last executing test programs: 4m1.306691672s ago: executing program 1 (id=27): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) lseek(r5, 0x6, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x457) sendto$inet6(r6, &(0x7f0000000500)="4406b108b1cdc885c9c533d21f474bec8b96a289d9fe7fe8fef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05", 0xa4, 0x1, 0x0, 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m59.418418531s ago: executing program 1 (id=29): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpid() wait4(r2, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20003) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x180800, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0x9}], 0x2c) 3m56.704787447s ago: executing program 1 (id=35): mknodat$null(0xffffffffffffff9c, 0x0, 0x40, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) 3m53.073866831s ago: executing program 1 (id=39): syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mq_open(0x0, 0x6e93ebbbcc0884f2, 0xf1, &(0x7f0000000000)={0xffffffff, 0x0, 0x8}) r2 = syz_open_dev$video4linux(0x0, 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0405627, 0x0) socket(0x2a, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) 3m50.079923115s ago: executing program 1 (id=46): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x100) 3m48.266475319s ago: executing program 1 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="affe679047cffb74401c3072691e36d74ceacfd9500cd7ec37e3995cccef8e0c543b35f4c5ab", 0x26, 0x40802, &(0x7f00000001c0)={0x11, 0xf7, r5, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) r7 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x105, 0x40009974, r7, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) 3m33.137254019s ago: executing program 32 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="affe679047cffb74401c3072691e36d74ceacfd9500cd7ec37e3995cccef8e0c543b35f4c5ab", 0x26, 0x40802, &(0x7f00000001c0)={0x11, 0xf7, r5, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) r7 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x105, 0x40009974, r7, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) 2m45.117561257s ago: executing program 0 (id=269): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x10, [{0x9, 0x5, 0x6}]}]}, {0x0, [0x6f, 0x61, 0x0, 0x61]}}, &(0x7f0000000000)=""/254, 0x36, 0xfe, 0x9, 0x1000, 0x0, @void, @value}, 0x28) 2m44.961378152s ago: executing program 0 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2m44.758363007s ago: executing program 0 (id=274): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m41.941024937s ago: executing program 0 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) fgetxattr(r2, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000300)=""/9, 0x9) 2m40.646494859s ago: executing program 0 (id=283): lsetxattr$system_posix_acl(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], 0x4, 0x0) 2m40.382312703s ago: executing program 0 (id=288): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x2010000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001c1e3059000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) 2m25.152371806s ago: executing program 33 (id=288): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x2010000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001c1e3059000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) 9.875600966s ago: executing program 5 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_procfs$pagemap(r0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000300)={0x60, 0x2, &(0x7f00007b7000/0x3000)=nil, &(0x7f00007c3000/0x1000)=nil, 0xffffffff, &(0x7f0000000200)=[{0x2, 0x101, 0xb10}], 0x1, 0x800, 0x10, 0x61, 0x1, 0x41}) r8 = accept(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)=ANY=[@ANYBLOB="340000003d0007010080000000000000027c00001c0045801800"], 0x34}}, 0x4040040) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 7.844157339s ago: executing program 5 (id=803): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r0 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x567, 0xa9ea, 0x5, 0x0, 0x0) 7.645022802s ago: executing program 3 (id=805): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x8, 0x0, 0x0}}, 0xffffffffffffff20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x112, 0x2, 0x0, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x80000000, {r6, r7/1000+60000}, {}, 0x0, 0x1, {0x0}}) ppoll(&(0x7f00000001c0)=[{r4, 0x40}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000480)={0x81, r0, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000007c0)={0x52}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80082) 7.644584516s ago: executing program 5 (id=806): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) 7.506036231s ago: executing program 3 (id=808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000a90200"/24]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xd0}}, 0x8000) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240000c4}, 0x5) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r4, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000240)) semctl$GETZCNT(r4, 0x4, 0xf, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r5) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r6, &(0x7f00000000c0)="8f2a0a65bd8c002b03", 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYBLOB="5f998eda9d0ab39486ecb2f095dcd280af0b6d70eb8ee763e3ab2554700821b85b68b0902d10baa67ee1c9d23b81f33d4e09f3401e480782e5e9efca04a0a37b", @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC, @ANYRESOCT=r3, @ANYRES8], 0x90}, 0x1, 0x0, 0x0, 0x390374b2efabb1f8}, 0xbd78af2d06e151b9) 7.466560616s ago: executing program 4 (id=810): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)={0x4, [0x1, 0x6], 0x7}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) 6.432307684s ago: executing program 3 (id=815): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0xe8c, 0x7, 0x3010, 0x5, 0x7, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x121040) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffffc0, &(0x7f0000000000)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x402}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f00000008c0)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) 6.404217882s ago: executing program 4 (id=816): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.286391208s ago: executing program 2 (id=817): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.252049537s ago: executing program 3 (id=818): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000540)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.240916576s ago: executing program 6 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1c}}, &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r4, 0x0, 0x607a9e0a432a4785) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000005c0)={0x1, 0xfffffff3}) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000401, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,timeout=0x0000000000000004,timeout=0x0000000000000002,sq=0x0000000000000401,sq=0x000000007fffffff,uid<', @ANYRESDEC=0x0, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\'#,mask=^MAY_APPEND,defcontext=user_u,\x00']) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000000c0)=0x1c9, 0x4) 5.586244928s ago: executing program 2 (id=820): syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mq_open(0x0, 0x6e93ebbbcc0884f2, 0xf1, &(0x7f0000000000)={0xffffffff, 0x0, 0x8}) r2 = syz_open_dev$video4linux(0x0, 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0405627, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) 5.147217002s ago: executing program 4 (id=821): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000000c0)) fcntl$dupfd(r4, 0x0, r4) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x7ff) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x0, 0x9, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x20034, 0x2, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x7, r3, 0x1, 0x0, 0x6, @local}, 0x14) 5.144731233s ago: executing program 3 (id=822): socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000480)={{0xff, 0x9}, 'port0\x00', 0x58, 0x40010, 0xfffffffb, 0x6, 0x10, 0x9, 0x0, 0x0, 0x1, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) 4.998343732s ago: executing program 5 (id=823): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe) 2.595111243s ago: executing program 6 (id=824): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}}}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.576653573s ago: executing program 5 (id=825): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x200, 0x40d, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) 2.072080463s ago: executing program 6 (id=826): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)={0x4, [0x1, 0x6], 0x7}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) 1.822755755s ago: executing program 2 (id=827): socket(0x28, 0x5, 0x0) socket(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 999.891587ms ago: executing program 6 (id=828): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0xe8c, 0x7, 0x3010, 0x5, 0x7, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x121040) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffffc0, &(0x7f0000000000)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x402}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f00000008c0)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) 869.552952ms ago: executing program 2 (id=829): accept4$x25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000340)=0x12, 0x80000) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001ffffbfff080000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0000009f44d84e6cbd07a6581ff848c6e2b9022724a0acf48415b310f23cc1d54c8c3917"], 0x20}, 0x1, 0x0, 0x0, 0x80088c0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000400), &(0x7f00000000c0)=[r1], &(0x7f0000000340)}) 372.904076ms ago: executing program 4 (id=830): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 343.948876ms ago: executing program 3 (id=831): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0xb, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x1, r7, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 312.778133ms ago: executing program 6 (id=832): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) unshare(0x400) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x40) 301.977935ms ago: executing program 5 (id=833): socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) 261.980362ms ago: executing program 2 (id=834): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x37, 0xffffffffffffffff, 0x0) 152.864726ms ago: executing program 4 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.387814ms ago: executing program 2 (id=836): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x6a, {0x2, 0x0, @broadcast}}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 4.381779ms ago: executing program 4 (id=837): syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mq_open(0x0, 0x6e93ebbbcc0884f2, 0xf1, &(0x7f0000000000)={0xffffffff, 0x0, 0x8}) r2 = syz_open_dev$video4linux(0x0, 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0405627, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) 0s ago: executing program 6 (id=838): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)={0x4, [0x1, 0x6], 0x7}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.42' (ED25519) to the list of known hosts. [ 82.965385][ T5828] cgroup: Unknown subsys name 'net' [ 83.081277][ T5828] cgroup: Unknown subsys name 'cpuset' [ 83.090547][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.739343][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.021966][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.030613][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.039154][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.052470][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.061926][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.070952][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.079103][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.088052][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.097592][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.105043][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.109081][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.113210][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.120977][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.130613][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.142128][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.149695][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.150060][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.180999][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.189796][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.207418][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.223198][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.232121][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.243241][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.250911][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.264189][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.762497][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.845587][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.027206][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.034605][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.045192][ T5842] bridge_slave_0: entered allmulticast mode [ 90.054487][ T5842] bridge_slave_0: entered promiscuous mode [ 90.125768][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.133237][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.140556][ T5842] bridge_slave_1: entered allmulticast mode [ 90.147910][ T5842] bridge_slave_1: entered promiscuous mode [ 90.262642][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.282892][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.297526][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.335241][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.401166][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.408454][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.415630][ T5839] bridge_slave_0: entered allmulticast mode [ 90.423793][ T5839] bridge_slave_0: entered promiscuous mode [ 90.455325][ T5842] team0: Port device team_slave_0 added [ 90.476555][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.483765][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.491511][ T5839] bridge_slave_1: entered allmulticast mode [ 90.499157][ T5839] bridge_slave_1: entered promiscuous mode [ 90.505887][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 90.533100][ T5842] team0: Port device team_slave_1 added [ 90.650800][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.667182][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.674180][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.700470][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.743588][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.760149][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.767622][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.793949][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.838412][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.845646][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.852981][ T5845] bridge_slave_0: entered allmulticast mode [ 90.860895][ T5845] bridge_slave_0: entered promiscuous mode [ 90.917048][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.924216][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.932146][ T5840] bridge_slave_0: entered allmulticast mode [ 90.939698][ T5840] bridge_slave_0: entered promiscuous mode [ 90.971694][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.979484][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.987005][ T5845] bridge_slave_1: entered allmulticast mode [ 90.994281][ T5845] bridge_slave_1: entered promiscuous mode [ 91.019343][ T5839] team0: Port device team_slave_0 added [ 91.025544][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.032901][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.040947][ T5840] bridge_slave_1: entered allmulticast mode [ 91.048550][ T5840] bridge_slave_1: entered promiscuous mode [ 91.111656][ T5839] team0: Port device team_slave_1 added [ 91.137956][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.206214][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.215981][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.224039][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.224322][ T5858] Bluetooth: hci0: command tx timeout [ 91.235867][ T5854] bridge_slave_0: entered allmulticast mode [ 91.244013][ T5854] bridge_slave_0: entered promiscuous mode [ 91.253720][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.261314][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.268849][ T5854] bridge_slave_1: entered allmulticast mode [ 91.276147][ T5854] bridge_slave_1: entered promiscuous mode [ 91.285772][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.297324][ T5849] Bluetooth: hci2: command tx timeout [ 91.303053][ T5849] Bluetooth: hci1: command tx timeout [ 91.307339][ T5842] hsr_slave_0: entered promiscuous mode [ 91.309976][ T5858] Bluetooth: hci4: command tx timeout [ 91.315381][ T5842] hsr_slave_1: entered promiscuous mode [ 91.371794][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.386879][ T5858] Bluetooth: hci3: command tx timeout [ 91.401399][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.408522][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.435073][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.492576][ T5845] team0: Port device team_slave_0 added [ 91.499605][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.507721][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.534031][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.549143][ T5840] team0: Port device team_slave_0 added [ 91.558096][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.583506][ T5845] team0: Port device team_slave_1 added [ 91.597736][ T5840] team0: Port device team_slave_1 added [ 91.607705][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.679984][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.687457][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.713760][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.752067][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.759339][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.786381][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.813014][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.820268][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.847145][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.885757][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.892939][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.919532][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.962359][ T5854] team0: Port device team_slave_0 added [ 91.988149][ T5839] hsr_slave_0: entered promiscuous mode [ 91.994506][ T5839] hsr_slave_1: entered promiscuous mode [ 92.000997][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.009566][ T5839] Cannot create hsr debugfs directory [ 92.019501][ T24] cfg80211: failed to load regulatory.db [ 92.039148][ T5854] team0: Port device team_slave_1 added [ 92.119570][ T5840] hsr_slave_0: entered promiscuous mode [ 92.126070][ T5840] hsr_slave_1: entered promiscuous mode [ 92.132487][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.140327][ T5840] Cannot create hsr debugfs directory [ 92.222313][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.232306][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.258773][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.307025][ T5845] hsr_slave_0: entered promiscuous mode [ 92.313556][ T5845] hsr_slave_1: entered promiscuous mode [ 92.321271][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.328916][ T5845] Cannot create hsr debugfs directory [ 92.335620][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.343372][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.369475][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.560207][ T5854] hsr_slave_0: entered promiscuous mode [ 92.567465][ T5854] hsr_slave_1: entered promiscuous mode [ 92.573629][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.582004][ T5854] Cannot create hsr debugfs directory [ 92.794760][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.828673][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.852025][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.902600][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.030725][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.041822][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.059201][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.075519][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.149560][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.168492][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.190823][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.202793][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.280755][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.292758][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.299585][ T5858] Bluetooth: hci0: command tx timeout [ 93.311421][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.324632][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.376992][ T5858] Bluetooth: hci4: command tx timeout [ 93.382464][ T5858] Bluetooth: hci1: command tx timeout [ 93.388689][ T5849] Bluetooth: hci2: command tx timeout [ 93.457143][ T5858] Bluetooth: hci3: command tx timeout [ 