last executing test programs: 8m3.868861494s ago: executing program 2 (id=10): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)="1255f578d94ad5543618d1de7bc63f602d980a4962d76720fc065eae0a1f0776b66ab1039081e751fa7218e59d4949f32a391bdfa38b27cd23f962f6bb1c165968061b6efdda337b839b49238c115ce00ab058fbb1e83ac7ae3c80f4bd7de13d714ecf8600909c15c3b768b73993c3d22f45c15c36e7a981dd8973c9c8d309d7c57aa1f518b739c374b4be094af6618c4e59a9051e81a4e9b12bce7e2792439f0cf25c238fb3f04de45723cc9fed1f68e0d317e61049c50d", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x2) r2 = add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="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", 0x182, 0x0) keyctl$search(0xa, r2, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000"], 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) close(0x3) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x4000000e) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 8m3.534088305s ago: executing program 4 (id=11): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r2, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f00000000c0)={0x5}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r9}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086201, &(0x7f0000000140)=0x1) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 8m1.925134875s ago: executing program 2 (id=15): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 8m1.547951107s ago: executing program 4 (id=18): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) finit_module(r3, &(0x7f00000001c0)='-.h\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dfe, 0xfffffffffffffffe) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) unshare(0x48000800) 8m1.347573025s ago: executing program 2 (id=19): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2092) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 7m59.622707936s ago: executing program 2 (id=24): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") chdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') r0 = getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x6, 0x1ed, &(0x7f0000000540)="$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") io_setup(0x40, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x63) 7m58.982580725s ago: executing program 1 (id=26): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)="1255f578d94ad5543618d1de7bc63f602d980a4962d76720fc065eae0a1f0776b66ab1039081e751fa7218e59d4949f32a391bdfa38b27cd23f962f6bb1c165968061b6efdda337b839b49238c115ce00ab058fbb1e83ac7ae3c80f4bd7de13d714ecf8600909c15c3b768b73993c3d22f45c15c36e7a981dd8973c9c8d309d7c57aa1f518b739c374b4be094af6618c4e59a9051e81a4e9b12bce7e2792439f0cf25c238fb3f04de45723cc9fed1f68e0d317e61049c50d", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x2) r2 = add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="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", 0x182, 0x0) keyctl$search(0xa, r2, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000"], 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) close(0x3) 7m57.953435685s ago: executing program 2 (id=29): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 7m57.282033763s ago: executing program 2 (id=30): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a3100"], 0x9c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, 0x0, 0xe3d08660d3cd4684}) r5 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000100)=0xa7, 0xc0000) sendmmsg$inet(r10, &(0x7f0000001540), 0x0, 0x0) close(r9) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 7m57.186205073s ago: executing program 1 (id=32): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 7m57.050863542s ago: executing program 4 (id=33): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7m54.937134035s ago: executing program 32 (id=30): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a3100"], 0x9c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, 0x0, 0xe3d08660d3cd4684}) r5 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000100)=0xa7, 0xc0000) sendmmsg$inet(r10, &(0x7f0000001540), 0x0, 0x0) close(r9) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 7m54.653097002s ago: executing program 1 (id=36): umount2(&(0x7f0000000000)='.\x00', 0x2) 7m54.638699739s ago: executing program 4 (id=38): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x10, 0x9, 0x5, 0x0, 0x0, 0x8, 0xf}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x82d92b8cfe1c32b5}, 0x4000080) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x30b, @tick=0x1000, 0x31, {0xfd}}) 7m54.107386112s ago: executing program 1 (id=39): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') r0 = getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x6, 0x1ed, &(0x7f0000000540)="$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") io_setup(0x40, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x63) 7m54.054406135s ago: executing program 4 (id=40): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000001fc0)='fd\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x900, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 7m52.265984174s ago: executing program 4 (id=43): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 7m51.998137729s ago: executing program 1 (id=45): recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 7m50.833997704s ago: executing program 1 (id=46): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)="1255f578d94ad5543618d1de7bc63f602d980a4962d76720fc065eae0a1f0776b66ab1039081e751fa7218e59d4949f32a391bdfa38b27cd23f962f6bb1c165968061b6efdda337b839b49238c115ce00ab058fbb1e83ac7ae3c80f4bd7de13d714ecf8600909c15c3b768b73993c3d22f45c15c36e7a981dd8973c9c8d309d7c57aa1f518b739c374b4be094af6618c4e59a9051e81a4e9b12bce7e2792439f0cf25c238fb3f04de45723cc9fed1f68e0d317e61049c50d", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x2) r2 = add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="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", 0x182, 0x0) keyctl$search(0xa, r2, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000"], 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) close(0x3) 7m48.555050967s ago: executing program 33 (id=46): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)="1255f578d94ad5543618d1de7bc63f602d980a4962d76720fc065eae0a1f0776b66ab1039081e751fa7218e59d4949f32a391bdfa38b27cd23f962f6bb1c165968061b6efdda337b839b49238c115ce00ab058fbb1e83ac7ae3c80f4bd7de13d714ecf8600909c15c3b768b73993c3d22f45c15c36e7a981dd8973c9c8d309d7c57aa1f518b739c374b4be094af6618c4e59a9051e81a4e9b12bce7e2792439f0cf25c238fb3f04de45723cc9fed1f68e0d317e61049c50d", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x2) r2 = add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="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", 0x182, 0x0) keyctl$search(0xa, r2, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000"], 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) close(0x3) 7m36.893867941s ago: executing program 34 (id=43): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 5m38.132766617s ago: executing program 3 (id=469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5m37.493987914s ago: executing program 3 (id=471): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r0, 0x0) 5m36.860719189s ago: executing program 3 (id=473): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m35.738348846s ago: executing program 3 (id=480): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m34.990085183s ago: executing program 3 (id=483): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e00000000000300000000000000400000000000000098010000000000000200000000003800020000000200000000000060030000000800000000"], 0x5b0) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 5m32.249860774s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") chdir(0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) 5m16.964414518s ago: executing program 35 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") chdir(0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) 5m9.250646814s ago: executing program 7 (id=552): bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) lseek(0xffffffffffffffff, 0x9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 5m7.945418103s ago: executing program 7 (id=554): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5m6.53839786s ago: executing program 7 (id=557): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 5m4.958296733s ago: executing program 7 (id=560): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x2, {0x0, 0x0, 0x4}, 0xff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 5m2.957588545s ago: executing program 7 (id=565): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) 5m1.705977798s ago: executing program 7 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b5f20cf", 0x3e, 0x40002020}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socket$inet6(0xa, 0x2, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="737461636b203a007e1c2d901405008f51686a1b04e567ccd50b2dc767809e2f197b5315feba4faee17a2cde2d8f4b4e866793e4feae2f90d85e0514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa283347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf539a90f32ded6b74ed100700"], 0xb3) tkill(0x0, 0xa) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x15, 0x2, 0xfffffeff) 4m46.077740394s ago: executing program 36 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b5f20cf", 0x3e, 0x40002020}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socket$inet6(0xa, 0x2, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="737461636b203a007e1c2d901405008f51686a1b04e567ccd50b2dc767809e2f197b5315feba4faee17a2cde2d8f4b4e866793e4feae2f90d85e0514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa283347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf539a90f32ded6b74ed100700"], 0xb3) tkill(0x0, 0xa) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x15, 0x2, 0xfffffeff) 10.021739748s ago: executing program 0 (id=1538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20"], 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 9.388619758s ago: executing program 0 (id=1541): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x1, 0x10}}, 0xb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1}}, 0x4001) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) socket$alg(0x26, 0x5, 0x0) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 7.765147004s ago: executing program 0 (id=1544): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0xb, &(0x7f0000000080)={[{@errors_continue}, {@erasure_code}, {@version_upgrade={'version_upgrade', 0x3d, 'none'}}], [{@subj_type={'subj_type', 0x3d, '$\x82Q\xd6$\xe9\xe6,\xbe\xff\x00\x93\xdd~\xa9]\xfb\x01/v2m\xc0+\xb4\xd4\xb1N\x04wf\x88\xbf\x82\xef\xad\x15\xf5(\x98\x89\xae\xf4.\xbf\x11\xd0\x13\x91\xef\xc2\xcau1\xac\xa5\x9f\xdcOy\xd3\xfb\x15\xdd\xfd\xdf\xee\xb1\x9eE\x01\xa6\xb9\x92\xa3.