last executing test programs: 6m20.459985021s ago: executing program 2 (id=74): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000280)=0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2030000aaaaaaa2aa0086dd606c0bdee848ef3394020000000000000000100000000000ff020000000100000000000000000001000051ac5b89e9d28bf0f8b437b27d0e2200089078be5ffc6aa0b0a627ed7e88f953951bd4c6a0c6a8e9097ba2f50cd7dd22ac55b525eeb9d1e467e1d9f3ee91907c3b678d2b76787410454621a7557c54aee91ca68f5bab95a9b8568fb609b3d5d4c3d41928e143da6b1253d8841cb0576ad95f4ccb61a649a1cf1a2c936d9b9e803e958b95c32a6edfa7ec46082f"], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4) sendmmsg$inet(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a1ba32a8e685e6ba2eb3b2f23ed9f40e3fa0314d66c08124d87ab191f366ab6686fa6ae3831f6c72f830cfebee53d4e0cc4b8af9", 0x94}], 0x1}}], 0x1, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x12020, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 6m19.041605281s ago: executing program 2 (id=77): r0 = socket(0x25, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) close(r1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1005, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r7, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000000)) 6m17.352059888s ago: executing program 2 (id=80): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000380)={0xc, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x5460, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x389}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) 6m15.985019624s ago: executing program 2 (id=82): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xf) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r5, 0x0, 0x20008000) sendmsg$sock(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 6m11.719858713s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x100000000000]}) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000040)={0xb0000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200, 0x800000000000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x8, 0x2, [@TCA_U32_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) timer_create(0x3, 0x0, &(0x7f0000000240)) 6m8.201647277s ago: executing program 2 (id=89): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000087c0)={0xf, {"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", 0xbf}}, 0xffffffffffffff81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511881, 0x96) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f00000000c0)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) 5m51.915931326s ago: executing program 32 (id=89): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000087c0)={0xf, {"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", 0xbf}}, 0xffffffffffffff81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511881, 0x96) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f00000000c0)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) 2m46.991394776s ago: executing program 0 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4801, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000380)=""/8, 0x8, 0x60, 0x0, 0x0) 2m45.736544336s ago: executing program 0 (id=457): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.163401338s ago: executing program 0 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xffe2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 2m37.807666385s ago: executing program 0 (id=488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffc, 0x8001, 0xfffe}, 0x14) shutdown(r0, 0x2) 2m37.700207162s ago: executing program 0 (id=489): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) 2m37.524951183s ago: executing program 0 (id=492): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 2m21.815626455s ago: executing program 33 (id=492): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 43.07360341s ago: executing program 5 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffffc0, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000280), 0x55, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 40.906105902s ago: executing program 5 (id=856): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x410000022) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40080) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 36.500359316s ago: executing program 5 (id=864): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa8, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 35.547926343s ago: executing program 5 (id=868): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {0x0}, {&(0x7f0000001800)=""/138, 0x8a}], 0x3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_create(0x7ffd) syz_io_uring_setup(0x239, &(0x7f0000001bc0)={0x0, 0x73c0, 0x8000}, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80b, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@local, 0xf3f0, 0x1, 0x2, 0x1, 0x6, 0x7e4}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x200, 0x12) 32.532576437s ago: executing program 5 (id=875): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x1dd, 0x0) syz_open_dev$vim2m(0x0, 0x8005, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffc80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 26.921301268s ago: executing program 5 (id=884): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 16.157899767s ago: executing program 6 (id=902): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed, 0x0, 0x1}, 0xe) 13.916716649s ago: executing program 6 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0x50, 0xfffffff9, {0x77359400}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "67ae27eb12254d4d"}}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x8002) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 13.058844305s ago: executing program 4 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000180)) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x3, 0xfffffbff, 0x303}) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) 12.767486473s ago: executing program 6 (id=910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000400000000000900020073dd797a3100"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x2, 0x0) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRES16=r6], 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0x4) 11.531359731s ago: executing program 34 (id=884): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 11.508030047s ago: executing program 4 (id=913): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'\x00', 0x400}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 11.507527678s ago: executing program 3 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) unshare(0x28000600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstatfs(r6, &(0x7f0000000340)=""/244) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) 11.410931445s ago: executing program 6 (id=915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) 11.189720914s ago: executing program 1 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 10.315408864s ago: executing program 3 (id=917): io_setup(0x1fc, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x7, 0xffffffffffffffff, 0x80000}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() tkill(r1, 0xb) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, 0xffffffffffffffff, 0xb}}, 0x48) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 8.579573854s ago: executing program 1 (id=918): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x51) ioprio_get$pid(0x2, r3) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffcc5, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000000ab1d00"/25], 0x48) 8.578879718s ago: executing program 4 (id=919): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000004, 0x10048484, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141001, 0x0) close(r1) r3 = getpid() syz_pidfd_open(r3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 8.530942246s ago: executing program 3 (id=920): fsopen(0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x58, 0x0, @fd_index=0x7, 0x400, {0x0, r0}, 0x77e7f3d6, 0x1, 0x1, {0x0, 0x0, r1}}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 7.443046258s ago: executing program 1 (id=921): openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, &(0x7f0000000100)=""/113, 0x71) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 7.441503333s ago: executing program 6 (id=922): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6.479727325s ago: executing program 4 (id=923): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0xff, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)=@multiplanar_fd={0xffffffff, 0xa, 0x4, 0x10000, 0x6, {0x77359400}, {0x5, 0x8, 0x4, 0x3, 0xa0, 0x7, "244e8008"}, 0x5, 0x4, {&(0x7f00000002c0)=[{0x7, 0x7, {}, 0x791}, {0x94, 0xe59, {}, 0xd57}]}, 0x10}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x3f1, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) 5.550566985s ago: executing program 1 (id=924): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x1, 0x5, 0x3, 0x0, 0x0, {0x8, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x841) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000640)=[{r0, 0x100}], 0x1, &(0x7f0000000680)={0x77359400}, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="0100000097", 0x5) close(r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 5.215008997s ago: executing program 3 (id=925): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={r5, 0x0, 0x0}, 0x10) 3.953739002s ago: executing program 6 (id=926): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r1, 0x6}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x3b, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_gettime(r3, 0x0) r4 = open(0x0, 0x0, 0x0) open_tree(r4, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581ef02"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) setreuid(0xffffffffffffffff, 0xee00) fsmount(0xffffffffffffffff, 0x1, 0xf4) 2.655622813s ago: executing program 4 (id=927): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x86800, 0x0) r2 = syz_io_uring_setup(0x10e, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000060000000000000000000000030000000000000002000000000000000f000000000000002f64"], 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x1, @ANYRES8=r1, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e9200500"], 0x50) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x5}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x8, &(0x7f0000000040)=""/19, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) connect$pppl2tp(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x6, &(0x7f0000000200)=0x400001bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f00000000c0)) 2.41568556s ago: executing program 1 (id=928): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x12, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000003c0)={{0x0, 0x1, 0x8, 0x1, 'syz0\x00', 0x8000}, 0x3, 0x4, 0x8000, r3, 0x0, 0x3, 'syz0\x00', &(0x7f00000001c0)}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x6, 0xffffff79, 0x16c00000, 0x20805, r1, 0x80, '\x00', r2, r5, 0xfffffffe, 0x80000083, 0x10004, 0x5, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8d, 0xc5, 0xa7, 0x20, 0x1a0a, 0x101, 0xeedf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x88, 0x0, 0x0, 0x4e, 0x9e, 0x5e}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2.03061454s ago: executing program 3 (id=929): getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) eventfd(0xe50b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f00000010c0)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.029873381s ago: executing program 4 (id=930): r0 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = epoll_create1(0x0) r5 = creat(0x0, 0x4e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x1}) close(r5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x3, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffd9, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x290}) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x304, 0x0, 0x0, 0x0, 0x0}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/158, 0x9e}], 0x1}, 0x20) 51.498267ms ago: executing program 1 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x9, 0x5c, 0x167, 0x0, 0x5d, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e23, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "cf24000281831aec3d7215370100000075d0ce9ab78a3c6e", "6346a8d16a4263470cfd0b63ec6331239ed149bff2dd6edbfe35572f5292dc21"}}}}}}}, 0x72) r5 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r5, 0xe, 0x0) shmctl$SHM_LOCK(r5, 0xb) 0s ago: executing program 3 (id=932): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): v_slave_0 (retrying later): interface not active [ 83.582622][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.594386][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.604488][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.611641][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.638373][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.654623][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.662296][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.689014][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.703516][ T5826] team0: Port device team_slave_0 added [ 83.712124][ T5826] team0: Port device team_slave_1 added [ 83.762164][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.769447][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.795933][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.816398][ T5831] Bluetooth: hci1: command tx timeout [ 83.816402][ T5838] Bluetooth: hci4: command tx timeout [ 83.857824][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.864808][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.891363][ T5838] Bluetooth: hci0: command tx timeout [ 83.891377][ T5836] Bluetooth: hci2: command tx timeout [ 83.891837][ T5831] Bluetooth: hci3: command tx timeout [ 83.897589][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.926848][ T5827] team0: Port device team_slave_0 added [ 83.935377][ T5827] team0: Port device team_slave_1 added [ 83.955559][ T5825] hsr_slave_0: entered promiscuous mode [ 83.962280][ T5825] hsr_slave_1: entered promiscuous mode [ 83.973992][ T5824] hsr_slave_0: entered promiscuous mode [ 83.980260][ T5824] hsr_slave_1: entered promiscuous mode [ 83.986257][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.994301][ T5824] Cannot create hsr debugfs directory [ 84.013706][ T5834] hsr_slave_0: entered promiscuous mode [ 84.020060][ T5834] hsr_slave_1: entered promiscuous mode [ 84.026187][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.033909][ T5834] Cannot create hsr debugfs directory [ 84.076389][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.083642][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.110202][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.150787][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.158140][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.184558][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.251038][ T5826] hsr_slave_0: entered promiscuous mode [ 84.257270][ T5826] hsr_slave_1: entered promiscuous mode [ 84.263766][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.271404][ T5826] Cannot create hsr debugfs directory [ 84.341268][ T5827] hsr_slave_0: entered promiscuous mode [ 84.347452][ T5827] hsr_slave_1: entered promiscuous mode [ 84.354293][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.361970][ T5827] Cannot create hsr debugfs directory [ 