93.479347][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.492789][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.527783][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.545422][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.557756][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.603511][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.674897][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.682299][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.737916][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.748312][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.755573][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.812035][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.868824][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.879289][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.921041][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.928273][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.949124][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.962799][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.976487][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.983666][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.015719][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.022951][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.039713][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.046928][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.093191][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.100404][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.113709][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.120957][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.230219][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.290432][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.355911][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.443765][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.451060][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.463308][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.470585][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.561981][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.785569][ T5842] veth0_vlan: entered promiscuous mode [ 94.808027][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.849919][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.881779][ T5842] veth1_vlan: entered promiscuous mode [ 95.053348][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.074376][ T5845] veth0_vlan: entered promiscuous mode [ 95.110765][ T5845] veth1_vlan: entered promiscuous mode [ 95.123548][ T5842] veth0_macvtap: entered promiscuous mode [ 95.160548][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.184728][ T5842] veth1_macvtap: entered promiscuous mode [ 95.295219][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.312898][ T5845] veth0_macvtap: entered promiscuous mode [ 95.336293][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.345639][ T5845] veth1_macvtap: entered promiscuous mode [ 95.376870][ T5858] Bluetooth: hci0: command tx timeout [ 95.383414][ T5840] veth0_vlan: entered promiscuous mode [ 95.406177][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.415642][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.425777][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.434913][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.456914][ T5858] Bluetooth: hci1: command tx timeout [ 95.457231][ T5847] Bluetooth: hci2: command tx timeout [ 95.462359][ T5858] Bluetooth: hci4: command tx timeout [ 95.498646][ T5840] veth1_vlan: entered promiscuous mode [ 95.521438][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.534726][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.547019][ T5858] Bluetooth: hci3: command tx timeout [ 95.556279][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.576245][ T5839] veth0_vlan: entered promiscuous mode [ 95.600674][ T5854] veth0_vlan: entered promiscuous mode [ 95.619816][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.631146][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.643105][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.654409][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.663668][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.672996][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.682081][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.718398][ T5854] veth1_vlan: entered promiscuous mode [ 95.754056][ T5839] veth1_vlan: entered promiscuous mode [ 95.783641][ T5840] veth0_macvtap: entered promiscuous mode [ 95.842216][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.855828][ T5840] veth1_macvtap: entered promiscuous mode [ 95.858352][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.955848][ T5839] veth0_macvtap: entered promiscuous mode [ 95.997651][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.007508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.010023][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.033614][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.043686][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.054410][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.068308][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.077842][ T5854] veth0_macvtap: entered promiscuous mode [ 96.093187][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.104596][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.115967][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.122555][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.133758][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.144851][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.156219][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.165017][ T5839] veth1_macvtap: entered promiscuous mode [ 96.192291][ T5854] veth1_macvtap: entered promiscuous mode [ 96.225065][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.236345][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245218][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.254041][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.296901][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.306632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.323254][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.335357][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.346380][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.360078][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.370682][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.381367][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.392004][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.404485][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.423895][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.435052][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.445311][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.456251][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.466820][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.478097][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.488058][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.498742][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.520712][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.588300][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.621299][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.632048][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.645227][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.662272][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.673162][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.685957][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.727756][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.744078][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.760320][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.771920][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.799622][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.812385][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.830149][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.843898][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.860171][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.871097][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.883937][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.894436][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.911079][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.252932][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.263340][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.281215][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301678][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.109230][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.277219][ T5858] Bluetooth: hci0: command tx timeout [ 98.282708][ T5858] Bluetooth: hci2: command tx timeout [ 98.288304][ T5858] Bluetooth: hci4: command tx timeout [ 98.293760][ T5858] Bluetooth: hci1: command tx timeout [ 98.299526][ T5858] Bluetooth: hci3: command tx timeout [ 98.362694][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.201624][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.219104][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.957000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 99.966158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.996527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.358514][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.407019][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.443100][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.487063][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.583639][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 100.593138][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 100.878781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.887888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.926870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.981087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.990389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.066818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.075522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.602055][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.739007][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.750673][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.758718][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.770306][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.968353][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.146958][ T5980] tipc: Started in network mode [ 106.152183][ T5980] tipc: Node identity 1, cluster identity 4711 [ 106.158741][ T5980] tipc: Node number set to 1 [ 107.449670][ T6015] loop3: detected capacity change from 0 to 2048 [ 107.710335][ T6015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.819187][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 114.225320][ T6032] IPVS: starting estimator thread 0... [ 114.832419][ T6067] IPVS: using max 22 ests per chain, 52800 per kthread [ 117.395750][ T6086] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 117.929186][ T6091] PKCS7: Unknown OID: [5] (bad) [ 117.934797][ T6091] PKCS7: Only support pkcs7_signedData type [ 118.805650][ T6098] netlink: 156 bytes leftover after parsing attributes in process `syz.4.41'. [ 118.838367][ T6093] geneve2: entered promiscuous mode [ 118.843872][ T6093] geneve2: entered allmulticast mode [ 121.538929][ T5847] Bluetooth: hci3: SCO packet for unknown connection handle 1155 [ 123.104018][ T6133] warning: `syz.0.