\x17B~\x81(:2\x18\x1f\x18\xe1\xc4&\xc0r06\xefx\xef\xd6\xc43\x17\xf8&\xb7Lm\x1d%\xb685\x10a\x11\xcd/\xc1\t\xd3\xb2\xba\x87\x90\v\xad\x8f\xe8b\xe0\xed$\xd0\xacB\xcc\xbf\xee\xad\x0e\xc4\xdb\xfa\x19V1\\\xc1\xe7\x93!m\x80+`s'}}, {@obj_type={'obj_type', 0x3d, '\x00\x00\x00\x00\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'BPRM_CHECK'}}, {@permit_directio}, {@fsname={'fsname', 0x3d, ':'}}, {@subj_role={'subj_role', 0x3d, '$'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'mr\x1a\xb0#\x1e\xa1\xdd\xbdntinueD\xfd'}}]}, 0x1, 0x5927, &(0x7f000000b280)="$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") 5.639018237s ago: executing program 9 (id=1551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20"], 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 5.426043026s ago: executing program 8 (id=1552): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') setns(r0, 0xa000000) 5.093298018s ago: executing program 6 (id=1553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x350759, 0x92}}]}, 0x104}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013fb02000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 4.919412951s ago: executing program 9 (id=1554): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x1, 0x10}}, 0xb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1}}, 0x4001) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) socket$alg(0x26, 0x5, 0x0) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 4.694458746s ago: executing program 8 (id=1555): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x11, &(0x7f0000000200)={@remote, @random="0000dcf6177a", @void, {@mpls_uc={0x806, {[], @llc={@llc={0xaa, 0xdc, 'T'}}}}}}, 0x0) 4.61313676s ago: executing program 5 (id=1556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0xfffffffffffffffd, 0x4e) 4.287598953s ago: executing program 6 (id=1557): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x80105013, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000d80)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53244", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "000100", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [@hopopts={0x3a}], "3356d55afb0de3af"}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 3.616790591s ago: executing program 5 (id=1558): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) 3.581858086s ago: executing program 8 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@empty, @empty, @void, {@ipv4={0x88fb, @tcp={{0x5, 0x4, 0x2, 0x5, 0x28, 0x64, 0x0, 0x3, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1ff, 0x0, 0x9}}}}}}, 0x0) 3.234012611s ago: executing program 9 (id=1560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xf3) 3.210580693s ago: executing program 6 (id=1561): syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x64, 0x0, 0x2, 0x21, 0x0, @broadcast, @multicast2}}}}}, 0x0) 2.796120849s ago: executing program 9 (id=1562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000003c0)="b076389560c0a28e48886bf63226f45b8a1314e0d08caa0309b673748340d0b02f54b7baa071b5b8b38028142cb4df35855f50d9aeb4bbcbc53a898a75ec12e25343405b4d761e89310780b09c4414da40ea14a3b62a20067b914f2719a69f9c1f818af5949c40761d588820d95ef39e68c0ca", 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c000}, 0x20008001) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000840)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.750545127s ago: executing program 8 (id=1563): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000dd3000/0x4000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x6f, 0x5, 0x0, 0x3, 0x5, 0x6, 0xd, 0x3f, 0x3, 0x84, 0xa, 0x0, 0x5, 0x6, 0x0, 0x0, 0x2b, 0x6, '\x00', 0x0, 0x3}) ioctl$KVM_CREATE_VM(r4, 0x401c5820, 0x20000000) 2.661854855s ago: executing program 6 (id=1564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20"], 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2.454550168s ago: executing program 0 (id=1565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x104, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2800003, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="fb0149dd033be3982ce16f8f1f449a7a835600000000000000000000000000ffffffffffffffde00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0x30, 0x9, 0x8, 0x0, 0x4, 0x9e, 0x5, 0x0, 0x4, 0xe, 0x8, 0xf8, 0x0, 0x652e, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0xf, 0x6}) 1.962094318s ago: executing program 8 (id=1566): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x2, {0x0, 0x0, 0x4}, 0xff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r5, 0x0, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.910992335s ago: executing program 0 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x802, 0x0, 0xff, 0x5, 0x4}, 0x20) 1.798658376s ago: executing program 5 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 1.600811966s ago: executing program 6 (id=1569): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) 1.575984902s ago: executing program 9 (id=1570): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000003c0)="b076389560c0a28e48886bf63226f45b8a1314e0d08caa0309b673748340d0b02f54b7baa071b5b8b38028142cb4df35855f50d9aeb4bbcbc53a898a75ec12e25343405b4d761e89310780b09c4414da40ea14a3b62a20067b914f2719a69f9c1f818af5949c40761d588820d95ef39e68c0ca", 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c000}, 0x20008001) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000840)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.01848256s ago: executing program 5 (id=1571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 749.943974ms ago: executing program 5 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 389.029487ms ago: executing program 8 (id=1573): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 335.738664ms ago: executing program 0 (id=1574): syz_emit_ethernet(0x0, 0x0, 0x0) 292.500313ms ago: executing program 9 (id=1575): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x80006}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) 138.712067ms ago: executing program 6 (id=1576): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x5, 0x89, 0x0, @empty, @broadcast}, "eaa2d7e2"}}}}, 0x0) 0s ago: executing program 5 (id=1577): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 172.965572][ T5784] cgroup: Unknown subsys name 'net' [ 173.095466][ T5784] cgroup: Unknown subsys name 'cpuset' [ 173.112584][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 219.365250][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.372274][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.973896][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 224.873230][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.882119][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.890804][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.937669][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.950056][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.957595][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.965976][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.975174][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.983095][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.993221][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.999430][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.001304][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.012707][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.020553][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.023000][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.029395][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.040436][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.048534][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.054929][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.072260][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.082104][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.082483][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.150919][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.193418][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.204875][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.407548][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 226.550770][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 226.884641][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 227.120607][ T49] Bluetooth: hci0: command tx timeout [ 227.190086][ T49] Bluetooth: hci1: command tx timeout [ 227.195743][ T49] Bluetooth: hci3: command tx timeout [ 227.201728][ T5815] Bluetooth: hci2: command tx timeout [ 227.240671][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 227.350159][ T49] Bluetooth: hci4: command tx timeout [ 227.434015][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 227.569369][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.577107][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.586642][ T5809] bridge_slave_0: entered allmulticast mode [ 227.596218][ T5809] bridge_slave_0: entered promiscuous mode [ 227.687286][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.695076][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.702889][ T5809] bridge_slave_1: entered allmulticast mode [ 227.712197][ T5809] bridge_slave_1: entered promiscuous mode [ 228.141477][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.149049][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.157117][ T5811] bridge_slave_0: entered allmulticast mode [ 228.168836][ T5811] bridge_slave_0: entered promiscuous mode [ 228.193957][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.249258][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.257111][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.265228][ T5806] bridge_slave_0: entered allmulticast mode [ 228.274079][ T5806] bridge_slave_0: entered promiscuous mode [ 228.284615][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.296017][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.303805][ T5811] bridge_slave_1: entered allmulticast mode [ 228.312868][ T5811] bridge_slave_1: entered promiscuous mode [ 228.364376][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.375913][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.383892][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.393895][ T5813] bridge_slave_0: entered allmulticast mode [ 228.403114][ T5813] bridge_slave_0: entered promiscuous mode [ 228.417383][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.425371][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.433396][ T5806] bridge_slave_1: entered allmulticast mode [ 228.442742][ T5806] bridge_slave_1: entered promiscuous mode [ 228.529617][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.537201][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.547369][ T5813] bridge_slave_1: entered allmulticast mode [ 228.556209][ T5813] bridge_slave_1: entered promiscuous mode [ 228.641890][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.662595][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.844528][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.892135][ T5809] team0: Port device team_slave_0 added [ 228.969514][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.979955][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.987496][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.996132][ T5810] bridge_slave_0: entered allmulticast mode [ 229.005288][ T5810] bridge_slave_0: entered promiscuous mode [ 229.055760][ T5809] team0: Port device team_slave_1 added [ 229.073098][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.149240][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.156915][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.164795][ T5810] bridge_slave_1: entered allmulticast mode [ 229.173782][ T5810] bridge_slave_1: entered promiscuous mode [ 229.191046][ T5811] team0: Port device team_slave_0 added [ 229.206127][ T49] Bluetooth: hci0: command tx timeout [ 229.270275][ T49] Bluetooth: hci1: command tx timeout [ 229.274607][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.275841][ T49] Bluetooth: