last executing test programs: 12m25.81212669s ago: executing program 32 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 11m32.781492466s ago: executing program 33 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m1.029373362s ago: executing program 34 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x100010, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 6m42.482354479s ago: executing program 35 (id=807): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x22023}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 5m12.288001349s ago: executing program 1 (id=902): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m10.937787824s ago: executing program 1 (id=903): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x0, 0xfe, 0x22, 0x0, 0xf7, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 5m8.987333681s ago: executing program 1 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='tmpfs\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 5m8.889390474s ago: executing program 1 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c800"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20) socket(0x1, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) epoll_create1(0x80000) r6 = socket$tipc(0x1e, 0x5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b45, 0x3) r9 = socket$inet(0x2, 0xa, 0x4) fcntl$dupfd(r9, 0x406, r9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 5m8.128840913s ago: executing program 1 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getegid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0}, 0x20) 5m5.750047144s ago: executing program 1 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n\x00', 0x4) 5m5.429885429s ago: executing program 5 (id=909): syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x2, 0x80000000, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", "ea48ff12", "ef3c6c588e3360e2"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) sendfile(r0, r1, 0x0, 0x7ffff000) 5m3.796995971s ago: executing program 5 (id=910): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0xfffffffffffffdb6}}, @common=@inet=@hashlimit1={{0x58}, {'nr0\x00', {0x61, 0x7, 0x4, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5cc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Nc\xdd\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x8) ftruncate(r3, 0x7) finit_module(r3, 0x0, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x3800) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x0, 0x132, 0x3}) 5m2.652208113s ago: executing program 5 (id=911): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) clock_gettime(0x0, 0x0) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) 5m2.122372087s ago: executing program 5 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='tmpfs\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 5m1.977784297s ago: executing program 5 (id=913): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x80000) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xfe}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/arp\x00') lseek(r7, 0xfff, 0x0) 4m59.88128776s ago: executing program 5 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c800"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20) socket(0x1, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) epoll_create1(0x80000) r6 = socket$tipc(0x1e, 0x5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b45, 0x3) r9 = socket$inet(0x2, 0xa, 0x4) fcntl$dupfd(r9, 0x406, r9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 4m45.466509652s ago: executing program 36 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n\x00', 0x4) 4m44.280921121s ago: executing program 37 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c800"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20) socket(0x1, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) epoll_create1(0x80000) r6 = socket$tipc(0x1e, 0x5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b45, 0x3) r9 = socket$inet(0x2, 0xa, 0x4) fcntl$dupfd(r9, 0x406, r9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 2m50.103514885s ago: executing program 8 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./midi0\x00', 0x81c0, 0x7408) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./midi0\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='hello', 0x5) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./midi1\x00', 0x81c0, 0x7428) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./midi1\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='hello', 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000580)='./midi2\x00', 0x81c0, 0x7448) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./midi2\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='hello', 0x5) 2m48.592522627s ago: executing program 8 (id=989): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, &(0x7f0000000200)={&(0x7f0000000000)='\x00'/4096, 0x1000, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={&(0x7f0000001000)='\x00'/4096, 0x1000}}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) 2m48.128729544s ago: executing program 8 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='tmpfs\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 2m47.011300636s ago: executing program 8 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x3, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0xfffffffffffffe00, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0/file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m44.523684735s ago: executing program 8 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @rand_addr=0x64010104}, {0x2, 0x4a2c, @multicast2}, {0x2, 0x4e25, @multicast1}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000280)) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00'], 0xdc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x100e002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x31b4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, @in6={0xa, 0x4e22, 0x9, @private0, 0x2}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x26}, 0xa}], 0x64) 2m40.279497121s ago: executing program 8 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/spaces/foo\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)="020000007f0000010000000000000000", 0x80) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/dlm/cluster/spaces/foo/nodes/1\x00', 0x1ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write(r2, &(0x7f0000000d00)="060000000000000002000000040100000000000000000000666f6f00", 0x80) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000f00)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r3, &(0x7f0000001200)='0\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r4, &(0x7f0000001400)='1\x00', 0x2) close(r4) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r5, &(0x7f0000001800)="060000000000000002000000010100000503000080000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000001900)="060000000000000002000000010100000503000000400000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b) 2m24.665574322s ago: executing program 38 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/spaces/foo\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)="020000007f0000010000000000000000", 0x80) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/dlm/cluster/spaces/foo/nodes/1\x00', 0x1ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write(r2, &(0x7f0000000d00)="060000000000000002000000040100000000000000000000666f6f00", 0x80) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000f00)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r3, &(0x7f0000001200)='0\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r4, &(0x7f0000001400)='1\x00', 0x2) close(r4) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r5, &(0x7f0000001800)="060000000000000002000000010100000503000080000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000001900)="060000000000000002000000010100000503000000400000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b) 2m1.294944364s ago: executing program 7 (id=1039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r5, &(0x7f0000004200)='t', 0x1) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) syz_emit_ethernet(0x106, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) 2m0.096500375s ago: executing program 7 (id=1043): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xaa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) 1m58.644902368s ago: executing program 7 (id=1045): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x80000) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xfe}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/arp\x00') lseek(r8, 0xfff, 0x0) 1m56.816911432s ago: executing program 7 (id=1046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0xfffffffffffffdb6}}, @common=@inet=@hashlimit1={{0x58}, {'nr0\x00', {0x61, 0x7, 0x4, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5cc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Nc\xdd\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x8) ftruncate(r4, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x3800) shmctl$SHM_LOCK(0x0, 0xb) io_uring_setup(0x1111, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x0, 0x132, 0x3}) 1m53.989090193s ago: executing program 7 (id=1052): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "5303000000000002", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c26", 0xdc}], 0x3) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0x4000}], 0x59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000483938836ef61e43c8a0cd9f467064ae1da6baf3eb1106fc288a2af8adf476d01025cf09b07ce7bf48ecd6abfff4fc1249e7af1311edc025d8ccf7ce85205aa6e84d513529fae8a3174c984f3b2b2a0baa04acbc382fe89f43292f6ffd6f72e123f829e774bb8de2d17f464332789dcde1a4b2e214585da5aac1ed396916335f4363a8cb9c68e1fbcd8f8d26c8928b607a557066f197bf8942b3fc576cc6655e83e84d52030c2d77de96cac915636f168414"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m53.904795104s ago: executing program 3 (id=1053): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x605, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x35a4e900}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 1m52.85038065s ago: executing program 7 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem', 0x3) 1m52.623414159s ago: executing program 3 (id=1055): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r0, 0x8983, &(0x7f0000000040)="000000006574683000000000000000000000000000000000000000000300"/56) ioctl(r0, 0x8983, &(0x7f0000000080)="01000000657468302e3300"/52) 1m51.425130306s ago: executing program 3 (id=1056): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0401030c00"], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 1m50.711945948s ago: executing program 3 (id=1057): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000f0005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc002) 1m50.482294337s ago: executing program 3 (id=1058): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120) 1m49.676599239s ago: executing program 3 (id=1059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0xfffffffffffffdb6}}, @common=@inet=@hashlimit1={{0x58}, {'nr0\x00', {0x61, 0x7, 0x4, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5cc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Nc\xdd\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x8) ftruncate(r4, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x3800) shmctl$SHM_LOCK(0x0, 0xb) io_uring_setup(0x1111, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x0, 0x132, 0x3}) 1m28.468479403s ago: executing program 39 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem', 0x3) 1m28.178437653s ago: executing program 40 (id=1059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0xfffffffffffffdb6}}, @common=@inet=@hashlimit1={{0x58}, {'nr0\x00', {0x61, 0x7, 0x4, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5cc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Nc\xdd\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x8) ftruncate(r4, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x3800) shmctl$SHM_LOCK(0x0, 0xb) io_uring_setup(0x1111, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x0, 0x132, 0x3}) 35.564201434s ago: executing program 2 (id=1061): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "5303000000000002", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c26", 0xdc}], 0x3) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0x4000}], 0x59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000483938836ef61e43c8a0cd9f467064ae1da6baf3eb1106fc288a2af8adf476d01025cf09b07ce7bf48ecd6abfff4fc1249e7af1311edc025d8ccf7ce85205aa6e84d513529fae8a3174c984f3b2b2a0baa04acbc382fe89f43292f6ffd6f72e123f829e774bb8de2d17f464332789dcde1a4b2e214585da5aac1ed396916335f4363a8cb9c68e1fbcd8f8d26c8928b607a557066f197bf8942b3fc576cc6655e83e84d52030c2d77de96cac915636f168414"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 34.088629028s ago: executing program 2 (id=1062): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000008)={0x0, 0x0}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000300)={0x9c, 0x19, 0x1, {0x3fff, {0x80}, 0x41ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) write(r3, &(0x7f00000001c0)='data', 0x4) 33.90506549s ago: executing program 2 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)='hello', 0x5) 33.603923529s ago: executing program 0 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) 33.457485963s ago: executing program 0 (id=1065): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000f0005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc002) 33.266790504s ago: executing program 0 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001900)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000001b00)='0\n', 0x2) 33.222010818s ago: executing program 2 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001900)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000001b00)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f0000001d00)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000001700)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r8, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v4,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) 32.85313585s ago: executing program 0 (id=1068): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "5303000000000002", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c26", 0xdc}], 0x3) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0x4000}], 0x59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000483938836ef61e43c8a0cd9f467064ae1da6baf3eb1106fc288a2af8adf476d01025cf09b07ce7bf48ecd6abfff4fc1249e7af1311edc025d8ccf7ce85205aa6e84d513529fae8a3174c984f3b2b2a0baa04acbc382fe89f43292f6ffd6f72e123f829e774bb8de2d17f464332789dcde1a4b2e214585da5aac1ed396916335f4363a8cb9c68e1fbcd8f8d26c8928b607a557066f197bf8942b3fc576cc6655e83e84d52030c2d77de96cac915636f168414"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 32.629163239s ago: executing program 2 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000980), 0x64) 31.231147174s ago: executing program 0 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) 30.844330914s ago: executing program 0 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e20, 0x7f000001, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x28, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x4e20, 0x7f000001, @empty}, r3, 0x3e8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x10, 0xfa00, {r3, 0x3e8}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 28.984527137s ago: executing program 2 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\x00', 0x2) 15.596432008s ago: executing program 41 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e20, 0x7f000001, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x28, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x4e20, 0x7f000001, @empty}, r3, 0x3e8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x10, 0xfa00, {r3, 0x3e8}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 13.392716844s ago: executing program 42 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\x00', 0x2) 5.341887528s ago: executing program 4 (id=1087): ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000, 0x100000}]) 4.537164863s ago: executing program 4 (id=1088): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000200)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.190582473s ago: executing program 4 (id=1089): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0000:00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='ffffffff ffffffff ffffffff ffffff', 0x21) 2.012773161s ago: executing program 4 (id=1090): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000f0005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc002) 1.745050075s ago: executing program 4 (id=1091): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xfe}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 0s ago: executing program 4 (id=1092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) kernel console