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.019882][ T6145] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.019882][ T6145] The task syz.2.54 (6145) triggered the difference, watch for misbehavior. [ 125.060304][ T6146] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 125.594600][ T6146] syz.0.55 (6146) used greatest stack depth: 19112 bytes left [ 126.308202][ T6153] Zero length message leads to an empty skb [ 138.107353][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.126588][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.656030][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.786588][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.799420][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.810069][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.818325][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.861572][ T5858] Bluetooth: hci5: command tx timeout [ 142.603572][ T6291] chnl_net:caif_netlink_parms(): no params data found [ 143.936643][ T5858] Bluetooth: hci5: command tx timeout [ 144.512758][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.540439][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.552284][ T6291] bridge_slave_0: entered allmulticast mode [ 144.564664][ T6291] bridge_slave_0: entered promiscuous mode [ 145.047649][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.058138][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.066103][ T6291] bridge_slave_1: entered allmulticast mode [ 145.087824][ T6291] bridge_slave_1: entered promiscuous mode [ 145.162034][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.224390][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.435710][ T6291] team0: Port device team_slave_0 added [ 145.492154][ T6291] team0: Port device team_slave_1 added [ 145.566345][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.707399][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.733528][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.535539][ T5858] Bluetooth: hci5: command tx timeout [ 146.712808][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.734655][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.757733][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.783778][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.192724][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.842269][ T6291] hsr_slave_0: entered promiscuous mode [ 147.879159][ T6291] hsr_slave_1: entered promiscuous mode [ 147.914969][ T6291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.972391][ T6291] Cannot create hsr debugfs directory [ 148.576527][ T5858] Bluetooth: hci5: command tx timeout [ 151.272123][ T6291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.377594][ T6291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.437551][ T6291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.522079][ T6291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.372554][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.465881][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.538862][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.546141][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.614018][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.621948][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.716625][ T6445] Bluetooth: MGMT ver 1.23 [ 156.025725][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.586347][ T6291] veth0_vlan: entered promiscuous mode [ 159.641769][ T6291] veth1_vlan: entered promiscuous mode [ 159.772018][ T6291] veth0_macvtap: entered promiscuous mode [ 159.876266][ T6291] veth1_macvtap: entered promiscuous mode [ 159.905936][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.922623][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.933994][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.983349][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.036176][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.197840][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.292630][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.451927][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.506510][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.536540][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.555263][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.695926][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.738712][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.770454][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.784211][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.794645][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.818068][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.623922][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.635324][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.788331][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.026052][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.248467][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.325891][ T6291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.353323][ T6291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.388965][ T6291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.409252][ T6291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.766047][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.818862][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.969576][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.011778][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.362733][ T6568] netlink: 'syz.0.198': attribute type 9 has an invalid length. [ 164.371634][ T6568] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 165.152534][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 165.264720][ T6572] tmpfs: Bad value for 'mpol' [ 165.383592][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c068400: rx timeout, send abort [ 165.394075][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c068400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.939918][ T9] IPVS: starting estimator thread 0... [ 166.836598][ T6580] IPVS: using max 30 ests per chain, 72000 per kthread [ 167.282848][ T6589] PKCS7: Unknown OID: [5] (bad) [ 167.289778][ T6589] PKCS7: Only support pkcs7_signedData type [ 168.748638][ T6615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.765854][ T6615] xt_NFQUEUE: number of total queues is 0 [ 170.174637][ T6630] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.204571][ T6630] xt_hashlimit: max too large, truncated to 1048576 [ 170.226037][ T6630] Cannot find set identified by id 0 to match [ 170.997112][ T6637] PKCS7: Unknown OID: [5] (bad) [ 171.002175][ T6637] PKCS7: Only support pkcs7_signedData type [ 171.718213][ T6648] netlink: 120 bytes leftover after parsing attributes in process `syz.5.223'. [ 174.334580][ T975] IPVS: starting estimator thread 0... [ 174.493415][ T6667] IPVS: using max 24 ests per chain, 57600 per kthread [ 177.995292][ T9] IPVS: starting estimator thread 0... [ 178.097105][ T6713] IPVS: using max 37 ests per chain, 88800 per kthread [ 178.136912][ T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 178.519245][ T975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.601174][ T6718] syz.5.244: attempt to access beyond end of device [ 178.601174][ T6718] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 178.749094][ T975] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 179.046531][ T975] usb 5-1: string descriptor 0 read error: -71 [ 179.058279][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.109013][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.189954][ T975] usb 5-1: can't set config #1, error -71 [ 179.400249][ T975] usb 5-1: USB disconnect, device number 2 [ 182.547101][ T6763] PKCS7: Unknown OID: [5] (bad) [ 182.552505][ T6763] PKCS7: Only support pkcs7_signedData type [ 182.872905][ T6770] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 185.054931][ T6782] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 188.225310][ T6821] PKCS7: Unknown OID: [5] (bad) [ 188.250978][ T6821] PKCS7: Only support pkcs7_signedData type [ 194.556913][ T6873] PKCS7: Unknown OID: [5] (bad) [ 194.562133][ T6873] PKCS7: Only support pkcs7_signedData type [ 196.431970][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.308'. [ 197.287298][ T6908] netlink: 60 bytes leftover after parsing attributes in process `syz.5.308'. [ 197.382658][ T6921] PKCS7: Unknown OID: [5] (bad) [ 197.390934][ T6921] PKCS7: Only support pkcs7_signedData type [ 197.988936][ T6914] bond1 (unregistering): Released all slaves [ 198.127288][ T6912] netlink: 48 bytes leftover after parsing attributes in process `syz.5.308'. [ 198.771304][ T6931] Can't find ip_set type has [ 199.629489][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.637906][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.937404][ T6962] PKCS7: Unknown OID: [5] (bad) [ 201.943816][ T6962] PKCS7: Only support pkcs7_signedData type [ 204.017662][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 204.216874][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.892312][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 205.901490][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 205.910896][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.949395][ T9] usb 3-1: config 0 descriptor?? [ 205.993523][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 206.006608][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 206.034278][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 206.048095][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 206.056235][ T9] usb 3-1: media controller created [ 206.078045][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.158282][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 206.164409][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 206.245984][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 206.393392][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 206.446666][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 206.496561][ T9] usb 3-1: USB disconnect, device number 2 [ 206.709625][ T7021] capability: warning: `syz.3.340' uses deprecated v2 capabilities in a way that may be insecure [ 207.382786][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 207.748699][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.765258][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.778561][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.818976][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.837272][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.990696][ T7058] vivid-004: kernel_thread() failed [ 209.998307][ T5847] Bluetooth: hci6: command tx timeout [ 210.723915][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 211.882568][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.893579][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.914733][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 211.925164][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 212.694156][ T5859] Bluetooth: hci6: command tx timeout [ 213.974870][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.996607][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.003918][ T7026] bridge_slave_0: entered allmulticast mode [ 214.035722][ T7026] bridge_slave_0: entered promiscuous mode [ 214.071035][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.106583][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.126146][ T7026] bridge_slave_1: entered allmulticast mode [ 214.364149][ T7026] bridge_slave_1: entered promiscuous mode [ 214.738746][ T5843] Bluetooth: hci6: command tx timeout [ 215.213333][ T7119] program syz.4.