last executing test programs: 1m53.507114035s ago: executing program 1 (id=66): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x20000000, 0x0, @cisco=0x0}}) 1m52.842887383s ago: executing program 1 (id=69): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x2, [0x0, 0x204, 0x0, 0x1, 0xffffffffbffffffe, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16]}, 0x7a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000000100000000000000040000000800000008000000c3ffd34d81ee665a43a26d076ca67c362dcfa4afc962132870185dc0a17bb0d1bb7276", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x0) 1m49.243490134s ago: executing program 1 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3863116, 0x0, 0xfffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='&'], 0x0, 0x0, 0x0}) 1m47.717737838s ago: executing program 1 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x114}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 1m46.505900018s ago: executing program 1 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000800) 1m45.685814086s ago: executing program 1 (id=83): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1m30.423030234s ago: executing program 32 (id=83): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 40.244265645s ago: executing program 0 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x114}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 39.306450658s ago: executing program 0 (id=201): add_key$fscrypt_provisioning(&(0x7f0000000300), 0x0, &(0x7f0000000280)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffb) 37.758733752s ago: executing program 0 (id=203): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0xc00c055) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) write(0xffffffffffffffff, &(0x7f00000000c0)="240000005a001f00", 0x8) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 34.891449209s ago: executing program 0 (id=207): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x73f02000) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x63, 0x800) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 28.559957504s ago: executing program 0 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x114}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 27.578830317s ago: executing program 0 (id=212): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 18.300815444s ago: executing program 4 (id=224): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='proc\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 16.887177156s ago: executing program 4 (id=228): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100746172676574000024000280100001"], 0xa0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 15.074488919s ago: executing program 2 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076003008cb89e08f088a8", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.936183054s ago: executing program 2 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x114}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 12.042255441s ago: executing program 33 (id=212): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 11.989115258s ago: executing program 3 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="331601000013"}) 10.922707429s ago: executing program 3 (id=235): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0xc, 0x2}, {0xc, 0x2}, {0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 10.589427279s ago: executing program 2 (id=236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 10.441898671s ago: executing program 4 (id=237): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000004c0)="ca4d", 0x2, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 9.596293483s ago: executing program 3 (id=238): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x20000000, 0x0, @cisco=0x0}}) 9.370582552s ago: executing program 2 (id=239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3, {}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) socket$inet6(0xa, 0x3, 0x9) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 7.39989164s ago: executing program 4 (id=240): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 7.138272408s ago: executing program 3 (id=241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076003008cb89e08f088a8", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.426579182s ago: executing program 2 (id=242): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0xbfbd6160f1bb88c4, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback=r0, 0xffffffffffffffff, 0x12, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) shutdown(r2, 0x0) 4.426350345s ago: executing program 4 (id=243): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 4.398681709s ago: executing program 3 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}}}, 0x26) 874.601679ms ago: executing program 2 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind=static:7']) 154.810652ms ago: executing program 4 (id=246): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0, 0x8000}], 0x1, 0x5) 0s ago: executing program 3 (id=247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 198.095351][ T5762] cgroup: Unknown subsys name 'net' [ 198.222597][ T5762] cgroup: Unknown subsys name 'cpuset' [ 198.239268][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.422387][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.429127][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.812191][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.238058][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.241156][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.253788][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.255268][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.270838][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.274135][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.283863][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.290974][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.296069][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.303740][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.318089][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.322915][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.470716][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.509069][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.518745][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.528618][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.543079][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.554525][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.564338][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.573538][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.577925][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.588310][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.596122][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.599800][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.612184][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.612868][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.631053][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.643059][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.663576][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.675013][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.635003][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 