84.672630][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.684468][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.696077][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.716090][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.763218][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.774236][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.784754][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.797657][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.861360][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.872890][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.883129][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.894499][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.999777][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.031280][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.043080][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.073333][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.088975][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.144254][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.167246][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.177514][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.199459][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.220560][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.240711][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.285099][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.293108][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.304702][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.311887][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.351410][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.392190][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.415072][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.422244][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.440140][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.447248][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.495371][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.526072][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.533253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.572371][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.579651][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.640180][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.682743][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.694136][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.790160][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.800064][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.878998][ T5831] Bluetooth: hci4: command tx timeout [ 85.879457][ T5838] Bluetooth: hci1: command tx timeout [ 85.905721][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.922413][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.929632][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.958505][ T5838] Bluetooth: hci0: command tx timeout [ 85.962609][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.970890][ T5838] Bluetooth: hci3: command tx timeout [ 85.970937][ T5838] Bluetooth: hci2: command tx timeout [ 85.987179][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.994425][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.007646][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.014853][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.056260][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.063467][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.222864][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.250301][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.379211][ T5824] veth0_vlan: entered promiscuous mode [ 86.417395][ T5824] veth1_vlan: entered promiscuous mode [ 86.475622][ T5825] veth0_vlan: entered promiscuous mode [ 86.561316][ T5824] veth0_macvtap: entered promiscuous mode [ 86.581483][ T5825] veth1_vlan: entered promiscuous mode [ 86.640890][ T5834] veth0_vlan: entered promiscuous mode [ 86.649563][ T5824] veth1_macvtap: entered promiscuous mode [ 86.676325][ T5825] veth0_macvtap: entered promiscuous mode [ 86.692369][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.708888][ T5834] veth1_vlan: entered promiscuous mode [ 86.723388][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.733941][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.743586][ T5825] veth1_macvtap: entered promiscuous mode [ 86.761152][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.795981][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.805894][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.816596][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.825555][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.851144][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.862087][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.876145][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.904215][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.915090][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.928783][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.964807][ T5834] veth0_macvtap: entered promiscuous mode [ 86.975088][ T5834] veth1_macvtap: entered promiscuous mode [ 86.989483][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.000738][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.010254][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.019793][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.030243][ T5827] veth0_vlan: entered promiscuous mode [ 87.102920][ T5826] veth0_vlan: entered promiscuous mode [ 87.130715][ T5827] veth1_vlan: entered promiscuous mode [ 87.149638][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.163131][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.173503][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.184035][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.196244][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.223645][ T5826] veth1_vlan: entered promiscuous mode [ 87.259858][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.270635][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.281293][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.297636][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.315060][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.346812][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.358531][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.367376][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.381902][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.411625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.423466][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.547347][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.562625][ T5826] veth0_macvtap: entered promiscuous mode [ 87.576132][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.588522][ T5827] veth0_macvtap: entered promiscuous mode [ 87.615863][ T5826] veth1_macvtap: entered promiscuous mode [ 87.644017][ T5827] veth1_macvtap: entered promiscuous mode [ 87.663176][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.680215][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.684400][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.697038][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.796447][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.811274][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.827867][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.847764][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.857645][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.881220][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.904276][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.933204][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.951705][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.966712][ T5831] Bluetooth: hci1: command tx timeout [ 87.972527][ T5831] Bluetooth: hci4: command tx timeout [ 87.972743][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.990060][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.000875][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.011842][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.022921][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.034477][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.045964][ T5838] Bluetooth: hci2: command tx timeout [ 88.045989][ T5831] Bluetooth: hci3: command tx timeout [ 88.046028][ T5831] Bluetooth: hci0: command tx timeout [ 88.052382][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.074333][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.122444][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.158126][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.185796][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.201515][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.211914][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.223177][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.241443][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.335982][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.343566][ T5918] random: crng reseeded on system resumption [ 88.344383][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.419992][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.421396][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.435577][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.519830][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.533627][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.606095][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.658172][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.710847][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.835407][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.020217][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.034669][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.045640][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.071560][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.116763][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.135877][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.151558][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162954][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.272564][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.300915][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.327544][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.355133][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.364263][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.378487][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.384136][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.396329][ T5923] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.427113][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.879085][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.887105][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.947988][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.996066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.642701][ T5831] Bluetooth: hci4: command tx timeout [ 90.647964][ T5836] Bluetooth: hci1: command tx timeout [ 90.648371][ T5831] Bluetooth: hci2: command tx timeout [ 90.654446][ T5838] Bluetooth: hci0: command tx timeout [ 90.659114][ T5831] Bluetooth: hci3: command tx timeout [ 91.068308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.247956][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.339942][ T26] cfg80211: failed to load regulatory.db [ 92.732698][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.742178][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.818371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 92.919370][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.937251][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 93.842143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.938021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.056281][ T5951] syz.2.9 uses old SIOCAX25GETINFO [ 94.528463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.402086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.246479][ T5977] overlay: Unknown parameter '/' [ 98.040567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.288159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.190914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.293166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.293349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.630710][ T6017] kAFS: unable to lookup cell '' [ 103.130378][ T6022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.227884][ T6022] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 105.410537][ T6043] process 'syz.0.21' launched '/dev/fd/7' with NULL argv: empty string added [ 107.460373][ T6037] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 42344 - 0 [ 107.800090][ T6037] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 42344 - 0 [ 108.204022][ T6037] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 42344 - 0 [ 108.564219][ T6037] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 42344 - 0 [ 108.999223][ T6037] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 52313 - 0 [ 109.021032][ T6060] input: syz1 as /devices/virtual/input/input6 [ 109.058719][ T6037] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 52313 - 0 [ 109.834059][ T6037] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 52313 - 0 [ 109.897924][ T6037] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 52313 - 0 [ 109.982001][ T6037] geneve2: entered promiscuous mode [ 109.996350][ T6037] geneve2: entered allmulticast mode [ 110.028569][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26'. [ 119.054027][ T6123] syz.3.35: attempt to access beyond end of device [ 119.054027][ T6123] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 119.067583][ T6123] exFAT-fs (nbd3): unable to read boot sector [ 119.073973][ T6123] exFAT-fs (nbd3): failed to read boot sector [ 119.081254][ T6123] exFAT-fs (nbd3): failed to recognize exfat type [ 119.676685][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 119.706151][ T6127] batman_adv: batadv0: Adding interface: dummy0 [ 119.712581][ T6127] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.738588][ T6127] batman_adv: batadv0: Interface activated: dummy0 [ 122.037340][ T6146] CUSE: unknown device info "z" [ 122.042446][ T6146] CUSE: unknown device info "#!" [ 122.047441][ T6146] CUSE: unknown device info "" [ 122.052394][ T6146] CUSE: unknown device info "€" [ 122.057375][ T6146] CUSE: zero length info key specified [ 122.521656][ T6133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.772251][ T6154] ======================================================= [ 123.772251][ T6154] WARNING: The mand mount option has been deprecated and [ 123.772251][ T6154] and is ignored by this kernel. Remove the mand [ 123.772251][ T6154] option from the mount to silence this warning. [ 123.772251][ T6154] ======================================================= [ 123.819747][ T6154] 9pnet_fd: Insufficient options for proto=fd [ 124.586850][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 127.684726][ T6178] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.192862][ T6186] : entered promiscuous mode [ 129.482753][ T6189] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 133.176732][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.219498][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.434737][ T6219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.860738][ T6214] Zero length message leads to an empty skb [ 137.233291][ T59] libceph: connect (1)[c::]:6789 error -101 [ 137.479818][ T6245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.61'. [ 137.740580][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 138.005492][ T6239] ceph: No mds server is up or the cluster is laggy [ 138.009975][ T9] libceph: connect (1)[c::]:6789 error -101 [ 138.808149][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 139.446094][ T9] libceph: connect (1)[c::]:6789 error -101 [ 139.457842][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 142.614320][ T6277] xt_CT: No such helper "snmp" [ 143.779897][ T9] IPVS: starting estimator thread 0... [ 144.588579][ T6294] IPVS: using max 23 ests per chain, 55200 per kthread [ 145.648194][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.835364][ T6381] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.847284][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 156.862324][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.943130][ T6382] 9pnet_fd: Insufficient options for proto=fd [ 157.733961][ T6381] bridge_slave_1 (unregistering): left allmulticast mode [ 157.744559][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.158715][ T6393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.560651][ T6472] overlayfs: missing 'lowerdir' [ 163.648608][ T6473] netlink: 112 bytes leftover after parsing attributes in process `syz.1.91'. [ 169.732146][ T30] audit: type=1326 audit(1742626129.598:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6517 comm="syz.4.98" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79e658d169 code=0x0 [ 169.907768][ T6522] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 169.909228][ T6522] batman_adv: batadv0: Adding interface: gretap1 [ 169.909246][ T6522] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.909275][ T6522] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 171.202248][ T6536] 9pnet_fd: Insufficient options for proto=fd [ 174.294140][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.301469][ T6564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.137953][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 176.456901][ T6575] tty tty3: ldisc open failed (-12), clearing slot 2 [ 182.469723][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.481140][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.490025][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.498902][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.506879][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 182.516002][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.599445][ T5841] Bluetooth: hci5: command tx timeout [ 186.507951][ T5841] Bluetooth: hci2: command tx timeout [ 186.678914][ T5841] Bluetooth: hci5: command tx timeout [ 187.834843][ T6654] Bluetooth: MGMT ver 1.23 [ 187.884261][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 188.768332][ T5841] Bluetooth: hci5: command tx timeout [ 189.580407][ T6471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.591185][ T6471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42344 - 0 [ 189.607845][ T6471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 52313 - 0 [ 189.960930][ T6681] serio: Serial port ptm0 [ 189.968803][ T5841] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 189.977413][ T5841] Bluetooth: hci0: Injecting HCI hardware error event [ 189.988096][ T5831] Bluetooth: hci0: hardware error 0x00 [ 190.388583][ T6680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.547576][ T6688] overlayfs: overlapping lowerdir path [ 190.933964][ T6694] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 191.547568][ T5841] Bluetooth: hci5: command tx timeout [ 193.022228][ T6701] slcan: can't register candev [ 193.028661][ T6701] Falling back ldisc for ttyS3. [ 193.232069][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.242541][ T6694] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 193.626011][ T6712] befs: (nullb0): No write support. Marking filesystem read-only [ 193.637983][ T6712] befs: (nullb0): invalid magic header [ 194.336135][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 194.848368][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.855013][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.992646][ T6471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.009816][ T6471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42344 - 0 [ 195.030242][ T6471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 52313 - 0 [ 197.593151][ T6471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.867896][ T6471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42344 - 0 [ 197.878453][ T6471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 52313 - 0 [ 197.937939][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.945037][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.955635][ T6621] bridge_slave_0: entered allmulticast mode [ 197.963340][ T6621] bridge_slave_0: entered promiscuous mode [ 197.988162][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.996350][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.011466][ T6621] bridge_slave_1: entered allmulticast mode [ 198.120943][ T6621] bridge_slave_1: entered promiscuous mode [ 198.957201][ T6471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.981946][ T6471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42344 - 0 [ 199.150799][ T6471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 52313 - 0 [ 199.578970][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.751749][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.687348][ T6621] team0: Port device team_slave_0 added [ 201.809221][ T6764] netlink: 'syz.0.136': attribute type 9 has an invalid length. [ 201.845739][ T6621] team0: Port device team_slave_1 added [ 202.443489][ T5913] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 203.133243][ T5831] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 203.348036][ T5913] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.356853][ T5913] usb 1-1: config 0 has no interface number 0 [ 203.363374][ T5913] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 203.372585][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.458638][ T6773] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 205.310588][ T5913] usb 1-1: config 0 descriptor?? [ 205.772520][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.805234][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.978662][ T6782] new mount options do not match the existing superblock, will be ignored [ 206.001552][ T6782] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 206.039213][ T6782] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 206.072745][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.565013][ T6779] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 206.689545][ T5913] usb 1-1: can't set config #0, error -71 [ 206.701535][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.737866][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.779046][ T5913] usb 1-1: USB disconnect, device number 2 [ 206.816578][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.896081][ T6789] xt_bpf: check failed: parse error [ 206.927295][ T6789] input: syz1 as /devices/virtual/input/input7 [ 207.227392][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 207.238059][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 207.246071][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 207.251090][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 208.593905][ T5841] Bluetooth: hci2: hardware error 0x00 [ 211.408548][ T5841] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 211.485104][ T6813] 9pnet_fd: Insufficient options for proto=fd [ 212.346078][ T6811] batman_adv: batadv0: Adding interface: geneve2 [ 212.352952][ T6811] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 212.378455][ T6621] hsr_slave_0: entered promiscuous mode [ 212.410558][ T6621] hsr_slave_1: entered promiscuous mode [ 212.522413][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.531205][ T6621] Cannot create hsr debugfs directory [ 212.627390][ T6471] bridge_slave_1: left allmulticast mode [ 212.649504][ T6471] bridge_slave_1: left promiscuous mode [ 212.857393][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.813966][ T6471] bridge_slave_0: left allmulticast mode [ 213.873198][ T6471] bridge_slave_0: left promiscuous mode [ 213.879250][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.828652][ T6847] netlink: 'syz.4.153': attribute type 10 has an invalid length. [ 218.124329][ T6851] netlink: 'syz.3.154': attribute type 9 has an invalid length. [ 219.085577][ T6471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.098808][ T6471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.109668][ T6471] bond0 (unregistering): Released all slaves [ 219.204742][ T6847] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.293202][ T6867] UHID_CREATE from different security context by process 171 (syz.3.156), this is not allowed. [ 223.373831][ T6881] vivid-007: ================= START STATUS ================= [ 223.381863][ T6881] vivid-007: Enable Output Cropping: true grabbed [ 223.388668][ T6881] vivid-007: Enable Output Composing: true grabbed [ 223.395229][ T6881] vivid-007: Enable Output Scaler: true grabbed [ 223.401715][ T6881] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 223.408959][ T6881] vivid-007: Transmit Mode: HDMI grabbed [ 223.415865][ T6881] vivid-007: Hotplug Present: 0x00000000 [ 223.421966][ T6881] vivid-007: RxSense Present: 0x00000000 [ 223.428014][ T6881] vivid-007: EDID Present: 0x00000000 [ 223.434222][ T6881] vivid-007: ================== END STATUS ================== [ 224.736362][ T6867] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.748120][ T6867] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 225.787503][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 226.941139][ T6904] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 227.238691][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 227.770236][ T5927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 227.859356][ T6471] hsr_slave_0: left promiscuous mode [ 227.906593][ T6471] hsr_slave_1: left promiscuous mode [ 227.918679][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.926231][ T6471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.967603][ T5927] usb 2-1: device descriptor read/64, error -71 [ 228.024619][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.038125][ T6471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.408145][ T5927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 229.264716][ T6471] veth1_macvtap: left promiscuous mode [ 229.348075][ T6471] veth0_macvtap: left promiscuous mode [ 229.375061][ T6471] veth1_vlan: left promiscuous mode [ 229.394988][ T6471] veth0_vlan: left promiscuous mode [ 229.954744][ T6917] dccp_close: ABORT with 15584 bytes unread [ 231.670993][ T30] audit: type=1326 audit(1742626644.429:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f551b78d169 code=0x0 [ 231.827369][ T6471] team0 (unregistering): Port device team_slave_1 removed [ 232.299792][ T6471] team0 (unregistering): Port device team_slave_0 removed [ 235.266309][ T6621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.390585][ T6621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.593117][ T6621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.752655][ T6621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.070777][ T6971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.765052][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.781402][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.799627][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.806747][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.895467][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.902826][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.875290][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 241.556710][ T6998] mmap: syz.1.177 (6998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.484945][ T7000] trusted_key: encrypted_key: insufficient parameters specified [ 246.697813][ T7018] netlink: 100 bytes leftover after parsing attributes in process `syz.1.182'. [ 246.975700][ T7016] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 247.147722][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.181222][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.198058][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.214145][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.476870][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.490617][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.038971][ T7040] __vm_enough_memory: pid: 7040, comm: syz.3.185, bytes: 21200343285760 not enough memory for the allocation [ 250.370729][ T5836] Bluetooth: hci1: command tx timeout [ 253.278167][ T5836] Bluetooth: hci1: command tx timeout [ 253.338389][ T7053] trusted_key: encrypted_key: insufficient parameters specified [ 255.258559][ T7075] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 255.408012][ T5836] Bluetooth: hci1: command tx timeout [ 255.559255][ T7069] gtp0: entered allmulticast mode [ 256.041480][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.048770][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.312717][ T7086] sg_write: data in/out 989/8 bytes for SCSI command 0xff-- guessing data in; [ 256.312717][ T7086] program syz.1.194 not setting count and/or reply_len properly [ 257.687894][ T5836] Bluetooth: hci1: command tx timeout [ 258.731173][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 258.737334][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 258.806353][ T7094] ceph: No mds server is up or the cluster is laggy [ 259.008163][ T9] libceph: connect (1)[c::]:6789 error -101 [ 259.108995][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 259.375280][ T7110] netlink: 'syz.4.206': attribute type 10 has an invalid length. [ 260.363247][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.372240][ T7110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 261.940198][ T7132] trusted_key: encrypted_key: insufficient parameters specified [ 262.325043][ T63] bridge_slave_1: left allmulticast mode [ 262.473487][ T63] bridge_slave_1: left promiscuous mode [ 262.680414][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.542596][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 263.548670][ T7146] block device autoloading is deprecated and will be removed. [ 263.834246][ T63] bridge_slave_0: left allmulticast mode [ 263.857569][ T7145] netlink: 173 bytes leftover after parsing attributes in process `syz.4.201'. [ 263.865747][ T63] bridge_slave_0: left promiscuous mode [ 263.938195][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.065326][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 267.079962][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 267.445743][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 267.453711][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 268.361347][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 268.367449][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 268.391510][ T7163] ceph: No mds server is up or the cluster is laggy [ 268.709823][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.727393][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.747367][ T63] bond0 (unregistering): Released all slaves [ 270.534263][ T7019] chnl_net:caif_netlink_parms(): no params data found [ 270.989189][ T63] hsr_slave_0: left promiscuous mode [ 270.996818][ T63] hsr_slave_1: left promiscuous mode [ 