last executing test programs: 6.432246424s ago: executing program 0 (id=25): r0 = syz_open_dev$vbi(&(0x7f0000000780), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_script(r1, &(0x7f0000000800), 0xfffffd9d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4004010) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)=@x86={0xd, 0xc5, 0x10, 0x0, 0x5ae, 0x6, 0x9, 0x63, 0x7, 0xff, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, 0x4, 0x6, 0x2, '\x00', 0xfc, 0xfffffffffffffffe}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$sequencer(r1, &(0x7f0000000840), 0xca80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000260001031dbd70"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a009720050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840e5b4612da7ed1d7473e61e0db285a415939d9fbec8c70891beba553f8e9657c08c726b352a6982e424665a84b35463ff30b1c88b623ba6662a6a7743cea68bb8d2d01622d657c65d8fa30ca07f3150ec13c14efe955abcd11f1a96110813c245bff86b5f405fe5b31792e8132f8c8ad01938f88bfa8b1cbabf29e284"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000020000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740), 0x13f, 0x1}}, 0x20) 5.726456049s ago: executing program 0 (id=29): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2281) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000680)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000006c0)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x80000) getpeername$packet(r5, 0x0, 0x0) 5.49249564s ago: executing program 2 (id=32): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) connect$inet6(r0, 0x0, 0x0) 5.409720875s ago: executing program 2 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000300)={0x0, 0xb382, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000440)='n', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000500), 0x4) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000800), 0x8, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000940)={0x24, 0x0, 0x4, "cbdb6bf7d02afcc90e8e4774344e969d48f38049a96000", 0x31424752}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000001c0)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902"], 0x0) write$sysctl(r5, &(0x7f0000000240)='2\x00', 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffff9c, 0x0, 0x301000, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0xffff0000, 0xeeef0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x25000, 0x0, 0x0, 0x0, 0xfc, 0x7}, {0x80a0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x8}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfc, 0x0, 0x0, 0x81}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0xe6e50ffa, 0x9, 0x0, 0xfc}, {}, {0x6000}, {0x1, 0xdffe}, 0x60000010, 0x0, 0x0, 0x20, 0x8, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) 4.470087878s ago: executing program 3 (id=34): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000036}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0xcc, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/204, 0xcc}]}, &(0x7f0000000580)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndctrl(0x0, 0x3, 0x2600) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000005ac0)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000005c0)={{0x7, 0x3, 0x2, 0x3, 'syz1\x00', 0xe8}, 0x0, 0x2, 0x6, r2, 0x0, 0x9, 'syz1\x00', &(0x7f0000000100)}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) r7 = socket(0x2d, 0x2, 0x0) sendto(r7, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x344c3}]}, &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) init_module(0x0, 0xa99, &(0x7f0000000280)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @rand_addr=0x64010102, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 4.274678513s ago: executing program 0 (id=35): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x2]}, &(0x7f00000004c0)=0xfc) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x1007ca6, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) mlockall(0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='numa_maps\x00') read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x44080) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x1, 0x0) 3.376733651s ago: executing program 1 (id=36): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004002}, 0x44000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x20004004) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f00000001c0)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000880)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r6, 0x0, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f00000008c0)={&(0x7f0000000a40)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000900)={'filter\x00', 0x4}, 0x68) r8 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r4, 0x0, r8, 0x0, 0x2, 0x5) 2.919409164s ago: executing program 3 (id=37): openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000540)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010100, @multicast2}, "000000107fc90000"}}}}}, 0x0) 2.472179187s ago: executing program 2 (id=38): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019740)=0x7) pipe(&(0x7f0000019780)) io_setup(0x3fd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000019880)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000198c0)=ANY=[], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x6, 0x0, 0xfffd}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1d0, 0x3a, 0x0, @mcast2, @private1, {[@srh={0x46, 0x6, 0x4, 0x3, 0x7, 0x60, 0x1, [@dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0x7d9}]}, @dstopts={0x5e, 0x2a, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0x88, [0xc, 0x405b, 0x9ed, 0x80000001, 0x5c66, 0x4, 0xea]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x9, 0x1503, [0x1, 0xe, 0x10001, 0xc942, 0xdadb, 0x2]}}, @generic={0x61, 0xd7, "15532616c369fec02505e8732aed4a720da7b92acd88d79555cf5c1b46d348da15f53d6dd77fc39421f92aa7101e77a5ca65a22ed59c82781fdd6c5862a5bdeaa25791a1fd515a414acb16b3e57c7eb6bf9c5a3f78f8960df4f81b55cc4f3ce638bb18ebc0403277f22c5f8d2e6745d00a778c5768263a679c0b4b9e43c91feaf3d76d84061fefae200e3b7b9b1bc56d7bf6d0385ff73ee61f006340a0755403f60fdee9c1845a8964bcb0f9bc1959e9fccdad428d28f22fc2cc11633004b47dc4008606dfb136985f73e8ace417d96fa413550daf6e1d"}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private0}}}}}, 0x206) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) 2.430048236s ago: executing program 0 (id=39): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi1\x00', 