258.236029][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 258.456129][ T5796] Bluetooth: hci1: command tx timeout [ 258.462182][ T5796] Bluetooth: hci0: command tx timeout [ 258.567672][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 258.751334][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 258.774696][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 258.793841][ T5796] Bluetooth: hci3: command tx timeout [ 258.794347][ T5782] Bluetooth: hci2: command tx timeout [ 258.799905][ T5796] Bluetooth: hci4: command tx timeout [ 259.073479][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.081157][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.089175][ T5779] bridge_slave_0: entered allmulticast mode [ 259.098435][ T5779] bridge_slave_0: entered promiscuous mode [ 259.212939][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.220851][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.228830][ T5779] bridge_slave_1: entered allmulticast mode [ 259.238312][ T5779] bridge_slave_1: entered promiscuous mode [ 259.338779][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.347214][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.355167][ T5788] bridge_slave_0: entered allmulticast mode [ 259.365404][ T5788] bridge_slave_0: entered promiscuous mode [ 259.480948][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.488727][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.496499][ T5788] bridge_slave_1: entered allmulticast mode [ 259.505863][ T5788] bridge_slave_1: entered promiscuous mode [ 259.623935][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.737826][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.764057][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.836919][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.071700][ T5788] team0: Port device team_slave_0 added [ 260.190718][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.200179][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.208313][ T5778] bridge_slave_0: entered allmulticast mode [ 260.217794][ T5778] bridge_slave_0: entered promiscuous mode [ 260.237223][ T5779] team0: Port device team_slave_0 added [ 260.246601][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.259204][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.267158][ T5778] bridge_slave_1: entered allmulticast mode [ 260.276143][ T5778] bridge_slave_1: entered promiscuous mode [ 260.363954][ T5788] team0: Port device team_slave_1 added [ 260.371421][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.379180][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.387071][ T5787] bridge_slave_0: entered allmulticast mode [ 260.396019][ T5787] bridge_slave_0: entered promiscuous mode [ 260.484658][ T5779] team0: Port device team_slave_1 added [ 260.521940][ T5782] Bluetooth: hci1: command tx timeout [ 260.530385][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.538501][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.548896][ T5787] bridge_slave_1: entered allmulticast mode [ 260.552296][ T5782] Bluetooth: hci0: command tx timeout [ 260.558778][ T5787] bridge_slave_1: entered promiscuous mode [ 260.662763][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.670459][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.679837][ T5789] bridge_slave_0: entered allmulticast mode [ 260.689455][ T5789] bridge_slave_0: entered promiscuous mode [ 260.807575][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.815243][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.843224][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.849179][ T5782] Bluetooth: hci2: command tx timeout [ 260.859921][ T5796] Bluetooth: hci3: command tx timeout [ 260.859983][ T5784] Bluetooth: hci4: command tx timeout [ 260.890679][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.902024][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.909750][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.917731][ T5789] bridge_slave_1: entered allmulticast mode [ 260.927235][ T5789] bridge_slave_1: entered promiscuous mode [ 260.940150][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.947845][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.974444][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.995013][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.006691][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.014065][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.040503][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.055718][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.063183][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.089601][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.131381][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.260993][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.279598][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.428220][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.483564][ T5787] team0: Port device team_slave_0 added [ 261.533386][ T5778] team0: Port device team_slave_0 added [ 261.646841][ T5787] team0: Port device team_slave_1 added [ 261.704293][ T5788] hsr_slave_0: entered promiscuous mode [ 261.713711][ T5788] hsr_slave_1: entered promiscuous mode [ 261.732351][ T5778] team0: Port device team_slave_1 added [ 261.750741][ T5789] team0: Port device team_slave_0 added [ 261.807685][ T5779] hsr_slave_0: entered promiscuous mode [ 261.817769][ T5779] hsr_slave_1: entered promiscuous mode [ 261.827150][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.835171][ T5779] Cannot create hsr debugfs directory [ 261.918983][ T5789] team0: Port device team_slave_1 added [ 