output (not intermixed with test programs): batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.685570][ T9914] team0: Port device team_slave_0 added [ 621.753509][ T9914] team0: Port device team_slave_1 added [ 621.884525][ T5599] Bluetooth: hci1: command tx timeout [ 622.010656][ T9716] hsr_slave_0: entered promiscuous mode [ 622.011696][ T9716] hsr_slave_1: entered promiscuous mode [ 622.012422][ T9716] debugfs: 'hsr0' already exists in 'hsr' [ 622.012441][ T9716] Cannot create hsr debugfs directory [ 622.089621][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.089637][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.089662][ T9914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.118735][ T9924] hsr_slave_0: entered promiscuous mode [ 622.123033][ T9924] hsr_slave_1: entered promiscuous mode [ 622.143718][ T9924] debugfs: 'hsr0' already exists in 'hsr' [ 622.143803][ T9924] Cannot create hsr debugfs directory [ 622.232208][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.232224][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.232247][ T9914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.288238][ T5599] Bluetooth: hci3: command tx timeout [ 622.454843][ T9773] bond1: left allmulticast mode [ 622.473441][ T9773] bond1: left promiscuous mode [ 622.473822][ T9773] bridge0: port 3(bond1) entered disabled state [ 622.524243][ T5599] Bluetooth: hci0: command tx timeout [ 622.595774][ T9773] bridge_slave_1: left allmulticast mode [ 622.595828][ T9773] bridge_slave_1: left promiscuous mode [ 622.596034][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.715546][ T9773] bridge_slave_0: left allmulticast mode [ 622.715575][ T9773] bridge_slave_0: left promiscuous mode [ 622.715812][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.914507][ T9773] bridge_slave_1: left allmulticast mode [ 622.914540][ T9773] bridge_slave_1: left promiscuous mode [ 622.914747][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.035453][ T9773] bridge_slave_0: left allmulticast mode [ 623.035484][ T9773] bridge_slave_0: left promiscuous mode [ 623.035691][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state syzkaller syzkaller login: [ 623.252486][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.897197][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.954942][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.035618][ T9773] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 624.075278][ T9773] bond0 (unregistering): Released all slaves [ 624.083483][ T9773] bond1 (unregistering): Released all slaves [ 624.344877][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.374129][ T5599] Bluetooth: hci3: command tx timeout [ 624.424814][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.507364][ T9773] bond0 (unregistering): Released all slaves [ 625.062193][ T9914] hsr_slave_0: entered promiscuous mode [ 625.063259][ T9914] hsr_slave_1: entered promiscuous mode [ 625.064193][ T9914] debugfs: 'hsr0' already exists in 'hsr' [ 625.110133][ T9914] Cannot create hsr debugfs directory [ 626.454257][ T5599] Bluetooth: hci3: command tx timeout [ 627.014353][ T9773] hsr_slave_0: left promiscuous mode [ 627.054531][ T9773] hsr_slave_1: left promiscuous mode [ 627.055670][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.055697][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.095398][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.095429][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.285664][ T9773] hsr_slave_0: left promiscuous mode [ 627.324425][ T9773] hsr_slave_1: left promiscuous mode [ 627.325210][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.376165][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.468187][ T9773] veth1_macvtap: left promiscuous mode [ 627.468270][ T9773] veth0_macvtap: left promiscuous mode [ 627.468446][ T9773] veth1_vlan: left promiscuous mode [ 627.468573][ T9773] veth0_vlan: left promiscuous mode [ 628.236457][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 628.296076][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 628.524136][ T5599] Bluetooth: hci3: command tx timeout [ 628.896510][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 628.954992][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 629.217287][ T5255] 8021q: adding VLAN 0 to HW filter on device eth12 [ 629.390045][ T9562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 629.443162][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.485675][ T9562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 629.577983][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.640512][ T9562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 629.744705][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.141117][ T9562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 630.181472][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.601849][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.602077][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.602328][ T9988] bridge_slave_0: entered allmulticast mode [ 630.605684][ T9988] bridge_slave_0: entered promiscuous mode [ 630.631314][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.631525][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.631791][ T9988] bridge_slave_1: entered allmulticast mode [ 630.633772][ T9988] bridge_slave_1: entered promiscuous mode [ 630.742342][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.759965][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.157438][ T9988] team0: Port device team_slave_0 added [ 631.173113][ T9988] team0: Port device team_slave_1 added [ 631.895806][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.895825][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.895858][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.902877][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.902897][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.902929][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.014950][ T5255] 8021q: adding VLAN 0 to HW filter on device eth11 [ 632.175688][ T9988] hsr_slave_0: entered promiscuous mode [ 632.176758][ T9988] hsr_slave_1: entered promiscuous mode [ 632.177512][ T9988] debugfs: 'hsr0' already exists in 'hsr' [ 632.177532][ T9988] Cannot create hsr debugfs directory [ 632.992762][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.053068][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.072437][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.089083][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.090044][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.733140][ T5255] 8021q: adding VLAN 0 to HW filter on device eth13 [ 634.036708][ T9716] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 634.167448][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.180870][ T9716] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 634.248787][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.283036][ T9716] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 634.352063][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.379295][ T9716] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 634.421721][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.324353][ T5599] Bluetooth: hci2: command tx timeout [ 635.676271][ T9924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 635.719100][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.762458][ T9924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 635.788373][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.134317][ T9924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.172560][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.229758][ T9924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.269709][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.849575][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10 [ 637.407369][ T5599] Bluetooth: hci2: command tx timeout [ 637.607867][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.608028][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.608237][T10069] bridge_slave_0: entered allmulticast mode [ 637.611120][T10069] bridge_slave_0: entered promiscuous mode [ 637.698030][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.698245][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.698479][T10069] bridge_slave_1: entered allmulticast mode [ 637.701927][T10069] bridge_slave_1: entered promiscuous mode [ 637.825488][ T9716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.088998][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.142886][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.261078][T10069] team0: Port device team_slave_0 added [ 638.413342][T10069] team0: Port device team_slave_1 added [ 638.535785][ T9773] bridge_slave_1: left allmulticast mode [ 638.535826][ T9773] bridge_slave_1: left promiscuous mode [ 638.536107][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.656934][ T9773] bridge_slave_0: left allmulticast mode [ 638.656963][ T9773] bridge_slave_0: left promiscuous mode [ 638.657212][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.894466][ T9773] bridge_slave_1: left allmulticast mode [ 638.894505][ T9773] bridge_slave_1: left promiscuous mode [ 638.894763][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.996441][ T9773] bridge_slave_0: left allmulticast mode [ 638.996471][ T9773] bridge_slave_0: left promiscuous mode [ 638.996687][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.484375][ T5599] Bluetooth: hci2: command tx timeout [ 639.536787][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.616626][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.696043][ T9773] bond0 (unregistering): Released all slaves [ 639.975113][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.056162][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.124999][ T9773] bond0 (unregistering): Released all slaves [ 640.317357][ T9716] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.560013][T10069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.560029][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.560070][T10069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.615751][T10069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.615769][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.615800][T10069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.730002][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.730165][ T9720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.844322][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.844543][ T9720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.009752][T10069] hsr_slave_0: entered promiscuous mode [ 641.010865][T10069] hsr_slave_1: entered promiscuous mode [ 641.011587][T10069] debugfs: 'hsr0' already exists in 'hsr' [ 641.011606][T10069] Cannot create hsr debugfs directory [ 641.091796][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.235587][ T9914] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 641.358862][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.413150][ T9914] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 641.459762][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.528929][ T9914] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 641.557606][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.578572][ T5599] Bluetooth: hci2: command tx timeout [ 641.685596][ T9914] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 641.723695][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.934341][ T9773] hsr_slave_0: left promiscuous mode [ 641.954271][ T9773] hsr_slave_1: left promiscuous mode [ 641.955891][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.994907][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.174348][ T9773] hsr_slave_0: left promiscuous mode [ 642.194349][ T9773] hsr_slave_1: left promiscuous mode [ 642.195391][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.234959][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.647488][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 642.694940][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 643.176706][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 643.234916][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 643.482339][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 643.575195][ T9924] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.661961][ T9988] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 643.741098][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.769498][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.769681][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.801391][ T9988] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 643.873401][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.949195][ T9988] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 643.990151][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.007913][ T9988] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 644.049753][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.076925][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.077759][ T9768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.677927][ T9914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.243082][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.296028][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.296131][ T9804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.349301][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.349502][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.696662][ T5255] 8021q: adding VLAN 0 to HW filter on device eth14 [ 646.732356][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.817912][ T9716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.106515][ T9924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.111539][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.156777][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.156997][ T9768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.200116][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.200341][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.861798][ T9924] veth0_vlan: entered promiscuous mode [ 648.157380][ T9924] veth1_vlan: entered promiscuous mode [ 648.323834][ T5255] 8021q: adding VLAN 0 to HW filter on device eth15 [ 648.480705][T10069] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 648.519637][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.540283][T10069] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 648.579482][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.593293][T10069] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 648.621613][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.622891][ T9716] veth0_vlan: entered promiscuous mode [ 648.639838][T10069] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 648.679886][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.770811][ T9716] veth1_vlan: entered promiscuous mode [ 648.882450][ T9924] veth0_macvtap: entered promiscuous mode [ 648.964799][ T9924] veth1_macvtap: entered promiscuous mode [ 649.261583][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.281846][ T9716] veth0_macvtap: entered promiscuous mode [ 649.395501][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.398780][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.422083][ T9716] veth1_macvtap: entered promiscuous mode [ 649.630075][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.770239][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.967077][ T5255] 8021q: adding VLAN 0 to HW filter on device eth16 [ 649.986083][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.554497][T10069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.068677][ T9776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.068696][ T9776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.069451][T10069] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.341915][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.344564][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.745978][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.746201][ T9838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.873205][ T9771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.873228][ T9771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.071901][ T9720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.071926][ T9720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.140358][ T9914] veth0_vlan: entered promiscuous mode [ 652.199695][ T9988] veth0_vlan: entered promiscuous mode [ 652.348666][ T9768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.348689][ T9768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.390649][ T9914] veth1_vlan: entered promiscuous mode [ 652.409422][ T9988] veth1_vlan: entered promiscuous mode [ 653.091049][ T5599] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 653.091082][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.091114][ T5599] Tainted: [L]=SOFTLOCKUP [ 