hci3: command tx timeout [ 229.291031][ T5815] Bluetooth: hci2: command tx timeout [ 229.301069][ T5806] team0: Port device team_slave_0 added [ 229.315724][ T5811] team0: Port device team_slave_1 added [ 229.332668][ T5806] team0: Port device team_slave_1 added [ 229.430099][ T49] Bluetooth: hci4: command tx timeout [ 229.554706][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.567034][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.574438][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.600985][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.620856][ T5813] team0: Port device team_slave_0 added [ 229.704387][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.751338][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.759012][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.785638][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.803684][ T5813] team0: Port device team_slave_1 added [ 229.848713][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.856059][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.882432][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.897064][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.904407][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.930879][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.028108][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.035494][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.062096][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.076930][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.084311][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.110793][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.130021][ T5810] team0: Port device team_slave_0 added [ 230.197902][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.205323][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.231889][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.301637][ T5810] team0: Port device team_slave_1 added [ 230.360543][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.367728][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.394362][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.418336][ T5809] hsr_slave_0: entered promiscuous mode [ 230.428312][ T5809] hsr_slave_1: entered promiscuous mode [ 230.616217][ T5811] hsr_slave_0: entered promiscuous mode [ 230.625122][ T5811] hsr_slave_1: entered promiscuous mode [ 230.633511][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.641414][ T5811] Cannot create hsr debugfs directory [ 230.716924][ T5806] hsr_slave_0: entered promiscuous mode [ 230.727523][ T5806] hsr_slave_1: entered promiscuous mode [ 230.735314][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.743223][ T5806] Cannot create hsr debugfs directory [ 230.751748][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.758898][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.786539][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.900144][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.907288][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.933788][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.114819][ T5813] hsr_slave_0: entered promiscuous mode [ 231.123560][ T5813] hsr_slave_1: entered promiscuous mode [ 231.131788][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.139523][ T5813] Cannot create hsr debugfs directory [ 231.270120][ T49] Bluetooth: hci0: command tx timeout [ 231.312521][ T5810] hsr_slave_0: entered promiscuous mode [ 231.322598][ T5810] hsr_slave_1: entered promiscuous mode [ 231.333110][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.341068][ T5810] Cannot create hsr debugfs directory [ 231.351848][ T49] Bluetooth: hci1: command tx timeout [ 231.357597][ T5815] Bluetooth: hci3: command tx timeout [ 231.363411][ T49] Bluetooth: hci2: command tx timeout [ 231.511033][ T5815] Bluetooth: hci4: command tx timeout [ 232.485220][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.559106][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.594821][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.632730][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.667045][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.782754][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.808059][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.839275][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.866401][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.891093][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.933065][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.018169][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.234607][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.274167][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.300962][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.344164][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.361771][ T5815] Bluetooth: hci0: command tx timeout [ 233.430756][ T5815] Bluetooth: hci3: command tx timeout [ 233.436428][ T5815] Bluetooth: hci1: command tx timeout [ 233.440941][ T49] Bluetooth: hci2: command tx timeout [ 233.534596][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.566699][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.590453][ T49] Bluetooth: hci4: command tx timeout [ 233.607248][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.637568][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.157803][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.346660][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.381354][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.422449][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.555238][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.574641][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.582272][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.659189][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.666821][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.683975][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.691604][ T751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.740855][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.787218][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.802952][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.810617][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.898099][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.905866][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.135482][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.157258][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.202214][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.209960][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.235814][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.243256][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.343843][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.351534][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.408679][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.569505][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.577214][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.778075][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.785746][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.118911][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.131141][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.128896][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.230472][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.489246][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.713857][ T5811] veth0_vlan: entered promiscuous mode [ 237.731981][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.826437][ T5811] veth1_vlan: entered promiscuous mode [ 237.873182][ T5809] veth0_vlan: entered promiscuous mode [ 238.026659][ T5809] veth1_vlan: entered promiscuous mode [ 238.077025][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.186606][ T5806] veth0_vlan: entered promiscuous mode [ 238.241214][ T5811] veth0_macvtap: entered promiscuous mode [ 238.327553][ T5813] veth0_vlan: entered promiscuous mode [ 238.361308][ T5811] veth1_macvtap: entered promiscuous mode [ 238.396075][ T5806] veth1_vlan: entered promiscuous mode [ 238.441403][ T5809] veth0_macvtap: entered promiscuous mode [ 238.485477][ T5813] veth1_vlan: entered promiscuous mode [ 238.590842][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.601438][ T5809] veth1_macvtap: entered promiscuous mode [ 238.673749][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.760487][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.769568][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.778877][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.788159][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.882923][ T5813] veth0_macvtap: entered promiscuous mode [ 238.975777][ T5806] veth0_macvtap: entered promiscuous mode [ 239.005623][ T5813] veth1_macvtap: entered promiscuous mode [ 239.036503][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.084679][ T5806] veth1_macvtap: entered promiscuous mode [ 239.136701][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.263970][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.273301][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.282525][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.291671][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.366616][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.411114][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.508669][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.531261][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.612087][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.621563][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.630817][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.639975][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.670979][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.680210][ T5806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.689209][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.698559][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.875749][ T5810] veth0_vlan: entered promiscuous mode [ 241.067346][ T5810] veth1_vlan: entered promiscuous mode [ 241.485046][ T5810] veth0_macvtap: entered promiscuous mode [ 241.541588][ T5810] veth1_macvtap: entered promiscuous mode [ 241.711868][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.833827][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.919527][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.931334][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.940550][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.949575][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.394693][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.402828][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.664118][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.674089][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.920255][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.928357][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.934466][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.944334][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.016895][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 