261.966664][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.975182][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.002327][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.126230][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.133730][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.161986][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.176510][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.183872][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.211497][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.342516][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.349727][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.377167][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.439948][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.447335][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.473835][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.508511][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.516107][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.542664][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.618054][ T5782] Bluetooth: hci0: command tx timeout [ 262.622692][ T5796] Bluetooth: hci1: command tx timeout [ 262.902658][ T5787] hsr_slave_0: entered promiscuous mode [ 262.913464][ T5787] hsr_slave_1: entered promiscuous mode [ 262.922635][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.930444][ T5787] Cannot create hsr debugfs directory [ 262.940064][ T5796] Bluetooth: hci4: command tx timeout [ 262.945920][ T5796] Bluetooth: hci2: command tx timeout [ 262.949481][ T5782] Bluetooth: hci3: command tx timeout [ 262.993670][ T5778] hsr_slave_0: entered promiscuous mode [ 263.003322][ T5778] hsr_slave_1: entered promiscuous mode [ 263.011736][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.019563][ T5778] Cannot create hsr debugfs directory [ 263.200869][ T5789] hsr_slave_0: entered promiscuous mode [ 263.210548][ T5789] hsr_slave_1: entered promiscuous mode [ 263.219956][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.227861][ T5789] Cannot create hsr debugfs directory [ 263.788922][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.889240][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.930646][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.970667][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.390276][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.413352][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.458110][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.488191][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.682024][ T5782] Bluetooth: hci1: command tx timeout [ 264.687647][ T5782] Bluetooth: hci0: command tx timeout [ 264.762729][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.787925][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.908719][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.974348][ T5789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.002187][ T5784] Bluetooth: hci2: command tx timeout [ 265.007878][ T5784] Bluetooth: hci3: command tx timeout [ 265.014479][ T5782] Bluetooth: hci4: command tx timeout [ 265.024216][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.113095][ T5789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.263230][ T5789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.301451][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.357606][ T5789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.394378][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.521937][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.550963][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.923451][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.116350][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.209714][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.266523][ T3901] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.274327][ T3901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.373049][ T3901] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.380674][ T3901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.534542][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.688737][ T3901] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.696560][ T3901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.791461][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.833073][ T3901] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.842401][ T3901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.932181][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.178613][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.244039][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.301720][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.309590][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.375351][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.472353][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.479956][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.495503][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.503539][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.557069][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.675301][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.683031][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.938783][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.988728][ T5787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.000805][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.190139][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.198124][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.222956][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.230894][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.308236][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.614927][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.968420][ T5788] veth0_vlan: entered promiscuous mode [ 270.123706][ T5788] veth1_vlan: entered promiscuous mode [ 270.257152][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.329898][ T5779] veth0_vlan: entered promiscuous mode [ 270.503556][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.524413][ T5779] veth1_vlan: entered promiscuous mode [ 270.550081][ T5788] veth0_macvtap: entered promiscuous mode [ 270.668294][ T5788] veth1_macvtap: entered promiscuous mode [ 270.758260][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.849596][ T5787] veth0_vlan: entered promiscuous mode [ 270.907226][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.951506][ T5779] veth0_macvtap: entered promiscuous mode [ 271.002498][ T5787] veth1_vlan: entered promiscuous mode [ 271.046187][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.179611][ T5779] veth1_macvtap: entered promiscuous mode [ 271.194873][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.205889][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.216166][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.225408][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.426878][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.438705][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.456430][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.514034][ T5787] veth0_macvtap: entered promiscuous mode [ 271.535239][ T5778] veth0_vlan: entered promiscuous mode [ 271.628434][ T5787] veth1_macvtap: entered promiscuous mode [ 271.670378][ T5778] veth1_vlan: entered promiscuous mode [ 271.688145][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.700171][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.716510][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.845207][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.854969][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.864218][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.873382][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.006587][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.018971][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.030278][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.042931][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.058605][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.149336][ T5778] veth0_macvtap: entered promiscuous mode [ 272.266965][ T5778] veth1_macvtap: entered promiscuous mode [ 272.310396][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.322177][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.332583][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.344929][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.360130][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.507009][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.518137][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.531667][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.542567][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.553479][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.566303][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.580603][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.627095][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.636522][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.647128][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.656420][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.755254][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.768822][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.779767][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.791127][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.801816][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.812837][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.828156][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.091303][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.102287][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.111444][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.122984][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.330037][ T5789] veth0_vlan: entered promiscuous mode [ 273.475471][ T5789] veth1_vlan: entered promiscuous mode [ 273.869423][ T5789] veth0_macvtap: entered promiscuous mode [ 273.953730][ T5789] veth1_macvtap: entered promiscuous mode [ 274.141508][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.153250][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.163805][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.174559][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.184620][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.197794][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.209803][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.223553][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.241095][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.439130][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.454114][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.465617][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.476440][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.486563][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.498656][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.508805][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.519865][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.538720][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.614791][ T5789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.624431][ T5789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.633691][ T5789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.642936][ T5789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.142004][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.150465][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.348368][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.360001][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.447886][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.456493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.689830][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.698994][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.910988][ T5788] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 280.172031][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.180137][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.527142][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.535521][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.555400][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 280.892089][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.900548][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.325765][ T1868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.335100][ T1868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.183950][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 282.675472][ T5975] xt_hashlimit: size too large, truncated to 1048576 [ 283.318711][ T3995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.327569][ T3995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.178189][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.190340][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.130570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 