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.836745][ T5843] Bluetooth: hci6: command tx timeout [ 217.072797][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.203893][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.250577][ T7026] team0: Port device team_slave_0 added [ 218.273945][ T7026] team0: Port device team_slave_1 added [ 218.442215][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.945072][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.038729][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.551298][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.644796][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.781547][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.962721][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 220.406532][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 220.723151][ T7168] program syz.5.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.756099][ T5893] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 220.768053][ T7026] hsr_slave_0: entered promiscuous mode [ 220.781095][ T5893] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.787529][ T7026] hsr_slave_1: entered promiscuous mode [ 220.811328][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.821508][ T7026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.834792][ T7026] Cannot create hsr debugfs directory [ 220.836946][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.859988][ T5893] usb 4-1: Product: syz [ 220.946617][ T5893] usb 4-1: Manufacturer: syz [ 220.951295][ T5893] usb 4-1: SerialNumber: syz [ 221.253378][ T5893] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 221.269244][ T30] audit: type=1326 audit(1743988447.291:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8c98d169 code=0x7ffc0000 [ 221.291261][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.394941][ T30] audit: type=1326 audit(1743988447.291:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb8c98d169 code=0x7ffc0000 [ 221.399272][ T5893] usb 4-1: USB disconnect, device number 2 [ 221.520297][ T30] audit: type=1326 audit(1743988447.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8c98d169 code=0x7ffc0000 [ 221.564799][ T30] audit: type=1326 audit(1743988447.291:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb8c98d169 code=0x7ffc0000 [ 221.622237][ T30] audit: type=1326 audit(1743988447.331:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8c98d169 code=0x7ffc0000 [ 221.653262][ T30] audit: type=1326 audit(1743988447.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb8c984127 code=0x7ffc0000 [ 221.709800][ T30] audit: type=1326 audit(1743988447.331:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb8c929359 code=0x7ffc0000 [ 222.461858][ T30] audit: type=1326 audit(1743988447.351:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb8c984127 code=0x7ffc0000 [ 222.502526][ T30] audit: type=1326 audit(1743988447.351:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb8c929359 code=0x7ffc0000 [ 222.524552][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.574503][ T30] audit: type=1326 audit(1743988447.351:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb8c984127 code=0x7ffc0000 [ 223.675493][ T7026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.892073][ T7026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.361331][ T7026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.420572][ T7026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.559684][ T7216] Invalid source name [ 224.563793][ T7216] UBIFS error (pid: 7216): cannot open "/dev/sg0", error -22 [ 226.627803][ T7218] kernel profiling enabled (shift: 7) [ 226.630679][ T7224] vxfs: WRONG superblock magic 00000000 at 1 [ 226.648173][ T7224] vxfs: WRONG superblock magic 00000000 at 8 [ 226.654197][ T7224] vxfs: can't find superblock. [ 227.007278][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.107245][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.120584][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.127813][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.217819][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.225053][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.469513][ T7240] PKCS7: Unknown OID: [5] (bad) [ 228.477587][ T7240] PKCS7: Only support pkcs7_signedData type [ 229.546839][ T7260] netlink: 36 bytes leftover after parsing attributes in process `syz.5.415'. [ 229.624939][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.415'. [ 229.646777][ T7260] netlink: 36 bytes leftover after parsing attributes in process `syz.5.415'. [ 229.666866][ T7259] Invalid ELF header magic: != ELF [ 229.702648][ T7260] netlink: 36 bytes leftover after parsing attributes in process `syz.5.415'. [ 230.411838][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.123371][ T7293] PKCS7: Unknown OID: [5] (bad) [ 232.128657][ T7293] PKCS7: Only support pkcs7_signedData type [ 232.664935][ T7291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.052322][ T7026] veth0_vlan: entered promiscuous mode [ 233.108083][ T7026] veth1_vlan: entered promiscuous mode [ 233.967996][ T7026] veth0_macvtap: entered promiscuous mode [ 234.010771][ T7026] veth1_macvtap: entered promiscuous mode [ 235.036832][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.056785][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.086494][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.111813][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.130461][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.151569][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.178911][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.212325][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.235417][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.259033][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.274666][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.293992][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.311426][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.393526][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.476582][ T7324] PKCS7: Unknown OID: [5] (bad) [ 235.481750][ T7324] PKCS7: Only support pkcs7_signedData type [ 235.716532][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.776644][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.791358][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.801746][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.812687][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.822695][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.834439][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.871052][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.939317][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.420118][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.430705][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.442356][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.453351][ T7026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.543526][ T7026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.552467][ T7026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.566794][ T7026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.794615][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.840769][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.471317][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.507646][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.224087][ T7378] PKCS7: Unknown OID: [5] (bad) [ 242.229300][ T7378] PKCS7: Only support pkcs7_signedData type [ 243.646955][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 243.646996][ T30] audit: type=1400 audit(1743988469.651:55): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7383 comm="syz.3.454" [ 244.415968][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.455'. [ 245.008045][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.456'. [ 246.893585][ T7398] ======================================================= [ 246.893585][ T7398] WARNING: The mand mount option has been deprecated and [ 246.893585][ T7398] and is ignored by this kernel. Remove the mand [ 246.893585][ T7398] option from the mount to silence this warning. [ 246.893585][ T7398] ======================================================= [ 246.928574][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.943848][ T7398] syz.5.458: attempt to access beyond end of device [ 246.943848][ T7398] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 246.960276][ T7398] syz.5.458: attempt to access beyond end of device [ 246.960276][ T7398] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 246.974174][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 246.996613][ T7398] syz.5.458: attempt to access beyond end of device [ 246.996613][ T7398] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 247.014911][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 247.024856][ T7398] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 247.032868][ T7398] UDF-fs: Scanning with blocksize 512 failed [ 247.040862][ T7398] syz.5.458: attempt to access beyond end of device [ 247.040862][ T7398] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 247.054118][ T7398] syz.5.458: attempt to access beyond end of device [ 247.054118][ T7398] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 247.067264][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 247.077093][ T7398] syz.5.458: attempt to access beyond end of device [ 247.077093][ T7398] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 