653.091124][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.091141][ T5599] Workqueue: hci0 hci_rx_work [ 653.091177][ T5599] Call Trace: [ 653.091187][ T5599] [ 653.091198][ T5599] dump_stack_lvl+0xe8/0x150 [ 653.091238][ T5599] sysfs_create_dir_ns+0x271/0x2a0 [ 653.091269][ T5599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 653.091302][ T5599] ? rt_spin_unlock+0x163/0x200 [ 653.091333][ T5599] kobject_add_internal+0x62c/0xce0 [ 653.091366][ T5599] kobject_add+0x163/0x240 [ 653.091386][ T5599] ? rt_spin_unlock+0x157/0x200 [ 653.091416][ T5599] ? __pfx_kobject_add+0x10/0x10 [ 653.091460][ T5599] ? get_device_parent+0x370/0x3a0 [ 653.091497][ T5599] device_add+0x3fa/0xb80 [ 653.091531][ T5599] hci_conn_add_sysfs+0xd5/0x210 [ 653.091564][ T5599] le_conn_complete_evt+0xfef/0x1580 [ 653.091613][ T5599] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 653.091649][ T5599] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.091694][ T5599] ? rt_mutex_slowunlock+0x219/0x460 [ 653.091721][ T5599] ? skb_pull_data+0xf0/0x200 [ 653.091761][ T5599] hci_le_enh_conn_complete_evt+0x189/0x490 [ 653.091799][ T5599] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 653.091851][ T5599] hci_event_packet+0x67a/0xf10 [ 653.091890][ T5599] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 653.091923][ T5599] ? __pfx_hci_event_packet+0x10/0x10 [ 653.091953][ T5599] ? rt_spin_unlock+0x157/0x200 [ 653.091989][ T5599] ? hci_send_to_monitor+0xe2/0x590 [ 653.092017][ T5599] hci_rx_work+0x3ee/0x1020 [ 653.092056][ T5599] ? process_scheduled_works+0xa20/0x14e0 [ 653.092086][ T5599] process_scheduled_works+0xa8e/0x14e0 [ 653.092149][ T5599] ? __pfx_process_scheduled_works+0x10/0x10 [ 653.092186][ T5599] ? assign_work+0x3cf/0x5d0 [ 653.092238][ T5599] worker_thread+0xa47/0xfb0 [ 653.092297][ T5599] kthread+0x388/0x470 [ 653.092333][ T5599] ? __pfx_worker_thread+0x10/0x10 [ 653.092357][ T5599] ? __pfx_kthread+0x10/0x10 [ 653.092393][ T5599] ret_from_fork+0x514/0xb70 [ 653.092434][ T5599] ? __pfx_ret_from_fork+0x10/0x10 [ 653.092469][ T5599] ? __switch_to+0xc89/0x1420 [ 653.092505][ T5599] ? __pfx_kthread+0x10/0x10 [ 653.092542][ T5599] ret_from_fork_asm+0x1a/0x30 [ 653.092586][ T5599] [ 653.092622][ T5599] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 653.092667][ T5599] Bluetooth: hci0: failed to register connection device [ 653.591209][ T9988] veth0_macvtap: entered promiscuous mode [ 653.630634][ T9988] veth1_macvtap: entered promiscuous mode [ 653.648559][ T9914] veth0_macvtap: entered promiscuous mode [ 653.684910][ T9914] veth1_macvtap: entered promiscuous mode [ 653.876129][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.051104][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.088977][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.163748][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.651288][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 657.651312][ T37] audit: type=1800 audit(1785850035.982:66): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.923" name="local" dev="configfs" ino=31277 res=0 errno=0 [ 657.970516][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.970539][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.278446][T10069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.592354][ T9843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.677406][ T5599] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 661.677438][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.677471][ T5599] Tainted: [L]=SOFTLOCKUP [ 661.677481][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.677495][ T5599] Workqueue: hci4 hci_rx_work [ 661.677534][ T5599] Call Trace: [ 661.677552][ T5599] [ 661.677563][ T5599] dump_stack_lvl+0xe8/0x150 [ 661.677603][ T5599] sysfs_create_dir_ns+0x271/0x2a0 [ 661.677631][ T5599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 661.677663][ T5599] ? rt_spin_unlock+0x163/0x200 [ 661.677692][ T5599] kobject_add_internal+0x62c/0xce0 [ 661.677725][ T5599] kobject_add+0x163/0x240 [ 661.677744][ T5599] ? rt_spin_unlock+0x157/0x200 [ 661.677776][ T5599] ? __pfx_kobject_add+0x10/0x10 [ 661.677820][ T5599] ? get_device_parent+0x370/0x3a0 [ 661.677857][ T5599] device_add+0x3fa/0xb80 [ 661.677891][ T5599] hci_conn_add_sysfs+0xd5/0x210 [ 661.677924][ T5599] le_conn_complete_evt+0xfef/0x1580 [ 661.677971][ T5599] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 661.678009][ T5599] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.678042][ T5599] ? rt_mutex_slowunlock+0x219/0x460 [ 661.678068][ T5599] ? skb_pull_data+0xf0/0x200 [ 661.678107][ T5599] hci_le_enh_conn_complete_evt+0x189/0x490 [ 661.678144][ T5599] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 661.678184][ T5599] hci_event_packet+0x67a/0xf10 [ 661.678222][ T5599] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 661.678255][ T5599] ? __pfx_hci_event_packet+0x10/0x10 [ 661.678284][ T5599] ? rt_spin_unlock+0x157/0x200 [ 661.678319][ T5599] ? hci_send_to_monitor+0xe2/0x590 [ 661.678346][ T5599] hci_rx_work+0x3ee/0x1020 [ 661.678382][ T5599] ? process_scheduled_works+0xa20/0x14e0 [ 661.678412][ T5599] process_scheduled_works+0xa8e/0x14e0 [ 661.678471][ T5599] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.678508][ T5599] ? assign_work+0x3cf/0x5d0 [ 661.678543][ T5599] worker_thread+0xa47/0xfb0 [ 661.678611][ T5599] kthread+0x388/0x470 [ 661.678647][ T5599] ? __pfx_worker_thread+0x10/0x10 [ 661.678674][ T5599] ? __pfx_kthread+0x10/0x10 [ 661.678711][ T5599] ret_from_fork+0x514/0xb70 [ 661.678750][ T5599] ? __pfx_ret_from_fork+0x10/0x10 [ 661.678787][ T5599] ? __switch_to+0xc89/0x1420 [ 661.678820][ T5599] ? __pfx_kthread+0x10/0x10 [ 661.678857][ T5599] ret_from_fork_asm+0x1a/0x30 [ 661.678898][ T5599] [ 661.679012][ T5599] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 661.679055][ T5599] Bluetooth: hci4: failed to register connection device [ 662.611766][ T9843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.272810][T10425] kAFS: unable to lookup cell 'ÿ' [ 664.198097][ T9771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.198122][ T9771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.561529][T10434] netlink: 'syz.3.932': attribute type 16 has an invalid length. [ 665.561579][T10434] netlink: 'syz.3.932': attribute type 17 has an invalid length. [ 668.207535][ T9843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.456373][ T9779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.456398][ T9779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.525753][ T9804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.545786][ T9779] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.546172][ T9779] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.549114][ T9843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.637606][ T5599] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 672.736922][T10069] veth0_vlan: entered promiscuous mode [ 672.964626][ T9776] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.988964][ T9720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.075453][T10069] veth1_vlan: entered promiscuous mode [ 673.224775][ T9776] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.906275][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 673.909117][T10069] veth0_macvtap: entered promiscuous mode [ 673.975899][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 673.991330][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 674.009630][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 674.030862][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 674.137601][ T9804] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.194608][T10069] veth1_macvtap: entered promiscuous mode [ 676.238954][ T5604] Bluetooth: hci5: command tx timeout [ 676.842777][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.842854][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.842905][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.842954][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.843004][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.843054][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.843110][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.843160][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.843209][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.843258][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 676.925984][ T9804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.082385][T10069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.295699][ T5604] Bluetooth: hci5: command tx timeout [ 679.283219][T10069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.724543][ T5604] Bluetooth: hci5: command tx timeout [ 681.344813][ T9843] bond1: left allmulticast mode [ 681.348211][ T9843] bond1: left promiscuous mode [ 681.348680][ T9843] bridge0: port 4(bond1) entered disabled state [ 681.588626][ T9843] bridge_slave_1: left allmulticast mode [ 681.588666][ T9843] bridge_slave_1: left promiscuous mode [ 681.588942][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.232174][T10507] netlink: 'syz.8.945': attribute type 1 has an invalid length. [ 682.232254][T10507] __nla_validate_parse: 47 callbacks suppressed [ 682.232297][T10507] netlink: 200 bytes leftover after parsing attributes in process `syz.8.945'. [ 682.817166][ T5604] Bluetooth: hci5: command tx timeout [ 682.969764][ T9843] bridge_slave_0: left allmulticast mode [ 682.969804][ T9843] bridge_slave_0: left promiscuous mode [ 682.989134][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.968348][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.416652][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.494972][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.039751][ T9843] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 688.431540][ T9843] bond0 (unregistering): Released all slaves [ 688.513471][ T9843] bond1 (unregistering): Released all slaves [ 688.849195][T10500] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 688.849242][T10500] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 688.849264][T10500] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 689.478775][ T9775] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.478985][ T9775] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.479240][ T9775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.479489][ T9775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.479717][ T9775] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.480227][ T9775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.480482][ T9775] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.480825][ T9775] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.481045][ T9775] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.481240][ T9775] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.481445][ T9775] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.481645][ T9775] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.743393][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 689.743425][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 689.743458][ T5604] Tainted: [L]=SOFTLOCKUP [ 689.743467][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.743483][ T5604] Workqueue: hci3 hci_rx_work [ 689.743520][ T5604] Call Trace: [ 689.743530][ T5604] [ 689.743540][ T5604] dump_stack_lvl+0xe8/0x150 [ 689.743582][ T5604] sysfs_create_dir_ns+0x271/0x2a0 [ 689.743613][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 689.743645][ T5604] ? rt_spin_unlock+0x163/0x200 [ 689.743678][ T5604] kobject_add_internal+0x62c/0xce0 [ 689.743710][ T5604] kobject_add+0x163/0x240 [ 689.743730][ T5604] ? rt_spin_unlock+0x157/0x200 [ 689.743760][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 689.743805][ T5604] ? get_device_parent+0x370/0x3a0 [ 689.743842][ T5604] device_add+0x3fa/0xb80 [ 689.743876][ T5604] hci_conn_add_sysfs+0xd5/0x210 [ 689.743909][ T5604] le_conn_complete_evt+0xfef/0x1580 [ 689.743960][ T5604] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 689.743995][ T5604] ? lockdep_hardirqs_on+0x7a/0x110 [ 689.744030][ T5604] ? rt_mutex_slowunlock+0x219/0x460 [ 689.744055][ T5604] ? skb_pull_data+0xf0/0x200 [ 689.744095][ T5604] hci_le_enh_conn_complete_evt+0x189/0x490 [ 689.744135][ T5604] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 689.744176][ T5604] hci_event_packet+0x67a/0xf10 [ 689.744215][ T5604] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 689.744246][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 689.744275][ T5604] ? rt_spin_unlock+0x157/0x200 [ 689.744317][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 689.744345][ T5604] hci_rx_work+0x3ee/0x1020 [ 689.744384][ T5604] ? process_scheduled_works+0xa20/0x14e0 [ 689.744415][ T5604] process_scheduled_works+0xa8e/0x14e0 [ 689.744475][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 689.744512][ T5604] ? assign_work+0x3cf/0x5d0 [ 689.744546][ T5604] worker_thread+0xa47/0xfb0 [ 689.744592][ T5604] ? __kthread_parkme+0x71/0x1f0 [ 689.744634][ T5604] kthread+0x388/0x470 [ 689.744669][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 689.744696][ T5604] ? __pfx_kthread+0x10/0x10 [ 689.744731][ T5604] ret_from_fork+0x514/0xb70 [ 689.744769][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 689.744804][ T5604] ? __switch_to+0xc89/0x1420 [ 689.744837][ T5604] ? __pfx_kthread+0x10/0x10 [ 689.744872][ T5604] ret_from_fork_asm+0x1a/0x30 [ 689.744913][ T5604] [ 689.760379][ T5604] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 689.760424][ T5604] Bluetooth: hci3: failed to register connection device [ 692.269757][T10529] vlan2: entered promiscuous mode [ 692.269780][T10529] bond_slave_1: entered promiscuous mode [ 692.697622][ T9804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.697640][ T9804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.587782][ T9843] hsr_slave_0: left promiscuous mode [ 693.642323][ T9843] hsr_slave_1: left promiscuous mode [ 693.658605][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.658632][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.726426][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.726459][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.127915][ T5599] Bluetooth: hci3: command tx timeout [ 694.247536][ T9843] veth1_macvtap: left promiscuous mode [ 694.247615][ T9843] veth0_macvtap: left promiscuous mode [ 694.247809][ T9843] veth1_vlan: left promiscuous mode [ 694.248004][ T9843] veth0_vlan: left promiscuous mode [ 694.729314][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.812704][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.840486][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 695.168983][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 695.560366][T10556] netlink: 'syz.7.954': attribute type 1 has an invalid length. [ 695.560438][T10556] netlink: 200 bytes leftover after parsing attributes in process `syz.7.954'. [ 696.179207][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.294843][ T5604] Bluetooth: hci1: command tx timeout [ 698.704851][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 698.786242][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 699.321949][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322008][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322058][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322138][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322188][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322237][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322285][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322342][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 699.322477][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 700.366654][ T5604] Bluetooth: hci1: command tx timeout [ 700.746618][T10567] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 700.746675][T10567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 700.747033][T10567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 702.459061][ T5604] Bluetooth: hci1: command tx timeout [ 704.404378][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.404506][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.404759][T10467] bridge_slave_0: entered allmulticast mode [ 704.446006][T10467] bridge_slave_0: entered promiscuous mode [ 704.499992][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.500080][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.500273][T10467] bridge_slave_1: entered allmulticast mode [ 704.518686][T10467] bridge_slave_1: entered promiscuous mode [ 704.529170][ T5604] Bluetooth: hci1: command tx timeout [ 705.445146][T10467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.658792][T10467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.289901][T10467] team0: Port device team_slave_0 added [ 707.453704][T10467] team0: Port device team_slave_1 added [ 