287.271478][ T5987] befs: (nbd4): No write support. Marking filesystem read-only [ 287.279833][ T5987] syz.4.5: attempt to access beyond end of device [ 287.279833][ T5987] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 287.292622][ T5987] befs: (nbd4): unable to read superblock [ 287.743482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 287.845497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 288.052428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 288.152898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 288.255485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 288.293750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 288.462528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.562520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 288.664948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 291.287105][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.294481][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.520083][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 296.236439][ T6002] netlink: 'syz.3.12': attribute type 29 has an invalid length. [ 296.582020][ T29] audit: type=1326 audit(1738269769.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f46f8cda9 code=0x7ffc0000 [ 296.610847][ T29] audit: type=1326 audit(1738269769.236:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2f46f8cda9 code=0x7ffc0000 [ 296.635744][ T29] audit: type=1326 audit(1738269769.236:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f46f8cda9 code=0x7ffc0000 [ 297.829352][ T29] audit: type=1326 audit(1738269769.346:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2f46f8cda9 code=0x7ffc0000 [ 297.852211][ T29] audit: type=1326 audit(1738269769.346:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f46f8cda9 code=0x7ffc0000 [ 297.874763][ T29] audit: type=1326 audit(1738269769.526:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f46f8cda9 code=0x7ffc0000 [ 298.562216][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 298.820187][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 299.224745][ T45] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.239500][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.240185][ T45] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 300.249901][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.258515][ T45] usb 1-1: Product: syz [ 300.263072][ T45] usb 1-1: Manufacturer: syz [ 300.267895][ T45] usb 1-1: SerialNumber: syz [ 300.286201][ T6024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 300.664641][ T6021] x_tables: unsorted underflow at hook 3 [ 300.675184][ T45] usb 1-1: config 0 descriptor?? [ 301.238996][ T45] gs_usb 1-1:0.0: Required endpoints not found [ 301.923229][ T1914] usb 1-1: USB disconnect, device number 2 [ 309.294866][ T6068] capability: warning: `syz.1.37' uses 32-bit capabilities (legacy support in use) [ 311.062155][ T1914] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 311.352825][ T1914] usb 2-1: unable to get BOS descriptor set [ 311.386408][ T1914] usb 2-1: not running at top speed; connect to a high speed hub [ 311.398594][ T1914] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 311.544208][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.672242][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.778830][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.851964][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.922203][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.002984][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.070599][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.141841][ T1914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.200215][ T1914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.210022][ T1914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.221954][ T1914] usb 2-1: Product: syz [ 312.228162][ T1914] usb 2-1: Manufacturer: syz [ 312.233272][ T1914] usb 2-1: SerialNumber: syz [ 312.289902][ T1914] usb 2-1: bad CDC descriptors [ 312.550488][ T5836] usb 2-1: USB disconnect, device number 2 [ 319.748870][ T6126] fuse: Bad value for 'fd' [ 326.104356][ T6167] fuse: Bad value for 'fd' [ 341.284916][ T6277] 9pnet_virtio: no channels available for device syz [ 341.460533][ T6277] befs: (nbd3): No write support. Marking filesystem read-only [ 341.469154][ T6277] syz.3.105: attempt to access beyond end of device [ 341.469154][ T6277] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 341.482272][ T6277] befs: (nbd3): unable to read superblock [ 342.923359][ T6284] netlink: 'syz.0.108': attribute type 39 has an invalid length. [ 342.957807][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.260965][ T6284] bridge_slave_0 (unregistering): left allmulticast mode [ 343.268505][ T6284] bridge_slave_0 (unregistering): left promiscuous mode [ 343.276069][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.762933][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.776107][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.805406][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.832634][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.860634][ T5782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 347.870689][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.048225][ T5782] Bluetooth: hci5: command tx timeout [ 351.750720][ T6306] chnl_net:caif_netlink_parms(): no params data found [ 352.122427][ T5782] Bluetooth: hci5: command tx timeout [ 352.340686][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.348028][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.116790][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.125018][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.133337][ T6306] bridge_slave_0: entered allmulticast mode [ 354.143042][ T6306] bridge_slave_0: entered promiscuous mode [ 354.219776][ T5782] Bluetooth: hci5: command tx timeout [ 354.469777][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.477726][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.485669][ T6306] bridge_slave_1: entered allmulticast mode [ 354.495432][ T6306] bridge_slave_1: entered promiscuous mode [ 357.056874][ T5784] Bluetooth: hci5: command tx timeout [ 358.175107][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.377443][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.419802][ T3995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.171318][ T6306] team0: Port device team_slave_0 added [ 359.225035][ T3995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.312875][ T6306] team0: Port device team_slave_1 added [ 359.842891][ T3995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.874143][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.882036][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.910594][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.128277][ T3995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.311190][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.320534][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.360237][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.316421][ T3995] bridge_slave_1: left allmulticast mode [ 361.323147][ T3995] bridge_slave_1: left promiscuous mode [ 361.329953][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.522753][ T3995] bridge_slave_0: left allmulticast mode [ 361.528710][ T3995] bridge_slave_0: left promiscuous mode [ 361.535782][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.267623][ T3995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.321336][ T3995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.337304][ T3995] bond0 (unregistering): Released all slaves [ 363.380699][ T6306] hsr_slave_0: entered promiscuous mode [ 363.396889][ T6306] hsr_slave_1: entered promiscuous mode [ 363.416316][ T6306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.426391][ T6306] Cannot create hsr debugfs directory [ 365.366974][ T3995] hsr_slave_0: left promiscuous mode [ 365.424117][ T3995] hsr_slave_1: left promiscuous mode [ 365.432594][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.440382][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.677940][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.686137][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.913167][ T3995] veth1_macvtap: left promiscuous mode [ 365.919003][ T3995] veth0_macvtap: left promiscuous mode [ 365.925221][ T3995] veth1_vlan: left promiscuous mode [ 365.931296][ T3995] veth0_vlan: left promiscuous mode [ 369.179770][ T6426] netlink: 92 bytes leftover after parsing attributes in process `syz.0.153'. [ 370.169190][ T3995] team0 (unregistering): Port device team_slave_1 removed [ 370.201343][ T3995] team0 (unregistering): Port device team_slave_0 removed [ 371.468385][ T6306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 371.573466][ T6306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 371.705819][ T6306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 371.975067][ T6306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.682123][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 374.691155][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 374.699970][ T5782] Bluetooth: hci1: hardware error 0x00 [ 376.597157][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.762038][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 377.917004][ T6467] netlink: 92 bytes leftover after parsing attributes in process `syz.3.164'. [ 378.201987][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.430071][ T1851] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.438088][ T1851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.385470][ T6474] netlink: 92 bytes leftover after parsing attributes in process `syz.4.166'. [ 379.427448][ T1851] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.435307][ T1851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.228175][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 380.244229][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 380.250564][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 380.762206][ T6306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.853019][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.746056][ T6514] netlink: 92 bytes leftover after parsing attributes in process `syz.0.177'. [ 386.690300][ T6529] : renamed from bond0 (while UP) [ 388.284812][ T6537] syzkaller0: entered allmulticast mode [ 389.351110][ T6547] capability: warning: `syz.4.183' uses deprecated v2 capabilities in a way that may be insecure [ 390.926203][ T6561] netlink: 92 bytes leftover after parsing attributes in process `syz.3.189'. [ 393.188940][ T6306] veth0_vlan: entered promiscuous mode [ 393.664221][ T6306] veth1_vlan: entered promiscuous mode [ 394.407124][ T6306] veth0_macvtap: entered promiscuous mode [ 394.447798][ T6581] syzkaller0: entered allmulticast mode [ 394.470901][ T6306] veth1_macvtap: entered promiscuous mode [ 394.802816][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.813744][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.824004][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.835283][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.845528][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.859383][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.870311][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.881019][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.896711][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.199081][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.210237][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.220599][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.231565][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.241818][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.252788][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.266055][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.277613][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.293085][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.099340][ T6306] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.108646][ T6306] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.117993][ T6306] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.127329][ T6306] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.178144][ T1914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 399.454464][ T1914] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.466357][ T1914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.475414][ T1914] usb 5-1: Product: syz [ 399.479769][ T1914] usb 5-1: Manufacturer: syz [ 399.485812][ T1914] usb 5-1: SerialNumber: syz [ 399.659777][ T1914] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.134274][ T5840] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.209349][ T5836] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 402.156718][ T5840] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 402.167827][ T5840] ath9k_htc: Failed to initialize the device [ 404.308670][ T5840] usb 5-1: ath9k_htc: USB layer deinitialized [ 405.531269][ T5836] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 405.539639][ T5836] usb 4-1: can't read configurations, error -71 [ 406.370033][ T45] usb 5-1: USB disconnect, device number 2 [ 406.514227][ T6636] syzkaller0: entered allmulticast mode [ 407.536527][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.568005][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.581258][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.615802][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.646097][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.658724][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.722130][ T5784] Bluetooth: hci0: command tx timeout [ 409.977537][ T6665] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 410.382796][ T6645] chnl_net:caif_netlink_parms(): no params data found [ 410.972496][ T3702] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.231947][ T3702] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.637089][ T3702] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.809759][ T5784] Bluetooth: hci0: command tx timeout [ 411.857115][ T3702] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.831178][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.840084][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.848396][ T6645] bridge_slave_0: entered allmulticast mode [ 412.857952][ T6645] bridge_slave_0: entered promiscuous mode [ 413.633397][ T3702] bridge_slave_1: left allmulticast mode [ 413.639372][ T3702] bridge_slave_1: left promiscuous mode [ 413.646452][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.658358][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.664979][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.895059][ T5784] Bluetooth: hci0: command tx timeout [ 415.073249][ T3702] bridge_slave_0: left allmulticast mode [ 415.079585][ T3702] bridge_slave_0: left promiscuous mode [ 415.086473][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.426580][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.437866][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.445876][ T6645] bridge_slave_1: entered allmulticast mode [ 415.454550][ T6645] bridge_slave_1: entered promiscuous mode [ 415.972047][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.002174][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.019287][ T3702] bond0 (unregistering): Released all slaves [ 416.424234][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.526805][ T3702] hsr_slave_0: left promiscuous mode [ 416.611783][ T3702] hsr_slave_1: left promiscuous mode [ 416.620352][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.629055][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.736683][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.744954][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.822888][ T3702] veth1_macvtap: left promiscuous mode [ 416.828777][ T3702] veth0_macvtap: left promiscuous mode [ 416.835226][ T3702] veth1_vlan: left promiscuous mode [ 416.840870][ T3702] veth0_vlan: left promiscuous mode [ 416.942319][ T5784] Bluetooth: hci0: command tx timeout [ 417.399810][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.189875][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 418.219853][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 418.861301][ T6645] team0: Port device team_slave_0 added [ 418.935589][ T6645] team0: Port device team_slave_1 added [ 419.312293][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.319789][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.349614][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.578256][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.586847][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.613593][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.326441][ T6645] hsr_slave_0: entered promiscuous mode [ 420.337249][ T6645] hsr_slave_1: entered promiscuous mode [ 420.350814][ T6645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.359640][ T6645] Cannot create hsr debugfs directory [ 423.899754][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.909970][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.923786][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.954014][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.980794][ T5785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 424.000890][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.201998][ T5784] Bluetooth: hci5: command tx timeout [ 426.373077][ T6645] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.396854][ T6645] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.428200][ T6645] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.230765][ T6645] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.281827][ T5784] Bluetooth: hci5: command tx timeout [ 428.320219][ T6755] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 428.547501][ T6755] slcan: can't register candev [ 430.373273][ T5784] Bluetooth: hci5: command tx timeout [ 431.383902][ T5840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 432.147538][ T6767] syzkaller1: entered promiscuous mode [ 432.154456][ T6767] syzkaller1: entered allmulticast mode [ 432.472068][ T5784] Bluetooth: hci5: command tx timeout [ 432.472145][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 432.620829][ T5840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 434.078869][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.243108][ T6771] tmpfs: Bad value for 'mpol' [ 434.422588][ T5840] usb 5-1: string descriptor 0 read error: -71 [ 434.429724][ T5840] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 434.440120][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 434.583979][ T5840] usb 5-1: config 0 descriptor?? [ 434.629479][ T6645] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.667563][ T5840] usb 5-1: can't set config #0, error -71 [ 434.721129][ T5840] usb 5-1: USB disconnect, device number 3 [ 434.762450][ T6729] chnl_net:caif_netlink_parms(): no params data found [ 434.896321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.903973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.918122][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.925771][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.167915][ T6774] ===================================================== [ 435.175416][ T6774] BUG: KMSAN: uninit-value in full_proxy_poll+0xdf/0x3b0 [ 435.183099][ T6774] full_proxy_poll+0xdf/0x3b0 [ 435.188045][ T6774] do_sys_poll+0xece/0x2090 [ 435.193156][ T6774] __se_sys_poll+0x1d9/0x450 [ 435.200713][ T6774] __x64_sys_poll+0x96/0xe0 [ 