gadgetfs: disconnected [ 477.417719][ T8012] chnl_net:caif_netlink_parms(): no params data found [ 477.534060][ C1] gadgetfs: connected [ 477.546963][ T28] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 477.559759][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 477.579415][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.604572][ C1] gadgetfs: configuration #1 [ 477.691573][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.778833][ T8032] gadgetfs: suspended from state 3 [ 477.788841][ T8032] gadgetfs: disconnected [ 477.794831][ T5845] usb 1-1: USB disconnect, device number 8 [ 478.017381][ T7895] veth0_vlan: entered promiscuous mode [ 478.031754][ T7895] veth1_vlan: entered promiscuous mode [ 478.178065][ T5788] Bluetooth: hci2: command tx timeout [ 478.261807][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.271479][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.282129][ T8012] bridge_slave_0: entered allmulticast mode [ 478.289890][ T8012] bridge_slave_0: entered promiscuous mode [ 478.381861][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.390867][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.398957][ T8012] bridge_slave_1: entered allmulticast mode [ 478.411536][ T8012] bridge_slave_1: entered promiscuous mode [ 478.433920][ T8069] syzkaller1: entered promiscuous mode [ 478.442393][ T8069] syzkaller1: entered allmulticast mode [ 478.512088][ T7895] veth0_macvtap: entered promiscuous mode [ 478.567109][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.630994][ T7895] veth1_macvtap: entered promiscuous mode [ 478.657839][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.809684][ T8012] team0: Port device team_slave_0 added [ 478.829679][ T8012] team0: Port device team_slave_1 added [ 478.961029][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.155476][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.204791][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.298390][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.350120][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.411198][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.480962][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.576669][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.584161][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.610132][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.630332][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.642148][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.655143][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.665794][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.675893][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.687350][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.699004][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.710554][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.717585][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.743869][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.778706][ T7895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.787630][ T7895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.796426][ T7895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.805266][ T7895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.874966][ T8012] hsr_slave_0: entered promiscuous mode [ 479.881154][ T8012] hsr_slave_1: entered promiscuous mode [ 479.893120][ T8012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.900715][ T8012] Cannot create hsr debugfs directory [ 480.089431][ T7912] veth0_vlan: entered promiscuous mode [ 480.236419][ T7912] veth1_vlan: entered promiscuous mode [ 480.252484][ T5788] Bluetooth: hci2: command tx timeout [ 481.009485][ T49] hsr_slave_0: left promiscuous mode [ 481.045131][ T49] hsr_slave_1: left promiscuous mode [ 481.084634][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.123161][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.174613][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.211340][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.242969][ T49] bridge_slave_1: left allmulticast mode [ 481.248660][ T49] bridge_slave_1: left promiscuous mode [ 481.255459][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.266881][ T49] bridge_slave_0: left allmulticast mode [ 481.273642][ T49] bridge_slave_0: left promiscuous mode [ 481.279468][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.313907][ T49] hsr_slave_0: left promiscuous mode [ 481.319989][ T49] hsr_slave_1: left promiscuous mode [ 481.326790][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.334793][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.345418][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.354758][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.363828][ T49] bridge_slave_1: left allmulticast mode [ 481.369490][ T49] bridge_slave_1: left promiscuous mode [ 481.389840][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.409555][ T49] bridge_slave_0: left allmulticast mode [ 481.428668][ T49] bridge_slave_0: left promiscuous mode [ 481.436153][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.510247][ T49] veth1_macvtap: left promiscuous mode [ 481.519173][ T49] veth0_macvtap: left promiscuous mode [ 481.525409][ T49] veth1_vlan: left promiscuous mode [ 481.539619][ T49] veth0_vlan: left promiscuous mode [ 481.557802][ T49] veth1_macvtap: left promiscuous mode [ 481.573532][ T49] veth0_macvtap: left promiscuous mode [ 481.581611][ T49] veth1_vlan: left promiscuous mode [ 481.591974][ T49] veth0_vlan: left promiscuous mode [ 482.170470][ T49] team0 (unregistering): Port device team_slave_1 removed [ 482.211338][ T49] team0 (unregistering): Port device team_slave_0 removed [ 482.254247][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.294718][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.344359][ T5788] Bluetooth: hci2: command tx timeout [ 482.566027][ T49] bond0 (unregistering): Released all slaves [ 482.969182][ T49] team0 (unregistering): Port device team_slave_1 removed [ 483.007833][ T49] team0 (unregistering): Port device team_slave_0 removed [ 483.042629][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.084221][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.344554][ T49] bond0 (unregistering): Released all slaves [ 483.399538][ T7912] veth0_macvtap: entered promiscuous mode [ 483.411382][ T8114] syzkaller1: entered promiscuous mode [ 483.418067][ T8114] syzkaller1: entered allmulticast mode [ 483.531559][ T6509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.552752][ T6509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.572334][ T7912] veth1_macvtap: entered promiscuous mode [ 483.693039][ T7910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.700897][ T7910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.716599][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.747293][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.767513][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.779069][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.990115][ T5788] Bluetooth: hci2: command tx timeout [ 485.016072][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.123588][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.162399][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.196139][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.218929][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.277249][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.392021][ T7912] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.412259][ T7912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.421949][ T7912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.451267][ T7912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.500195][ T8012] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 485.547861][ T8012] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 485.591263][ T8012] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 485.637345][ T8012] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 485.793637][ T5845] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 485.854611][ T7910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.872277][ T7910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.910585][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.930951][ T7910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.959208][ T7910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.971720][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.985340][ T5845] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 486.012490][ T5845] usb 6-1: config 179 has no interface number 0 [ 486.018824][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 486.036880][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.042501][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 486.044035][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.055503][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 486.072542][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 486.202931][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.210130][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.772721][ T5845] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 486.786071][ T5845] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 486.795283][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.818972][ T8138] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 486.840032][ T5845] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 486.876374][ T8012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.887706][ T5845] xpad: probe of 6-1:179.65 failed with error -5 [ 487.147825][ T5845] usb 6-1: USB disconnect, device number 2 [ 487.229576][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.541589][ T8179] syzkaller1: entered promiscuous mode [ 487.551736][ T8179] syzkaller1: entered allmulticast mode [ 489.545343][ T8193] Illegal XDP return value 65535 on prog (id 12) dev N/A, expect packet loss! [ 489.636664][ T8012] veth0_vlan: entered promiscuous mode [ 489.865904][ T8012] veth1_vlan: entered promiscuous mode [ 489.926875][ T8012] veth0_macvtap: entered promiscuous mode [ 489.958342][ T8012] veth1_macvtap: entered promiscuous mode [ 489.978045][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.988876][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.998779][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.013768][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.035193][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.062278][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.076945][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.090552][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.101723][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.111633][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.120851][ T8196] gadgetfs: bound to dummy_udc driver [ 490.142252][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.168575][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.206063][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.232045][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.265758][ T8012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.282248][ T8012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.290974][ T8012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.311423][ T8012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.203801][ T7910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.211657][ T7910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.306825][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.321794][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.666277][ T8220] nbd: nbd7 already in use [ 496.249053][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.537'. [ 496.314092][ T8251] Bluetooth: MGMT ver 1.22 [ 496.961765][ T5780] Bluetooth: hci3: unexpected event for opcode 0x200a [ 499.042329][ T28] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 499.064819][ T8308] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 499.860611][ T28] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 499.874949][ T28] usb 1-1: config 1 has no interface number 0 [ 499.881095][ T28] usb 1-1: config 1 interface 105 has no altsetting 0 [ 499.902646][ T28] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 499.915349][ T28] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 501.122333][ T5780] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 501.130938][ T5780] Bluetooth: hci3: Injecting HCI hardware error event [ 501.139510][ T5780] Bluetooth: hci3: hardware error 0x00 [ 501.172331][ T28] usb 1-1: Product: syz [ 501.176768][ T28] usb 1-1: Manufacturer: syz [ 501.181378][ T28] usb 1-1: SerialNumber: syz [ 501.539632][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552565][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.822657][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.550'. [ 501.929713][ T28] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 501.958585][ T28] aqc111: probe of 1-1:1.105 failed with error -71 [ 501.999564][ T28] usb 1-1: USB disconnect, device number 9 [ 503.671974][ T5780] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 505.312459][ T8355] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 505.683082][ C1] Unknown status report in ack skb [ 508.812349][ T8388] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 510.956177][ T8409] overlayfs: failed to resolve './file0': -2 [ 513.642514][ T8446] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 517.648262][ T27] audit: type=1326 audit(1794121838.858:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712739fb19 code=0x7ffc0000 [ 517.736366][ T27] audit: type=1326 audit(1794121838.858:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712739fb19 code=0x7ffc0000 [ 517.978110][ T8491] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 519.012953][ T27] audit: type=1326 audit(1794121838.908:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f712739fb19 code=0x7ffc0000 [ 519.072297][ T27] audit: type=1326 audit(1794121838.908:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712739fb19 code=0x7ffc0000 [ 519.111896][ T27] audit: type=1326 audit(1794121838.908:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712739fb19 code=0x7ffc0000 [ 519.885450][ T8510] nbd: nbd0 already in use [ 521.258222][ C1] ------------[ cut here ]------------ [ 521.263774][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 521.273549][ C1] Modules linked in: [ 521.277447][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 521.284517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 521.294591][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 521.300923][ C1] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 521.320569][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 521.326652][ C1] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801e26bc00 [ 521.334675][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.342694][ C1] RBP: 0000000000000000 R08: ffff88801e26bc00 R09: 0000000000000003 [ 521.350657][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802604a420 [ 521.358648][ C1] R13: ffff8880336f3024 R14: ffff88802604a910 R15: ffff8880336f3000 [ 521.366656][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 521.375592][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.382197][ C1] CR2: 00007fa94c788c80 CR3: 000000005fe24000 CR4: 00000000003506e0 [ 521.390175][ C1] Call Trace: [ 521.393474][ C1] [ 521.396311][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 521.401853][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 521.407334][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 521.414113][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 521.419660][ C1] __iterate_interfaces+0x225/0x4c0 [ 521.424893][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 521.431134][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 521.438362][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 521.444615][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 521.451634][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 521.456843][ C1] ? hw_scan_work+0xf10/0xf10 [ 521.461517][ C1] __hrtimer_run_queues+0x525/0xc10 [ 521.466771][ C1] ? hrtimer_interrupt+0x980/0x980 [ 521.471913][ C1] ? read_tsc+0x9/0x20 [ 521.476013][ C1] hrtimer_run_softirq+0x177/0x290 [ 521.481115][ C1] handle_softirqs+0x27d/0x820 [ 521.485885][ C1] ? read_tsc+0x9/0x20 [ 521.489941][ C1] ? ktime_get+0x24b/0x280 [ 521.494368][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 521.499119][ C1] ? do_softirq+0x1a0/0x1a0 [ 521.503630][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 521.508819][ C1] __irq_exit_rcu+0xd3/0x190 [ 521.513420][ C1] ? irq_exit_rcu+0x20/0x20 [ 521.517912][ C1] irq_exit_rcu+0x9/0x20 [ 521.522140][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 521.527805][ C1] [ 521.530730][ C1] [ 521.533680][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.539652][ C1] RIP: 0010:sched_core_balance+0x661/0x1010 [ 521.545559][ C1] Code: 4c 89 f7 e8 41 fc 41 09 e9 98 06 00 00 4d 89 e6 48 8b 5c 24 18 48 8b 7c 24 38 e8 2a fc 41 09 e8 35 bd 2e 00 fb 80 7c 24 20 00 <48> 8b 44 24 40 4d 89 f4 49 89 c6 0f 85 a2 07 00 00 41 ff c5 41 83 [ 521.565178][ C1] RSP: 0018:ffffc900001879c0 EFLAGS: 00000246 [ 521.571236][ C1] RAX: 3d6d88ba6facb100 RBX: ffff88801e26bc00 RCX: 3d6d88ba6facb100 [ 521.579217][ C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 521.587196][ C1] RBP: ffffc90000187b50 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 521.595176][ C1] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: dffffc0000000000 [ 521.603166][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000002 [ 521.611145][ C1] ? sched_core_balance+0xbf/0x1010 [ 521.616365][ C1] ? put_prev_task_balance+0x110/0x110 [ 521.621821][ C1] ? put_prev_task_balance+0x110/0x110 [ 521.627324][ C1] finish_task_switch+0x393/0x8f0 [ 521.632378][ C1] __schedule+0x1577/0x4720 [ 521.636889][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 521.642882][ C1] ? sched_clock_idle_sleep_event+0x10/0x10 [ 521.648767][ C1] ? asan.module_dtor+0x20/0x20 [ 521.653633][ C1] ? flush_smp_call_function_queue+0x11e/0x250 [ 521.659778][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 521.665885][ C1] schedule_idle+0x4e/0x80 [ 521.670310][ C1] do_idle+0x55c/0x5c0 [ 521.674393][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 521.679593][ C1] ? do_idle+0x590/0x5c0 [ 521.683847][ C1] cpu_startup_entry+0x43/0x60 [ 521.688598][ C1] start_secondary+0xee/0xf0 [ 521.693263][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 521.699353][ C1] [ 521.702386][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 521.709652][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 521.716656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 521.726694][ C1] Call Trace: [ 521.729962][ C1] [ 521.732793][ C1] dump_stack_lvl+0x18c/0x250 [ 521.737464][ C1] ? show_regs_print_info+0x20/0x20 [ 521.742660][ C1] ? load_image+0x420/0x420 [ 521.747155][ C1] panic+0x2ca/0x720 [ 521.751048][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 521.755542][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 521.761805][ C1] __warn+0x2e0/0x470 [ 521.765789][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 521.771504][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 521.777217][ C1] report_bug+0x2be/0x4f0 [ 521.781552][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 521.787274][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 521.792994][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 521.798701][ C1] handle_bug+0xcf/0x120 [ 521.802936][ C1] exc_invalid_op+0x1a/0x50 [ 521.807427][ C1] asm_exc_invalid_op+0x1a/0x20 [ 521.812273][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 521.818593][ C1] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 521.838189][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 521.844245][ C1] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801e26bc00 [ 521.852210][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.860165][ C1] RBP: 0000000000000000 R08: ffff88801e26bc00 R09: 0000000000000003 [ 521.868121][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802604a420 [ 521.876084][ C1] R13: ffff8880336f3024 R14: ffff88802604a910 R15: ffff8880336f3000 [ 521.884062][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 521.889782][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 521.895489][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 521.901024][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 521.906474][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 521.913248][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 521.918808][ C1] __iterate_interfaces+0x225/0x4c0 [ 521.924020][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 521.930242][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 521.937420][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 521.943658][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 521.950663][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 521.955842][ C1] ? hw_scan_work+0xf10/0xf10 [ 521.960498][ C1] __hrtimer_run_queues+0x525/0xc10 [ 521.965687][ C1] ? hrtimer_interrupt+0x980/0x980 [ 521.970784][ C1] ? read_tsc+0x9/0x20 [ 521.974841][ C1] hrtimer_run_softirq+0x177/0x290 [ 521.979953][ C1] handle_softirqs+0x27d/0x820 [ 521.984698][ C1] ? read_tsc+0x9/0x20 [ 521.988751][ C1] ? ktime_get+0x24b/0x280 [ 521.993151][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 521.997914][ C1] ? do_softirq+0x1a0/0x1a0 [ 522.002401][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 522.007582][ C1] __irq_exit_rcu+0xd3/0x190 [ 522.012151][ C1] ? irq_exit_rcu+0x20/0x20 [ 522.016655][ C1] irq_exit_rcu+0x9/0x20 [ 522.020876][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 522.026497][ C1] [ 522.029409][ C1] [ 522.032321][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.038288][ C1] RIP: 0010:sched_core_balance+0x661/0x1010 [ 522.044167][ C1] Code: 4c 89 f7 e8 41 fc 41 09 e9 98 06 00 00 4d 89 e6 48 8b 5c 24 18 48 8b 7c 24 38 e8 2a fc 41 09 e8 35 bd 2e 00 fb 80 7c 24 20 00 <48> 8b 44 24 40 4d 89 f4 49 89 c6 0f 85 a2 07 00 00 41 ff c5 41 83 [ 522.063756][ C1] RSP: 0018:ffffc900001879c0 EFLAGS: 00000246 [ 522.069803][ C1] RAX: 3d6d88ba6facb100 RBX: ffff88801e26bc00 RCX: 3d6d88ba6facb100 [ 522.077756][ C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 522.085710][ C1] RBP: ffffc90000187b50 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 522.093662][ C1] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: dffffc0000000000 [ 522.101611][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000002 [ 522.109582][ C1] ? sched_core_balance+0xbf/0x1010 [ 522.114769][ C1] ? put_prev_task_balance+0x110/0x110 [ 522.120220][ C1] ? put_prev_task_balance+0x110/0x110 [ 522.125676][ C1] finish_task_switch+0x393/0x8f0 [ 522.130694][ C1] __schedule+0x1577/0x4720 [ 522.135199][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 522.141159][ C1] ? sched_clock_idle_sleep_event+0x10/0x10 [ 522.147032][ C1] ? asan.module_dtor+0x20/0x20 [ 522.151885][ C1] ? flush_smp_call_function_queue+0x11e/0x250 [ 522.158020][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 522.164074][ C1] schedule_idle+0x4e/0x80 [ 522.168471][ C1] do_idle+0x55c/0x5c0 [ 522.172527][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 522.177709][ C1] ? do_idle+0x590/0x5c0 [ 522.181932][ C1] cpu_startup_entry+0x43/0x60 [ 522.186677][ C1] start_secondary+0xee/0xf0 [ 522.191245][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 522.197309][ C1] [ 522.200566][ C1] Kernel Offset: disabled [ 522.204933][ C1] Rebooting in 86400 seconds..