709.205706][T10467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.205724][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.205749][T10467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.310635][T10467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.310656][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.310689][T10467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.784767][T10363] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 710.031315][T10363] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 710.031352][T10363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.800515][T10363] mvusb_mdio 4-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 710.900381][ T9843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.138457][T10646] __nla_validate_parse: 48 callbacks suppressed [ 712.138481][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138535][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138642][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138709][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138837][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138889][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138939][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.138988][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.139038][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.139087][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 712.274922][T10207] usb 4-1: USB disconnect, device number 2 [ 712.275209][T10467] hsr_slave_0: entered promiscuous mode [ 712.285045][T10467] hsr_slave_1: entered promiscuous mode [ 715.231625][ T9843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.553255][T10676] vlan2: entered promiscuous mode [ 715.553287][T10676] bond_slave_1: entered promiscuous mode [ 717.984110][ T5604] Bluetooth: hci3: command tx timeout [ 718.162653][ T9843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.370361][ T9843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.814147][ T37] audit: type=1800 audit(1785850100.322:67): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.979" name="local" dev="configfs" ino=33247 res=0 errno=0 [ 725.049216][T10467] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.312313][T10739] __nla_validate_parse: 43 callbacks suppressed [ 727.312337][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312386][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312426][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312465][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312513][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312553][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312593][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312650][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312689][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.312728][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.982'. [ 727.324161][T10736] syzkaller1: entered promiscuous mode [ 727.324224][T10736] syzkaller1: entered allmulticast mode [ 727.614932][ T37] audit: type=1800 audit(1785850106.132:68): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.987" name="idVendor" dev="configfs" ino=32708 res=0 errno=0 [ 727.621930][ T37] audit: type=1800 audit(1785850106.132:69): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.987" name="idProduct" dev="configfs" ino=32709 res=0 errno=0 [ 727.835416][ T37] audit: type=1800 audit(1785850106.332:70): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.987" name="UDC" dev="configfs" ino=33312 res=0 errno=0 [ 727.840819][T10776] Config c/1 of g1 needs at least one function. [ 727.841565][T10776] udc dummy_udc.0: failed to start g1: -22 [ 727.841594][T10776] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 728.431416][T10776] UDC core: g1: couldn't find an available UDC or it's busy [ 729.342241][T10467] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.264482][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.264639][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.264847][T10549] bridge_slave_0: entered allmulticast mode [ 732.267304][T10549] bridge_slave_0: entered promiscuous mode [ 733.221944][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.289894][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.312664][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.325743][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.332187][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.839381][T10467] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.898977][T10549] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.899139][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.899401][T10549] bridge_slave_1: entered allmulticast mode [ 734.915316][T10549] bridge_slave_1: entered promiscuous mode [ 735.223120][T10851] __nla_validate_parse: 43 callbacks suppressed [ 735.223145][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223200][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223251][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223302][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223352][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223401][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223451][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223500][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223550][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.223600][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 735.460790][T10852] syzkaller1: entered promiscuous mode [ 735.460819][T10852] syzkaller1: entered allmulticast mode [ 735.484166][ T5599] Bluetooth: hci2: command tx timeout [ 735.525157][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.460613][T10467] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.485518][ T37] audit: type=1800 audit(1785850116.002:71): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1000" name="local" dev="configfs" ino=33901 res=0 errno=0 [ 737.564242][T10877] Bluetooth: hci2: command tx timeout [ 737.579122][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.667746][T10883] dlm: Using TCP for communications [ 737.667770][T10883] dlm: Detect multi-homed hosts but use only the first IP address. [ 737.667828][T10883] dlm: Try SCTP, if you want to enable multi-link. [ 737.713316][T10887] net_ratelimit: 10 callbacks suppressed [ 737.713339][T10887] openvswitch: netlink: Actions may not be safe on all matching packets [ 737.908212][T10883] dlm: foo: joining the lockspace group... [ 739.320166][T10549] team0: Port device team_slave_0 added [ 739.453397][T10877] Bluetooth: hci0: command 0x0406 tx timeout [ 739.453432][T10877] Bluetooth: hci4: command 0x0406 tx timeout [ 739.485488][T10882] dlm: dlm user daemon left 1 lockspaces [ 739.644241][T10877] Bluetooth: hci2: command tx timeout [ 740.785051][T10549] team0: Port device team_slave_1 added [ 741.174434][ T9843] bridge_slave_1: left allmulticast mode [ 741.174464][ T9843] bridge_slave_1: left promiscuous mode [ 741.174679][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.385935][ T9843] bridge_slave_0: left allmulticast mode [ 741.385976][ T9843] bridge_slave_0: left promiscuous mode [ 741.386279][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.584325][T10363] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 741.734315][ T5604] Bluetooth: hci2: command tx timeout [ 741.761092][T10363] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 741.761129][T10363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.761154][T10363] usb 4-1: Product: syz [ 741.761173][T10363] usb 4-1: Manufacturer: syz [ 741.761192][T10363] usb 4-1: SerialNumber: syz [ 741.826448][ T9843] bridge_slave_1: left allmulticast mode [ 741.826487][ T9843] bridge_slave_1: left promiscuous mode [ 741.826741][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.244904][ T9843] bridge_slave_0: left allmulticast mode [ 742.244942][ T9843] bridge_slave_0: left promiscuous mode [ 742.245180][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.490637][ T5880] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 742.910548][T10921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 744.044735][ T5880] usb 4-1: Service connection timeout for: 256 [ 744.044756][ T5880] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 744.226947][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.284826][ T5880] ath9k_htc: Failed to initialize the device [ 744.311489][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.332530][ T5880] usb 4-1: ath9k_htc: USB layer deinitialized [ 744.383848][ T9843] bond0 (unregistering): Released all slaves [ 744.493325][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 745.337777][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.396678][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.459782][ T9843] bond0 (unregistering): Released all slaves [ 746.216046][T10923] mac80211_hwsim hwsim16 wlan99: renamed from wlan0 (while UP) [ 746.528065][ T37] audit: type=1800 audit(1785850125.042:72): pid=10936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1007" name="addr_trtype" dev="configfs" ino=33496 res=0 errno=0 [ 746.530626][ T37] audit: type=1800 audit(1785850125.042:73): pid=10935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1007" name="attr_allow_any_host" dev="configfs" ino=33497 res=0 errno=0 [ 746.637277][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.637292][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.637316][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.703389][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.703557][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.703591][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.154558][T10549] hsr_slave_0: entered promiscuous mode [ 747.156762][T10549] hsr_slave_1: entered promiscuous mode [ 747.159395][T10549] debugfs: 'hsr0' already exists in 'hsr' [ 747.159425][T10549] Cannot create hsr debugfs directory [ 747.414270][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.511753][ T9775] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:78e84c03-4cf9-4e0e-a9a8-77c77c5c6be2 for subsystem testnqn not allowed [ 747.532339][T10934] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:78e84c03-4cf9-4e0e-a9a8-77c77c5c6be2 [ 747.841828][ T5727] usb 4-1: USB disconnect, device number 3 [ 749.636314][ T5727] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 749.896586][ T5727] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 749.896620][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.860807][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 753.928269][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 753.931288][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 753.932845][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 753.936382][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 754.313768][ T5727] usb 4-1: USB disconnect, device number 4 [ 755.380035][ T37] audit: type=1800 audit(1785850133.872:74): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1015" name="local" dev="configfs" ino=33659 res=0 errno=0 [ 755.662801][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 755.711611][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 755.726345][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 755.733806][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 755.744105][ T5727] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 755.754286][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 755.948094][ T5727] usb 4-1: not running at top speed; connect to a high speed hub [ 756.119356][ T5727] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 756.119392][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.119414][ T5727] usb 4-1: Product: syz [ 756.205739][ T9991] Bluetooth: hci5: command tx timeout [ 756.293579][ T5727] usb 4-1: can't set config #1, error -71 [ 756.352851][T11037] openvswitch: netlink: Actions may not be safe on all matching packets [ 756.417839][ T5727] usb 4-1: USB disconnect, device number 5 [ 757.905739][T11048] lo speed is unknown, defaulting to 1000 [ 758.044167][ T9991] Bluetooth: hci6: command tx timeout [ 758.063486][T11048] lo speed is unknown, defaulting to 1000 [ 758.217093][T11048] lo speed is unknown, defaulting to 1000 [ 758.249699][T11048] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 758.249743][T11048] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 758.249797][T11048] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 758.284094][ T9991] Bluetooth: hci5: command tx timeout [ 758.470352][T11048] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 758.644120][ T9843] hsr_slave_0: left promiscuous mode [ 758.860007][ T9843] hsr_slave_1: left promiscuous mode [ 758.861379][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.861407][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.967027][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.967059][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.227582][ T9843] hsr_slave_0: left promiscuous mode [ 759.293250][ T9843] hsr_slave_1: left promiscuous mode [ 759.305888][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.305920][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.368535][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.368566][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.829565][ T9843] veth1_macvtap: left promiscuous mode [ 759.829712][ T9843] veth0_macvtap: left promiscuous mode [ 759.830001][ T9843] veth1_vlan: left promiscuous mode [ 759.830210][ T9843] veth0_vlan: left promiscuous mode [ 759.947286][ T5879] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 760.084425][ T9843] veth1_macvtap: left promiscuous mode [ 760.084536][ T9843] veth0_macvtap: left promiscuous mode [ 760.172887][ T9843] veth1_vlan: left promiscuous mode [ 760.173095][ T9843] veth0_vlan: left promiscuous mode [ 760.179619][ T9991] Bluetooth: hci6: command tx timeout [ 760.234507][ T5879] usb 4-1: New USB device found, idVendor=10b8, idProduct=0bc7, bcdDevice= 1.00 [ 760.234543][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.234567][ T5879] usb 4-1: Product: syz [ 760.234583][ T5879] usb 4-1: Manufacturer: syz [ 760.234600][ T5879] usb 4-1: SerialNumber: syz [ 760.250631][ T5879] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in warm state. [ 760.364197][ T9991] Bluetooth: hci5: command tx timeout [ 760.726505][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 760.727608][ T5879] dvbdev: DVB: registering new adapter (DiBcom USB2.0 DVB-T reference design (MOD3000P)) [ 760.727675][ T5879] usb 4-1: media controller created [ 760.813586][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.925863][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 761.996024][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 762.204129][ T9991] Bluetooth: hci6: command tx timeout [ 762.444217][ T9991] Bluetooth: hci5: command tx timeout [ 762.949556][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 763.007500][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 763.030382][ T5879] dvb-usb: bulk message failed: -71 (6/0) [ 763.100319][ T5879] usb 4-1: DVB: registering adapter 1 frontend 0 (DiBcom 3000MC/P)... [ 763.101450][ T5879] dvbdev: dvb_create_media_entity: media entity 'DiBcom 3000MC/P' registered. [ 763.176248][ T5879] dvb-usb: bulk message failed: -71 (5/0) [ 763.240935][ T5879] DVB: Unable to find symbol mt2060_attach() [ 763.298854][ T5879] DVB: Unable to find symbol dvb_pll_attach() [ 763.396929][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 763.401123][T11001] lo speed is unknown, defaulting to 1000 [ 763.712351][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 763.712380][ T5879] dvb-usb: DiBcom USB2.0 DVB-T reference design (MOD3000P) successfully initialized and connected. [ 763.754315][ T5879] usb 4-1: USB disconnect, device number 6 [ 763.877500][ T5880] dvb-usb: bulk message failed: -19 (1/0) [ 763.877545][ T5880] dvb-usb: error while querying for an remote control event. [ 763.880569][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.880801][T10844] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.881076][T10844] bridge_slave_0: entered allmulticast mode [ 763.921175][T10844] bridge_slave_0: entered promiscuous mode [ 763.979210][T11048] lo speed is unknown, defaulting to 1000 [ 763.988013][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.988274][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.988967][T10844] bridge_slave_1: entered allmulticast mode [ 764.038661][T10844] bridge_slave_1: entered promiscuous mode [ 764.317147][ T9991] Bluetooth: hci6: command tx timeout [ 764.436968][T11048] lo speed is unknown, defaulting to 1000 [ 764.639112][T11118] vlan2: entered promiscuous mode [ 764.639131][T11118] bond_slave_1: entered promiscuous mode [ 764.733590][T11048] lo speed is unknown, defaulting to 1000 [ 764.805640][T11125] openvswitch: netlink: Actions may not be safe on all matching packets [ 764.819171][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.031308][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.055922][T11048] lo speed is unknown, defaulting to 1000 [ 765.195224][T11024] lo speed is unknown, defaulting to 1000 [ 765.479956][T11048] lo speed is