247.090466][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 247.100214][ T7398] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 247.110209][ T7398] UDF-fs: Scanning with blocksize 1024 failed [ 247.117403][ T7398] syz.5.458: attempt to access beyond end of device [ 247.117403][ T7398] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 247.130639][ T7398] syz.5.458: attempt to access beyond end of device [ 247.130639][ T7398] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 247.143744][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 247.153616][ T7398] syz.5.458: attempt to access beyond end of device [ 247.153616][ T7398] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 247.166785][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 247.176465][ T7398] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 247.184169][ T7398] UDF-fs: Scanning with blocksize 2048 failed [ 247.192784][ T7398] syz.5.458: attempt to access beyond end of device [ 247.192784][ T7398] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 247.207474][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 247.221194][ T7398] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 247.230904][ T7398] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 247.238599][ T7398] UDF-fs: Scanning with blocksize 4096 failed [ 247.244693][ T7398] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 249.146886][ T30] audit: type=1326 audit(1743988475.141:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.263444][ T30] audit: type=1326 audit(1743988475.171:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.449617][ T30] audit: type=1326 audit(1743988475.171:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.521519][ T30] audit: type=1326 audit(1743988475.181:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.649985][ T30] audit: type=1326 audit(1743988475.181:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.910783][ T30] audit: type=1326 audit(1743988475.181:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.933778][ T30] audit: type=1326 audit(1743988475.181:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 249.984476][ T30] audit: type=1326 audit(1743988475.181:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 250.712085][ T30] audit: type=1326 audit(1743988475.181:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 250.735494][ T30] audit: type=1326 audit(1743988475.181:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 252.377795][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.477'. [ 254.033748][ T7468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.045681][ T7468] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 254.094658][ T7468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.105894][ T7468] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 254.152393][ T7468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.204159][ T7468] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 254.401055][ T7468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.445288][ T7468] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 255.494573][ T7468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 255.515161][ T7468] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 255.891259][ T7494] block device autoloading is deprecated and will be removed. [ 256.792019][ T7499] PKCS7: Unknown OID: [5] (bad) [ 256.797032][ T7499] PKCS7: Only support pkcs7_signedData type [ 257.866692][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 257.866711][ T30] audit: type=1326 audit(1743988483.871:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 257.948242][ T30] audit: type=1326 audit(1743988483.871:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.096732][ T30] audit: type=1326 audit(1743988483.881:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.167766][ T30] audit: type=1326 audit(1743988483.881:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.252210][ T30] audit: type=1326 audit(1743988483.881:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.276466][ T30] audit: type=1326 audit(1743988483.881:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.329314][ T30] audit: type=1326 audit(1743988483.881:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.353220][ T30] audit: type=1326 audit(1743988483.881:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc97984127 code=0x7ffc0000 [ 258.375325][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.407099][ T7468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 258.413105][ T7468] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 258.424427][ T30] audit: type=1326 audit(1743988483.881:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc97929359 code=0x7ffc0000 [ 258.488403][ T30] audit: type=1326 audit(1743988483.881:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 258.605984][ T7468] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 258.616560][ T7468] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 259.770764][ T7533] netlink: 44 bytes leftover after parsing attributes in process `syz.5.504'. [ 259.888654][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.5.504'. [ 261.205406][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 261.214497][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 261.998213][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.004712][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.245622][ T7566] blktrace: Concurrent blktraces are not allowed on sg0 [ 264.159420][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 264.707271][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 265.757585][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.524'. [ 265.766883][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.6.524'. [ 265.839305][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030ebb800: rx timeout, send abort [ 265.848701][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030ebb800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.367766][ T7613] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 267.854423][ T7622] blktrace: Concurrent blktraces are not allowed on sg0 [ 270.549534][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 270.558655][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 270.799046][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 271.097752][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 271.435701][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.584819][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.656644][ T9] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 271.665864][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.900203][ T9] usb 7-1: config 0 descriptor?? [ 272.023361][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 272.776472][ T7660] netlink: 'syz.5.543': attribute type 29 has an invalid length. [ 272.842456][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 272.867097][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 272.905486][ T9] usb 7-1: USB disconnect, device number 2 [ 274.981596][ T24] IPVS: starting estimator thread 0... [ 275.090319][ T7672] fuse: Bad value for 'fd' [ 275.137440][ T7676] IPVS: using max 27 ests per chain, 64800 per kthread [ 275.226462][ T7679] xt_hashlimit: max too large, truncated to 1048576 [ 275.239792][ T7679] Cannot find set identified by id 0 to match [ 275.536979][ T7677] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd2": -EINTR [ 276.363623][ T7699] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 276.507262][ T7703] netlink: 'syz.4.553': attribute type 9 has an invalid length. [ 276.515055][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 277.310988][ T7705] netlink: 88 bytes leftover after parsing attributes in process `syz.6.552'. [ 278.472617][ T7706] sctp: failed to load transform for md5: -2 [ 279.110053][ T7723] fuse: Bad value for 'fd' [ 282.685097][ T7761] fuse: Bad value for 'fd' [ 283.553874][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'. [ 284.630851][ T7785] tipc: Can't bind to reserved service type 0 [ 286.119828][ T7804] program syz.6.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.157725][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 290.157770][ T30] audit: type=1326 audit(1743988516.051:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.5.603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f549e38d169 code=0x0 [ 292.885045][ T7875] input: syz0 as /devices/virtual/input/input7 [ 294.489994][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.618'. [ 295.072752][ T7899] netlink: 56 bytes leftover after parsing attributes in process `syz.6.624'. [ 295.166670][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 295.329028][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.378938][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.118815][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 296.208397][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.224183][ T7916] program syz.2.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.329494][ T24] usb 6-1: config 0 descriptor?? [ 296.522116][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 296.598486][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 296.698717][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 296.722259][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 296.739957][ T24] usb 6-1: media controller created [ 296.754977][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.968019][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 296.973920][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 296.991106][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 297.026831][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 297.034069][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 297.647597][ T6032] dvb-usb: bulk message failed: -22 (1/0) [ 297.653648][ T6032] dvb-usb: error while querying for an remote control event. [ 297.788398][ T24] usb 6-1: USB disconnect, device number 2 [ 297.823273][ T7926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.808727][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 300.790679][ T7962] blktrace: Concurrent blktraces are not allowed on sg0 [ 304.719977][ T7993] process 'syz.6.658' launched './file1' with NULL argv: empty string added [ 308.309622][ T8040] overlayfs: failed to resolve './file0': -2 [ 311.457850][ T8062] program syz.5.