0x400400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x21, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000500)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000540)='n\\ 127.0.0.1 2\\0000000\\0l\\calhost\n', 0x24) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000580)="50dafd7e135484df16137922ee1635bef42bc63a52698fc455f269b94e1d3b151082a0b7230150363968fe895a2165866ad3ea9fac3ca7c6965041c72c82123b7b", 0x41}, {&(0x7f0000000600)="0079265cce835c3eb9b8110cc60bb12d5815116c2c7a3c60ed2f78bf87506ea31ba0281faf9155132958bbb0f4b33f54dc8a1b69cb16d18b3a5987a6b475e28ca7f33051d60b095bf17981a609ba24460a48e0946762719d0e4cf4003db223c7e63645c4cd0191a117cdb60f5e3af06f9791532158760aa2be8b344d609161ccca81ecf0a455864cb75df7e6aeb1f901a98610e0f0720dc3b450cbf645dd4f1597f49478d9257bc7f5870b2f86345e8d91914d9baac59a4fb4d21a1be458d05caaed41e7f7b849184a16892215af4eed13df8d5d6a3c93ec4ed34f00ecfd719f7b4486d3b057", 0xe6}], 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) read(0xffffffffffffffff, &(0x7f0000000800)=""/217, 0xd9) 2.429037515s ago: executing program 3 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003000)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) 2.247170167s ago: executing program 3 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) 2.246994491s ago: executing program 3 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000300)={0x0, 0xb382, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000440)='n', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000500), 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000800), 0x8, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000940)={0x24, 0x0, 0x4, "cbdb6bf7d02afcc90e8e4774344e969d48f38049a96000", 0x31424752}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902"], 0x0) write$sysctl(r5, &(0x7f0000000240)='2\x00', 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffff9c, 0x0, 0x301000, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0xffff0000, 0xeeef0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x25000, 0x0, 0x0, 0x0, 0xfc, 0x7}, {0x80a0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x8}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfc, 0x0, 0x0, 0x81}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0xe6e50ffa, 0x9, 0x0, 0xfc}, {}, {0x6000}, {0x1, 0xdffe}, 0x60000010, 0x0, 0x0, 0x20, 0x8, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) 1.973284457s ago: executing program 1 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000200)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x8}}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r6, &(0x7f0000003440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xa, r5, 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)="5e74942271ebbbe21946b604e1b243d6c65cc320", 0x14}], 0x1}}, {{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)="81b2769b6529f5d4b6a52cf395c493a8eac0c8a27644cde60d796d5a1192b79e146b6a1ffe53986c310e", 0x2a}, {&(0x7f0000000840)="f78747e5267d4d997e95d666ccd5e78e50662471ff1d7ae6650922603b745ebf5af609966bf880a75f0c65a670801c8cb0c2d6f4b4cc98a9e56fdae220101e5de62461f5c27125100158487661d0b8069f07222c85dba6d237fc1a4a92c156abf671530ce3bfac3e172a489a5acc347e673eb021613a81c6dcfd530a4bd53f6d9d17d1cbdb3d54d951ff8603be9303265b4c6a8a6faa313610187f394b81deb08d41aad4f4fc4e8b69916500aa7a4e0a0fecbb76c8eee486f3baebcdfb83f94bb66224d862ccd8f2c588da4e53ca0528c7ee2369029e2cda2a47efb85cfca81cab", 0xe1}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1480}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000480)="5c41a33e4db9ee3686884f4630626f", 0xf}, {&(0x7f0000001e40)="5ee6ddd06768bee94d9f0cfac1ca6189f914ff7faad5de3263a8c87077cb876f974e4643737824750707166ce6384606a407df8b5c25a2e24e33cf462e1503a5f3a72a4017175b35ebba51cd4cd104665023362498d5a63085bd1afda562f01fdc9752ef2280c565872ac98a30cdc273cab9b0e75fffb87f642a78fbdcef71f5b0732855e0f6ff54c7fd4dec19a5aa6680e1d943e33512a5355c9c93f3ad4aa52a8208713cf57d25536221537e187243d785dec51aed125858625de5f6bf1e8f15a94fe9d2b832d308876a2a", 0xcc}, {&(0x7f0000001f40)="7fc2024db25f992f3cece376e95f6b489558cfe7eb0e84bcf2ff903b576326299eee3152c703851811101ee11f404cb024090574dd8a8c7c86528aa9c66bbae392240a20247897b6834a6c941b889f824f953ee5ec2398d95bbf0c369fcf72ba22cd167fb27c7509b5a7698276703869ad8ce0704bb157f323948c5b3b28c43f405c8d15965ef73064fa7b37c8b2ff3a9a6d82da427c2eab5bffd34500ebebed1d7e505b925d422b3a2b0472cac9a27554d2b2f2bc42c2b06555fcfb6ef56cddbfcff01d1e5e277db712ca9c75d04ff342034ba42fd435282fd09b1d3c9335b31da2b75e6604b83cd0434d4a3b9b5ca8a331ac", 0xf3}, {&(0x7f0000002040)="ad214005a6faeca25ebe57d332558a85d39c82f0930d8373ad4fc3d95ff8d21e9ce106f7934677f010705186c94357b157be1192d3dcad844e73c9d2113dc1c00e867f4e699e8581d15024be3c5982a1d13c9e0b9a825e4d8b5c5b10667ec37347662783066125b6730e38689ed2c62c26d58acf4043700ac70b852ea6056d12e376e0e45dcb6286cc7a0cecda9a5f8137df426ac4efcb3f70909d27395e7cff1de17d030775f992148933", 0xab}], 0x4, &(0x7f0000003500)=[{0x1010, 0x88, 0x1, "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"}, {0x10, 0x102}, {0xf0, 0x1, 0x1, "e3b7ec53e8972c73a68a217e71077b4212c1549c0c9e0dae0201f4b8c0e7fd5ee45bc192b32c4310d518ccaf9fe003623e35c48035b2a87d3a1448fdf12aade903afccf51e16632c9d2e953181166edafb866f976997d8e313bf943772dd9d7569f0db0c917aadd025b962fdbc01849b2e9991f459b74108b0638399b6d1c061f0f9302deef41befb4128379f5d137b4db7fe2e3bfc1e2737cae209337fcbd4dae83b3e506c467494c5c042a8d9fca8f3e4a1164ba15a260cb355651338c01df284df5d6b9b91d403406891b241ebfc839b702930195041e3f3a77"}, {0xd8, 0x115, 0x80000001, "7992c791fcee3bcb2bd895786891aa10f4e9b5c9b82e18091087e9939ebfef990ca0942dbc938bc43e97c17338d47552731e8481ea585c0d081754971b2b0f2062fe05d7c2fd0938c1f0ecc3eb80b4210201a3457c8df1d866c1691409b635d91c283cf22d781659d795d972fa09bafd44e6e321713a44eef499ae1143bf1e3f1351444d643e09807d83f465eeb46e212a21f9303828bfc16b1c15fe78c2844b6793685e4a19b776fca6c8d94d0d0ec7b9a6eac9051eb7f06f7f277b45cb3beb16c132"}, {0xf8, 0x109, 0x1, "4096fa241513cd02bd8b064a59bc17cb57700317126fb6afad6fb62c238a2174ae3898ec6659b2d5d126615a2ea60b3ab1223befbc647747b43de60fa7e10f17a0b3b60f767462604a38301c334fb800b842b55ded449c8cfa3fa831ef9a57b36b3ad0bb01c54a9ea6af45ce6b74600351b208fcfd5beca0ea72fd8b1ba58be4dbad09be9d787b3c9caa3d5024bb77c957199d4c17ba530ba8c4199b4d56750d6f7a59db85235ca241c429cc57c7a98ffa33080e6ab7c6d85d8d2c86200d559b643d8f478f93560eb8da161e8a32f666e36c2e09277fdd8cf9ba72eeae2deb1644"}], 0x12e0}}], 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x1, 