272.342860][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.368838][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.907891][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 274.058110][ T9] usb 4-1: device descriptor read/64, error -71 [ 274.458012][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 274.608637][ T9] usb 4-1: device descriptor read/64, error -71 [ 274.767486][ T9] usb usb4-port1: attempt power cycle [ 274.993894][ T63] team0 (unregistering): Port device team_slave_1 removed [ 275.046499][ T63] team0 (unregistering): Port device team_slave_0 removed [ 275.150890][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 275.203707][ T9] usb 4-1: device descriptor read/8, error -71 [ 275.462888][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 275.494814][ T9] usb 4-1: device descriptor read/8, error -71 [ 275.650004][ T9] usb usb4-port1: unable to enumerate USB device [ 277.988364][ T7226] kAFS: Can only specify source 'none' with -o dyn [ 278.005974][ T7226] evm: overlay not supported [ 278.747301][ T7227] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 278.780350][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.808712][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.837303][ T7019] bridge_slave_0: entered allmulticast mode [ 278.852642][ T7019] bridge_slave_0: entered promiscuous mode [ 278.894651][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.980847][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.998269][ T7019] bridge_slave_1: entered allmulticast mode [ 279.005416][ T7019] bridge_slave_1: entered promiscuous mode [ 279.194343][ T7019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.472800][ T7019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.582430][ T7243] xt_TCPMSS: Only works on TCP SYN packets [ 280.493412][ T7242] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 280.501381][ T7242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.223'. [ 281.091696][ T7019] team0: Port device team_slave_0 added [ 281.105076][ T7019] team0: Port device team_slave_1 added [ 281.320084][ T7251] ubi31: attaching mtd0 [ 281.327504][ T7251] ubi31: scanning is finished [ 281.332416][ T7251] ubi31: empty MTD device detected [ 281.596138][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.817760][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.839444][ T7254] trusted_key: encrypted_key: insufficient parameters specified [ 281.862929][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.846703][ T7251] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 282.854463][ T7251] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 282.861954][ T7251] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 282.869558][ T7251] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 282.907723][ T7019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.275235][ T7251] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 283.282422][ T7251] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 283.290984][ T7251] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1618432075 [ 283.301220][ T7251] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 283.313648][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 283.320046][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 283.326494][ T7262] ubi31: background thread "ubi_bgt31d" started, PID 7262 [ 283.357781][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.364972][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.413559][ T7264] ceph: No mds server is up or the cluster is laggy [ 283.422339][ T7019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.739160][ T7019] hsr_slave_0: entered promiscuous mode [ 283.746128][ T7019] hsr_slave_1: entered promiscuous mode [ 283.920760][ T7280] __vm_enough_memory: pid: 7280, comm: syz.0.228, bytes: 21199762661376 not enough memory for the allocation [ 284.927877][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 285.554838][ T7290] warning: `syz.4.232' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 291.384286][ T7333] __vm_enough_memory: pid: 7333, comm: syz.4.240, bytes: 21200447004672 not enough memory for the allocation [ 291.384623][ T5883] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 291.954449][ T7019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.995429][ T7019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.013515][ T7019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.229366][ T5883] usb 4-1: device descriptor read/all, error -71 [ 292.236067][ T7019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.953440][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.032089][ T7019] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.089319][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.096507][ T6471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.142344][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.149617][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.516300][ T7368] ceph: No mds server is up or the cluster is laggy [ 296.487392][ T7019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.791207][ T5913] Process accounting resumed [ 298.114432][ T7019] veth0_vlan: entered promiscuous mode [ 298.140451][ T7410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.386938][ T7420] __vm_enough_memory: pid: 7420, comm: syz.1.254, bytes: 21200662343680 not enough memory for the allocation [ 298.685419][ T7019] veth1_vlan: entered promiscuous mode [ 298.892643][ T7019] veth0_macvtap: entered promiscuous mode [ 299.091606][ T7019] veth1_macvtap: entered promiscuous mode [ 299.293839][ T7428] new mount options do not match the existing superblock, will be ignored [ 299.316119][ T7428] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 299.464502][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.564681][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.677095][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.723284][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.764201][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.807732][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.872392][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.959784][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.071405][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.221106][ T7436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.343039][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.353763][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.365991][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.376842][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.387071][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.397867][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.415979][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.448033][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.478886][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.880433][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.895536][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.904194][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.917888][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.926472][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 302.936245][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.620570][ T5841] Bluetooth: hci5: command tx timeout [ 305.996606][ T7462] chnl_net:caif_netlink_parms(): no params data found [ 307.161727][ T7511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.664489][ T5841] Bluetooth: hci5: command tx timeout [ 310.122789][ T5841] Bluetooth: hci5: command tx timeout [ 311.736941][ T7524] bridge_slave_0: left allmulticast mode [ 311.742842][ T7524] bridge_slave_0: left promiscuous mode [ 311.748662][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.790457][ T7524] bridge_slave_1: left allmulticast mode [ 311.796221][ T7524] bridge_slave_1: left promiscuous mode [ 311.802103][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.867574][ T7524] bond0: (slave bond_slave_0): Releasing backup interface [ 311.929147][ T7524] bond0: (slave bond_slave_1): Releasing backup interface [ 311.964192][ T7524] team0: Port device team_slave_0 removed [ 311.996712][ T7524] team0: Port device team_slave_1 removed [ 312.003372][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.010869][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.034066][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.042065][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.198225][ T5841] Bluetooth: hci5: command tx timeout [ 312.978375][ T7555] block device autoloading is deprecated and will be removed. [ 312.981121][ T7555] syz.0.285: attempt to access beyond end of device [ 312.981121][ T7555] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 313.641479][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.641783][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.642877][ T7462] bridge_slave_0: entered allmulticast mode [ 313.669814][ T7462] bridge_slave_0: entered promiscuous mode [ 313.702013][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.702090][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.702264][ T7462] bridge_slave_1: entered allmulticast mode [ 313.703382][ T7462] bridge_slave_1: entered promiscuous mode [ 314.372943][ T7462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.586032][ T7462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.900493][ T7462] team0: Port device team_slave_0 added [ 315.297339][ T7462] team0: Port device team_slave_1 added [ 315.892937][ T7574] netlink: 173 bytes leftover after parsing attributes in process `syz.1.297'. [ 316.131407][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.162243][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.277107][ T7462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.329274][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.336303][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.390382][ T7591] netlink: 'syz.1.300': attribute type 9 has an invalid length. [ 316.415951][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.300'. [ 316.466936][ T7462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.646345][ T36] bridge_slave_1: left allmulticast mode [ 316.652161][ T36] bridge_slave_1: left promiscuous mode [ 316.661838][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.707004][ T36] bridge_slave_0: left allmulticast mode [ 316.716491][ T36] bridge_slave_0: left promiscuous mode [ 316.771829][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.036165][ T7606] No such timeout policy "syz0" [ 317.261380][ T7606] syz.3.302: attempt to access beyond end of device [ 317.261380][ T7606] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 317.275900][ T7606] XFS (nbd3): SB validate failed with error -5. [ 317.832453][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.835868][ T7631] cgroup: No subsys list or none specified [ 320.109452][ T7634] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 321.242354][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 322.254773][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 322.277888][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 57, changing to 7 [ 322.298201][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.413790][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 32871, setting to 1024 [ 322.438643][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.450130][ T26] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.460954][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.469138][ T26] usb 4-1: Product: syz [ 322.473148][ T36] bond0 (unregistering): Released all slaves [ 322.473346][ T26] usb 4-1: Manufacturer: syz [ 322.485011][ T26] usb 4-1: SerialNumber: syz [ 322.517198][ T26] usb 4-1: config 0 descriptor?? [ 322.535579][ T7462] hsr_slave_0: entered promiscuous mode [ 322.556925][ T26] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 4d, bLength 9, bSynchAddress 7d [ 322.567919][ T7462] hsr_slave_1: entered promiscuous mode [ 322.574155][ T7462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.607157][ T7462] Cannot create hsr debugfs directory [ 322.996947][ T26] usb 4-1: USB disconnect, device number 8 [ 323.964801][ T36] hsr_slave_0: left promiscuous mode [ 323.989345][ T36] hsr_slave_1: left promiscuous mode [ 323.995464][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.004324][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.016398][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.025822][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.091186][ T36] veth1_macvtap: left promiscuous mode [ 324.097336][ T36] veth0_macvtap: left promiscuous mode [ 324.105210][ T36] veth1_vlan: left promiscuous mode [ 324.111765][ T36] veth0_vlan: left promiscuous mode [ 324.159374][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.164729][ T7670] netlink: 160 bytes leftover after parsing attributes in process `syz.0.320'. [ 324.369181][ T7674] capability: warning: `syz.3.322' uses deprecated v2 capabilities in a way that may be insecure [ 325.855769][ T36] team0 (unregistering): Port device team_slave_1 removed [ 325.912789][ T36] team0 (unregistering): Port device team_slave_0 removed [ 326.401742][ T7672] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 326.947926][ T7701] tipc: Started in network mode [ 326.976119][ T7701] tipc: Node identity 400, cluster identity 7 [ 326.995527][ T7701] tipc: Node number set to 1024 [ 327.280660][ T7714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'. [ 330.433248][ T7462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.483773][ T7462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.527361][ T7462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.558910][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 330.580531][ T7462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.862480][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.967994][ T52] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 331.042614][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 331.143748][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 331.252005][ T5910] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 331.277444][ T52] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 331.328796][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.362333][ T52] usb 5-1: config 0 has no interface number 0 [ 331.362419][ T7462] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.438537][ T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 331.461382][ T5910] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 331.501408][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.510942][ T5910] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 331.512420][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.526561][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.533962][ T52] usb 5-1: Product: syz [ 331.566588][ T5910] usb 4-1: Manufacturer: syz [ 331.583194][ T52] usb 5-1: Manufacturer: syz [ 331.628825][ T5910] usb 4-1: config 0 descriptor?? [ 331.634070][ T52] usb 5-1: SerialNumber: syz [ 331.663995][ T52] usb 5-1: config 0 descriptor?? [ 331.679772][ T52] hub 5-1:0.145: bad descriptor, ignoring hub [ 331.691498][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.698683][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.706258][ T52] hub 5-1:0.145: probe with driver hub failed with error -5 [ 331.789648][ T52] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input9 [ 331.858777][ T5910] rc_core: IR keymap rc-hauppauge not found [ 331.885306][ T5910] Registered IR keymap rc-empty [ 