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.477204][ T8056] bond_slave_0: entered promiscuous mode [ 311.483333][ T8056] bond_slave_1: entered promiscuous mode [ 311.558275][ T8056] vlan2: entered promiscuous mode [ 311.563624][ T8056] bond0: entered promiscuous mode [ 313.281679][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 313.720853][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033b17400: rx timeout, send abort [ 313.736501][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033b17400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 316.706121][ T8131] netlink: 'syz.4.708': attribute type 29 has an invalid length. [ 318.596492][ T30] audit: type=1326 audit(1743988544.611:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 318.654327][ T30] audit: type=1326 audit(1743988544.611:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 318.688672][ T30] audit: type=1326 audit(1743988544.651:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 318.723067][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 318.745458][ T30] audit: type=1326 audit(1743988544.651:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 318.811526][ T30] audit: type=1326 audit(1743988544.651:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 318.877188][ T30] audit: type=1326 audit(1743988544.671:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 318.884703][ T8168] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 318.972684][ T8162] vlan2: entered promiscuous mode [ 318.984524][ T30] audit: type=1326 audit(1743988544.671:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 319.008062][ T8162] vlan2: entered allmulticast mode [ 319.013348][ T8162] hsr_slave_1: entered allmulticast mode [ 319.042277][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.717'. [ 319.053219][ T30] audit: type=1326 audit(1743988544.671:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 319.177029][ T30] audit: type=1326 audit(1743988544.671:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 319.643112][ T30] audit: type=1326 audit(1743988544.671:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9798d169 code=0x7ffc0000 [ 319.856958][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027f85000: rx timeout, send abort [ 319.867000][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027f85000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 321.971980][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.730'. [ 321.981240][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.730'. [ 322.566935][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.573460][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.865564][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 324.865585][ T30] audit: type=1326 audit(1743988550.881:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 324.920590][ T30] audit: type=1326 audit(1743988550.921:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 324.944092][ T30] audit: type=1326 audit(1743988550.931:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 325.028624][ T30] audit: type=1326 audit(1743988550.941:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 325.094684][ T30] audit: type=1326 audit(1743988550.941:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 325.258627][ T30] audit: type=1326 audit(1743988550.941:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 325.288599][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.748'. [ 325.297946][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.748'. [ 325.546034][ T30] audit: type=1326 audit(1743988550.941:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 325.814473][ T30] audit: type=1326 audit(1743988550.941:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 326.063489][ T30] audit: type=1326 audit(1743988550.941:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8d169 code=0x7ffc0000 [ 326.664363][ T8258] tipc: Started in network mode [ 326.669393][ T8258] tipc: Node identity 4, cluster identity 4711 [ 326.675663][ T8258] tipc: Node number set to 4 [ 329.232902][ T8270] PKCS7: Unknown OID: [5] (bad) [ 329.238184][ T8270] PKCS7: Only support pkcs7_signedData type [ 330.407538][ T30] audit: type=1326 audit(1743988556.431:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 330.595092][ T30] audit: type=1326 audit(1743988556.481:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 330.673806][ T30] audit: type=1326 audit(1743988556.481:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 330.699820][ T30] audit: type=1326 audit(1743988556.481:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 330.722017][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.894588][ T30] audit: type=1326 audit(1743988556.481:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 330.924369][ T30] audit: type=1326 audit(1743988556.481:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 330.972567][ T30] audit: type=1326 audit(1743988556.481:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 331.342026][ T30] audit: type=1326 audit(1743988556.491:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 331.673856][ T30] audit: type=1326 audit(1743988556.491:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 331.744042][ T30] audit: type=1326 audit(1743988556.491:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.5.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549e38d169 code=0x7ffc0000 [ 333.723994][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059495400: rx timeout, send abort [ 333.733345][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059495400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 333.920645][ T8322] netlink: 84 bytes leftover after parsing attributes in process `syz.2.771'. [ 334.844921][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 335.825498][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573d9400: rx timeout, send abort [ 335.834275][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573d9400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 336.606979][ T978] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 336.961173][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.997098][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.024785][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.053768][ T978] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.077111][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.118043][ T978] usb 3-1: config 0 descriptor?? [ 337.327378][ T8373] overlayfs: failed to resolve './file0': -2 [ 337.598977][ T978] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 337.634880][ T978] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 337.665988][ T978] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 337.741085][ T8379] PKCS7: Unknown OID: [5] (bad) [ 337.746271][ T978] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 337.756772][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 337.756793][ T30] audit: type=1326 audit(1743988563.761:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 337.790510][ T978] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 338.434033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cd80000: rx timeout, send abort [ 338.442683][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cd80000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.768841][ T8379] PKCS7: Only support pkcs7_signedData type [ 338.779435][ T978] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 338.798229][ T30] audit: type=1326 audit(1743988563.781:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 338.800325][ T978] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 339.775182][ T30] audit: type=1326 audit(1743988563.781:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 339.819539][ T30] audit: type=1326 audit(1743988563.781:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 339.940735][ T30] audit: type=1326 audit(1743988563.781:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 339.969277][ T30] audit: type=1326 audit(1743988563.781:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 340.246514][ T30] audit: type=1326 audit(1743988564.771:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6018d169 code=0x7ffc0000 [ 340.272457][ T30] audit: type=1326 audit(1743988564.771:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c60184127 code=0x7ffc0000 [ 340.306501][ T30] audit: type=1326 audit(1743988564.771:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c60129359 code=0x7ffc0000 [ 340.374835][ T978] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 340.403128][ T30] audit: type=1326 audit(1743988564.771:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c60184127 code=0x7ffc0000 [ 340.433517][ T978] usb 3-1: USB disconnect, device number 3 [ 340.550237][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'. [ 341.667161][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.795'. [ 341.693240][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c5ffc00: rx timeout, send abort [ 341.702037][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c5ffc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 342.652021][ T8425] PKCS7: Unknown OID: [5] (bad) [ 342.657134][ T8425] PKCS7: Only support pkcs7_signedData type [ 343.825756][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d67dc00: rx timeout, send abort [ 343.834490][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d67dc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 345.149019][ T8468] lo speed is unknown, defaulting to 1000 [ 345.167307][ T8468] lo speed is unknown, defaulting to 1000 [ 345.183618][ T8468] lo speed is unknown, defaulting to 1000 [ 345.932188][ T8468] infiniband sz1: set active [ 345.937173][ T8468] infiniband sz1: added lo [ 345.964467][ T5894] lo speed is unknown, defaulting to 1000 [ 346.071169][ T8468] RDS/IB: sz1: added [ 346.075920][ T8468] smc: adding ib device sz1 with port count 1 [ 346.082509][ T8468] smc: ib device sz1 port 1 has pnetid [ 346.091334][ T8468] lo speed is unknown, defaulting to 1000 [ 346.246409][ T8468] lo speed is unknown, defaulting to 1000 [ 346.395198][ T8468] lo speed is unknown, defaulting to 1000 [ 346.545176][ T8468] lo speed is unknown, defaulting to 1000 [ 346.693707][ T8468] lo speed is unknown, defaulting to 1000 [ 346.842084][ T8468] lo speed is unknown, defaulting to 1000 [ 347.215599][ T8468] lo speed is unknown, defaulting to 1000 [ 347.262127][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805971c000: rx timeout, send abort [ 347.276467][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805971c000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.472843][ T5894] lo speed is unknown, defaulting to 1000 [ 347.577364][ T8476] PKCS7: Unknown OID: [5] (bad) [ 347.582700][ T8476] PKCS7: Only support pkcs7_signedData type [ 348.033295][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 348.119436][ T8483] loop7: detected capacity change from 0 to 2 [ 348.197552][ T8483] Dev loop7: unable to read RDB block 2 [ 348.203528][ T8483] loop7: unable to read partition table [ 348.334349][ T8483] loop7: partition table beyond EOD, truncated [ 348.341673][ T8483] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 348.341673][ T8483] ) failed (rc=-5) [ 349.327220][ T8492] program syz.6.