435.206539][ T6774] x64_sys_call+0x3566/0x3c30 [ 435.211469][ T6774] do_syscall_64+0xcd/0x1e0 [ 435.216426][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.222830][ T6774] [ 435.225292][ T6774] Uninit was stored to memory at: [ 435.230551][ T6774] __debugfs_file_get+0xe59/0xef0 [ 435.236589][ T6774] full_proxy_open_regular+0x67/0xa00 [ 435.242485][ T6774] do_dentry_open+0x1bdd/0x26b0 [ 435.247555][ T6774] vfs_open+0x53/0x5b0 [ 435.252316][ T6774] path_openat+0x5667/0x6210 [ 435.257137][ T6774] do_filp_open+0x268/0x600 [ 435.262160][ T6774] do_sys_openat2+0x1bf/0x2f0 [ 435.267027][ T6774] __x64_sys_openat+0x2a1/0x310 [ 435.272159][ T6774] x64_sys_call+0x36f5/0x3c30 [ 435.277016][ T6774] do_syscall_64+0xcd/0x1e0 [ 435.281945][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.288114][ T6774] [ 435.290661][ T6774] Uninit was stored to memory at: [ 435.297093][ T6774] __debugfs_file_get+0xdff/0xef0 [ 435.304487][ T6774] full_proxy_open_regular+0x67/0xa00 [ 435.310042][ T6774] do_dentry_open+0x1bdd/0x26b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.315867][ T6774] vfs_open+0x53/0x5b0 [ 435.320109][ T6774] path_openat+0x5667/0x6210 [ 435.325126][ T6774] do_filp_open+0x268/0x600 [ 435.329829][ T6774] do_sys_openat2+0x1bf/0x2f0 [ 435.334738][ T6774] __x64_sys_openat+0x2a1/0x310 [ 435.339726][ T6774] x64_sys_call+0x36f5/0x3c30 [ 435.344683][ T6774] do_syscall_64+0xcd/0x1e0 [ 435.349334][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.355661][ T6774] [ 435.358056][ T6774] Uninit was created at: [ 435.362546][ T6774] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 435.368019][ T6774] __debugfs_file_get+0x31d/0xef0 [ 435.373245][ T6774] full_proxy_open_regular+0x67/0xa00 [ 435.378754][ T6774] do_dentry_open+0x1bdd/0x26b0 [ 435.384071][ T6774] vfs_open+0x53/0x5b0 [ 435.388477][ T6774] path_openat+0x5667/0x6210 [ 435.393352][ T6774] do_filp_open+0x268/0x600 [ 435.398022][ T6774] do_sys_openat2+0x1bf/0x2f0 [ 435.405917][ T6774] __x64_sys_openat+0x2a1/0x310 [ 435.410954][ T6774] x64_sys_call+0x36f5/0x3c30 [ 435.416692][ T6774] do_syscall_64+0xcd/0x1e0 [ 435.421746][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.427896][ T6774] [ 435.430344][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.4.246 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 435.440906][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 435.451249][ T6774] ===================================================== [ 435.458387][ T6774] Disabling lock debugging due to kernel taint [ 435.464661][ T6774] Kernel panic - not syncing: kmsan.panic set ... [ 435.471233][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.4.246 Tainted: G B 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 435.483065][ T6774] Tainted: [B]=BAD_PAGE [ 435.487289][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 435.497469][ T6774] Call Trace: [ 435.500844][ T6774] [ 435.503886][ T6774] dump_stack_lvl+0x216/0x2d0 [ 435.509180][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.515205][ T6774] dump_stack+0x1e/0x24 [ 435.519539][ T6774] panic+0x4e2/0xcf0 [ 435.523791][ T6774] ? kmsan_get_metadata+0x61/0x1c0 [ 435.529388][ T6774] kmsan_report+0x2c7/0x2d0 [ 435.534079][ T6774] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 435.540181][ T6774] ? __msan_warning+0x95/0x120 [ 435.545121][ T6774] ? full_proxy_poll+0xdf/0x3b0 [ 435.550511][ T6774] ? do_sys_poll+0xece/0x2090 [ 435.555393][ T6774] ? __se_sys_poll+0x1d9/0x450 [ 435.560272][ T6774] ? __x64_sys_poll+0x96/0xe0 [ 435.565058][ T6774] ? x64_sys_call+0x3566/0x3c30 [ 435.570006][ T6774] ? do_syscall_64+0xcd/0x1e0 [ 435.574775][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.580959][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.586900][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.592329][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.598586][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.604002][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.610107][ T6774] ? set_normalized_timespec64+0x3f/0x2a0 [ 435.616173][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.621617][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.627717][ T6774] ? __rcu_read_unlock+0x7b/0xe0 [ 435.632813][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.638188][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.644362][ T6774] __msan_warning+0x95/0x120 [ 435.649147][ T6774] full_proxy_poll+0xdf/0x3b0 [ 435.654043][ T6774] ? __pfx_full_proxy_poll+0x10/0x10 [ 435.659466][ T6774] do_sys_poll+0xece/0x2090 [ 435.664137][ T6774] ? __pfx___pollwait+0x10/0x10 [ 435.669213][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.674535][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.680467][ T6774] ? futex_unqueue+0x202/0x2a0 [ 435.685441][ T6774] ? __futex_wait+0x4e6/0x540 [ 435.690276][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.695653][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.701061][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.707099][ T6774] ? timespec64_add_safe+0xa6/0x430 [ 435.712527][ T6774] ? filter_irq_stacks+0x60/0x1a0 [ 435.717736][ T6774] ? stack_depot_save_flags+0x2c/0x750 [ 435.723748][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.730445][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.736728][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.742851][ T6774] ? timespec64_add_safe+0x36f/0x430 [ 435.748324][ T6774] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.753835][ T6774] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.759814][ T6774] __se_sys_poll+0x1d9/0x450 [ 435.764529][ T6774] __x64_sys_poll+0x96/0xe0 [ 435.769173][ T6774] x64_sys_call+0x3566/0x3c30 [ 435.773984][ T6774] do_syscall_64+0xcd/0x1e0 [ 435.778601][ T6774] ? clear_bhb_loop+0x25/0x80 [ 435.783406][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.789727][ T6774] RIP: 0033:0x7f9b7458cda9 [ 435.794260][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.814214][ T6774] RSP: 002b:00007f9b754a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 435.823076][ T6774] RAX: ffffffffffffffda RBX: 00007f9b747a5fa0 RCX: 00007f9b7458cda9 [ 435.831228][ T6774] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000020000180 [ 435.839348][ T6774] RBP: 00007f9b7460e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 435.847535][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.855657][ T6774] R13: 0000000000000000 R14: 00007f9b747a5fa0 R15: 00007ffd1ea08048 [ 435.863754][ T6774] [ 435.867257][ T6774] Kernel Offset: disabled [ 435.871659][ T6774] Rebooting in 86400 seconds..