331.912597][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 331.944385][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 331.997403][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 332.031420][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 332.244712][ C1] igorplugusb 4-1:0.0: receive overflow invalid: 33 [ 332.354021][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.457970][ T5913] usb 4-1: USB disconnect, device number 9 [ 332.736271][ T7462] veth0_vlan: entered promiscuous mode [ 332.777098][ T7462] veth1_vlan: entered promiscuous mode [ 332.855634][ T7462] veth0_macvtap: entered promiscuous mode [ 332.885954][ T7462] veth1_macvtap: entered promiscuous mode [ 332.932656][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.187753][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.207763][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.239073][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.257688][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.298710][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.358985][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.447429][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.491267][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.519065][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.537802][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.587781][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.617920][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.649134][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.679576][ T7462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.726583][ T7462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.747872][ T7462] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.785343][ T7462] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.067482][ T7828] "syz.1.359" (7828) uses obsolete ecb(arc4) skcipher [ 335.079844][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 335.262219][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.312685][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.390613][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.549911][ T7848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.390875][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.687435][ T5182] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 336.757306][ T5182] usb 5-1: device reset changed ep0 maxpacket size! [ 336.827487][ T5883] usb 5-1: USB disconnect, device number 3 [ 337.652872][ T59] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 338.879582][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.890872][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.903235][ T59] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 338.912872][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.921208][ T5883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 338.942305][ T7867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 338.965416][ T59] usb 2-1: config 0 descriptor?? [ 339.567048][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 339.641037][ T5883] usb 5-1: device descriptor read/all, error -71 [ 339.784025][ T59] usbhid 2-1:0.0: can't add hid device: -71 [ 339.790434][ T59] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 339.824396][ T59] usb 2-1: USB disconnect, device number 4 [ 341.223109][ T7905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.950380][ T30] audit: type=1326 audit(1742626757.809:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 345.076184][ T30] audit: type=1326 audit(1742626757.809:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 345.167905][ T30] audit: type=1326 audit(1742626757.819:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 345.228654][ T30] audit: type=1326 audit(1742626757.819:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 345.486197][ T7929] syz.5.386: attempt to access beyond end of device [ 345.486197][ T7929] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 346.042000][ T7931] capability: warning: `syz.3.390' uses 32-bit capabilities (legacy support in use) [ 346.045413][ T30] audit: type=1326 audit(1742626757.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 346.087906][ T7934] syz.0.389 (7934): /proc/7933/oom_adj is deprecated, please use /proc/7933/oom_score_adj instead. [ 346.108228][ T7935] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 346.148194][ T7935] netlink: 224 bytes leftover after parsing attributes in process `syz.4.391'. [ 346.187812][ T30] audit: type=1326 audit(1742626757.819:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 346.217416][ T30] audit: type=1326 audit(1742626757.819:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 346.271603][ T30] audit: type=1326 audit(1742626757.819:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 346.407823][ T30] audit: type=1326 audit(1742626757.819:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 346.429155][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.570439][ T30] audit: type=1326 audit(1742626757.819:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d198d169 code=0x7ffc0000 [ 346.668014][ T7958] tipc: Started in network mode [ 346.678166][ T7958] tipc: Node identity ac14140f, cluster identity 4711 [ 346.695783][ T7958] tipc: New replicast peer: 255.255.255.255 [ 346.715666][ T7958] tipc: Enabled bearer , priority 10 [ 346.949652][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.399'. [ 347.014182][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 348.119569][ T5910] tipc: Node number set to 2886997007 [ 348.865410][ T7989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.103966][ T7995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.402278][ T5883] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 350.727382][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.749897][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 351.593915][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.612525][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 351.673649][ T5883] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 351.697694][ T5883] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 351.740913][ T5883] usb 2-1: Manufacturer: syz [ 351.756809][ T5883] usb 2-1: config 0 descriptor?? [ 351.987800][ T5854] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 352.107701][ T5883] rc_core: IR keymap rc-hauppauge not found [ 352.126471][ T5883] Registered IR keymap rc-empty [ 352.133224][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.167813][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.192249][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 352.216483][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 352.222141][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 352.260704][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 352.273003][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 352.298271][ T5854] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 352.331231][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.341411][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.367884][ T5854] usb 5-1: Product: syz [ 352.382452][ T5854] usb 5-1: Manufacturer: syz [ 352.387553][ T5854] usb 5-1: SerialNumber: syz [ 352.387884][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.417927][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.431300][ T5854] usb 5-1: config 0 descriptor?? [ 352.440544][ T8025] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 352.470423][ T8025] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 352.478252][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.503296][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.511949][ T5854] usb 5-1: ucan: probing device on interface #0 [ 352.559389][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.608526][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.664051][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.717482][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.742502][ T8059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.809263][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.879207][ T5883] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 352.960852][ T5883] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 353.069661][ T5883] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 353.203391][ T5854] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 353.567990][ T5854] usb 5-1: USB disconnect, device number 6 [ 353.589616][ T5883] usb 2-1: USB disconnect, device number 5 [ 354.336273][ T8079] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.430'. [ 354.480983][ T8081] syzkaller1: entered promiscuous mode [ 354.707479][ T8081] syzkaller1: entered allmulticast mode [ 355.736546][ T8097] virtio-fs: tag <(null)> not found [ 356.288834][ T8103] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.461433][ T5854] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 357.788041][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 357.833316][ T5841] Bluetooth: min 6 > max 0 [ 357.885918][ T5854] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 357.929206][ T5854] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 357.941870][ T5854] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 357.958455][ T5854] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 357.966888][ T5854] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.976018][ T5854] usb 6-1: config 0 has no interface number 0 [ 357.983685][ T5854] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 358.010380][ T5854] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 358.023375][ T5854] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 358.077280][ T5854] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.174027][ T5854] usb 6-1: config 0 interface 125 has no altsetting 0 [ 358.196031][ T5854] usb 6-1: config 0 interface 125 has no altsetting 2 [ 358.221656][ T5854] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 358.278024][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.341502][ T5854] usb 6-1: Product: syz [ 358.369627][ T5854] usb 6-1: Manufacturer: syz [ 358.374263][ T5854] usb 6-1: SerialNumber: syz [ 358.474455][ T5854] usb 6-1: config 0 descriptor?? [ 358.573237][ T5854] usb 6-1: can't set config #0, error -71 [ 358.705637][ T5854] usb 6-1: USB disconnect, device number 2 [ 359.277903][ T5854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 359.697999][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 359.791332][ T5854] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 359.827759][ T5854] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 359.861799][ T5854] usb 6-1: Product: syz [ 359.877730][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 359.890985][ T5854] usb 6-1: Manufacturer: syz [ 359.905248][ T5854] usb 6-1: SerialNumber: syz [ 360.075099][ T5854] usb 6-1: config 0 descriptor?? [ 360.085470][ T5854] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 360.978772][ T5854] gspca_zc3xx: reg_w_i err -110 [ 360.983756][ T5854] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 361.418517][ T8158] block nbd0: Device being setup by another task [ 361.449451][ T8161] block nbd0: shutting down sockets [ 361.650363][ T5854] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 361.819791][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.844373][ T5854] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 361.865219][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.884323][ T5854] usb 5-1: config 0 descriptor?? [ 362.659834][ T5854] logitech 0003:046D:C626.0001: item fetching failed at offset 0/3 [ 362.740030][ T5854] logitech 0003:046D:C626.0001: parse failed [ 362.848563][ T59] usb 6-1: USB disconnect, device number 3 [ 362.893514][ T5854] logitech 0003:046D:C626.0001: probe with driver logitech failed with error -22 [ 362.963417][ T5854] usb 5-1: USB disconnect, device number 7 [ 364.382955][ T8248] input: syz0 as /devices/virtual/input/input11 [ 364.428743][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.428822][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.428852][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.428882][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.428911][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.428939][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429008][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429037][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429066][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429095][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429124][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429154][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429183][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429211][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429240][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429269][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429298][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429327][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429357][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429386][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429415][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429444][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429473][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429502][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429531][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429560][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429589][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429618][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429647][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429677][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429706][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429735][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429764][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429793][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429822][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429852][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429881][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429910][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429939][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.429975][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.430005][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.430034][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.430063][ T52] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 364.437065][ T52] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.393747][ T8273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.801315][ T8279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.895191][ T8278] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 369.725836][ T8278] syz.3.477 (8278) used greatest stack depth: 18384 bytes left [ 369.842297][ T8290] Bluetooth: MGMT ver 1.23 [ 370.838877][ T8306] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 370.847185][ T8306] macvtap1: entered promiscuous mode [ 370.853335][ T8306] macvtap1: entered allmulticast mode [ 370.858972][ T8306] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 370.874127][ T8306] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 370.881802][ T8306] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 370.958630][ T5911] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 371.120968][ T5911] usb 6-1: too many endpoints for config 0 interface 0 altsetting 101: 31, using