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.236033][ T8511] xt_NFQUEUE: number of total queues is 0 [ 350.617391][ T31] INFO: task syz.0.288:6856 blocked for more than 144 seconds. [ 350.658672][ T31] Not tainted 6.14.0-next-20250404-syzkaller #0 [ 350.777324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.870981][ T31] task:syz.0.288 state:D stack:22720 pid:6856 tgid:6849 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 350.896649][ T31] Call Trace: [ 350.902837][ T31] [ 350.906076][ T31] __schedule+0x1b88/0x5240 [ 350.924926][ T31] ? schedule+0x163/0x360 [ 350.933170][ T8516] PKCS7: Unknown OID: [5] (bad) [ 350.941983][ T31] ? __pfx___schedule+0x10/0x10 [ 350.950060][ T31] ? schedule+0x90/0x360 [ 350.954664][ T8516] PKCS7: Only support pkcs7_signedData type [ 350.963308][ T31] ? schedule+0x90/0x360 [ 350.971957][ T31] schedule+0x163/0x360 [ 350.979574][ T31] ? down_read+0x6a5/0xa50 [ 350.984394][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.992688][ T31] down_read+0x6ff/0xa50 [ 351.000998][ T31] ? __pfx_down_read+0x10/0x10 [ 351.006094][ T31] ? __might_sleep+0xd/0xe0 [ 351.013754][ T31] super_lock+0x27c/0x400 [ 351.024006][ T31] ? __pfx_super_lock+0x10/0x10 [ 351.029447][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 351.035846][ T31] iterate_supers+0x8c/0x190 [ 351.040719][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 351.046098][ T31] __se_sys_quotactl+0x383/0xa40 [ 351.051507][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 351.057042][ T31] ? __pfx___se_sys_quotactl+0x10/0x10 [ 351.062708][ T31] ? trace_irq_enable+0x2c/0x120 [ 351.067837][ T31] do_syscall_64+0xf3/0x230 [ 351.072414][ T31] ? clear_bhb_loop+0x45/0xa0 [ 351.077273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.083472][ T31] RIP: 0033:0x7fbc24d8d169 [ 351.088352][ T31] RSP: 002b:00007fbc25c8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 351.097264][ T31] RAX: ffffffffffffffda RBX: 00007fbc24fa6160 RCX: 00007fbc24d8d169 [ 351.105867][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 351.114286][ T31] RBP: 00007fbc24e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 351.123205][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.131636][ T31] R13: 0000000000000000 R14: 00007fbc24fa6160 R15: 00007ffd159f0478 [ 351.218482][ T31] [ 351.232583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cdfac00: rx timeout, send abort [ 351.242355][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cdfac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 351.762867][ T31] [ 351.762867][ T31] Showing all locks held in the system: [ 351.776747][ T31] 1 lock held by ksoftirqd/1/23: [ 351.795598][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 351.805977][ T31] 1 lock held by khungtaskd/31: [ 351.813627][ T31] #0: ffffffff8ed3e440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 351.823770][ T31] 3 locks held by kworker/u8:4/63: [ 351.829142][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 351.840445][ T31] #1: ffff8880b8723b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 351.852124][ T31] #2: ffff8880b8725558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24c/0x10f0 [ 351.861600][ T31] 2 locks held by getty/5594: [ 351.866801][ T31] #0: ffff8880310960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.876802][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 351.887307][ T31] 1 lock held by syz-executor/5840: [ 351.892539][ T31] #0: ffff88805beb20e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 351.903069][ T31] 1 lock held by syz.0.288/6856: [ 351.908098][ T31] #0: ffff88805beb20e0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 351.918217][ T31] 2 locks held by syz.5.833/8498: [ 351.923283][ T31] #0: ffff88805b9e9408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 351.933783][ T31] #1: ffffffff8ed43978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 351.944866][ T31] [ 351.949501][ T31] ============================================= [ 351.949501][ T31] [ 351.959034][ T31] NMI backtrace for cpu 1 [ 351.959069][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 351.959092][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.959104][ T31] Call Trace: [ 351.959112][ T31] [ 351.959120][ T31] dump_stack_lvl+0x241/0x360 [ 351.959158][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.959188][ T31] ? __pfx__printk+0x10/0x10 [ 351.959229][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 351.959258][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 351.959277][ T31] ? _printk+0xd5/0x120 [ 351.959305][ T31] ? __wake_up_klogd+0xcc/0x110 [ 351.959337][ T31] ? __pfx__printk+0x10/0x10 [ 351.959369][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.959392][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 351.959418][ T31] watchdog+0x1058/0x10a0 [ 351.959442][ T31] ? watchdog+0x1ea/0x10a0 [ 351.959470][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.959493][ T31] kthread+0x7b7/0x940 [ 351.959524][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.959547][ T31] ? __pfx_kthread+0x10/0x10 [ 351.959574][ T31] ? __pfx_kthread+0x10/0x10 [ 351.959602][ T31] ? __pfx_kthread+0x10/0x10 [ 351.959631][ T31] ? __pfx_kthread+0x10/0x10 [ 351.959659][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.959680][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 351.959704][ T31] ? __pfx_kthread+0x10/0x10 [ 351.959733][ T31] ret_from_fork+0x4b/0x80 [ 351.959755][ T31] ? __pfx_kthread+0x10/0x10 [ 351.959783][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.959812][ T31] [ 351.959818][ T31] Sending NMI from CPU 1 to CPUs 0: [ 352.124762][ C0] NMI backtrace for cpu 0 [ 352.124780][ C0] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 352.124801][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.124812][ C0] RIP: 0010:sched_balance_update_blocked_averages+0xbdc/0x1680 [ 352.124840][ C0] Code: 08 48 89 df e8 c5 f5 96 00 4c 89 33 49 be 00 00 00 00 00 fc ff df 43 80 7c 35 00 00 74 08 4c 89 e7 e8 a8 f5 96 00 4d 89 3c 24 <4c> 8b 64 24 18 49 8d 9c 24 88 fe ff ff 48 89 d8 48 c1 e8 03 42 0f [ 352.124854][ C0] RSP: 0018:ffffc90003e5f660 EFLAGS: 00000046 [ 352.124871][ C0] RAX: 0000000000000000 RBX: ffff888031853148 RCX: 0000000000000000 [ 352.124882][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.124892][ C0] RBP: ffffc90003e5f7f0 R08: ffffffff81622281 R09: 1ffffffff20bffa9 [ 352.124904][ C0] R10: dffffc0000000000 R11: fffffbfff20bffaa R12: 1ffff1100630a633 [ 352.124916][ C0] R13: 1ffff1100630a628 R14: dffffc0000000000 R15: 0000000000000000 [ 352.124929][ C0] FS: 0000555587ccb500(0000) GS:ffff888124f8f000(0000) knlGS:0000000000000000 [ 352.124943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.124954][ C0] CR2: 000000110c3b4ee3 CR3: 0000000033a76000 CR4: 00000000003526f0 [ 352.124969][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.124979][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.124989][ C0] Call Trace: [ 352.124998][ C0] [ 352.125018][ C0] ? __pfx_sched_balance_update_blocked_averages+0x10/0x10 [ 352.125041][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 352.125061][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 352.125088][ C0] ? sched_balance_newidle+0x352/0x11c0 [ 352.125112][ C0] sched_balance_newidle+0x530/0x11c0 [ 352.125139][ C0] ? sched_balance_newidle+0x352/0x11c0 [ 352.125168][ C0] ? __pfx_sched_balance_newidle+0x10/0x10 [ 352.125193][ C0] ? dequeue_task_fair+0x293/0x6a0 [ 352.125219][ C0] balance_fair+0x44/0x70 [ 352.125243][ C0] __schedule+0x308a/0x5240 [ 352.125269][ C0] ? ktime_get+0x21/0x200 [ 352.125296][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 352.125320][ C0] ? schedule+0x163/0x360 [ 352.125341][ C0] ? __pfx___schedule+0x10/0x10 [ 352.125368][ C0] ? schedule+0x90/0x360 [ 352.125387][ C0] ? schedule+0x90/0x360 [ 352.125404][ C0] schedule+0x163/0x360 [ 352.125423][ C0] do_nanosleep+0x1a3/0x660 [ 352.125442][ C0] ? do_nanosleep+0x82/0x660 [ 352.125458][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 352.125476][ C0] ? __hrtimer_init+0x69/0x1a0 [ 352.125498][ C0] hrtimer_nanosleep+0x1ee/0x410 [ 352.125521][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 352.125542][ C0] ? _copy_from_user+0x95/0xb0 [ 352.125564][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 352.125588][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 352.125621][ C0] __se_sys_clock_nanosleep+0x360/0x3c0 [ 352.125644][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 352.125667][ C0] ? do_syscall_64+0xb6/0x230 [ 352.125691][ C0] do_syscall_64+0xf3/0x230 [ 352.125713][ C0] ? clear_bhb_loop+0x45/0xa0 [ 352.125732][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.125748][ C0] RIP: 0033:0x7f613f5bf9e3 [ 352.125762][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 352.125775][ C0] RSP: 002b:00007ffd39f58ba8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 352.125796][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f613f5bf9e3 [ 352.125807][ C0] RDX: 00007ffd39f58bc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.125817][ C0] RBP: 0000000000000000 R08: 0000000027616688 R09: 7fffffffffffffff [ 352.125828][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd39f59010 [ 352.125838][ C0] R13: 0000000000000004 R14: 00007ffd39f58bfc R15: 00007ffd39f58c90 [ 352.125858][ C0] [ 352.507306][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 352.514209][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 352.525176][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.535242][ T31] Call Trace: [ 352.538558][ T31] [ 352.541512][ T31] dump_stack_lvl+0x241/0x360 [ 352.546251][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.551467][ T31] ? __pfx__printk+0x10/0x10 [ 352.556080][ T31] ? vscnprintf+0x5d/0x90 [ 352.560434][ T31] panic+0x349/0x880 [ 352.564360][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 352.569744][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 352.575919][ T31] ? __pfx_panic+0x10/0x10 [ 352.580375][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 352.585786][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 352.591190][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 352.597543][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 352.603731][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 352.609902][ T31] watchdog+0x1097/0x10a0 [ 352.614245][ T31] ? watchdog+0x1ea/0x10a0 [ 352.618689][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.623405][ T31] kthread+0x7b7/0x940 [ 352.627524][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.632236][ T31] ? __pfx_kthread+0x10/0x10 [ 352.636851][ T31] ? __pfx_kthread+0x10/0x10 [ 352.641475][ T31] ? __pfx_kthread+0x10/0x10 [ 352.646114][ T31] ? __pfx_kthread+0x10/0x10 [ 352.650735][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.655974][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 352.661187][ T31] ? __pfx_kthread+0x10/0x10 [ 352.665795][ T31] ret_from_fork+0x4b/0x80 [ 352.670224][ T31] ? __pfx_kthread+0x10/0x10 [ 352.674830][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.679622][ T31] [ 352.682934][ T31] Kernel Offset: disabled [ 352.687281][ T31] Rebooting in 86400 seconds..