unknown, defaulting to 1000 [ 765.524741][T10844] team0: Port device team_slave_0 added [ 765.634294][T11048] lo speed is unknown, defaulting to 1000 [ 765.639223][T10844] team0: Port device team_slave_1 added [ 766.079959][ T5879] dvb-usb: DiBcom USB2.0 DVB-T reference design (M successfully deinitialized and disconnected. [ 766.116745][T11048] lo speed is unknown, defaulting to 1000 [ 766.176382][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.176397][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.176421][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.349756][T10844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.349775][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.349805][T10844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.072788][T10844] hsr_slave_0: entered promiscuous mode [ 767.079078][T10844] hsr_slave_1: entered promiscuous mode [ 767.100672][T10844] debugfs: 'hsr0' already exists in 'hsr' [ 767.100701][T10844] Cannot create hsr debugfs directory [ 767.927993][T11158] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 768.274453][ T37] audit: type=1800 audit(1785850146.792:75): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1031" name="local" dev="configfs" ino=34884 res=0 errno=0 [ 768.320150][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 768.686135][T11175] openvswitch: netlink: Actions may not be safe on all matching packets [ 768.949539][T11181] lo speed is unknown, defaulting to 1000 [ 769.096439][T11181] lo speed is unknown, defaulting to 1000 [ 769.201996][T11180] rdma_rxe: rxe_newlink: failed to add lo [ 769.215858][T11181] lo speed is unknown, defaulting to 1000 [ 769.256909][T11001] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.257074][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.257308][T11001] bridge_slave_0: entered allmulticast mode [ 769.287213][T11001] bridge_slave_0: entered promiscuous mode [ 769.292852][T11181] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 769.292901][T11181] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 769.292945][T11181] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 769.393127][T11001] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.393886][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.413430][T11001] bridge_slave_1: entered allmulticast mode [ 769.430871][T11001] bridge_slave_1: entered promiscuous mode [ 769.467630][T11181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 769.761145][T11181] lo speed is unknown, defaulting to 1000 [ 769.815272][T11001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.830147][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.830641][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.853001][T11024] bridge_slave_0: entered allmulticast mode [ 769.860856][T11024] bridge_slave_0: entered promiscuous mode [ 769.899021][T11181] lo speed is unknown, defaulting to 1000 [ 769.917074][T11001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.919902][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.920044][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.920306][T11024] bridge_slave_1: entered allmulticast mode [ 769.922766][T11024] bridge_slave_1: entered promiscuous mode [ 769.972377][T11181] lo speed is unknown, defaulting to 1000 [ 770.128925][T11181] lo speed is unknown, defaulting to 1000 [ 770.405251][T11181] lo speed is unknown, defaulting to 1000 [ 770.464950][T11001] team0: Port device team_slave_0 added [ 770.487506][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.488346][T11181] lo speed is unknown, defaulting to 1000 [ 770.534681][T11001] team0: Port device team_slave_1 added [ 770.614569][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.946607][T11181] lo speed is unknown, defaulting to 1000 [ 772.434499][ T9775] bridge_slave_1: left allmulticast mode [ 772.434541][ T9775] bridge_slave_1: left promiscuous mode [ 772.434819][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.596188][ T9775] bridge_slave_0: left allmulticast mode [ 772.596228][ T9775] bridge_slave_0: left promiscuous mode [ 772.596518][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.218927][ T9775] bridge_slave_1: left allmulticast mode [ 774.218968][ T9775] bridge_slave_1: left promiscuous mode [ 774.219229][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.375591][ T9775] bridge_slave_0: left allmulticast mode [ 774.375621][ T9775] bridge_slave_0: left promiscuous mode [ 774.375850][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.859164][ T9775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.976015][ T9775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.063127][ T9775] bond0 (unregistering): Released all slaves [ 775.480996][ T9775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.595724][ T9775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.700796][ T9775] bond0 (unregistering): Released all slaves [ 776.024410][T11181] lo speed is unknown, defaulting to 1000 [ 776.051529][T11001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.051564][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.051609][T11001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.249315][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 776.271499][T10844] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 776.343160][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.353112][T11024] team0: Port device team_slave_0 added [ 776.362687][T11181] lo speed is unknown, defaulting to 1000 [ 776.385873][T11001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.385890][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.385914][T11001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.390944][T10844] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 776.725330][ T37] audit: type=1800 audit(1785850155.242:76): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1040" name="local" dev="configfs" ino=34412 res=0 errno=0 [ 776.729104][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.733309][T11024] team0: Port device team_slave_1 added [ 776.845294][T10844] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 776.967709][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.990369][T11222] openvswitch: netlink: Actions may not be safe on all matching packets [ 777.035112][T10844] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 777.113515][ T37] audit: type=1800 audit(1785850155.622:77): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1042" name="idVendor" dev="configfs" ino=34430 res=0 errno=0 [ 777.146917][ T37] audit: type=1800 audit(1785850155.662:78): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1042" name="idProduct" dev="configfs" ino=34431 res=0 errno=0 [ 777.211699][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.223560][ T37] audit: type=1800 audit(1785850155.732:79): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1042" name="process_ump" dev="configfs" ino=35126 res=0 errno=0 [ 777.357877][ T37] audit: type=1800 audit(1785850155.872:80): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1042" name="UDC" dev="configfs" ino=34437 res=0 errno=0 [ 777.587437][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.587456][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.587486][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.643575][ T37] audit: type=1800 audit(1785850156.152:81): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1042" name="active" dev="configfs" ino=35132 res=0 errno=0 [ 777.759254][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.759271][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.759295][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.965308][T11001] hsr_slave_0: entered promiscuous mode [ 777.966488][T11001] hsr_slave_1: entered promiscuous mode [ 777.967249][T11001] debugfs: 'hsr0' already exists in 'hsr' [ 777.967268][T11001] Cannot create hsr debugfs directory [ 778.176532][ T9775] hsr_slave_0: left promiscuous mode [ 778.196384][ T9775] hsr_slave_1: left promiscuous mode [ 778.200657][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.271812][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.434784][ T9775] hsr_slave_0: left promiscuous mode [ 778.474399][ T9775] hsr_slave_1: left promiscuous mode [ 778.476294][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.515983][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.674094][T10632] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 778.855378][T10632] usb 1-1: Dual-Role OTG device on HNP port [ 778.855833][T10632] usb 1-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 7.02 [ 778.855863][T10632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.541829][T10632] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.542381][T10632] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 780.605237][T10632] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.373822][ T9775] team0 (unregistering): Port device team_slave_1 removed [ 781.485917][ T9775] team0 (unregistering): Port device team_slave_0 removed [ 782.240437][T11253] openvswitch: netlink: Actions may not be safe on all matching packets [ 782.866905][ T9775] team0 (unregistering): Port device team_slave_1 removed [ 782.924787][ T9775] team0 (unregistering): Port device team_slave_0 removed [ 783.560260][ T37] audit: type=1800 audit(1785850162.072:82): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1051" name="local" dev="configfs" ino=34495 res=0 errno=0 [ 783.932148][T11024] hsr_slave_0: entered promiscuous mode [ 783.933689][T11024] hsr_slave_1: entered promiscuous mode [ 785.052786][T11269] PM: suspend entry (deep) [ 785.933794][ T9740] Filesystems sync: 0.879 seconds [ 786.132678][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 786.158842][T11269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 786.158997][T11269] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 786.262153][ T9991] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 786.262624][ T9991] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 786.300732][T11269] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 786.441523][T11269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 786.441975][T11269] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 786.565564][T11269] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 786.644644][T11269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 786.644781][T11269] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 786.857094][T11269] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 787.276967][T11269] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 787.277058][T11269] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 787.383436][T11293] siw: device registration error -23 [ 787.452914][T11269] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 787.859191][T11269] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 787.859267][T11269] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 788.046454][T11269] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 788.206407][ T9991] Bluetooth: hci4: command 0x0406 tx timeout [ 788.287236][T11269] Freezing user space processes [ 788.444138][ T9991] Bluetooth: hci3: command 0x0406 tx timeout [ 788.684102][ T9991] Bluetooth: hci2: command 0x0c1a tx timeout [ 789.324151][ T9991] Bluetooth: hci5: command 0x0c1a tx timeout [ 789.714510][ T9775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.884219][ T9991] Bluetooth: hci6: command 0x0c1a tx timeout [ 790.326508][ T9991] Bluetooth: hci4: command 0x0406 tx timeout [ 790.348676][ T9775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.524292][ T9991] Bluetooth: hci3: command 0x0406 tx timeout [ 790.771956][ T9775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.774176][ T9991] Bluetooth: hci2: command 0x0c1a tx timeout [ 791.160938][ T9775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.407599][ T9991] Bluetooth: hci5: command 0x0c1a tx timeout [ 791.695979][ T9775] bond1: left allmulticast mode [ 791.696079][ T9775] bond1: left promiscuous mode [ 791.696334][ T9775] bridge0: port 3(bond1) entered disabled state [ 791.806181][ T9775] bridge_slave_1: left allmulticast mode [ 791.806221][ T9775] bridge_slave_1: left promiscuous mode [ 791.806508][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.915409][ T9775] bridge_slave_0: left allmulticast mode [ 791.915438][ T9775] bridge_slave_0: left promiscuous mode [ 791.915666][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.964233][ T9991] Bluetooth: hci6: command 0x0c1a tx timeout [ 792.364116][ T9991] Bluetooth: hci4: command 0x0406 tx timeout [ 792.604283][ T9991] Bluetooth: hci3: command 0x0406 tx timeout [ 792.777255][ T9775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.846021][ T9991] Bluetooth: hci2: command 0x0c1a tx timeout [ 792.862852][ T9775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.928437][ T9775] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 792.969168][ T9775] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 792.969558][ T9775] bond0 (unregistering): Released all slaves [ 792.999923][ T9775] bond1 (unregistering): Released all slaves [ 793.497699][ T9991] Bluetooth: hci5: command 0x0c1a tx timeout [ 794.044304][ T5604] Bluetooth: hci6: command 0x0c1a tx timeout [ 794.355791][ T9775] hsr_slave_0: left promiscuous mode [ 794.374121][ T9775] hsr_slave_1: left promiscuous mode [ 794.374934][ T9775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.374986][ T9775] batadv0: mtu less than device minimum [ 794.419372][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.443124][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.466415][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.472672][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.500473][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.519023][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.536681][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.542964][ T9775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 794.653633][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.669931][ T9775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.830926][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.851493][ T9775] batman_adv: batadv0: Interface deactivated: dummy0 [ 794.851529][ T9775] batman_adv: batadv0: Removing interface: dummy0 [ 794.917361][ T9775] veth1_macvtap: left promiscuous mode [ 794.917455][ T9775] veth0_macvtap: left promiscuous mode [ 794.917736][ T9775] veth1_vlan: left promiscuous mode [ 794.917884][ T9775] veth0_vlan: left promiscuous mode [ 795.891236][ T9736] smbdirect: ib_dev[syz2] removed [ 796.127236][ T9775] team0 (unregistering): Port device team_slave_1 removed [ 796.187959][ T9775] team0 (unregistering): Port device team_slave_0 removed [ 796.506281][ T5727] infiniband syz2: ib_query_port failed (-19) [ 808.297678][T11269] Freezing user space processes failed after 20.010 seconds (2 tasks refusing to freeze, wq_busy=0): [ 808.297854][T11269] task:syz-executor state:S stack:22416 pid:9988 tgid:9988 ppid:1 task_flags:0x40054c flags:0x00080001 [ 808.297908][T11269] Call Trace: [ 808.297914][T11269] [ 808.297927][T11269] __schedule+0x16dc/0x5500 [ 808.298063][T11269] ? __pfx___schedule+0x10/0x10 [ 808.298093][T11269] ? schedule+0x90/0x2b0 [ 808.298118][T11269] schedule+0x164/0x2b0 [ 808.298148][T11269] do_wait+0x283/0x510 [ 808.298204][T11269] ? do_wait+0x17d/0x510 [ 808.298225][T11269] kernel_wait4+0x232/0x2b0 [ 808.298242][T11269] ? lockdep_hardirqs_on+0x7a/0x110 [ 808.298268][T11269] ? __pfx_kernel_wait4+0x10/0x10 [ 808.298290][T11269] ? __pfx_child_wait_callback+0x10/0x10 [ 808.298321][T11269] zap_pid_ns_processes+0x382/0x5f0 [ 808.298361][T11269] ? zap_pid_ns_processes+0x129/0x5f0 [ 808.298383][T11269] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 808.298401][T11269] ? rt_write_unlock+0x19c/0x360 [ 808.298426][T11269] ? rt_write_unlock+0x1a8/0x360 [ 808.298448][T11269] do_exit+0x1fd8/0x2360 [ 808.298463][T11269] ? lockdep_hardirqs_on+0x7a/0x110 [ 808.298487][T11269] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 808.298517][T11269] ? __pfx_do_exit+0x10/0x10 [ 808.298561][T11269] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 808.298580][T11269] ? rt_spin_lock+0x1e0/0x400 [ 808.298604][T11269] ? rt_spin_unlock+0x157/0x200 [ 808.298625][T11269] do_group_exit+0x22d/0x2f0 [ 808.298644][T11269] ? rt_spin_unlock+0x163/0x200 [ 808.298665][T11269] get_signal+0x121b/0x12c0 [ 808.298740][T11269] arch_do_signal_or_restart+0xbb/0x860 [ 808.298768][T11269] ? __pfx___x64_sys_wait4+0x10/0x10 [ 808.298788][T11269] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 808.298830][T11269] exit_to_user_mode_loop+0x104/0x730 [ 808.298867][T11269] ? rcu_is_watching+0x15/0xb0 [ 808.298892][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.298912][T11269] do_syscall_64+0x353/0x580 [ 808.298937][T11269] ? trace_irq_disable+0x3b/0x140 [ 808.298956][T11269] ? clear_bhb_loop+0x40/0x90 [ 808.298977][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.298995][T11269] RIP: 0033:0x7f997819e84e [ 