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="1808000007000000000000000000000085000000a00000009500000000000000ffa0c51e2f84ce37c7f0f15f97785a8455575507e7ab57ea3c07acd62c1216397d5c7b065f212b7e100be31972b5f149f34340d02843"], &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_open_dev$video(0x0, 0x103, 0x60240) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb88a8"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002500)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x3, &(0x7f0000002600)=ANY=[], &(0x7f0000002640)='syzkaller\x00'}, 0x90) syz_genetlink_get_family_id$fou(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f00000002c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0xe}, {0xffe0, 0xfff7}, {0x5, 0xb}}, ["", ""]}, 0x24}}, 0x800) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff48, &(0x7f0000000100)={&(0x7f0000000180)={{0x6, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x1e}}, 0x4) r9 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000280)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x33}, 0x123842, 0x0) write$nsim_bool(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syslog(0x9, 0x0, 0x0) setgroups(0xffffffffffffffde, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 1.43365189s ago: executing program 1 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./debug\x00', 0xf2) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) 1.400671336s ago: executing program 0 (id=45): mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000400)='Y', 0x1) 1.354062756s ago: executing program 1 (id=46): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb5, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x807, 0x40, 0x0, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0xfffffffd, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x1200, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x5, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0xbcee, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.207697661s ago: executing program 0 (id=47): syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x42) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f00000005c0)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000019700)={'vxcan0\x00'}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2400c800) 668.443654ms ago: executing program 1 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 491.195524ms ago: executing program 1 (id=49): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40010) 298.43615ms ago: executing program 3 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000015c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000016c0)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)={0x14, r5, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=ANY=[], 0x18}, 0x404f444) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f90f, 0x1}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x36c2, &(0x7f0000000480)={0x0, 0xb2d0, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) 286.02688ms ago: executing program 2 (id=51): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000280)=@in6={0xa, 0xfffe, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x6, 0x7a}, 0x8) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) 122.002908ms ago: executing program 2 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050d0}, 0x40) 0s ago: executing program 2 (id=53): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x3, 0x0) read$msr(r2, &(0x7f0000000500)=""/102379, 0x18feb) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./my_configfs\x00', &(0x7f0000019580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019600)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000019680)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0xbf) mkdirat(0xffffffffffffff9c, &(0x7f00000196c0)='streaming/header/h\x00', 0x157) symlink(&(0x7f0000019740)='streaming/header/h\x00', &(0x7f0000019780)='streaming/header/h/u\x00') symlink(0x0, &(0x7f0000019800)='streaming/class/fs/h\x00') symlink(0x0, &(0x7f0000019840)='streaming/class/hs/h\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:16782' (ED25519) to the list of known hosts. [ 41.644983][ T5775] cgroup: Unknown subsys name 'net' [ 41.779870][ T5775] cgroup: Unknown subsys name 'cpuset' [ 41.784477][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.739569][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.733015][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.746898][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.748211][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.748879][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.749595][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.749714][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.750430][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.750817][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.751026][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.752687][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.753620][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.753872][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.754513][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.754707][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.754762][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.754907][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.756799][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.757862][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.775624][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.779407][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.961077][ T5797] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.961551][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.962527][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.963526][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.975704][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.010150][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.075202][ T5790] infiniband rxe0: set active [ 47.077977][ T5790] infiniband rxe0: added rxe_eth0 [ 47.087573][ T5790] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.087595][ T5790] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.087617][ T5790] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.093898][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.108713][ T5790] RDS/IB: rxe0: added [ 47.108835][ T5790] smc: adding ib device rxe0 with port count 1 [ 47.108869][ T5790] smc: ib device rxe0 port 1 has no pnetid [ 47.122278][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.148602][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.179670][ T857] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.186353][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.257605][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.307010][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.307058][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.307116][ T5797] bridge_slave_0: entered allmulticast mode [ 47.307810][ T5797] bridge_slave_0: entered promiscuous mode [ 47.335481][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.335564][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.335666][ T5797] bridge_slave_1: entered allmulticast mode [ 47.336885][ T5797] bridge_slave_1: entered promiscuous mode [ 47.374185][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.374381][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.374445][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.374514][ T5792] bridge_slave_0: entered allmulticast mode [ 47.375191][ T5792] bridge_slave_0: entered promiscuous mode [ 47.406510][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.408167][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.408270][ T5792] bridge_slave_1: entered allmulticast mode [ 47.409673][ T5792] bridge_slave_1: entered promiscuous mode [ 47.427821][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.427870][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.427927][ T5787] bridge_slave_0: entered allmulticast mode [ 47.428706][ T5787] bridge_slave_0: entered promiscuous mode [ 47.430293][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.430334][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.430480][ T5787] bridge_slave_1: entered allmulticast mode [ 47.431179][ T5787] bridge_slave_1: entered promiscuous mode [ 47.435200][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.444650][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.459149][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.461127][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.472874][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.489895][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.499241][ T5792] team0: Port device team_slave_0 added [ 47.500671][ T5792] team0: Port device team_slave_1 added [ 47.507932][ T5797] team0: Port device team_slave_0 added [ 47.517980][ T5787] team0: Port device team_slave_0 added [ 47.531809][ T5797] team0: Port device team_slave_1 added [ 47.542197][ T5787] team0: Port device team_slave_1 added [ 47.565414][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.565426][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.565441][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.574398][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.592565][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.592577][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.592591][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.593368][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.593382][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.593403][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.598476][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.598486][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.598500][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.599145][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.599153][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.599167][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.604339][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.604370][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.604384][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.659694][ T5797] hsr_slave_0: entered promiscuous mode [ 47.660209][ T5797] hsr_slave_1: entered promiscuous mode [ 47.669514][ T5792] hsr_slave_0: entered promiscuous mode [ 47.669989][ T5792] hsr_slave_1: entered promiscuous mode [ 47.670339][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 47.670382][ T5792] Cannot create hsr debugfs directory [ 47.694146][ T5787] hsr_slave_0: entered promiscuous mode [ 47.694917][ T5787] hsr_slave_1: entered promiscuous mode [ 47.695637][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 47.695651][ T5787] Cannot create hsr debugfs directory [ 47.924005][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.930646][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.931109][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.933524][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.934116][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.938047][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.948053][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.951221][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.005544][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.007985][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.008818][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.013041][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.025207][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.030552][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.041966][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.044241][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.059574][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.059619][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.059683][ T5790] bridge_slave_0: entered allmulticast mode [ 48.060371][ T5790] bridge_slave_0: entered promiscuous mode [ 48.062057][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.062108][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.062433][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.062481][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.077656][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.077762][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.077850][ T5790] bridge_slave_1: entered allmulticast mode [ 48.078968][ T5790] bridge_slave_1: entered promiscuous mode [ 48.099354][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.100823][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.122035][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.124336][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.125166][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.129227][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.131520][ T5790] team0: Port device team_slave_0 added [ 48.133614][ T5790] team0: Port device team_slave_1 added [ 48.149351][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.153017][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.153728][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.156279][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.160550][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.160599][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.160709][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.160788][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.163032][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.163044][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.163071][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.164925][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.164937][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.164958][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.215893][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.216939][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.218237][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.219523][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.284519][ T5790] hsr_slave_0: entered promiscuous mode [ 48.284978][ T5790] hsr_slave_1: entered promiscuous mode [ 48.285471][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 48.285485][ T5790] Cannot create hsr debugfs directory [ 48.371881][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.411761][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.427487][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.442413][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.442499][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.462606][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.462685][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.474844][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.475017][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.479983][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.488801][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.491138][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.491606][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.493742][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.494826][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.497233][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.503901][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.503948][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.508609][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.518035][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.518081][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.544823][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.562230][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.562278][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.570225][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.570348][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.661832][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.677006][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.680943][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.680990][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.685129][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.685176][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.712034][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.836402][ T67] Bluetooth: hci0: command tx timeout [ 48.836533][ T67] Bluetooth: hci2: command tx timeout [ 48.836594][ T67] Bluetooth: hci3: command tx timeout [ 48.836649][ T67] Bluetooth: hci1: command tx timeout [ 49.000547][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.010405][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.017425][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.040162][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.055376][ T5797] veth0_vlan: entered promiscuous mode [ 49.077774][ T5797] veth1_vlan: entered promiscuous mode [ 49.090166][ T5790] veth0_vlan: entered promiscuous mode [ 49.098969][ T5787] veth0_vlan: entered promiscuous mode [ 49.102442][ T5792] veth0_vlan: entered promiscuous mode [ 49.111150][ T5790] veth1_vlan: entered promiscuous mode [ 49.117704][ T5787] veth1_vlan: entered promiscuous mode [ 49.128314][ T5797] veth0_macvtap: entered promiscuous mode [ 49.130774][ T5792] veth1_vlan: entered promiscuous mode [ 49.138865][ T5797] veth1_macvtap: entered promiscuous mode [ 49.157397][ T5790] veth0_macvtap: entered promiscuous mode [ 49.159567][ T5787] veth0_macvtap: entered promiscuous mode [ 49.169960][ T5787] veth1_macvtap: entered promiscuous mode [ 49.176448][ T5790] veth1_macvtap: entered promiscuous mode [ 49.177524][ T5792] veth0_macvtap: entered promiscuous mode [ 49.183205][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.190505][ T5792] veth1_macvtap: entered promiscuous mode [ 49.193575][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.200988][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.218510][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.227620][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.241541][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.248221][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.254260][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.332062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.332080][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.363020][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.363041][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.380843][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.380863][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.399554][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.399572][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.426107][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.426126][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.434337][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.434354][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.459332][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.459352][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.468222][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.469441][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.469742][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.469929][ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.470063][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.493243][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.493263][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.496473][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.511039][ T5797] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.514730][ T5787] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.518390][ T5787] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.527153][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527178][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527197][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527215][ T5883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527232][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527250][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527268][ T5883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527285][ T5883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527303][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527321][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527338][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.534002][ T5797] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.806580][ T5968] tunl0: entered promiscuous mode [ 49.807984][ T5968] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 49.808013][ T5968] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.025998][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.178059][ T29] usb 8-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 50.191632][ T29] usb 8-1: config 0 has no interfaces? [ 50.191656][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.207015][ T29] usb 8-1: config 0 descriptor?? [ 50.915396][ T5791] Bluetooth: hci1: command tx timeout [ 50.915427][ T5791] Bluetooth: hci3: command tx timeout [ 50.915444][ T5791] Bluetooth: hci2: command tx timeout [ 50.915459][ T5791] Bluetooth: hci0: command tx timeout [ 51.608937][ T5985] FAULT_INJECTION: forcing a failure. [ 51.608937][ T5985] name failslab, interval 1, probability 0, space 0, times 1 [ 51.608966][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 51.608989][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.609001][ T5985] Call Trace: [ 51.609008][ T5985] [ 51.609017][ T5985] dump_stack_lvl+0x100/0x190 [ 51.609058][ T5985] should_fail_ex.cold+0x5/0xa [ 51.609088][ T5985] should_failslab+0xc2/0x120 [ 51.609129][ T5985] __kvmalloc_node_noprof+0x113/0x9b0 [ 51.609166][ T5985] ? io_alloc_cache_init+0x38/0x170 [ 51.609194][ T5985] io_alloc_cache_init+0x38/0x170 [ 51.609221][ T5985] io_rsrc_cache_init+0x40/0x50 [ 51.609243][ T5985] io_uring_setup.cold+0x4c0/0x1c0e [ 51.609270][ T5985] ? __pfx_io_uring_setup+0x10/0x10 [ 51.609305][ T5985] ? __lock_acquire+0x5c0/0x1f40 [ 51.609341][ T5985] ? find_held_lock+0x2b/0x80 [ 51.609369][ T5985] ? __might_fault+0xc5/0x140 [ 51.609393][ T5985] ? __might_fault+0xc5/0x140 [ 51.609423][ T5985] __ia32_sys_io_uring_setup+0xc2/0x170 [ 51.609455][ T5985] __do_fast_syscall_32+0x14b/0x8c0 [ 51.609486][ T5985] do_fast_syscall_32+0x32/0x70 [ 51.609514][ T5985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.609539][ T5985] RIP: 0023:0xf742efbc [ 51.609557][ T5985] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.609576][ T5985] RSP: 002b:00000000f54464bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 51.609597][ T5985] RAX: ffffffffffffffda RBX: 0000000000007042 RCX: 0000000080000a40 [ 51.609610][ T5985] RDX: 00000000f71b11d7 RSI: 0000000000000001 RDI: 00000000f544653c [ 51.609623][ T5985] RBP: 0000000080000ac0 R08: 0000000000000000 R09: 0000000000000000 [ 51.609636][ T5985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.609648][ T5985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.609675][ T5985] [ 51.784751][ T5988] veth0_virt_wifi: entered promiscuous mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x20a000) [ 52.731778][ T857] usb 8-1: USB disconnect, device number 2 [ 53.006348][ T67] Bluetooth: hci0: command tx timeout [ 53.006372][ T67] Bluetooth: hci2: command tx timeout [ 53.006384][ T67] Bluetooth: hci3: command tx timeout [ 53.006397][ T67] Bluetooth: hci1: command tx timeout [ 53.087830][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 53.087847][ T1132] ata1: failed to read log page 10h (errno=-5) [ 53.087862][ T1132] ata1.00: exception Emask 0x1 SAct 0x4040 SErr 0x0 action 0x0 [ 53.087880][ T1132] ata1.00: irq_stat 0x41000000 [ 53.087894][ T1132] ata1.00: failed command: WRITE FPDMA QUEUED [ 53.087904][ T1132] ata1.00: cmd 61/08:30:36:81:08/00:00:00:00:00/40 tag 6 ncq dma 4096 out [ 53.087904][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 53.087955][ T1132] ata1.00: status: { DRDY } [ 53.087969][ T1132] ata1.00: error: { ABRT } [ 53.087983][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 53.087993][ T1132] ata1.00: cmd 60/50:70:36:13:08/10:00:00:00:00/40 tag 14 ncq dma 2138112 in [ 53.087993][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 53.088027][ T1132] ata1.00: status: { DRDY } [ 53.088034][ T1132] ata1.00: error: { ABRT } [ 53.090984][ T1132] ata1.00: configured for UDMA/100 [ 53.125522][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 53.125550][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 53.125569][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 53.125589][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 13 36 00 10 50 00 [ 53.125694][ T1132] I/O error, dev sda, sector 529206 op 0x0:(READ) flags 0x80700 phys_seg 123 prio class 2 [ 53.125904][ T1132] ata1: EH complete [ 54.335232][ T6023] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.344054][ T6023] CIFS: Attempting to mount //127.0.0.1/share/file0 [ 54.367170][ T6023] CIFS: VFS: Error connecting to socket. Aborting operation. [ 54.367223][ T6023] CIFS: VFS: cifs_mount failed w/return code = -111 [ 54.544244][ T6028] FAULT_INJECTION: forcing a failure. [ 54.544244][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 54.544264][ T6028] CPU: 2 UID: 0 PID: 6028 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 54.544277][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.544284][ T6028] Call Trace: [ 54.544289][ T6028] [ 54.544294][ T6028] dump_stack_lvl+0x100/0x190 [ 54.544337][ T6028] should_fail_ex.cold+0x5/0xa [ 54.544358][ T6028] should_failslab+0xc2/0x120 [ 54.544373][ T6028] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.544394][ T6028] ? do_epoll_ctl_file+0x237d/0x36e0 [ 54.544414][ T6028] do_epoll_ctl_file+0x237d/0x36e0 [ 54.544436][ T6028] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 54.544453][ T6028] ? lock_acquire+0x1d1/0x380 [ 54.544465][ T6028] ? __fget_files+0x34/0x3d0 [ 54.544478][ T6028] ? find_held_lock+0x2b/0x80 [ 54.544495][ T6028] ? __fget_files+0x215/0x3d0 [ 54.544511][ T6028] ? __fget_files+0x21f/0x3d0 [ 54.544527][ T6028] ? do_epoll_ctl+0xfd/0x1a0 [ 54.544542][ T6028] do_epoll_ctl+0xfd/0x1a0 [ 54.544558][ T6028] ? __pfx_do_epoll_ctl+0x10/0x10 [ 54.544579][ T6028] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 54.544596][ T6028] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 54.544618][ T6028] __do_fast_syscall_32+0x14b/0x8c0 [ 54.544636][ T6028] do_fast_syscall_32+0x32/0x70 [ 54.544652][ T6028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.544667][ T6028] RIP: 0023:0xf742efbc [ 54.544677][ T6028] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 54.544687][ T6028] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 54.544699][ T6028] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 54.544706][ T6028] RDX: 0000000000000004 RSI: 0000000080000400 RDI: 0000000000000000 [ 54.544713][ T6028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.544720][ T6028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.544726][ T6028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.544741][ T6028] [ 55.085713][ T5791] Bluetooth: hci1: command tx timeout [ 55.085745][ T5791] Bluetooth: hci3: command tx timeout [ 55.085764][ T5791] Bluetooth: hci2: command tx timeout [ 55.085783][ T5791] Bluetooth: hci0: command tx timeout [ 55.471654][ T5979] syz.1.5 (5979) used greatest stack depth: 19576 bytes left [ 56.348198][ T6040] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.442856][ T5975] syz.2.3 (5975) used greatest stack depth: 19440 bytes left [ 56.682576][ T6031] syz.1.16 (6031) used greatest stack depth: 18472 bytes left [ 57.917053][ T6041] syz.3.18 (6041) used greatest stack depth: 17784 bytes left [ 58.472718][ T857] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.543013][ T6068] block nbd2: shutting down sockets [ 59.565390][ T857] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.726589][ T857] usb 8-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 59.730885][ T857] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.730909][ T857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.748725][ T857] metro_usb 8-1:1.0: Metrologic USB to Serial converter detected [ 59.759710][ T857] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x394000) [ 60.026532][ T64] IPVS: starting estimator thread 0... [ 60.074053][ T5947] usb 8-1: USB disconnect, device number 3 [ 60.088643][ T5947] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 60.100071][ T5947] metro_usb 8-1:1.0: device disconnected [ 60.115526][ T6083] IPVS: using max 23 ests per chain, 55200 per kthread [ 60.196898][ T857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.366634][ T857] usb 7-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 60.367043][ T857] usb 7-1: config 0 has no interfaces? [ 60.381848][ T857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.381863][ T857] usb 7-1: Product: syz [ 60.381870][ T857] usb 7-1: Manufacturer: syz [ 60.381878][ T857] usb 7-1: SerialNumber: syz [ 60.383476][ T857] usb 7-1: config 0 descriptor?? [ 60.950386][ T6087] Zero length message leads to an empty skb [ 61.337767][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 61.337783][ T1132] ata1: failed to read log page 10h (errno=-5) [ 61.337794][ T1132] ata1.00: exception Emask 0x1 SAct 0x1000000 SErr 0x0 action 0x0 [ 61.337805][ T1132] ata1.00: irq_stat 0x41000000 [ 61.337815][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 61.337821][ T1132] ata1.00: cmd 60/a0:c0:ce:3e:01/1c:00:00:00:00/40 tag 24 ncq dma 3751936 in [ 61.337821][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 61.337852][ T1132] ata1.00: status: { DRDY } [ 61.337859][ T1132] ata1.00: error: { ABRT } [ 61.338524][ T1132] ata1.00: configured for UDMA/100 [ 61.338859][ T1132] sd 0:0:0:0: [sda] tag#24 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 61.338885][ T1132] sd 0:0:0:0: [sda] tag#24 Sense Key : Aborted Command [current] [ 61.338906][ T1132] sd 0:0:0:0: [sda] tag#24 Add. Sense: No additional sense information [ 61.338925][ T1132] sd 0:0:0:0: [sda] tag#24 CDB: Read(10) 28 00 00 01 3e ce 00 1c a0 00 [ 61.338938][ T1132] I/O error, dev sda, sector 81614 op 0x0:(READ) flags 0x80700 phys_seg 102 prio class 2 [ 61.343461][ T1132] ata1: EH complete [ 61.577367][ T857] usb 7-1: USB disconnect, device number 2 [ 62.544612][ T6100] tunl0: entered promiscuous mode [ 62.546231][ T6100] netlink: 'syz.3.37': attribute type 4 has an invalid length. [ 62.546245][ T6100] netlink: 9 bytes leftover after parsing attributes in process `syz.3.37'. [ 63.325866][ T5901] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.477196][ T5901] usb 8-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 63.478425][ T5901] usb 8-1: config 0 has no interfaces? [ 63.484132][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.484151][ T5901] usb 8-1: Product: syz [ 63.484161][ T5901] usb 8-1: Manufacturer: syz [ 63.484171][ T5901] usb 8-1: SerialNumber: syz [ 63.503060][ T5901] usb 8-1: config 0 descriptor?? [ 63.869075][ T6126] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 64.156614][ T5950] usb 8-1: USB disconnect, device number 4 [ 64.859227][ T6142] netlink: 'syz.2.51': attribute type 2 has an invalid length. [ 64.859243][ T6142] netlink: 'syz.2.51': attribute type 2 has an invalid length. [ 65.388632][ T6148] [ 65.389443][ T6148] ====================================================== [ 65.391587][ T6148] WARNING: possible circular locking dependency detected [ 65.393735][ T6148] syzkaller #0 Not tainted [ 65.395279][ T6148] ------------------------------------------------------ [ 65.397682][ T6148] syz.2.53/6148 is trying to acquire lock: [ 65.399554][ T6148] ffffffff9162ffa8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.402967][ T6148] [ 65.402967][ T6148] but task is already holding lock: [ 65.405220][ T6148] ffff8880144f1900 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 65.408378][ T6148] [ 65.408378][ T6148] which lock already depends on the new lock. [ 65.408378][ T6148] [ 65.411480][ T6148] [ 65.411480][ T6148] the existing dependency chain (in reverse order) is: [ 65.414220][ T6148] [ 65.414220][ T6148] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 65.416860][ T6148] lock_acquire+0x1d1/0x380 [ 65.418403][ T6148] down_write+0x86/0x1f0 [ 65.419888][ T6148] configfs_depend_item_unlocked+0xf3/0x6a0 [ 65.421843][ T6148] usbg_make_tpg+0x251/0x610 [ 65.423405][ T6148] target_fabric_make_tpg+0xab/0x8c0 [ 65.425166][ T6148] configfs_mkdir+0x525/0xd40 [ 65.426735][ T6148] vfs_mkdir+0x367/0x850 [ 65.428205][ T6148] filename_mkdirat+0x48b/0x5e0 [ 65.429873][ T6148] __ia32_sys_mkdirat+0x88/0xc0 [ 65.431521][ T6148] __do_fast_syscall_32+0x14b/0x8c0 [ 65.433258][ T6148] do_fast_syscall_32+0x32/0x70 [ 65.434848][ T6148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.436881][ T6148] [ 65.436881][ T6148] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 65.439206][ T6148] lock_acquire+0x1d1/0x380 [ 65.440717][ T6148] __mutex_lock+0x19f/0x1c10 [ 65.442271][ T6148] tcm_alloc_inst+0x5f/0x1e0 [ 65.443825][ T6148] try_get_usb_function_instance+0x136/0x1f0 [ 65.445823][ T6148] usb_get_function_instance+0x16/0x70 [ 65.447637][ T6148] function_make+0x18c/0x3f0 [ 65.449196][ T6148] configfs_mkdir+0x525/0xd40 [ 65.450786][ T6148] vfs_mkdir+0x367/0x850 [ 65.452287][ T6148] filename_mkdirat+0x48b/0x5e0 [ 65.453923][ T6148] __ia32_sys_mkdirat+0x88/0xc0 [ 65.455551][ T6148] __do_fast_syscall_32+0x14b/0x8c0 [ 65.457310][ T6148] do_fast_syscall_32+0x32/0x70 [ 65.458935][ T6148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.461004][ T6148] [ 65.461004][ T6148] -> #1 (func_lock){+.+.}-{4:4}: [ 65.463161][ T6148] lock_acquire+0x1d1/0x380 [ 65.464701][ T6148] __mutex_lock+0x19f/0x1c10 [ 65.466270][ T6148] try_get_usb_function_instance+0x26/0x1f0 [ 65.468182][ T6148] usb_get_function_instance+0x16/0x70 [ 65.470024][ T6148] function_make+0x18c/0x3f0 [ 65.471590][ T6148] configfs_mkdir+0x525/0xd40 [ 65.473217][ T6148] vfs_mkdir+0x367/0x850 [ 65.474679][ T6148] filename_mkdirat+0x48b/0x5e0 [ 65.476342][ T6148] __ia32_sys_mkdirat+0x88/0xc0 [ 65.478014][ T6148] __do_fast_syscall_32+0x14b/0x8c0 [ 65.479765][ T6148] do_fast_syscall_32+0x32/0x70 [ 65.481419][ T6148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.483511][ T6148] [ 65.483511][ T6148] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 65.486000][ T6148] check_prev_add+0xeb/0xe60 [ 65.487571][ T6148] __lock_acquire+0x1528/0x1f40 [ 65.489236][ T6148] lock_acquire+0x1d1/0x380 [ 65.490783][ T6148] __mutex_lock+0x19f/0x1c10 [ 65.492364][ T6148] uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.494379][ T6148] configfs_symlink+0x695/0x1340 [ 65.496007][ T6148] vfs_symlink+0x17b/0x4e0 [ 65.497522][ T6148] filename_symlinkat+0x2a6/0x560 [ 65.499180][ T6148] __ia32_sys_symlink+0x78/0xb0 [ 65.500806][ T6148] __do_fast_syscall_32+0x14b/0x8c0 [ 65.502476][ T6148] do_fast_syscall_32+0x32/0x70 [ 65.504075][ T6148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.506112][ T6148] [ 65.506112][ T6148] other info that might help us debug this: [ 65.506112][ T6148] [ 65.509144][ T6148] Chain exists of: [ 65.509144][ T6148] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#26 [ 65.509144][ T6148] [ 65.513483][ T6148] Possible unsafe locking scenario: [ 65.513483][ T6148] [ 65.515670][ T6148] CPU0 CPU1 [ 65.517305][ T6148] ---- ---- [ 65.518935][ T6148] lock(&sb->s_type->i_mutex_key#26); [ 65.520594][ T6148] lock(tpg_instances_lock); [ 65.522724][ T6148] lock(&sb->s_type->i_mutex_key#26); [ 65.525085][ T6148] lock(gadget_subsys.su_mutex); [ 65.526598][ T6148] [ 65.526598][ T6148] *** DEADLOCK *** [ 65.526598][ T6148] [ 65.529015][ T6148] locks held by syz.2.53/6148: 2, last CPU#0: [ 65.530850][ T6148] #0: ffff888023900460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 65.533720][ T6148] #1: ffff8880144f1900 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 65.537044][ T6148] [ 65.537044][ T6148] stack backtrace: [ 65.538864][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 65.541678][ T6148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.544772][ T6148] Call Trace: [ 65.545818][ T6148] [ 65.546729][ T6148] dump_stack_lvl+0x100/0x190 [ 65.548183][ T6148] print_circular_bug.cold+0x178/0x1be [ 65.549859][ T6148] check_noncircular+0x146/0x160 [ 65.551419][ T6148] check_prev_add+0xeb/0xe60 [ 65.552886][ T6148] ? __schedule+0x1270/0x6990 [ 65.554340][ T6148] __lock_acquire+0x1528/0x1f40 [ 65.555775][ T6148] lock_acquire+0x1d1/0x380 [ 65.557161][ T6148] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.559031][ T6148] ? __pfx___might_resched+0x10/0x10 [ 65.560624][ T6148] __mutex_lock+0x19f/0x1c10 [ 65.562033][ T6148] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.563884][ T6148] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.565750][ T6148] ? __pfx___mutex_lock+0x10/0x10 [ 65.567223][ T6148] ? __pfx___might_resched+0x10/0x10 [ 65.568782][ T6148] ? make_vfsgid+0xf1/0x140 [ 65.570107][ T6148] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.571950][ T6148] uvcg_streaming_header_allow_link+0x7c/0x650 [ 65.573754][ T6148] ? inode_permission+0x377/0x630 [ 65.575231][ T6148] ? mntput_no_expire+0xe8/0x220 [ 65.576704][ T6148] configfs_symlink+0x695/0x1340 [ 65.578231][ T6148] ? bpf_lsm_inode_permission+0x9/0x10 [ 65.579883][ T6148] ? security_inode_permission+0xc4/0x280 [ 65.581583][ T6148] ? __pfx_configfs_symlink+0x10/0x10 [ 65.583231][ T6148] vfs_symlink+0x17b/0x4e0 [ 65.584603][ T6148] filename_symlinkat+0x2a6/0x560 [ 65.586151][ T6148] ? __pfx_filename_symlinkat+0x10/0x10 [ 65.587831][ T6148] ? strncpy_from_user+0x19d/0x2d0 [ 65.589368][ T6148] ? do_getname+0x191/0x390 [ 65.590730][ T6148] __ia32_sys_symlink+0x78/0xb0 [ 65.592211][ T6148] __do_fast_syscall_32+0x14b/0x8c0 [ 65.593762][ T6148] do_fast_syscall_32+0x32/0x70 [ 65.595193][ T6148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.597067][ T6148] RIP: 0023:0xf7f04fbc [ 65.598277][ T6148] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 65.603872][ T6148] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 65.606330][ T6148] RAX: ffffffffffffffda RBX: 0000000080019740 RCX: 0000000080019780 [ 65.608630][ T6148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.610942][ T6148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.613302][ T6148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.615699][ T6148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.618042][ T6148] [ 70.916189][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.916218][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.917057][ T1041] cfg80211: failed to load regulatory.db