246.184113][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.193530][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.468325][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.477911][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.584909][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.593439][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.617529][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.625999][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.937106][ T5990] loop0: detected capacity change from 0 to 512 [ 246.965067][ T5990] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.080958][ T5990] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 247.118546][ T5990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 247.129209][ T5990] System zones: 1-12 [ 247.139583][ T5990] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.1: corrupted in-inode xattr: e_value size too large [ 247.180813][ T5990] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 247.277631][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.552256][ T5990] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.1: Unrecognised inode hash code 4 [ 247.564024][ T5990] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 247.690132][ T5990] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.1: Unrecognised inode hash code 4 [ 247.702789][ T5990] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 247.876706][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.961480][ T5996] tipc: Started in network mode [ 247.961689][ T5996] tipc: Node identity 7ab7d147d72f, cluster identity 4711 [ 247.962290][ T5996] tipc: Enabled bearer , priority 0 [ 248.097975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.102522][ T5996] syzkaller0: entered promiscuous mode [ 248.102603][ T5996] syzkaller0: entered allmulticast mode [ 248.104722][ T5996] tipc: Resetting bearer [ 248.138201][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.192269][ T5995] tipc: Resetting bearer [ 248.283293][ T5995] tipc: Disabling bearer [ 248.700485][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.700569][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.863422][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.863520][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.795948][ T6013] loop3: detected capacity change from 0 to 2048 [ 250.042060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 250.163533][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.275216][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 250.405008][ T6026] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 250.515906][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.526724][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.536242][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.622276][ T5870] usb 2-1: config 0 descriptor?? [ 250.641280][ T6011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.678879][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 250.974179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 251.054578][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.066079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 251.079889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 251.100260][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 251.130975][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 251.153287][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 251.170055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 251.170289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 251.431035][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 251.460473][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 251.508847][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 251.524223][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 251.532545][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 251.599048][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 251.638253][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 251.656577][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 251.698710][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 251.731053][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 251.738878][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 251.798207][ T5870] pwc: Registered as video103. [ 251.807669][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 251.880379][ T5870] usb 2-1: USB disconnect, device number 2 [ 252.578365][ T6042] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.808963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.990134][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 253.161354][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 253.225705][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 253.234263][ T9] usb 1-1: config 0 has no interface number 0 [ 253.315315][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 253.327606][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.336856][ T9] usb 1-1: Product: syz [ 253.341228][ T9] usb 1-1: Manufacturer: syz [ 253.345982][ T9] usb 1-1: SerialNumber: syz [ 253.429642][ T9] usb 1-1: config 0 descriptor?? [ 253.456711][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 255.510565][ T6063] loop2: detected capacity change from 0 to 2048 [ 255.715006][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.967389][ T9] usb 1-1: qt2_attach - failed to power on unit: -71 [ 255.975736][ T9] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 256.039361][ T9] usb 1-1: USB disconnect, device number 2 [ 256.728424][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.766718][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.915538][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.188170][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.454938][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.792130][ T14] bridge_slave_1: left allmulticast mode [ 257.798202][ T14] bridge_slave_1: left promiscuous mode [ 257.805627][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.844819][ T14] bridge_slave_0: left allmulticast mode [ 257.851393][ T14] bridge_slave_0: left promiscuous mode [ 257.858185][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.572144][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.625938][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.661461][ T14] bond0 (unregistering): Released all slaves [ 259.177361][ T14] hsr_slave_0: left promiscuous mode [ 259.190606][ T14] hsr_slave_1: left promiscuous mode [ 259.198523][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.206433][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.235416][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.243783][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.281092][ T14] veth1_macvtap: left promiscuous mode [ 259.286884][ T14] veth0_macvtap: left promiscuous mode [ 259.292986][ T14] veth1_vlan: left promiscuous mode [ 259.298588][ T14] veth0_vlan: left promiscuous mode [ 259.891718][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 260.475510][ T14] team0 (unregistering): Port device team_slave_1 removed [ 260.604721][ T14] team0 (unregistering): Port device team_slave_0 removed [ 260.711119][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.723556][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.742126][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.846308][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.858237][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.931069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 260.940451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 260.993875][ T6100] gretap0: entered promiscuous mode [ 261.055515][ T6107] loop1: detected capacity change from 0 to 2048 [ 261.572544][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.521265][ T6129] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 262.675797][ T6129] batman_adv: batadv0: Adding interface: veth3 [ 262.682531][ T6129] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.708354][ T6129] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 262.830102][ T6132] vlan2: entered allmulticast mode [ 262.835498][ T6132] veth1: entered allmulticast mode [ 262.849657][ T6132] batman_adv: batadv0: Adding interface: vlan2 [ 262.856234][ T6132] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.886770][ T6132] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 263.109098][ T3595] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.111907][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.131095][ T49] Bluetooth: hci4: command tx timeout [ 263.256748][ T3595] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.458089][ T3595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.667997][ T3595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.751475][ T6109] chnl_net:caif_netlink_parms(): no params data found [ 264.237316][ T3595] bridge_slave_1: left allmulticast mode [ 264.243532][ T3595] bridge_slave_1: left promiscuous mode [ 264.250409][ T3595] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.350936][ T3595] bridge_slave_0: left allmulticast mode [ 264.356965][ T3595] bridge_slave_0: left promiscuous mode [ 264.364037][ T3595] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.001530][ T3595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.038735][ T3595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.072390][ T3595] bond0 (unregistering): Released all slaves [ 265.190090][ T49] Bluetooth: hci4: command tx timeout [ 265.311421][ T3595] tipc: Left network mode [ 265.850640][ T3595] hsr_slave_0: left promiscuous mode [ 265.881602][ T3595] hsr_slave_1: left promiscuous mode [ 265.889637][ T3595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.897579][ T3595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.978162][ T3595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.986090][ T3595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.060766][ T3595] veth1_macvtap: left promiscuous mode [ 266.066589][ T3595] veth0_macvtap: left promiscuous mode [ 266.075563][ T3595] veth1_vlan: left promiscuous mode [ 266.081304][ T3595] veth0_vlan: left promiscuous mode [ 267.021112][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.033574][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.045002][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.057958][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.078041][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.300345][ T5815] Bluetooth: hci4: command tx timeout [ 267.308549][ T3595] team0 (unregistering): Port device team_slave_1 removed [ 267.342350][ T3595] team0 (unregistering): Port device team_slave_0 removed [ 268.055590][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.067331][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.075244][ T6109] bridge_slave_0: entered allmulticast mode [ 268.084507][ T6109] bridge_slave_0: entered promiscuous mode [ 268.279969][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.287587][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.295496][ T6109] bridge_slave_1: entered allmulticast mode [ 268.305315][ T6109] bridge_slave_1: entered promiscuous mode [ 268.513538][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.553273][ T5870] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 268.594343][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.803148][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.814182][ T5870] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.823772][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.914404][ T6109] team0: Port device team_slave_0 added [ 268.957860][ T6109] team0: Port device team_slave_1 added [ 269.007962][ T5870] usb 1-1: config 0 descriptor?? [ 269.027860][ T6171] overlayfs: failed to clone upperpath [ 269.079157][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 269.191495][ T5815] Bluetooth: hci1: command tx timeout [ 269.192178][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 269.283354][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.292862][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.321416][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.350382][ T5815] Bluetooth: hci4: command tx timeout [ 269.360468][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.367888][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.395659][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.513682][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.524328][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.535396][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.558420][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.585026][ T5870] pwc: recv_control_msg error -71 req 04 val 1300 [ 269.612765][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 269.626850][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 269.638457][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 269.656725][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 269.667540][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 269.679422][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 269.740631][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 269.757000][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 269.810400][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 269.837175][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 269.855868][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 269.873424][ T5870] pwc: Registered as video103. [ 269.882017][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 269.969696][ T6109] hsr_slave_0: entered promiscuous mode [ 269.980101][ T6109] hsr_slave_1: entered promiscuous mode [ 270.017550][ T5870] usb 1-1: USB disconnect, device number 3 [ 271.224813][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 271.281177][ T5815] Bluetooth: hci1: command tx timeout [ 271.548906][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.557004][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.564960][ T6152] bridge_slave_0: entered allmulticast mode [ 271.574643][ T6152] bridge_slave_0: entered promiscuous mode [ 271.603810][ T6186] vlan2: entered allmulticast mode [ 271.609206][ T6186] veth1: entered allmulticast mode [ 271.766634][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.774614][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.782554][ T6152] bridge_slave_1: entered allmulticast mode [ 271.792093][ T6152] bridge_slave_1: entered promiscuous mode [ 271.881387][ T6191] loop0: detected capacity change from 0 to 2048 [ 272.077129][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.277544][ T6109] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.328455][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.342650][ T6109] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.402471][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.419530][ T6109] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.532767][ T6189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.799490][ T6109] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.853200][ T6152] team0: Port device team_slave_0 added [ 272.916289][ T6152] team0: Port device team_slave_1 added [ 273.196175][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.203500][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.230326][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.334730][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.342046][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.350761][ T5815] Bluetooth: hci1: command tx timeout [ 273.370367][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.618051][ T6152] hsr_slave_0: entered promiscuous mode [ 273.628203][ T6152] hsr_slave_1: entered promiscuous mode [ 273.637096][ T6152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.645105][ T6152] Cannot create hsr debugfs directory [ 274.316708][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.585714][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.696542][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.704263][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.833747][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.841515][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.285358][ T6218] overlayfs: failed to clone upperpath [ 275.328018][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 275.401557][ T6152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.433030][ T5815] Bluetooth: hci1: command tx timeout [ 275.524315][ T6152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.645206][ T6152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.738906][ T6152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.894497][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.023222][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.201656][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.301082][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.308666][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.395991][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.403682][ T751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.078570][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.088951][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.101421][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.138909][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.150816][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.494031][ T6267] overlayfs: failed to clone upperpath [ 280.308904][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.615925][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 280.772536][ T6109] veth0_vlan: entered promiscuous mode [ 280.833842][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.840935][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.093942][ T6109] veth1_vlan: entered promiscuous mode [ 281.214339][ T49] Bluetooth: hci5: command tx timeout [ 281.563523][ T6109] veth0_macvtap: entered promiscuous mode [ 281.627201][ T6109] veth1_macvtap: entered promiscuous mode [ 281.834133][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.994808][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.115109][ T6109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.125483][ T6109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.134755][ T6109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.143943][ T6109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.844926][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.853037][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.861037][ T6258] bridge_slave_0: entered allmulticast mode [ 282.871796][ T6258] bridge_slave_0: entered promiscuous mode [ 283.063493][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.072005][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.079987][ T6258] bridge_slave_1: entered allmulticast mode [ 283.089708][ T6258] bridge_slave_1: entered promiscuous mode [ 283.307072][ T49] Bluetooth: hci5: command tx timeout [ 283.444128][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.548038][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.560416][ T6152] veth0_vlan: entered promiscuous mode [ 283.698224][ T6152] veth1_vlan: entered promiscuous mode [ 283.902558][ T6258] team0: Port device team_slave_0 added [ 284.019087][ T6258] team0: Port device team_slave_1 added [ 284.391327][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.398556][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.425172][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.455728][ T6152] veth0_macvtap: entered promiscuous mode [ 284.521592][ T6152] veth1_macvtap: entered promiscuous mode [ 284.665175][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.672641][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.699225][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.788399][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.894286][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.987817][ T6152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.998647][ T6152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.008948][ T6152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.018131][ T6152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.351695][ T49] Bluetooth: hci5: command tx timeout [ 285.507377][ T6258] hsr_slave_0: entered promiscuous mode [ 285.520953][ T6258] hsr_slave_1: entered promiscuous mode [ 285.531252][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.539045][ T6258] Cannot create hsr debugfs directory [ 287.348951][ T6258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.433999][ T49] Bluetooth: hci5: command tx timeout [ 287.482467][ T6258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.583628][ T6258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.668216][ T6258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.802950][ T6370] syz.3.92 uses obsolete (PF_INET,SOCK_PACKET) [ 288.866014][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.097151][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.292612][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.300299][ T4949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.470253][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.477844][ T4949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.881520][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.889622][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.159467][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.168545][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.049719][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.850246][ T6416] loop5: detected capacity change from 0 to 512 [ 292.890364][ T6416] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.938640][ T6416] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 293.041646][ T6416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 293.056489][ T6416] System zones: 1-12 [ 293.076979][ T6416] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.99: corrupted in-inode xattr: e_value size too large [ 293.191080][ T6416] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.99: couldn't read orphan inode 15 (err -117) [ 293.293251][ T6416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.879197][ T6109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.099076][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.107470][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.485942][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.495203][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.393659][ T6258] veth0_vlan: entered promiscuous mode [ 295.533192][ T6258] veth1_vlan: entered promiscuous mode [ 295.964722][ T6258] veth0_macvtap: entered promiscuous mode [ 296.041546][ T6258] veth1_macvtap: entered promiscuous mode [ 296.306784][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.387546][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.518800][ T6258] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.529213][ T6258] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.540698][ T6258] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.549723][ T6258] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.003688][ T6461] binder: 6460:6461 ioctl 0 800004c0 returned -22 [ 297.050976][ T6461] binder: 6460:6461 ioctl 890c 80000500 returned -22 [ 299.525754][ T6499] vlan2: entered allmulticast mode [ 299.531391][ T6499] veth1: entered allmulticast mode [ 299.969320][ T6507] fuse: Bad value for 'fd' [ 301.253047][ T6521] binder: BINDER_SET_CONTEXT_MGR already set [ 301.259299][ T6521] binder: 6520:6521 ioctl 4018620d 80000040 returned -16 [ 301.340972][ T6521] binder: 6520:6521 ioctl 0 800004c0 returned -22 [ 301.410396][ T6521] binder: 6520:6521 ioctl 890c 80000500 returned -22 [ 301.690829][ T5870] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 301.900282][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 301.966459][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 301.975367][ T5870] usb 6-1: can't read configurations, error -61 [ 302.170515][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.390516][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 302.455520][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 302.463777][ T5870] usb 6-1: can't read configurations, error -61 [ 302.547667][ T5870] usb usb6-port1: attempt power cycle [ 302.970406][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 303.038759][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 303.066684][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 303.074800][ T5870] usb 6-1: can't read configurations, error -61 [ 303.293387][ T5870] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 303.363046][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 303.422393][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 303.431491][ T5870] usb 6-1: can't read configurations, error -61 [ 303.494459][ T5870] usb usb6-port1: unable to enumerate USB device [ 304.857583][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.866020][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.247125][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.256071][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.695262][ T6566] loop5: detected capacity change from 0 to 2048 [ 305.774692][ T6571] binder: 6570:6571 ioctl 0 800004c0 returned -22 [ 305.832672][ T6571] binder: 6570:6571 ioctl 890c 80000500 returned -22 [ 305.945714][ T6566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.407817][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.293525][ T6629] binder: 6628:6629 ioctl 0 800004c0 returned -22 [ 310.329192][ T6629] binder: 6628:6629 ioctl 890c 80000500 returned -22 [ 310.503985][ T6631] loop6: detected capacity change from 0 to 2048 [ 310.731976][ T6631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.977498][ T6630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.499483][ T6668] syzkaller1: entered promiscuous mode [ 312.513867][ T6668] syzkaller1: entered allmulticast mode [ 313.318102][ T6682] vlan2: entered allmulticast mode [ 313.786454][ T6688] binder: 6684:6688 ioctl 0 800004c0 returned -22 [ 313.818282][ T6688] binder: 6684:6688 ioctl 890c 80000500 returned -22 [ 318.143022][ T6742] loop7: detected capacity change from 0 to 2048 [ 318.401291][ T6742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.651357][ T6740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.307380][ T30] audit: type=1800 audit(1752169522.979:2): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.198" name="nullb0" dev="tmpfs" ino=335 res=0 errno=0 [ 323.457038][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.216'. [ 323.926061][ T6832] vlan2: entered allmulticast mode [ 323.931770][ T6832] veth1: entered allmulticast mode [ 325.639706][ T6860] fuse: Bad value for 'fd' [ 326.846651][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.233'. [ 327.228302][ T6884] vlan2: entered allmulticast mode [ 330.645796][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.252'. [ 331.021125][ T6941] vlan2: entered allmulticast mode [ 331.661315][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.7.256'. [ 335.605303][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 336.088418][ T6994] vlan2: entered allmulticast mode [ 340.632583][ T30] audit: type=1326 audit(1752169543.329:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 340.654964][ T30] audit: type=1326 audit(1752169543.339:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 340.681790][ T30] audit: type=1326 audit(1752169543.339:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 341.520157][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.289'. [ 342.012296][ T7042] vlan2: entered allmulticast mode [ 342.256724][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.263719][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.651927][ T7057] fuse: Bad value for 'fd' [ 344.343309][ T7080] Zero length message leads to an empty skb [ 345.943887][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.307'. [ 346.156704][ T7104] fuse: Bad value for 'fd' [ 346.452030][ T7107] vlan2: entered allmulticast mode [ 346.457436][ T7107] veth1: entered allmulticast mode [ 349.199528][ T7140] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 349.434809][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 349.442145][ T5099] Bluetooth: hci3: command 0x0406 tx timeout [ 349.448684][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 349.617230][ T7140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.855806][ T7141] veth3: entered promiscuous mode [ 349.876787][ T7141] bond1: (slave veth3): Enslaving as an active interface with a down link [ 349.914796][ T7151] fuse: Bad value for 'fd' [ 350.671991][ T7159] overlayfs: failed to resolve './file0': -2 [ 350.763868][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.325'. [ 350.990399][ T7164] vlan2: entered allmulticast mode [ 353.484981][ T5812] Bluetooth: hci1: link tx timeout [ 353.490625][ T5812] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.827669][ T7209] overlayfs: failed to resolve './file0': -2 [ 355.523778][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 355.692568][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 357.367199][ T7220] vlan2: entered allmulticast mode [ 361.796439][ T5862] sched: DL replenish lagged too much [ 364.495876][ T7255] overlayfs: failed to resolve './file0': -2 [ 367.306145][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 367.709495][ T7287] vlan2: entered allmulticast mode [ 372.312279][ T42] libceph: connect (1)[c::]:6789 error -101 [ 372.318816][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 372.741577][ T42] libceph: connect (1)[c::]:6789 error -101 [ 372.748176][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 372.910634][ T7350] ceph: No mds server is up or the cluster is laggy [ 380.131731][ T3648] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.404664][ T3648] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.605022][ T3648] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.814240][ T3648] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.561902][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.406'. [ 381.732116][ T3648] bridge_slave_1: left allmulticast mode [ 381.740400][ T3648] bridge_slave_1: left promiscuous mode [ 381.747160][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.873087][ T3648] bridge_slave_0: left allmulticast mode [ 381.879287][ T3648] bridge_slave_0: left promiscuous mode [ 381.889246][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.656470][ T3648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.691745][ T3648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.716447][ T3648] bond0 (unregistering): Released all slaves [ 383.473166][ T3648] hsr_slave_0: left promiscuous mode [ 383.488786][ T7501] fuse: Bad value for 'fd' [ 383.510357][ T3648] hsr_slave_1: left promiscuous mode [ 383.518288][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.527211][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.652731][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.661760][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.826025][ T3648] veth1_macvtap: left promiscuous mode [ 383.834512][ T3648] veth0_macvtap: left promiscuous mode [ 383.840621][ T3648] veth1_vlan: left promiscuous mode [ 383.846202][ T3648] veth0_vlan: left promiscuous mode [ 384.850381][ T3648] team0 (unregistering): Port device team_slave_1 removed [ 384.875449][ T3648] team0 (unregistering): Port device team_slave_0 removed [ 385.302004][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 386.976399][ T7546] fuse: Bad value for 'fd' [ 390.027633][ T7588] fuse: Bad value for 'fd' [ 390.391510][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 395.488280][ T5815] Bluetooth: hci0: unexpected cc 0x0c05 length: 5 > 1 [ 395.495706][ T5815] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 398.822415][ T7718] 9pnet_fd: Insufficient options for proto=fd [ 403.707025][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.714319][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.638464][ T30] audit: type=1326 audit(1752169608.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.6.503" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x0 [ 405.770878][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 406.554796][ T7836] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 406.564651][ T7836] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 406.573946][ T7836] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 406.583201][ T7836] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 406.592711][ T7836] geneve2: entered allmulticast mode [ 411.641536][ T7885] netlink: 'syz.0.518': attribute type 2 has an invalid length. [ 412.902305][ T7888] syz.0.518 (7888) used greatest stack depth: 2376 bytes left [ 414.436943][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.519'. [ 418.861174][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.874152][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.883532][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.907241][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.914698][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 418.928751][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.125075][ T7940] overlayfs: failed to resolve './file1': -2 [ 421.111707][ T5812] Bluetooth: hci2: command tx timeout [ 421.113314][ T7942] chnl_net:caif_netlink_parms(): no params data found [ 421.532984][ T7978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 423.224899][ T5812] Bluetooth: hci2: command tx timeout [ 423.276678][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.284537][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.292551][ T7942] bridge_slave_0: entered allmulticast mode [ 423.306387][ T7942] bridge_slave_0: entered promiscuous mode [ 423.322042][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.329622][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.337541][ T7942] bridge_slave_1: entered allmulticast mode [ 423.347217][ T7942] bridge_slave_1: entered promiscuous mode [ 423.682783][ T7942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.743370][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.549'. [ 423.779355][ T7942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.307565][ T7942] team0: Port device team_slave_0 added [ 424.416128][ T7942] team0: Port device team_slave_1 added [ 424.844149][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.851601][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.878273][ T7942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.094988][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.102353][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.129172][ T7942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.270955][ T5812] Bluetooth: hci2: command tx timeout [ 425.761111][ T7942] hsr_slave_0: entered promiscuous mode [ 425.772597][ T7942] hsr_slave_1: entered promiscuous mode [ 425.781608][ T7942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.789410][ T7942] Cannot create hsr debugfs directory [ 425.798206][ T8016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 427.350369][ T5812] Bluetooth: hci2: command tx timeout [ 427.785497][ T7942] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 427.913056][ T7942] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 428.034595][ T7942] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 428.178243][ T7942] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 429.846934][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.082881][ T7942] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.090865][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.560'. [ 430.298844][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.306539][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.413919][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.421697][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.865163][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.961135][ T8113] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 435.072429][ T8113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.073993][ T7942] veth0_vlan: entered promiscuous mode [ 437.121876][ T7942] veth1_vlan: entered promiscuous mode [ 437.488340][ T7942] veth0_macvtap: entered promiscuous mode [ 437.499090][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 437.698819][ T7942] veth1_macvtap: entered promiscuous mode [ 438.093612][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.221118][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.315039][ T7942] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.325049][ T7942] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.334186][ T7942] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.343175][ T7942] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.791932][ T8172] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 443.931833][ T8172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.407976][ T751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.416454][ T751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.870421][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.878713][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.993981][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.053518][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.071892][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.111389][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.142487][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.616755][ T8257] loop8: detected capacity change from 0 to 16 [ 451.714412][ T8257] erofs (device loop8): mounted with root inode @ nid 36. [ 451.814494][ T8257] erofs (device loop8): read error -117 @ 8200 of nid 36 [ 451.895539][ T8257] erofs (device loop8): read error -117 @ 8200 of nid 36 [ 452.313421][ T5815] Bluetooth: hci6: command tx timeout [ 452.906554][ T8243] chnl_net:caif_netlink_parms(): no params data found [ 454.400603][ T5815] Bluetooth: hci6: command tx timeout [ 455.337091][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.345035][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.360797][ T8243] bridge_slave_0: entered allmulticast mode [ 455.370552][ T8243] bridge_slave_0: entered promiscuous mode [ 455.493141][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.500924][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.508813][ T8243] bridge_slave_1: entered allmulticast mode [ 455.520768][ T8243] bridge_slave_1: entered promiscuous mode [ 456.079405][ T3569] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.091759][ T3569] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 456.453459][ T3569] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.464422][ T3569] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 456.470276][ T5815] Bluetooth: hci6: command tx timeout [ 456.773512][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.932079][ T3569] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.943790][ T3569] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 457.131959][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.284777][ T3569] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.295663][ T3569] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 457.916151][ T8243] team0: Port device team_slave_0 added [ 458.004237][ T8243] team0: Port device team_slave_1 added [ 458.633594][ T5815] Bluetooth: hci6: command tx timeout [ 462.176801][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.184229][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.210909][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.371569][ T3569] bridge_slave_1: left allmulticast mode [ 462.377510][ T3569] bridge_slave_1: left promiscuous mode [ 462.384349][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.563959][ T3569] bridge_slave_0: left allmulticast mode [ 462.570727][ T3569] bridge_slave_0: left promiscuous mode [ 462.577319][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.542586][ T3569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.631662][ T3569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.710954][ T3569] bond0 (unregistering): Released all slaves [ 463.823043][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.830427][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.861941][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.588326][ T8243] hsr_slave_0: entered promiscuous mode [ 464.597667][ T8243] hsr_slave_1: entered promiscuous mode [ 464.605900][ T8243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.613665][ T8243] Cannot create hsr debugfs directory [ 465.147653][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.154622][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.360481][ T3569] hsr_slave_0: left promiscuous mode [ 465.411033][ T3569] hsr_slave_1: left promiscuous mode [ 465.419076][ T3569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.427236][ T3569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.507357][ T3569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.515497][ T3569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.650512][ T3569] veth1_macvtap: left promiscuous mode [ 465.656321][ T3569] veth0_macvtap: left promiscuous mode [ 465.662778][ T3569] veth1_vlan: left promiscuous mode [ 465.668374][ T3569] veth0_vlan: left promiscuous mode [ 467.133406][ T3569] team0 (unregistering): Port device team_slave_1 removed [ 467.254232][ T3569] team0 (unregistering): Port device team_slave_0 removed [ 469.772914][ T8243] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 469.881573][ T8243] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 469.991622][ T8243] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 470.083230][ T8243] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.378026][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.664339][ T8243] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.808183][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.815930][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.881185][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.888547][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.679940][ T8243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.824527][ T8243] veth0_vlan: entered promiscuous mode [ 478.024209][ T8243] veth1_vlan: entered promiscuous mode [ 478.546188][ T8243] veth0_macvtap: entered promiscuous mode [ 478.637089][ T8243] veth1_macvtap: entered promiscuous mode [ 478.841894][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.937315][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.055778][ T8243] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.065116][ T8243] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.074280][ T8243] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.083545][ T8243] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.579366][ T8504] tipc: Enabling of bearer rejected, failed to enable media [ 481.282277][ T8522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.672'. [ 483.392321][ T8545] overlayfs: missing 'workdir' [ 484.750948][ T8565] netlink: 44 bytes leftover after parsing attributes in process `syz.8.682'. [ 485.321759][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 487.404429][ T8599] overlayfs: missing 'workdir' [ 487.928371][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.936831][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.410899][ T4949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.419106][ T4949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.054434][ T8618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.695'. [ 489.588627][ T8627] netlink: 'syz.9.597': attribute type 1 has an invalid length. [ 489.721282][ T8627] vlan2: entered allmulticast mode [ 489.726589][ T8627] veth1: entered allmulticast mode [ 490.143887][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.699'. [ 490.228508][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 491.174611][ T8648] overlayfs: missing 'lowerdir' [ 491.736110][ T8655] fuse: Bad value for 'group_id' [ 491.741920][ T8655] fuse: Bad value for 'group_id' [ 492.203197][ T8667] netlink: 32 bytes leftover after parsing attributes in process `syz.5.708'. [ 493.389073][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.712'. [ 494.243352][ T8693] overlayfs: missing 'lowerdir' [ 494.553344][ T8696] fuse: Bad value for 'group_id' [ 494.558569][ T8696] fuse: Bad value for 'group_id' [ 494.894686][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.720'. [ 495.036154][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.8.720'. [ 495.111699][ T8702] tipc: Enabling of bearer rejected, failed to enable media [ 495.158142][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'. [ 496.420661][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.727'. [ 497.369046][ T8736] overlayfs: missing 'lowerdir' [ 498.097311][ T8748] netlink: 32 bytes leftover after parsing attributes in process `syz.8.735'. [ 498.115417][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 498.143414][ T8750] fuse: Bad value for 'group_id' [ 498.148642][ T8750] fuse: Bad value for 'group_id' [ 499.212467][ T8762] binder: BINDER_SET_CONTEXT_MGR already set [ 499.218818][ T8762] binder: 8761:8762 ioctl 4018620d 80000040 returned -16 [ 499.536306][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 500.523900][ T8784] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 500.534070][ T8784] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 500.546133][ T8784] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 501.119647][ T8789] netlink: 32 bytes leftover after parsing attributes in process `syz.9.748'. [ 502.032502][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.9.753'. [ 