808.299011][T11269] RSP: 002b:00007ffe7ecc1338 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 808.299030][T11269] RAX: fffffffffffffe00 RBX: 0000555555701500 RCX: 00007f997819e84e [ 808.299044][T11269] RDX: 0000000040000000 RSI: 00007ffe7ecc13dc RDI: ffffffffffffffff [ 808.299057][T11269] RBP: 00007ffe7ecc13dc R08: 0000000000000000 R09: 0000000000000000 [ 808.299068][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 808.299080][T11269] R13: 0000555555714a00 R14: 00000000000b4756 R15: 00007ffe7ecc1430 [ 808.299107][T11269] [ 808.299144][T11269] task:syz.8.1000 state:D stack:25912 pid:10883 tgid:10882 ppid:9988 task_flags:0x400140 flags:0x00080002 [ 808.299197][T11269] Call Trace: [ 808.299203][T11269] [ 808.299213][T11269] __schedule+0x16dc/0x5500 [ 808.299241][T11269] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 808.299269][T11269] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 808.299294][T11269] ? rt_spin_lock+0x1e0/0x400 [ 808.299315][T11269] ? __pfx___schedule+0x10/0x10 [ 808.299346][T11269] ? schedule+0x90/0x2b0 [ 808.299370][T11269] schedule+0x164/0x2b0 [ 808.299394][T11269] do_uevent+0x2c3/0x570 [ 808.299448][T11269] ? __pfx_do_uevent+0x10/0x10 [ 808.299468][T11269] ? kfree+0x1c5/0x6c0 [ 808.299526][T11269] ? lockdep_hardirqs_on+0x7a/0x110 [ 808.299554][T11269] ? kobject_uevent_env+0x378/0x9e0 [ 808.299574][T11269] ? __pfx_autoremove_wake_function+0x10/0x10 [ 808.299642][T11269] ? kobject_uevent_env+0x378/0x9e0 [ 808.299669][T11269] __dlm_new_lockspace+0x1aa4/0x2060 [ 808.299691][T11269] ? __dlm_new_lockspace+0x273/0x2060 [ 808.299717][T11269] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 808.299739][T11269] ? rcu_is_watching+0x15/0xb0 [ 808.299762][T11269] ? cap_capable+0x123/0x460 [ 808.299805][T11269] ? safesetid_security_capable+0xa9/0x1a0 [ 808.299849][T11269] ? bpf_lsm_capable+0x9/0x20 [ 808.299901][T11269] ? security_capable+0x7e/0x2c0 [ 808.299946][T11269] ? dlm_new_user_lockspace+0x3e/0x80 [ 808.299970][T11269] device_create_lockspace+0xc7/0x350 [ 808.300015][T11269] ? __pfx_device_create_lockspace+0x10/0x10 [ 808.300044][T11269] ? _copy_from_user+0x94/0xb0 [ 808.300107][T11269] device_write+0x875/0xed0 [ 808.300137][T11269] ? __pfx_device_write+0x10/0x10 [ 808.300159][T11269] vfs_write+0x29f/0xbb0 [ 808.300208][T11269] ? __pfx_vfs_write+0x10/0x10 [ 808.300233][T11269] ? __fget_files+0x2a/0x420 [ 808.300272][T11269] ? __fget_files+0x2a/0x420 [ 808.300290][T11269] ? __fget_files+0x3a8/0x420 [ 808.300308][T11269] ? __fget_files+0x2a/0x420 [ 808.300334][T11269] ksys_write+0x156/0x270 [ 808.300360][T11269] ? __pfx_ksys_write+0x10/0x10 [ 808.300391][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.300411][T11269] do_syscall_64+0x174/0x580 [ 808.300434][T11269] ? trace_irq_disable+0x3b/0x140 [ 808.300452][T11269] ? clear_bhb_loop+0x40/0x90 [ 808.300474][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.300492][T11269] RIP: 0033:0x7f99781de019 [ 808.300506][T11269] RSP: 002b:00007f9976436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.300523][T11269] RAX: ffffffffffffffda RBX: 00007f9978465fa0 RCX: 00007f99781de019 [ 808.300536][T11269] RDX: 0000000000000080 RSI: 0000200000000d00 RDI: 0000000000000004 [ 808.300547][T11269] RBP: 00007f997827500c R08: 0000000000000000 R09: 0000000000000000 [ 808.300559][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.300569][T11269] R13: 00007f9978466038 R14: 00007f9978465fa0 R15: 00007ffe7ecc1038 [ 808.300598][T11269] [ 808.302226][T11269] OOM killer enabled. [ 808.302239][T11269] Restarting tasks: Starting [ 808.512124][T11269] Restarting tasks: Done [ 808.512391][T11269] random: crng reseeded on system resumption [ 808.849348][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.174110][T11269] PM: suspend exit [ 810.079900][ T9991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.172968][ T9991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.188635][ T9991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.213797][ T9991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.223281][ T9991] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 810.620946][ T5604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 810.729787][ T5604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 810.760854][ T5604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 810.789574][ T5604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 810.832715][ T5604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 810.886242][ T5598] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 810.954035][ T5598] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 810.986421][ T5598] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 810.989425][ T5598] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 810.995840][ T5598] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 812.318044][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 812.444060][T10877] Bluetooth: hci1: command tx timeout [ 813.095505][T11024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 813.186209][T11024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.204093][T11024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 813.364843][T11024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.369406][T11024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 813.461506][T11024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.566410][T10877] Bluetooth: hci7: command tx timeout [ 813.586360][ T9991] Bluetooth: hci8: command tx timeout [ 813.792139][T10877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.872509][T11024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 813.894943][T10877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.945596][T10877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.966718][T10877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 814.009541][T10877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 814.207933][T11024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.524089][ T9991] Bluetooth: hci1: command tx timeout [ 814.697157][T11316] lo speed is unknown, defaulting to 1000 [ 815.012355][T11316] lo speed is unknown, defaulting to 1000 [ 815.013634][T11310] lo speed is unknown, defaulting to 1000 [ 815.059121][T11310] lo speed is unknown, defaulting to 1000 [ 815.059179][T11314] lo speed is unknown, defaulting to 1000 [ 815.200102][T11314] lo speed is unknown, defaulting to 1000 [ 815.509355][T11348] lo speed is unknown, defaulting to 1000 [ 815.569575][T11348] lo speed is unknown, defaulting to 1000 [ 815.646569][ T9991] Bluetooth: hci8: command tx timeout [ 815.654393][ T9991] Bluetooth: hci7: command tx timeout [ 816.204184][ T9991] Bluetooth: hci0: command tx timeout [ 816.606734][ T9991] Bluetooth: hci1: command tx timeout [ 816.771128][T10877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.823065][T10877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.831901][T10877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.833096][T10877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.874787][T10877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.664275][ T9832] bridge_slave_1: left allmulticast mode [ 817.664309][ T9832] bridge_slave_1: left promiscuous mode [ 817.664542][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.724126][ T9991] Bluetooth: hci7: command tx timeout [ 817.724171][ T9991] Bluetooth: hci8: command tx timeout [ 817.785312][ T9832] bridge_slave_0: left allmulticast mode [ 817.785344][ T9832] bridge_slave_0: left promiscuous mode [ 817.785627][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.294219][T10877] Bluetooth: hci0: command tx timeout [ 818.526042][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.606730][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.676260][ T9832] bond0 (unregistering): Released all slaves [ 818.686981][T10877] Bluetooth: hci1: command tx timeout [ 819.103195][T10877] Bluetooth: hci2: command tx timeout [ 819.143744][T11370] lo speed is unknown, defaulting to 1000 [ 819.173483][T11370] lo speed is unknown, defaulting to 1000 [ 819.414181][ T9832] hsr_slave_0: left promiscuous mode [ 819.454148][ T9832] hsr_slave_1: left promiscuous mode [ 819.455060][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.485793][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.804157][ T9991] Bluetooth: hci7: command tx timeout [ 819.804211][T10877] Bluetooth: hci8: command tx timeout [ 819.955013][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 820.005816][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 820.364477][T10877] Bluetooth: hci0: command tx timeout [ 820.889349][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.889567][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.889789][T11316] bridge_slave_0: entered allmulticast mode [ 820.892335][T11316] bridge_slave_0: entered promiscuous mode [ 820.985525][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.985652][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.985886][T11310] bridge_slave_0: entered allmulticast mode [ 820.988098][T11310] bridge_slave_0: entered promiscuous mode [ 821.076318][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.076494][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.076716][T11316] bridge_slave_1: entered allmulticast mode [ 821.078824][T11316] bridge_slave_1: entered promiscuous mode [ 821.119211][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.119324][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.119497][T11310] bridge_slave_1: entered allmulticast mode [ 821.121360][T11310] bridge_slave_1: entered promiscuous mode [ 821.174053][T10877] Bluetooth: hci2: command tx timeout [ 821.265694][T11314] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.265820][T11314] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.266021][T11314] bridge_slave_0: entered allmulticast mode [ 821.268211][T11314] bridge_slave_0: entered promiscuous mode [ 821.342730][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.342902][T11314] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.343111][T11314] bridge_slave_1: entered allmulticast mode [ 821.366523][T11314] bridge_slave_1: entered promiscuous mode [ 821.388438][T11316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.546328][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.636462][T11316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.637175][T11348] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.637277][T11348] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.637432][T11348] bridge_slave_0: entered allmulticast mode [ 821.639382][T11348] bridge_slave_0: entered promiscuous mode [ 821.682639][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.743182][T11348] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.743307][T11348] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.743511][T11348] bridge_slave_1: entered allmulticast mode [ 821.760421][T11348] bridge_slave_1: entered promiscuous mode [ 821.800028][T11314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.016220][T11314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.019548][T11316] team0: Port device team_slave_0 added [ 822.080243][T11310] team0: Port device team_slave_0 added [ 822.124740][T11316] team0: Port device team_slave_1 added [ 822.142661][T11348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.188031][T11310] team0: Port device team_slave_1 added [ 822.228124][T11348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.268556][T11314] team0: Port device team_slave_0 added [ 822.359991][T11314] team0: Port device team_slave_1 added [ 822.362361][T11316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.362379][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.362421][T11316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.453468][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.453482][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.453504][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.454184][T10877] Bluetooth: hci0: command tx timeout [ 822.459935][T11316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.460008][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.460086][T11316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.557826][T11348] team0: Port device team_slave_0 added [ 822.880333][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.880348][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.880370][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.182530][T11348] team0: Port device team_slave_1 added [ 823.183309][T11314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.183322][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.183344][T11314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.244080][T10877] Bluetooth: hci2: command tx timeout [ 823.282867][T11314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.282886][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.282914][T11314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.388374][T11348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.388389][T11348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.388410][T11348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.483412][T11348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.483431][T11348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.483464][T11348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.745667][T11316] hsr_slave_0: entered promiscuous mode [ 823.746695][T11316] hsr_slave_1: entered promiscuous mode [ 823.747411][T11316] debugfs: 'hsr0' already exists in 'hsr' [ 823.747431][T11316] Cannot create hsr debugfs directory [ 823.865809][T11310] hsr_slave_0: entered promiscuous mode [ 823.866903][T11310] hsr_slave_1: entered promiscuous mode [ 823.867615][T11310] debugfs: 'hsr0' already exists in 'hsr' [ 823.867634][T11310] Cannot create hsr debugfs directory [ 823.971326][T11314] hsr_slave_0: entered promiscuous mode [ 823.972344][T11314] hsr_slave_1: entered promiscuous mode [ 823.973045][T11314] debugfs: 'hsr0' already exists in 'hsr' [ 823.973064][T11314] Cannot create hsr debugfs directory [ 824.301333][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.301571][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.301780][T11370] bridge_slave_0: entered allmulticast mode [ 824.303739][T11370] bridge_slave_0: entered promiscuous mode [ 824.391037][T11348] hsr_slave_0: entered promiscuous mode [ 824.392082][T11348] hsr_slave_1: entered promiscuous mode [ 824.392787][T11348] debugfs: 'hsr0' already exists in 'hsr' [ 824.392806][T11348] Cannot create hsr debugfs directory [ 824.393142][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.393288][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.393479][T11370] bridge_slave_1: entered allmulticast mode [ 824.403078][T11370] bridge_slave_1: entered promiscuous mode [ 824.800117][T11370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.869336][T11370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.180911][T11370] team0: Port device team_slave_0 added [ 825.232818][T11370] team0: Port device team_slave_1 added [ 825.334170][T10877] Bluetooth: hci2: command tx timeout [ 825.545962][T11370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.545981][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.546011][T11370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.641913][T11370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.641930][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.641965][T11370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.533594][T11370] hsr_slave_0: entered promiscuous mode [ 826.543054][T11370] hsr_slave_1: entered promiscuous mode [ 826.543791][T11370] debugfs: 'hsr0' already exists in 'hsr' [ 826.543811][T11370] Cannot create hsr debugfs directory [ 831.106326][ T9832] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.450304][ T9832] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.829509][ T9832] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.300027][ T9832] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.749862][ T9832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.387477][ T9832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.906247][ T9832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.381165][ T9832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.604912][ T9832] bridge_slave_1: left allmulticast mode [ 836.604941][ T9832] bridge_slave_1: left promiscuous mode [ 836.605136][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.775858][ T9832] bridge_slave_0: left allmulticast mode [ 836.775896][ T9832] bridge_slave_0: left promiscuous mode [ 836.776163][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.026192][ T9832] bridge_slave_1: left allmulticast mode [ 837.026233][ T9832] bridge_slave_1: left promiscuous mode [ 837.026492][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.225894][ T9832] bridge_slave_0: left allmulticast mode [ 837.225934][ T9832] bridge_slave_0: left promiscuous mode [ 837.226193][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.524566][ T9832] bridge_slave_1: left allmulticast mode [ 837.524606][ T9832] bridge_slave_1: left promiscuous mode [ 837.524858][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.685970][ T9832] bridge_slave_0: left allmulticast mode [ 837.686009][ T9832] bridge_slave_0: left promiscuous mode [ 837.686268][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.016617][ T9832] bridge_slave_1: left allmulticast mode [ 838.016654][ T9832] bridge_slave_1: left promiscuous mode [ 838.016907][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.185943][ T9832] bridge_slave_0: left allmulticast mode [ 838.185983][ T9832] bridge_slave_0: left promiscuous mode [ 838.186268][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.174919][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.275095][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.363228][ T9832] bond0 (unregistering): Released all slaves [ 839.815102][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.895094][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.956040][ T9832] bond0 (unregistering): Released all slaves [ 840.554809][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.614890][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.658145][ T9832] bond0 (unregistering): Released all slaves [ 841.284919][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.364859][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.388652][ T9832] bond0 (unregistering): Released all slaves [ 842.693672][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 843.692973][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 844.376768][T11316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 844.457648][T11316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.495927][T11316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 844.557763][T11316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.617145][T11316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 844.697661][T11316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.714244][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 844.723347][T11316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 844.769050][T11316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.404292][ T9832] hsr_slave_0: left promiscuous mode [ 845.445566][ T9832] hsr_slave_1: left promiscuous mode [ 845.446700][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.495141][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.695606][ T9832] hsr_slave_0: left promiscuous mode [ 845.734143][ T9832] hsr_slave_1: left promiscuous mode [ 845.734965][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.781140][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.974712][ T9832] hsr_slave_0: left promiscuous mode [ 846.015122][ T9832] hsr_slave_1: left promiscuous mode [ 846.015995][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.016016][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.037262][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.037340][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.215553][ T9832] hsr_slave_0: left promiscuous mode [ 846.235157][ T9832] hsr_slave_1: left promiscuous mode [ 846.236030][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.236051][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.288684][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.288715][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.370224][ T9832] veth1_macvtap: left promiscuous mode [ 846.370336][ T9832] veth0_macvtap: left promiscuous mode [ 846.370608][ T9832] veth1_vlan: left promiscuous mode [ 846.370803][ T9832] veth0_vlan: left promiscuous mode [ 846.484440][ T9832] veth1_macvtap: left promiscuous mode [ 846.484537][ T9832] veth0_macvtap: left promiscuous mode [ 846.484768][ T9832] veth1_vlan: left promiscuous mode [ 846.484896][ T9832] veth0_vlan: left promiscuous mode [ 847.215090][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 847.275451][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 847.775398][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 847.825128][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 848.514876][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 848.554580][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 848.904429][ T9773] smbdirect: ib_dev[syz0] removed [ 849.454830][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 849.494695][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 849.718212][T11310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 849.734421][ T56] smbdirect: ib_dev[syz1] removed [ 849.779519][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.827311][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 849.834084][ T5727] lo speed is unknown, defaulting to 1000 [ 849.834123][ T5727] infiniband syz1: ib_query_port failed (-19) [ 849.860048][T11310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.880237][T10207] lo speed is unknown, defaulting to 1000 [ 849.880267][T10207] infiniband syz0: ib_query_port failed (-19) [ 849.970905][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.993407][T11310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 850.058772][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.094061][T11310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 850.196037][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 851.197385][T11314] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 851.242388][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.364917][T11314] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 851.530796][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.663029][T11314] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 851.692971][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.757573][T11314] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 851.800767][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.381109][T11316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.667846][T11348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 852.721806][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.772689][T11348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 852.918838][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.999136][T11348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 853.083767][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.158441][T11316] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.161015][T11348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 853.223473][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.495039][ T5255] 8021q: adding VLAN 0 to HW filter on device eth17 [ 853.737953][ T9773] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.738429][ T9773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.923404][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.923624][ T9776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.054935][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.199220][T11370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 854.239010][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.296255][T11370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 854.435460][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.458160][T11370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 854.646483][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.667315][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.674148][T11370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 854.746714][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.847502][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.847738][ T9851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.923070][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.923283][ T9851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.141004][T11314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.555704][T11314] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.656801][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.656999][ T9851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.694845][T11348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.960163][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.960439][ T9851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.282111][T11348] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.427687][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.427828][ T9776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.567818][T11370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.573080][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.573217][ T9804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.890618][T11316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.902878][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.012744][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.012879][ T9740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.118308][ T5255] 8021q: adding VLAN 0 to HW filter on device eth18 [ 857.150010][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.151664][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.711312][T11316] veth0_vlan: entered promiscuous mode [ 857.916746][T11316] veth1_vlan: entered promiscuous mode [ 857.979792][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.197426][T11316] veth0_macvtap: entered promiscuous mode [ 858.265069][T11316] veth1_macvtap: entered promiscuous mode [ 858.354980][T11310] veth0_vlan: entered promiscuous mode [ 858.416254][T11316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.433705][T11310] veth1_vlan: entered promiscuous mode [ 858.457813][T11316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.002838][T11314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.038157][T11310] veth0_macvtap: entered promiscuous mode [ 859.323135][T11348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.343844][T11310] veth1_macvtap: entered promiscuous mode [ 859.381029][ T9851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.402520][ T9851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.435307][ T9740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.438491][ T9740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.745107][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.013102][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.297504][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.297528][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.338572][T11370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.904941][ T9740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.904961][ T9740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.680968][ T9773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.680992][ T9773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.100313][ T9804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.100333][ T9804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.211876][T11314] veth0_vlan: entered promiscuous mode [ 863.427150][T11348] veth0_vlan: entered promiscuous mode [ 863.441829][T11314] veth1_vlan: entered promiscuous mode [ 863.597234][T11370] veth0_vlan: entered promiscuous mode [ 863.660420][T11348] veth1_vlan: entered promiscuous mode [ 863.667306][ T37] audit: type=1800 audit(1785850242.172:83): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1063" name="idVendor" dev="configfs" ino=39583 res=0 errno=0 [ 863.697033][ T37] audit: type=1800 audit(1785850242.212:84): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1063" name="idProduct" dev="configfs" ino=39584 res=0 errno=0 [ 863.725377][ T37] audit: type=1800 audit(1785850242.212:85): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1063" name="UDC" dev="configfs" ino=39585 res=0 errno=0 [ 863.785613][T11370] veth1_vlan: entered promiscuous mode [ 863.847123][T11314] veth0_macvtap: entered promiscuous mode [ 863.879658][T11314] veth1_macvtap: entered promiscuous mode [ 863.985435][T11348] veth0_macvtap: entered promiscuous mode [ 864.060397][T11314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.064320][T11348] veth1_macvtap: entered promiscuous mode [ 864.155480][T11370] veth0_macvtap: entered promiscuous mode [ 864.181600][T11314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.238177][T11370] veth1_macvtap: entered promiscuous mode [ 864.313271][T11348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.360428][T11348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.500728][T11370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.862557][T11370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.542063][ T37] audit: type=1800 audit(1785850245.052:86): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1070" name="idVendor" dev="configfs" ino=39715 res=0 errno=0 [ 866.542177][ T37] audit: type=1800 audit(1785850245.052:87): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1070" name="idProduct" dev="configfs" ino=39716 res=0 errno=0 [ 866.648287][ T37] audit: type=1800 audit(1785850245.132:88): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1070" name="process_ump" dev="configfs" ino=40079 res=0 errno=0 [ 866.757326][ T37] audit: type=1800 audit(1785850245.272:89): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1069" name="attr_allow_any_host" dev="configfs" ino=39720 res=0 errno=0 [ 866.880867][T12003] nvmet: adding nsid 1 to subsystem testnqn [ 866.891925][ T37] audit: type=1800 audit(1785850245.402:90): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1069" name="device_path" dev="configfs" ino=39754 res=0 errno=0 [ 866.930252][ T37] audit: type=1800 audit(1785850245.442:91): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1069" name="buffered_io" dev="configfs" ino=39756 res=0 errno=0 [ 866.931850][ T37] audit: type=1800 audit(1785850245.442:92): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1069" name="enable" dev="configfs" ino=39757 res=0 errno=0 [ 867.002272][T12002] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 867.245338][ T9771] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:78e84c03-4cf9-4e0e-a9a8-77c77c5c6be2. [ 867.599048][ T9736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.599070][ T9736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.218409][T12002] nvme nvme0: creating 2 I/O queues. [ 868.369970][T12002] nvme nvme0: new ctrl: "testnqn" [ 869.518724][ T9736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.518745][ T9736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.115411][ T9736] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.115464][ T9736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.115507][ T9736] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.115547][ T9736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.288826][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.399743][ T9874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.399768][ T9874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.750614][ T9789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.750640][ T9789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.922124][ T9874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.922147][ T9874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.974894][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.186611][ T9874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.186822][ T9874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.187052][ T9874] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.187502][ T9874] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.187893][ T9874] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.188509][ T9874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.189095][ T9874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.301361][ T9874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.373781][ T9874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.410471][ T9736] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.456811][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.322466][ T9991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 872.516995][ T9991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 872.547527][ T9991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 872.598294][ T9991] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 872.646774][ T9991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 873.903961][T12007] infiniband syz2: set down [ 873.903985][T12007] infiniband syz2: added syzkaller0 [ 874.108784][T12007] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 874.108829][T12007] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 874.108874][T12007] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 874.286064][T12007] RDS/IB: syz2: added [ 874.286875][T12007] smc: adding ib device syz2 with port count 1 [ 874.287236][T12007] smc: ib device syz2 port 1 has no pnetid [ 874.518488][ T9775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.518512][ T9775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.644463][T10877] Bluetooth: hci4: command tx timeout [ 875.697499][ T9874] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.734107][T10877] Bluetooth: hci4: command tx timeout [ 878.167911][ T9874] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.681499][ T9991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 879.721802][ T9991] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 879.743726][ T9991] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 879.759183][ T9991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 879.762905][ T9991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 879.814565][ T9991] Bluetooth: hci4: command tx timeout [ 880.880444][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 880.880466][ T37] audit: type=1800 audit(1785850259.392:94): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1076" name="attr_allow_any_host" dev="configfs" ino=40597 res=0 errno=0 [ 880.951101][ T37] audit: type=1800 audit(1785850259.462:95): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1076" name="device_path" dev="configfs" ino=40598 res=0 errno=0 [ 880.990781][T12111] nvmet: disable ns before setting buffered_io value. [ 880.991210][ T37] audit: type=1800 audit(1785850259.502:96): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1076" name="buffered_io" dev="configfs" ino=40599 res=0 errno=0 [ 881.027223][ T37] audit: type=1800 audit(1785850259.502:97): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1076" name="enable" dev="configfs" ino=40600 res=0 errno=0 [ 881.034607][ T37] audit: type=1800 audit(1785850259.542:98): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1076" name="addr_trtype" dev="configfs" ino=40601 res=0 errno=0 [ 881.054353][T12111] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 881.585774][ T9776] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:78e84c03-4cf9-4e0e-a9a8-77c77c5c6be2. [ 881.657214][T12111] nvme nvme1: creating 2 I/O queues. [ 881.700480][T12111] nvme nvme1: new ctrl: "testnqn" [ 881.887608][T10877] Bluetooth: hci5: command tx timeout [ 881.894090][T10877] Bluetooth: hci4: command tx timeout [ 882.780244][ T9991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 882.837452][ T9991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 882.864331][ T9991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 882.906021][ T9991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 882.979442][ T9991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.964591][T10877] Bluetooth: hci5: command tx timeout [ 885.060738][ T9991] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 885.133311][ T9991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 885.162888][ T9991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 885.240368][ T9991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 885.365374][ T9991] Bluetooth: hci2: command tx timeout [ 885.366970][ T9991] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 886.059157][ T9991] Bluetooth: hci5: command tx timeout [ 887.407335][ T9991] Bluetooth: hci2: command tx timeout [ 887.735768][ T9991] Bluetooth: hci6: command tx timeout [ 888.124054][ T9991] Bluetooth: hci5: command tx timeout [ 890.344425][ T9991] Bluetooth: hci2: command tx timeout [ 890.344460][ T9991] Bluetooth: hci6: command tx timeout [ 891.472728][ T9771] smc: removing ib device syz2 [ 891.882072][ T9771] smbdirect: ib_dev[syz2] removed [ 892.546860][ T9991] Bluetooth: hci2: command tx timeout [ 892.546905][T10877] Bluetooth: hci6: command tx timeout [ 893.017692][ T9874] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.613664][T10877] Bluetooth: hci6: command tx timeout [ 895.698364][ T9874] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.455885][ T38] INFO: task syz.8.1000:10883 blocked for more than 143 seconds. [ 898.455916][ T38] Tainted: G L syzkaller #0 [ 898.455926][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 898.455935][ T38] task:syz.8.1000 state:D stack:25912 pid:10883 tgid:10882 ppid:9988 task_flags:0x400140 flags:0x00080002 [ 898.455992][ T38] Call Trace: [ 898.455999][ T38] [ 898.456012][ T38] __schedule+0x16dc/0x5500 [ 898.456049][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.456079][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 898.456103][ T38] ? rt_spin_lock+0x1e0/0x400 [ 898.456124][ T38] ? __pfx___schedule+0x10/0x10 [ 898.456153][ T38] ? schedule+0x90/0x2b0 [ 898.456193][ T38] schedule+0x164/0x2b0 [ 898.456217][ T38] do_uevent+0x2c3/0x570 [ 898.456247][ T38] ? __pfx_do_uevent+0x10/0x10 [ 898.456266][ T38] ? kfree+0x1c5/0x6c0 [ 898.456326][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.456355][ T38] ? kobject_uevent_env+0x378/0x9e0 [ 898.456376][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 898.456406][ T38] ? kobject_uevent_env+0x378/0x9e0 [ 898.456432][ T38] __dlm_new_lockspace+0x1aa4/0x2060 [ 898.456453][ T38] ? __dlm_new_lockspace+0x273/0x2060 [ 898.456478][ T38] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 898.456500][ T38] ? rcu_is_watching+0x15/0xb0 [ 898.456524][ T38] ? cap_capable+0x123/0x460 [ 898.456545][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 898.456568][ T38] ? bpf_lsm_capable+0x9/0x20 [ 898.456588][ T38] ? security_capable+0x7e/0x2c0 [ 898.456611][ T38] ? dlm_new_user_lockspace+0x3e/0x80 [ 898.456635][ T38] device_create_lockspace+0xc7/0x350 [ 898.456663][ T38] ? __pfx_device_create_lockspace+0x10/0x10 [ 898.456692][ T38] ? _copy_from_user+0x94/0xb0 [ 898.456717][ T38] device_write+0x875/0xed0 [ 898.456741][ T38] ? __pfx_device_write+0x10/0x10 [ 898.456763][ T38] vfs_write+0x29f/0xbb0 [ 898.456793][ T38] ? __pfx_vfs_write+0x10/0x10 [ 898.456818][ T38] ? __fget_files+0x2a/0x420 [ 898.456840][ T38] ? __fget_files+0x2a/0x420 [ 898.456858][ T38] ? __fget_files+0x3a8/0x420 [ 898.456876][ T38] ? __fget_files+0x2a/0x420 [ 898.456902][ T38] ksys_write+0x156/0x270 [ 898.456928][ T38] ? __pfx_ksys_write+0x10/0x10 [ 898.456958][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.456979][ T38] do_syscall_64+0x174/0x580 [ 898.457006][ T38] ? trace_irq_disable+0x3b/0x140 [ 898.457024][ T38] ? clear_bhb_loop+0x40/0x90 [ 898.457047][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.457067][ T38] RIP: 0033:0x7f99781de019 [ 898.457085][ T38] RSP: 002b:00007f9976436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 898.457105][ T38] RAX: ffffffffffffffda RBX: 00007f9978465fa0 RCX: 00007f99781de019 [ 898.457152][ T38] RDX: 0000000000000080 RSI: 0000200000000d00 RDI: 0000000000000004 [ 898.457165][ T38] RBP: 00007f997827500c R08: 0000000000000000 R09: 0000000000000000 [ 898.457185][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.457196][ T38] R13: 00007f9978466038 R14: 00007f9978465fa0 R15: 00007ffe7ecc1038 [ 898.457224][ T38] [ 898.457292][ T38] [ 898.457292][ T38] Showing all locks held in the system: [ 898.457303][ T38] 3 locks held by kworker/0:1/10: [ 898.457313][ T38] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 898.457362][ T38] #1: ffffc900000f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 898.457407][ T38] #2: ffff88807afcc280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 898.457591][ T38] 4 locks held by rcuc/1/28: [ 898.457602][ T38] 1 lock held by khungtaskd/38: [ 898.457611][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 898.457690][ T38] 2 locks held by dhcpcd/5254: [ 898.457700][ T38] #0: ffffffff8f5933d8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x7f0 [ 898.457797][ T38] #1: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 898.457893][ T38] 7 locks held by kworker/u8:71/9771: [ 898.457905][ T38] 13 locks held by kworker/u8:76/9776: [ 898.457916][ T38] 6 locks held by kworker/u8:89/9789: [ 898.457935][ T38] 6 locks held by kworker/u8:174/9874: [ 898.457945][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 898.457989][ T38] #1: ffffc90006317c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 898.458031][ T38] #2: ffffffff8f5a39e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 898.458098][ T38] #3: ffff888059dcc160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 898.458236][ T38] #4: ffff88802f6de310 (&devlink->lock_key#21){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 898.458288][ T38] #5: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 898.458356][ T38] 2 locks held by getty/10002: [ 898.458366][ T38] #0: ffff8880361840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 898.458453][ T38] #1: ffffc90003d232e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 898.458494][ T38] 3 locks held by kworker/0:5/10365: [ 898.458506][ T38] 1 lock held by syz.8.1000/10883: [ 898.458516][ T38] #0: ffffffff99bcb458 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xa3/0x2060 [ 898.458559][ T38] 1 lock held by dlm_recoverd/10891: [ 898.458569][ T38] #0: ffff88805fde0d20 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xba/0x23e0 [ 898.458612][ T38] 2 locks held by syz-executor/11348: [ 898.458628][ T38] 1 lock held by iou-wrk-12010/12011: [ 898.458639][ T38] #0: ffffffff99bcb458 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xa3/0x2060 [ 898.458684][ T38] 1 lock held by syz-executor/12026: [ 898.458695][ T38] #0: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 898.458793][ T38] 1 lock held by syz-executor/12096: [ 898.458802][ T38] #0: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 898.458844][ T38] 1 lock held by syz-executor/12137: [ 898.458854][ T38] #0: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 898.458895][ T38] 1 lock held by syz-executor/12160: [ 898.458905][ T38] #0: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 898.458947][ T38] [ 898.458952][ T38] ============================================= [ 898.458952][ T38] [ 898.458961][ T38] NMI backtrace for cpu 1 [ 898.458977][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 898.459001][ T38] Tainted: [L]=SOFTLOCKUP [ 898.459008][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.459018][ T38] Call Trace: [ 898.459042][ T38] [ 898.459050][ T38] dump_stack_lvl+0xe8/0x150 [ 898.459079][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 898.459142][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 898.459236][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 898.459259][ T38] sys_info+0x135/0x170 [ 898.459276][ T38] watchdog+0xfd7/0x1030 [ 898.459327][ T38] ? watchdog+0x1c7/0x1030 [ 898.459349][ T38] kthread+0x388/0x470 [ 898.459376][ T38] ? __pfx_watchdog+0x10/0x10 [ 898.459390][ T38] ? __pfx_kthread+0x10/0x10 [ 898.459417][ T38] ret_from_fork+0x514/0xb70 [ 898.459447][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 898.459474][ T38] ? __switch_to+0xc89/0x1420 [ 898.459499][ T38] ? __pfx_kthread+0x10/0x10 [ 898.459527][ T38] ret_from_fork_asm+0x1a/0x30 [ 898.459557][ T38] [ 898.459572][ T38] Sending NMI from CPU 1 to CPUs 0: [ 898.459608][ C0] NMI backtrace for cpu 0 [ 898.459628][ C0] CPU: 0 UID: 0 PID: 9776 Comm: kworker/u8:76 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 898.459655][ C0] Tainted: [L]=SOFTLOCKUP [ 898.459662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.459683][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 898.459793][ C0] RIP: 0010:__lock_acquire+0x18fa/0x2ce0 [ 898.459844][ C0] Code: 14 25 ff 0f 00 00 39 05 70 53 04 12 73 06 89 05 68 53 04 12 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 f0 02 09 [ 898.459862][ C0] RSP: 0018:ffffc9000439ecb0 EFLAGS: 00000006 [ 898.459877][ C0] RAX: ffffffff965e28e8 RBX: 00000000000003cd RCX: 00000000000001a4 [ 898.459892][ C0] RDX: ffffffff96380848 RSI: ffff88802ea4ad10 RDI: 00000000000003cd [ 898.459906][ C0] RBP: 3176e83ba478c9a0 R08: ffffc9000439ec78 R09: 0000000000000020 [ 898.459920][ C0] R10: 0000000000000000 R11: ffffffff81a1d7e0 R12: 00000000000001a3 [ 898.459932][ C0] R13: ffffffff934cdbf8 R14: ffff88802ea49f00 R15: ffffffff963cbbd8 [ 898.459946][ C0] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 898.459961][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.459974][ C0] CR2: 00007f7d669a17b0 CR3: 000000003dc2e000 CR4: 00000000003526f0 [ 898.459990][ C0] Call Trace: [ 898.459997][ C0] [ 898.460007][ C0] ? __pfx_usage_match+0x10/0x10 [ 898.460039][ C0] ? debug_object_assert_init+0xa1/0x310 [ 898.460085][ C0] lock_acquire+0x106/0x350 [ 898.460104][ C0] ? debug_object_assert_init+0xa1/0x310 [ 898.460130][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 898.460155][ C0] ? debug_object_assert_init+0xa1/0x310 [ 898.460175][ C0] debug_object_assert_init+0xa1/0x310 [ 898.460201][ C0] hrtimer_start_range_ns+0x3d/0x3f0 [ 898.460256][ C0] finish_task_switch+0x3c4/0xc60 [ 898.460306][ C0] __schedule+0x16e4/0x5500 [ 898.460334][ C0] ? ktime_get+0x45/0x220 [ 898.460352][ C0] ? ktime_get+0x45/0x220 [ 898.460373][ C0] ? __pfx___schedule+0x10/0x10 [ 898.460403][ C0] preempt_schedule_irq+0x4d/0xa0 [ 898.460426][ C0] irqentry_exit+0x14f/0x8f0 [ 898.460450][ C0] ? trace_irq_disable+0x3b/0x140 [ 898.460471][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 898.460492][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 898.460511][ C0] Code: ff ff ff e8 01 8a a2 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb b4 fc 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d f8 94 11 [ 898.460528][ C0] RSP: 0018:ffffc9000439f308 EFLAGS: 00000282 [ 898.460543][ C0] RAX: 04d29913c0f83500 RBX: 0000000000000000 RCX: 0000000000000046 [ 898.460555][ C0] RDX: 00000000575c7362 RSI: ffffffff8daf6c22 RDI: ffffffff8bca7880 [ 898.460570][ C0] RBP: ffffffff8b4673e6 R08: ffffffff8b4673e6 R09: 0000000000000000 [ 898.460583][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002 [ 898.460596][ C0] R13: ffffffff8e1c3000 R14: 0000000000000000 R15: 0000000000000246 [ 898.460610][ C0] ? rt_write_lock+0x86/0x220 [ 898.460630][ C0] ? rt_write_lock+0x86/0x220 [ 898.460655][ C0] rt_write_lock+0xa2/0x220 [ 898.460681][ C0] ? rt_write_lock+0x86/0x220 [ 898.460701][ C0] neigh_remove_one+0x2d/0x4a0 [ 898.460746][ C0] ___neigh_create+0x4ac/0x2390 [ 898.460771][ C0] ? ___neigh_create+0x20d/0x2390 [ 898.460792][ C0] ip6_finish_output2+0x6d6/0x1410 [ 898.460819][ C0] ? ip6_mtu+0x7d/0x490 [ 898.460864][ C0] ? ip6_output+0x11e/0x540 [ 898.460885][ C0] ip6_output+0x337/0x540 [ 898.460906][ C0] ? __pfx_ip6_output+0x10/0x10 [ 898.460926][ C0] NF_HOOK+0x177/0x4f0 [ 898.460997][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 898.461021][ C0] ? __pfx_dst_output+0x10/0x10 [ 898.461042][ C0] ? icmp6_dst_alloc+0x2b5/0x450 [ 898.461064][ C0] ? icmp6_dst_alloc+0x3bb/0x450 [ 898.461088][ C0] mld_sendpack+0x890/0xe10 [ 898.461116][ C0] ? mld_sendpack+0x206/0xe10 [ 898.461138][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 898.461173][ C0] ? mld_send_initial_cr+0x352/0x550 [ 898.461199][ C0] ipv6_mc_dad_complete+0x87/0x410 [ 898.461221][ C0] addrconf_dad_completed+0x622/0xe60 [ 898.461244][ C0] ? addrconf_dad_completed+0x1e6/0xe60 [ 898.461265][ C0] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 898.461285][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 898.461310][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.461336][ C0] addrconf_dad_work+0xdda/0x16e0 [ 898.461357][ C0] ? addrconf_dad_work+0x131/0x16e0 [ 898.461380][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 898.461400][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 898.461425][ C0] ? rcu_is_watching+0x15/0xb0 [ 898.461450][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 898.461472][ C0] process_scheduled_works+0xa8e/0x14e0 [ 898.461508][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 898.461533][ C0] ? assign_work+0x3cf/0x5d0 [ 898.461557][ C0] worker_thread+0xa47/0xfb0 [ 898.461593][ C0] kthread+0x388/0x470 [ 898.461620][ C0] ? __pfx_worker_thread+0x10/0x10 [ 898.461642][ C0] ? __pfx_kthread+0x10/0x10 [ 898.461676][ C0] ret_from_fork+0x514/0xb70 [ 898.461706][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 898.461734][ C0] ? __switch_to+0xc89/0x1420 [ 898.461759][ C0] ? __pfx_kthread+0x10/0x10 [ 898.461787][ C0] ret_from_fork_asm+0x1a/0x30 [ 898.461812][ C0] [ 898.462616][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 898.462635][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 898.462660][ T38] Tainted: [L]=SOFTLOCKUP [ 898.462667][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.462678][ T38] Call Trace: [ 898.462687][ T38] [ 898.462695][ T38] vpanic+0x56c/0xa60 [ 898.462719][ T38] ? __pfx_vpanic+0x10/0x10 [ 898.462744][ T38] panic+0xc5/0xd0 [ 898.462761][ T38] ? __pfx_panic+0x10/0x10 [ 898.462780][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 898.462802][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 898.462826][ T38] watchdog+0x1030/0x1030 [ 898.462856][ T38] ? watchdog+0x1c7/0x1030 [ 898.462880][ T38] kthread+0x388/0x470 [ 898.462909][ T38] ? __pfx_watchdog+0x10/0x10 [ 898.462925][ T38] ? __pfx_kthread+0x10/0x10 [ 898.462953][ T38] ret_from_fork+0x514/0xb70 [ 898.462982][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 898.463010][ T38] ? __switch_to+0xc89/0x1420 [ 898.463035][ T38] ? __pfx_kthread+0x10/0x10 [ 898.463063][ T38] ret_from_fork_asm+0x1a/0x30 [ 898.463093][ T38] [ 898.466406][ T38] Kernel Offset: disabled