maximum allowed: 30 [ 371.154729][ T5911] usb 6-1: config 0 interface 0 altsetting 101 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.174597][ T5911] usb 6-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.190187][ T8319] IPv6: Can't replace route, no match found [ 371.208030][ T5911] usb 6-1: config 0 interface 0 altsetting 101 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 371.238566][ T5911] usb 6-1: config 0 interface 0 has no altsetting 0 [ 371.257786][ T5911] usb 6-1: New USB device found, idVendor=0503, idProduct=0059, bcdDevice= 0.00 [ 371.266897][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.278482][ T5911] usb 6-1: config 0 descriptor?? [ 371.460747][ T8323] syz.0.492: attempt to access beyond end of device [ 371.460747][ T8323] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 371.478461][ T8323] syz.0.492: attempt to access beyond end of device [ 371.478461][ T8323] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 371.525967][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 371.558413][ T8323] syz.0.492: attempt to access beyond end of device [ 371.558413][ T8323] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 371.633046][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 371.648859][ T8323] syz.0.492: attempt to access beyond end of device [ 371.648859][ T8323] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 371.705131][ T8323] syz.0.492: attempt to access beyond end of device [ 371.705131][ T8323] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 371.739128][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 371.746356][ T8333] ubi31: detaching mtd0 [ 371.750159][ T8323] syz.0.492: attempt to access beyond end of device [ 371.750159][ T8323] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 371.768545][ T8333] ubi31: mtd0 is detached [ 371.770836][ T5911] hid-generic 0003:0503:0059.0003: unknown main item tag 0x0 [ 371.783561][ T5911] hid-generic 0003:0503:0059.0003: unknown main item tag 0x0 [ 371.791629][ T5911] hid-generic 0003:0503:0059.0003: unknown main item tag 0x0 [ 371.799996][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 371.810936][ T5911] hid-generic 0003:0503:0059.0003: unbalanced collection at end of report description [ 371.822251][ T8323] syz.0.492: attempt to access beyond end of device [ 371.822251][ T8323] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 371.853251][ T5911] hid-generic 0003:0503:0059.0003: probe with driver hid-generic failed with error -22 [ 371.867954][ T8323] syz.0.492: attempt to access beyond end of device [ 371.867954][ T8323] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 371.912941][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 371.940418][ T8323] syz.0.492: attempt to access beyond end of device [ 371.940418][ T8323] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 371.972578][ T59] usb 6-1: USB disconnect, device number 4 [ 371.985864][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 372.018463][ T8323] syz.0.492: attempt to access beyond end of device [ 372.018463][ T8323] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 372.059588][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 372.075117][ T8323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 372.100470][ T8340] Illegal XDP return value 4294967274 on prog (id 99) dev syz_tun, expect packet loss! [ 372.117836][ T8323] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 372.534663][ T8352] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 372.697789][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 372.768378][ T8359] trusted_key: encrypted_key: insufficient parameters specified [ 372.860671][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.873959][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.896040][ T5911] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 372.916918][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.949305][ T5911] usb 5-1: config 0 descriptor?? [ 373.377853][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.393910][ T5911] hid-generic 0003:05AC:4262.0004: unbalanced delimiter at end of report description [ 373.408447][ T5911] hid-generic 0003:05AC:4262.0004: probe with driver hid-generic failed with error -22 [ 373.577692][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 373.586016][ T5883] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 373.595609][ T5883] usb 2-1: config 0 has no interface number 0 [ 373.606788][ T5883] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 373.622494][ T5911] usb 5-1: USB disconnect, device number 8 [ 373.624537][ T5883] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 373.664482][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.706843][ T5883] usb 2-1: Product: syz [ 373.724634][ T5883] usb 2-1: Manufacturer: syz [ 373.739118][ T5883] usb 2-1: SerialNumber: syz [ 373.771234][ T5883] usb 2-1: config 0 descriptor?? [ 373.865254][ T8370] kvm: emulating exchange as write [ 374.404280][ T5883] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input12 [ 374.615097][ T5911] usb 2-1: USB disconnect, device number 6 [ 374.716065][ T8386] syzkaller1: entered promiscuous mode [ 374.722598][ T8386] syzkaller1: entered allmulticast mode [ 375.003184][ T8388] bond0: (slave batadv0): Releasing backup interface [ 375.030687][ T8388] bridge_slave_0: left allmulticast mode [ 375.036568][ T8388] bridge_slave_0: left promiscuous mode [ 375.043838][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.054520][ T8391] netlink: 'syz.4.518': attribute type 10 has an invalid length. [ 375.071048][ T8388] bridge_slave_1: left allmulticast mode [ 375.077125][ T8388] bridge_slave_1: left promiscuous mode [ 375.098011][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.175934][ T8388] bond0: (slave bond_slave_0): Releasing backup interface [ 375.206102][ T8388] bond0: (slave bond_slave_1): Releasing backup interface [ 375.262668][ T8388] team0: Port device team_slave_0 removed [ 375.302102][ T8388] team0: Port device team_slave_1 removed [ 375.312407][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.323837][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.341995][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.350604][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.383331][ T8388] bond0: (slave netdevsim0): Releasing backup interface [ 375.414777][ T8391] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 375.429848][ T8392] tipc: Enabled bearer , priority 10 [ 375.760884][ T8419] trusted_key: encrypted_key: insufficient parameters specified [ 375.936715][ T8423] overlayfs: failed to clone upperpath [ 376.832386][ T8438] netem: change failed [ 377.209263][ T8446] nfs: Unknown parameter 'ntext' [ 378.449360][ T8469] 9pnet_fd: Insufficient options for proto=fd [ 378.688130][ T8474] syzkaller1: entered promiscuous mode [ 378.693697][ T8474] syzkaller1: entered allmulticast mode [ 378.935252][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.098841][ T8492] overlayfs: failed to clone upperpath [ 379.183438][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 379.195046][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 379.367854][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.517826][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 379.531951][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.545789][ T5883] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 379.556246][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.579820][ T5883] usb 6-1: config 0 descriptor?? [ 379.800250][ T5883] usbhid 6-1:0.0: can't add hid device: -71 [ 379.826630][ T5883] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 379.852880][ T5883] usb 6-1: USB disconnect, device number 5 [ 380.390817][ T30] audit: type=1326 audit(1742626793.279:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8505 comm="syz.1.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f551b78d169 code=0x0 [ 384.457726][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 384.717696][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 385.194924][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.212992][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.236109][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.262053][ T5883] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.285010][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.310145][ T5883] usb 5-1: config 0 descriptor?? [ 386.639926][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 386.640121][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 386.723101][ T5883] usb 5-1: USB disconnect, device number 9 [ 387.211581][ T30] audit: type=1804 audit(1742626800.099:15): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.592" name="/newroot/147/file0" dev="tmpfs" ino=803 res=1 errno=0 [ 388.329935][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.344046][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.353164][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.362104][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.370422][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 388.382257][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.678971][ T5836] Bluetooth: hci5: command tx timeout [ 388.765777][ T8640] chnl_net:caif_netlink_parms(): no params data found [ 388.769548][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1ce400: rx timeout, send abort [ 388.773120][ T30] audit: type=1326 audit(1742626801.649:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 388.784134][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035019400: rx timeout, send abort [ 388.858858][ T30] audit: type=1326 audit(1742626801.649:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 388.888153][ T30] audit: type=1326 audit(1742626801.649:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 388.911114][ T30] audit: type=1326 audit(1742626801.649:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 388.953736][ T30] audit: type=1326 audit(1742626801.649:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 388.975286][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 389.005291][ T30] audit: type=1326 audit(1742626801.649:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 389.036877][ T30] audit: type=1326 audit(1742626801.649:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 389.069212][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.076388][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.084810][ T8640] bridge_slave_0: entered allmulticast mode [ 389.091227][ T30] audit: type=1326 audit(1742626801.649:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 389.113039][ T30] audit: type=1326 audit(1742626801.649:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cd5b8d169 code=0x7ffc0000 [ 389.119017][ T8640] bridge_slave_0: entered promiscuous mode [ 389.160591][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.171141][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.181699][ T5910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 389.193661][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.212265][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.226739][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.227983][ T8640] bridge_slave_1: entered allmulticast mode [ 389.252547][ T8640] bridge_slave_1: entered promiscuous mode [ 389.264865][ T5910] usb 4-1: SerialNumber: syz [ 389.282716][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1ce400: abort rx timeout. Force session deactivation [ 389.310988][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035019400: abort rx timeout. Force session deactivation [ 389.359614][ T8640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.394447][ T8640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.515931][ T5910] usb 4-1: 0:2 : does not exist [ 389.551978][ T8640] team0: Port device team_slave_0 added [ 389.607957][ T5910] usb 4-1: USB disconnect, device number 10 [ 389.636363][ T8640] team0: Port device team_slave_1 added [ 390.259409][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.334555][ T7556] udevd[7556]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.337318][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.437980][ T5836] Bluetooth: hci1: command tx timeout [ 390.468406][ T8640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.481139][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.488205][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.514391][ T8640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.944187][ T8640] hsr_slave_0: entered promiscuous mode [ 391.026655][ T8640] hsr_slave_1: entered promiscuous mode [ 391.035067][ T59] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 392.517715][ T5831] Bluetooth: hci1: command tx timeout [ 393.206989][ T8684] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 393.245184][ T8684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.265021][ T59] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 393.297769][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.336581][ T59] usb 4-1: Product: syz [ 393.347198][ T8684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.364008][ T59] usb 4-1: Manufacturer: syz [ 393.375837][ T59] usb 4-1: SerialNumber: syz [ 393.382720][ T8684] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 393.395672][ T8684] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 393.413726][ T59] usb 4-1: config 0 descriptor?? [ 393.425368][ T8640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 393.444284][ T8640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 393.465573][ T8640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 393.510896][ T8686] ip6erspan0: entered promiscuous mode [ 393.530916][ T8686] bond1: (slave ip6erspan0): making interface the new active one [ 393.548430][ T8686] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 393.558027][ T8640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.620360][ T59] usb 4-1: USB disconnect, device number 11 [ 393.806207][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.022863][ T8640] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.048072][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 394.090636][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.097862][ T8592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.206854][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.214071][ T8592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.312099][ T5927] usb 5-1: config index 0 descriptor too short (expected 14385, got 36) [ 394.340581][ T5927] usb 5-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 394.382721][ T5927] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 394.433784][ T5927] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 394.467339][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.477864][ T8708] netlink: 'syz.3.620': attribute type 12 has an invalid length. [ 394.489248][ T5910] Process accounting resumed [ 394.496803][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.602592][ T5831] Bluetooth: hci1: command tx timeout [ 394.721428][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.796184][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 394.814273][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:2 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 394.814307][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.814323][ T5831] Workqueue: hci4 hci_rx_work [ 394.814366][ T5831] Call Trace: [ 394.814373][ T5831] [ 394.814383][ T5831] dump_stack_lvl+0x241/0x360 [ 394.814412][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.814435][ T5831] ? __pfx__printk+0x10/0x10 [ 394.814473][ T5831] ? __kmalloc_cache_noprof+0x243/0x390 [ 394.814494][ T5831] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 394.814532][ T5831] sysfs_create_dir_ns+0x2ce/0x3a0 [ 394.814569][ T5831] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 394.814612][ T5831] kobject_add_internal+0x435/0x8d0 [ 394.814644][ T5831] kobject_add+0x152/0x220 [ 394.814665][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0 [ 394.814691][ T5831] ? device_add+0x3e7/0xbf0 [ 394.814725][ T5831] ? __pfx_kobject_add+0x10/0x10 [ 394.814747][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 394.814780][ T5831] ? get_device_parent+0x165/0x410 [ 394.814805][ T5831] device_add+0x4e5/0xbf0 [ 394.814847][ T5831] hci_conn_add_sysfs+0xe8/0x200 [ 394.814875][ T5831] le_conn_complete_evt+0xd1a/0x1360 [ 394.814920][ T5831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 394.814951][ T5831] ? __mutex_unlock_slowpath+0x227/0x800 [ 394.814991][ T5831] ? __skb_clone+0x5c/0x6c0 [ 394.815017][ T5831] ? skb_pull_data+0x112/0x230 [ 394.815050][ T5831] hci_le_enh_conn_complete_evt+0x185/0x420 [ 394.815090][ T5831] hci_event_packet+0xa54/0x1540 [ 394.815122][ T5831] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 394.815157][ T5831] ? __pfx_hci_event_packet+0x10/0x10 [ 394.815183][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0 [ 394.815211][ T5831] ? kcov_remote_start+0x480/0x7d0 [ 394.815240][ T5831] ? mce_read_aux+0x110/0x1a0 [ 394.815272][ T5831] ? hci_send_to_monitor+0xdc/0x530 [ 394.815307][ T5831] hci_rx_work+0x3f3/0xdb0 [ 394.815351][ T5831] ? process_scheduled_works+0x9c6/0x18e0 [ 394.815377][ T5831] process_scheduled_works+0xabe/0x18e0 [ 394.815435][ T5831] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.815471][ T5831] ? assign_work+0x364/0x3d0 [ 394.815502][ T5831] worker_thread+0x870/0xd30 [ 394.815546][ T5831] ? __kthread_parkme+0x169/0x1d0 [ 394.815578][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 394.815606][ T5831] kthread+0x7a9/0x920 [ 394.815635][ T5831] ? __pfx_kthread+0x10/0x10 [ 394.815669][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 394.815697][ T5831] ? __pfx_kthread+0x10/0x10 [ 394.815726][ T5831] ? __pfx_kthread+0x10/0x10 [ 394.815762][ T5831] ? __pfx_kthread+0x10/0x10 [ 394.815790][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.815818][ T5831] ? lockdep_hardirqs_on+0x99/0x150 [ 394.815849][ T5831] ? __pfx_kthread+0x10/0x10 [ 394.815882][ T5831] ret_from_fork+0x4b/0x80 [ 394.815907][ T5831] ? __pfx_kthread+0x10/0x10 [ 394.815938][ T5831] ret_from_fork_asm+0x1a/0x30 [ 394.815980][ T5831] [ 394.816008][ T5831] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 394.897107][ T5927] usb 5-1: string descriptor 0 read error: -71 [ 394.905667][ T5831] Bluetooth: hci4: failed to register connection device [ 394.979741][ T5927] usb 5-1: USB disconnect, device number 10 [ 395.462595][ T8724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.624'. [ 395.824657][ T8640] veth0_vlan: entered promiscuous mode [ 395.832853][ T8741] trusted_key: encrypted_key: insufficient parameters specified [ 395.941139][ T8640] veth1_vlan: entered promiscuous mode [ 396.143167][ T8640] veth0_macvtap: entered promiscuous mode [ 396.156682][ T8640] veth1_macvtap: entered promiscuous mode [ 396.273532][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.319367][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.331452][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.342633][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.365353][ T8749] xt_hashlimit: size too large, truncated to 1048576 [ 396.385940][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.515598][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.588860][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.687994][ T5836] Bluetooth: hci1: command tx timeout [ 397.009894][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.030579][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.063888][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.088247][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.107637][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.151048][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.188883][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.261366][ T8640] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.288171][ T8640] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.296938][ T8640] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.306836][ T8756] overlayfs: failed to clone upperpath [ 397.343022][ T8640] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.669053][ T8571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.707739][ T8571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.802546][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.844412][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.407544][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.589'. [ 401.192996][ T8796] overlayfs: failed to get inode (-116) [ 401.206323][ T8796] overlayfs: failed to get inode (-116) [ 401.248577][ T8794] kvm: pic: non byte write [ 401.487360][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.649'. [ 401.496911][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.649'. [ 401.677187][ T8813] syzkaller0: entered allmulticast mode [ 405.372689][ T8900] openvswitch: netlink: nsh attr 13548 is out of range max 3 [ 405.750367][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 406.448467][ T8906] kvm: pic: non byte write [ 406.927868][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 407.107697][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 407.120294][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 407.147897][ T59] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 407.163154][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.181747][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 407.200937][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.210060][ T10] usb 7-1: Product: syz [ 407.214379][ T10] usb 7-1: Manufacturer: syz [ 407.222241][ T10] usb 7-1: SerialNumber: syz [ 407.231450][ T10] usb 7-1: config 0 descriptor?? [ 407.241894][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 407.251387][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 407.929766][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.209573][ T59] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 408.218898][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.229700][ T59] usb 5-1: config 0 descriptor?? [ 408.238515][ T59] pwc: Askey VC010 type 2 USB webcam detected. [ 408.255646][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 408.263141][ T10] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 408.411775][ T8942] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 408.420135][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.692'. [ 408.485522][ T8942] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 408.496279][ T8942] team0: Failed to send options change via netlink (err -105) [ 408.507172][ T8942] team0: Port device geneve0 added [ 408.649347][ T59] pwc: recv_control_msg error -32 req 02 val 2b00 [ 408.659155][ T59] pwc: recv_control_msg error -32 req 02 val 2700 [ 408.679591][ T59] pwc: recv_control_msg error -32 req 02 val 2c00 [ 408.690316][ T59] pwc: recv_control_msg error -32 req 04 val 1000 [ 408.715164][ T59] pwc: recv_control_msg error -32 req 04 val 1300 [ 408.729032][ T59] pwc: recv_control_msg error -32 req 04 val 1400 [ 408.739668][ T59] pwc: recv_control_msg error -32 req 02 val 2000 [ 408.781576][ T59] pwc: recv_control_msg error -32 req 02 val 2100 [ 409.020554][ T59] pwc: recv_control_msg error -71 req 02 val 2500 [ 409.043711][ T59] pwc: recv_control_msg error -71 req 02 val 2400 [ 409.080744][ T59] pwc: recv_control_msg error -71 req 02 val 2600 [ 409.116012][ T59] pwc: recv_control_msg error -71 req 02 val 2900 [ 409.152043][ T59] pwc: recv_control_msg error -71 req 02 val 2800 [ 409.175514][ T59] pwc: recv_control_msg error -71 req 04 val 1100 [ 409.213160][ T59] pwc: recv_control_msg error -71 req 04 val 1200 [ 409.234747][ T59] pwc: Registered as video103. [ 410.066062][ T10] em28xx 7-1:0.0: AC97 vendor ID = 0x00fc00fe [ 410.074339][ T10] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 410.082088][ T59] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 410.093522][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 410.109748][ T59] usb 5-1: USB disconnect, device number 11 [ 410.118046][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 410.133059][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 410.142875][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 410.177846][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 410.205031][ T10] usb 7-1: USB disconnect, device number 2 [ 413.238225][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 419.088351][ T5910] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 419.367932][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 419.464442][ T5910] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 419.501564][ T5910] usb 5-1: config 0 has no interface number 0 [ 419.539192][ T5910] usb 5-1: config 0 interface 12 has no altsetting 0 [ 419.582258][ T5910] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 419.604605][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.776709][ T5910] usb 5-1: Product: syz [ 419.781071][ T5910] usb 5-1: Manufacturer: syz [ 419.785711][ T5910] usb 5-1: SerialNumber: syz [ 419.800047][ T5910] usb 5-1: config 0 descriptor?? [ 421.880771][ T5910] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 421.911653][ T5910] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 421.979181][ T5910] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 421.986829][ T5910] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 422.298233][ T5910] usb 5-1: USB disconnect, device number 12 [ 427.397751][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 430.567830][ T59] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 430.945828][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 431.248037][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.277635][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.303715][ T59] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 431.342104][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.379540][ T59] usb 4-1: config 0 descriptor?? [ 431.405834][ T59] hub 4-1:0.0: USB hub found [ 431.966748][ T59] hub 4-1:0.0: 1 port detected [ 432.179111][ T59] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 432.191287][ T59] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 432.228832][ T59] usbhid 4-1:0.0: can't add hid device: -71 [ 432.242795][ T59] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.307909][ T59] usb 4-1: USB disconnect, device number 12 [ 440.368750][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.459065][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 441.487362][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.548140][ T9180] bridge0: port 3(vlan2) entered blocking state [ 441.894053][ T9180] bridge0: port 3(vlan2) entered disabled state [ 442.085128][ T9180] vlan2: entered allmulticast mode [ 442.090776][ T9180] dummy0: entered allmulticast mode [ 442.106402][ T9180] vlan2: entered promiscuous mode [ 442.111952][ T9180] dummy0: entered promiscuous mode [ 442.137574][ T9180] bridge0: port 3(vlan2) entered blocking state [ 442.145622][ T9180] bridge0: port 3(vlan2) entered forwarding state [ 449.459137][ T9237] netlink: 48 bytes leftover after parsing attributes in process `syz.6.777'. [ 449.623751][ T9237] netlink: 48 bytes leftover after parsing attributes in process `syz.6.777'. [ 450.587940][ T9237] netlink: 38 bytes leftover after parsing attributes in process `syz.6.777'. [ 450.840506][ T9246] ubi31: attaching mtd0 [ 450.863135][ T9246] ubi31: scanning is finished [ 451.485890][ T9246] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 451.495501][ T9246] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 451.504478][ T9246] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 451.513805][ T9246] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 451.522746][ T9246] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 451.530576][ T9246] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 451.541529][ T9246] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1618432075 [ 451.558252][ T9246] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 451.618579][ T9251] ubi31: background thread "ubi_bgt31d" started, PID 9251 [ 451.889769][ T9256] netlink: 'syz.1.782': attribute type 3 has an invalid length. [ 451.898207][ T9256] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.782'. [ 452.699597][ T9259] xt_cgroup: path and classid specified [ 452.746804][ T9261] dccp_invalid_packet: P.Data Offset(100) too large [ 453.629258][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 453.875101][ T5911] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.966193][ T5911] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.180491][ T5911] usb 7-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 454.190931][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.229885][ T5911] usb 7-1: config 0 descriptor?? [ 455.129794][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 455.129870][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 455.139621][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 455.146915][ T5831] Bluetooth: hci3: Malformed LE Event: 0x0d [ 456.112650][ T5910] usb 7-1: USB disconnect, device number 3 [ 457.642100][ T5911] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 457.682764][ T5911] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 457.725804][ T5911] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 457.817941][ T5911] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 458.996240][ T59] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 459.234483][ T59] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.265402][ T59] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.300242][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.325346][ T59] usb 4-1: config 0 descriptor?? [ 459.354635][ T59] pwc: Askey VC010 type 2 USB webcam detected. [ 459.794845][ T59] pwc: recv_control_msg error -32 req 02 val 2b00 [ 459.820705][ T59] pwc: recv_control_msg error -32 req 02 val 2700 [ 459.877683][ T59] pwc: recv_control_msg error -32 req 02 val 2c00 [ 459.924414][ T59] pwc: recv_control_msg error -32 req 04 val 1000 [ 460.366187][ T59] pwc: recv_control_msg error -32 req 04 val 1300 [ 460.605610][ T59] pwc: recv_control_msg error -32 req 04 val 1400 [ 460.613118][ T59] pwc: recv_control_msg error -32 req 02 val 2000 [ 460.627141][ T59] pwc: recv_control_msg error -32 req 02 val 2100 [ 460.659464][ T59] pwc: recv_control_msg error -32 req 04 val 1500 [ 460.685886][ T59] pwc: recv_control_msg error -32 req 02 val 2500 [ 460.720113][ T59] pwc: recv_control_msg error -32 req 02 val 2400 [ 460.939986][ T59] pwc: recv_control_msg error -71 req 02 val 2900 [ 460.966330][ T59] pwc: recv_control_msg error -71 req 02 val 2800 [ 460.983963][ T59] pwc: recv_control_msg error -71 req 04 val 1100 [ 461.003192][ T59] pwc: recv_control_msg error -71 req 04 val 1200 [ 461.085999][ T59] pwc: Registered as video103. [ 461.097688][ T59] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 461.135829][ T59] usb 4-1: USB disconnect, device number 13 [ 461.578423][ T9340] sctp: [Deprecated]: syz.1.807 (pid 9340) Use of int in max_burst socket option deprecated. [ 461.578423][ T9340] Use struct sctp_assoc_value instead [ 469.365707][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.379147][ T9380] bond0: (slave rose0): Enslaving as an active interface with an up link [ 471.631627][ T9410] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.026819][ T9414] kvm: kvm [9413]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 474.947647][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 475.147683][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 475.162209][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 476.007950][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.124183][ T10] usb 6-1: Product: syz [ 476.129358][ T10] usb 6-1: Manufacturer: syz [ 476.134323][ T10] usb 6-1: SerialNumber: syz [ 476.156726][ T10] usb 6-1: config 0 descriptor?? [ 476.389382][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 477.664973][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 477.680686][ T10] usb 6-1: USB disconnect, device number 6 [ 479.349533][ T10] libceph: connect (1)[c::]:6789 error -101 [ 479.454043][ T9499] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 479.461976][ T9499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.839'. [ 479.475634][ T9499] batadv0: entered promiscuous mode [ 479.481068][ T9499] batadv0: entered allmulticast mode [ 479.539668][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.601746][ T9499] bridge0: port 1(batadv0) entered blocking state [ 479.610303][ T9499] bridge0: port 1(batadv0) entered disabled state [ 479.706425][ T9499] bridge0: port 1(batadv0) entered blocking state [ 479.714468][ T9499] bridge0: port 1(batadv0) entered forwarding state [ 479.773523][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 480.042233][ T9499] syz.4.839 (9499) used greatest stack depth: 18304 bytes left [ 480.108437][ T8578] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 480.118785][ T8578] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 480.218632][ T9492] ceph: No mds server is up or the cluster is laggy [ 480.358714][ T10] libceph: connect (1)[c::]:6789 error -101 [ 480.408014][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 482.035368][ T9511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.706406][ T9517] trusted_key: encrypted_key: insufficient parameters specified [ 490.968489][ T9570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 492.348629][ T9585] trusted_key: encrypted_key: insufficient parameters specified [ 493.331679][ T9601] bridge_slave_0: left allmulticast mode [ 493.352886][ T9601] bridge_slave_0: left promiscuous mode [ 493.447963][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.119236][ T9601] bridge_slave_1: left allmulticast mode [ 495.127878][ T9601] bridge_slave_1: left promiscuous mode [ 495.137243][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.306542][ T9601] bond0: (slave bond_slave_0): Releasing backup interface [ 495.411693][ T9601] bond0: (slave bond_slave_1): Releasing backup interface [ 495.555115][ T9601] team0: Port device team_slave_0 removed [ 495.848855][ T9601] team0: Port device team_slave_1 removed [ 495.893812][ T9601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.911699][ T9601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.957212][ T9601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.998418][ T9601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.953446][ T9642] kvm: kvm [9640]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 499.006077][ T9642] kvm: kvm [9640]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x33f0 [ 500.747846][ T9666] x_tables: duplicate entry at hook 2 [ 501.812049][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.438549][ T9681] trusted_key: encrypted_key: insufficient parameters specified [ 509.233991][ T9723] tipc: New replicast peer: 0.0.0.0 [ 509.240879][ T9723] tipc: Enabled bearer , priority 10 [ 509.255833][ T9723] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 511.487661][ T5911] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 512.621341][ T5911] usb 4-1: config 0 has no interfaces? [ 512.668834][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.857691][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.870158][ T5911] usb 4-1: Product: syz [ 514.682857][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 514.867797][ T5911] usb 4-1: Manufacturer: syz [ 514.872479][ T5911] usb 4-1: SerialNumber: syz [ 514.910527][ T5911] usb 4-1: config 0 descriptor?? [ 514.969500][ T5911] usb 4-1: can't set config #0, error -71 [ 515.628005][ T5911] usb 4-1: USB disconnect, device number 14 [ 522.058763][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 522.071517][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 522.136926][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.159169][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.167460][ T5836] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 522.174951][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 525.658223][ T5836] Bluetooth: hci6: command tx timeout [ 526.766879][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.787740][ T5913] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 527.717730][ T5836] Bluetooth: hci6: command tx timeout [ 528.646764][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.744452][ T9852] netlink: 56 bytes leftover after parsing attributes in process `syz.1.931'. [ 529.040327][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.038150][ T31] INFO: task syz.0.492:8324 blocked for more than 144 seconds. [ 530.045783][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 530.053608][ T5836] Bluetooth: hci6: command tx timeout [ 530.088278][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 530.088298][ T30] audit: type=1326 audit(1742626942.949:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9833 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418038d169 code=0x7fc00000 [ 530.092026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.137601][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 530.282480][ T31] task:syz.0.492 state:D stack:24784 pid:8324 tgid:8321 ppid:5824 task_flags:0x400140 flags:0x00004006 [ 530.340275][ T31] Call Trace: [ 530.344989][ T31] [ 530.351380][ T31] __schedule+0x18bc/0x4c40 [ 530.357637][ T31] ? __pfx___schedule+0x10/0x10 [ 530.371674][ T31] ? __pfx_lock_release+0x10/0x10 [ 530.797604][ T31] ? __lock_acquire+0x1397/0x2100 [ 530.803007][ T31] ? schedule+0x90/0x320 [ 530.823653][ T5913] usb 7-1: device descriptor read/all, error -71 [ 530.877878][ T31] schedule+0x14b/0x320 [ 530.882147][ T31] schedule_timeout+0xb0/0x290 [ 530.935556][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 530.955441][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 530.977709][ T31] ? wait_for_completion+0x2fe/0x620 [ 530.983085][ T31] ? wait_for_completion+0x2fe/0x620 [ 531.026817][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.035461][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 531.046732][ T31] ? wait_for_completion+0x2fe/0x620 [ 531.052619][ T31] wait_for_completion+0x355/0x620 [ 531.067723][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 531.073464][ T31] ? flush_workqueue_prep_pwqs+0x4c3/0x530 [ 531.096266][ T31] ? check_flush_dependency+0x88/0x3c0 [ 531.102033][ T31] ? __flush_workqueue+0x504/0x1280 [ 531.108547][ T31] __flush_workqueue+0x575/0x1280 [ 531.113652][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 531.119620][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 531.127755][ T31] ? blk_mq_run_hw_queue+0x299/0x500 [ 531.133120][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 531.139008][ T31] ? blk_mq_unquiesce_queue+0xc0/0x120 [ 531.144682][ T31] nbd_ioctl+0xbd1/0xf40 [ 531.149126][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 531.153940][ T31] ? __asan_memset+0x23/0x50 [ 531.159455][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 531.165678][ T31] ? __pfx_smack_file_ioctl+0x10/0x10 [ 531.171242][ T31] ? file_to_blk_mode+0xcc/0x140 [ 531.176234][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 531.181178][ T31] blkdev_ioctl+0x5d0/0x6f0 [ 531.185732][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 531.190886][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 531.195953][ T31] __se_sys_ioctl+0xf5/0x170 [ 531.200682][ T31] do_syscall_64+0xf3/0x230 [ 531.205239][ T31] ? clear_bhb_loop+0x35/0x90 [ 531.211248][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.217215][ T31] RIP: 0033:0x7f87f278d169 [ 531.222287][ T31] RSP: 002b:00007f87f3623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.231051][ T31] RAX: ffffffffffffffda RBX: 00007f87f29a6080 RCX: 00007f87f278d169 [ 531.239637][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 531.250497][ T31] RBP: 00007f87f280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.258607][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.266614][ T31] R13: 0000000000000001 R14: 00007f87f29a6080 R15: 00007fff787013c8 [ 531.274911][ T31] [ 531.278091][ T31] [ 531.278091][ T31] Showing all locks held in the system: [ 531.286053][ T31] 6 locks held by kworker/u8:1/13: [ 531.291407][ T31] #0: ffff88801bef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 531.302416][ T31] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 531.313753][ T31] #2: ffffffff8feb7410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 531.323535][ T31] #3: ffff88805e5a20e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 531.333864][ T31] #4: ffff88805e5a3250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 531.345031][ T31] #5: ffffffff8eb3e780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 531.355158][ T31] 1 lock held by khungtaskd/31: [ 531.360561][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 531.370934][ T31] 2 locks held by getty/5584: [ 531.375654][ T31] #0: ffff88814d79f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.385770][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 531.396044][ T31] 2 locks held by kworker/u9:6/5841: [ 531.401816][ T31] #0: ffff888025c67148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 531.414058][ T31] #1: ffffc9000401fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 531.425957][ T31] 6 locks held by kworker/0:6/5913: [ 531.431607][ T31] #0: ffff888022a9c548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 531.443169][ T31] #1: ffffc900043cfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 531.455498][ T31] #2: ffff888028b8a190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 531.464501][ T31] #3: ffff888028bbd510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 531.474554][ T31] #4: ffff88802825d268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 531.484316][ T31] #5: ffffffff8f79b2f0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1f8/0x1b30 [ 531.494943][ T31] 2 locks held by kworker/u8:23/8558: [ 531.500458][ T31] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 531.510526][ T31] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 531.522638][ T31] 4 locks held by kworker/u8:38/8575: [ 531.528155][ T31] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 531.538213][ T31] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 531.549796][ T31] #2: ffffffff9a830e88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x158/0x390 [ 531.560621][ T31] #3: ffffffff9a7ef188 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 531.571202][ T31] 1 lock held by syz.6.826/9429: [ 531.576289][ T31] #0: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 531.587388][ T31] 3 locks held by syz.1.931/9851: [ 531.592490][ T31] #0: ffff88807fbce808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 531.602800][ T31] #1: ffffffff8ff261f0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0x90 [ 531.614130][ T31] #2: ffff888030994cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x120/0x6b0 [ 531.625291][ T31] [ 531.747644][ T31] ============================================= [ 531.747644][ T31] [ 531.797691][ T31] NMI backtrace for cpu 0 [ 531.797711][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 531.797737][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.797749][ T31] Call Trace: [ 531.797756][ T31] [ 531.797764][ T31] dump_stack_lvl+0x241/0x360 [ 531.797801][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.797823][ T31] ? __pfx__printk+0x10/0x10 [ 531.797866][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 531.797899][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 531.797924][ T31] ? _printk+0xd5/0x120 [ 531.797953][ T31] ? __pfx__printk+0x10/0x10 [ 531.797985][ T31] ? __wake_up_klogd+0xcc/0x110 [ 531.798011][ T31] ? __pfx__printk+0x10/0x10 [ 531.798044][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 531.798074][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.798101][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 531.798132][ T31] watchdog+0x1058/0x10a0 [ 531.798163][ T31] ? watchdog+0x1ea/0x10a0 [ 531.798197][ T31] ? __pfx_watchdog+0x10/0x10 [ 531.798227][ T31] kthread+0x7a9/0x920 [ 531.798255][ T31] ? __pfx_kthread+0x10/0x10 [ 531.798288][ T31] ? __pfx_watchdog+0x10/0x10 [ 531.798317][ T31] ? __pfx_kthread+0x10/0x10 [ 531.798345][ T31] ? __pfx_kthread+0x10/0x10 [ 531.798378][ T31] ? __pfx_kthread+0x10/0x10 [ 531.798407][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.798433][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 531.798463][ T31] ? __pfx_kthread+0x10/0x10 [ 531.798494][ T31] ret_from_fork+0x4b/0x80 [ 531.798519][ T31] ? __pfx_kthread+0x10/0x10 [ 531.798550][ T31] ret_from_fork_asm+0x1a/0x30 [ 531.798587][ T31] [ 531.798595][ T31] Sending NMI from CPU 0 to CPUs 1: [ 531.971391][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 532.047332][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 532.054227][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 532.064785][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 532.074855][ T31] Call Trace: [ 532.078155][ T31] [ 532.081107][ T31] dump_stack_lvl+0x241/0x360 [ 532.085819][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.091042][ T31] ? __pfx__printk+0x10/0x10 [ 532.095659][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 532.101703][ T31] ? vscnprintf+0x5d/0x90 [ 532.106217][ T31] panic+0x349/0x880 [ 532.110134][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 532.116378][ T31] ? __pfx_panic+0x10/0x10 [ 532.120798][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 532.126169][ T31] ? __irq_work_queue_local+0x137/0x410 [ 532.131728][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 532.137106][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 532.143262][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 532.149436][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 532.155627][ T31] watchdog+0x1097/0x10a0 [ 532.160014][ T31] ? watchdog+0x1ea/0x10a0 [ 532.164441][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.169155][ T31] kthread+0x7a9/0x920 [ 532.173275][ T31] ? __pfx_kthread+0x10/0x10 [ 532.177875][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.182560][ T31] ? __pfx_kthread+0x10/0x10 [ 532.187156][ T31] ? __pfx_kthread+0x10/0x10 [ 532.191776][ T31] ? __pfx_kthread+0x10/0x10 [ 532.196372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.201932][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 532.207156][ T31] ? __pfx_kthread+0x10/0x10 [ 532.211759][ T31] ret_from_fork+0x4b/0x80 [ 532.216181][ T31] ? __pfx_kthread+0x10/0x10 [ 532.220804][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.225580][ T31] [ 532.228927][ T31] Kernel Offset: disabled [ 532.233263][ T31] Rebooting in 86400 seconds..