502.874410][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 504.353022][ T8833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 504.362424][ T8833] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 504.374467][ T8833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.293040][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.6.763'. [ 506.555291][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.8.770'. [ 506.922304][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.769'. [ 506.985235][ T8858] loop9: detected capacity change from 0 to 2048 [ 507.332731][ T8858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.752930][ T8856] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.797345][ T8896] netlink: 32 bytes leftover after parsing attributes in process `syz.9.779'. [ 509.557005][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.784'. [ 510.378746][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.788'. [ 512.202943][ T8949] fuse: Bad value for 'fd' [ 512.933099][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.8.798'. [ 513.934170][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.803'. [ 515.491919][ T9000] fuse: Bad value for 'fd' [ 515.674590][ T9002] tipc: Enabling of bearer rejected, failed to enable media [ 516.525074][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.812'. [ 518.276074][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.819'. [ 518.850462][ T9053] tipc: Enabling of bearer rejected, failed to enable media [ 519.712675][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.829'. [ 520.848668][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.6.835'. [ 521.610044][ T9098] fuse: Bad value for 'fd' [ 521.776780][ T9100] tipc: Enabling of bearer rejected, failed to enable media [ 522.142291][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'. [ 523.573626][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 524.264975][ T30] audit: type=1326 audit(1752169726.959:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.9.851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 524.292397][ T30] audit: type=1326 audit(1752169726.959:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.9.851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 524.316400][ T30] audit: type=1326 audit(1752169726.959:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.9.851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 524.338708][ T30] audit: type=1326 audit(1752169726.969:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.9.851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 524.361081][ T30] audit: type=1326 audit(1752169726.969:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.9.851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 524.537775][ T9146] tipc: Enabling of bearer rejected, failed to enable media [ 525.660661][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.859'. [ 526.484931][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.863'. [ 526.592667][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.599382][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.361803][ T9192] tipc: Enabling of bearer rejected, failed to enable media [ 530.183136][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.875'. [ 531.543446][ T9236] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 531.555421][ T9236] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 534.592513][ T9273] fuse: Unknown parameter 'group_i00000000000000000000' [ 536.696747][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.898'. [ 537.710408][ T9320] fuse: Unknown parameter 'group_i00000000000000000000' [ 538.410492][ T9327] mmap: syz.0.906 (9327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 539.632617][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.911'. [ 540.833696][ T9368] overlayfs: failed to clone upperpath [ 541.707628][ T9377] fuse: Bad value for 'fd' [ 545.960540][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 548.724524][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 550.911026][ T9425] fuse: Unknown parameter 'group_id00000000000000000000' [ 551.992598][ T9439] overlayfs: failed to clone upperpath [ 552.366557][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 554.535040][ T9468] fuse: Unknown parameter 'group_id00000000000000000000' [ 555.730744][ T9483] overlayfs: failed to clone upperpath [ 556.245620][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.9.954'. [ 556.763361][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 558.085796][ T9522] fuse: Unknown parameter 'group_id00000000000000000000' [ 559.641126][ T9540] overlayfs: failed to clone upperpath [ 560.009389][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 560.893337][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.972'. [ 561.086678][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.8.970'. [ 561.691561][ T9568] fuse: Bad value for 'user_id' [ 561.696820][ T9568] fuse: Bad value for 'user_id' [ 562.498651][ T9585] overlayfs: failed to clone upperpath [ 563.378161][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 564.493970][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.987'. [ 565.989007][ T9630] netlink: 'syz.8.991': attribute type 1 has an invalid length. [ 566.130533][ T9630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.301986][ T9633] bond1: (slave veth3): Enslaving as an active interface with a down link [ 566.727223][ T9637] overlayfs: failed to clone upperpath [ 567.811668][ T9652] fuse: Bad value for 'user_id' [ 567.816798][ T9652] fuse: Bad value for 'user_id' [ 568.602010][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.998'. [ 569.833184][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1001'. [ 570.594215][ T9695] netlink: 'syz.9.1006': attribute type 1 has an invalid length. [ 570.712157][ T9695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.763378][ T9697] overlayfs: failed to clone upperpath [ 571.038024][ T9706] fuse: Bad value for 'user_id' [ 571.043403][ T9706] fuse: Bad value for 'user_id' [ 571.048481][ T9701] bond1: (slave veth3): Enslaving as an active interface with a down link [ 571.714580][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 572.333102][ T9727] overlayfs: failed to clone upperpath [ 573.483246][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1019'. [ 574.113407][ T9757] overlayfs: failed to clone upperpath [ 574.701678][ T9763] fuse: Bad value for 'fd' [ 574.714918][ T5815] Bluetooth: hci6: command 0x0406 tx timeout [ 574.865559][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1025'. [ 575.750917][ T9781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1028'. [ 577.629187][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1035'. [ 577.709705][ T9809] overlayfs: failed to clone upperpath [ 577.801761][ T9811] fuse: Bad value for 'fd' [ 578.142297][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1038'. [ 578.433203][ T9819] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1039'. [ 578.941270][ T9825] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1041'. [ 581.438578][ T9859] overlayfs: failed to clone upperpath [ 581.682059][ T9864] fuse: Bad value for 'fd' [ 581.801828][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1052'. [ 582.081734][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1053'. [ 582.231220][ T9874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1054'. [ 583.318509][ T9891] vlan2: entered promiscuous mode [ 583.323959][ T9891] veth0_virt_wifi: entered promiscuous mode [ 583.334036][ T9891] vlan2: entered allmulticast mode [ 583.339401][ T9891] veth0_virt_wifi: entered allmulticast mode [ 584.575185][ T9911] overlayfs: failed to clone upperpath [ 585.152079][ T9915] fuse: Bad value for 'fd' [ 585.492263][ T9921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1068'. [ 585.532182][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1067'. [ 585.855952][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 587.758791][ T9953] overlayfs: failed to clone upperpath [ 588.021426][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.028288][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.098084][ T9959] fuse: Bad value for 'fd' [ 588.964091][ T9968] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1081'. [ 589.643291][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1082'. [ 590.153046][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 590.281101][ T5812] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 591.779572][T10005] overlayfs: failed to clone upperpath [ 592.313620][T10011] fuse: Bad value for 'fd' [ 592.527244][T10016] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1093'. [ 593.780544][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1098'. [ 594.994746][T10057] fuse: Invalid rootmode [ 595.209312][T10063] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1107'. [ 597.613304][T10097] netlink: 'syz.9.1118': attribute type 2 has an invalid length. [ 597.722020][T10100] fuse: Invalid rootmode [ 601.005754][T10118] IPVS: Scheduler module ip_vs_sip not found [ 602.953831][T10149] fuse: Invalid rootmode [ 606.022237][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 606.205124][T10197] fuse: Bad value for 'rootmode' [ 609.365721][T10244] fuse: Bad value for 'rootmode' [ 609.595869][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1160'. [ 616.980287][T10301] fuse: Bad value for 'rootmode' [ 617.233475][T10306] netlink: 'syz.5.1176': attribute type 2 has an invalid length. [ 617.870996][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 621.780842][T10352] fuse: Unknown parameter 'use00000000000000000000' [ 623.733039][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1191'. [ 624.049640][T10389] netlink: 'syz.0.1193': attribute type 2 has an invalid length. [ 627.187929][T10416] fuse: Unknown parameter 'use00000000000000000000' [ 629.079271][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1205'. [ 629.171157][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1205'. [ 631.400236][T10455] netlink: 'syz.0.1209': attribute type 2 has an invalid length. [ 632.547844][T10467] fuse: Unknown parameter 'use00000000000000000000' [ 634.672336][T10479] 9pnet_fd: Insufficient options for proto=fd [ 635.927962][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1220'. [ 637.206207][T10511] fuse: Unknown parameter 'user_i00000000000000000000' [ 639.641765][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 640.352649][T10560] fuse: Unknown parameter 'user_i00000000000000000000' [ 640.992829][T10570] 9pnet_fd: Insufficient options for proto=fd [ 641.724481][T10575] IPVS: Scheduler module ip_vs_sip not found [ 643.275500][T10602] fuse: Unknown parameter 'user_i00000000000000000000' [ 643.646545][T10612] 9pnet_fd: Insufficient options for proto=fd [ 645.640764][T10649] fuse: Unknown parameter 'user_id00000000000000000000' [ 646.261869][T10657] 9pnet_fd: Insufficient options for proto=fd [ 647.871577][T10688] fuse: Unknown parameter 'user_id00000000000000000000' [ 649.483493][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.490407][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.545165][T10735] netlink: 'syz.8.1298': attribute type 1 has an invalid length. [ 650.691857][T10735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.855956][T10737] bond2: (slave veth5): Enslaving as an active interface with a down link [ 652.074440][T10754] IPVS: Scheduler module ip_vs_sip not found [ 652.489021][T10759] IPVS: Scheduler module ip_vs_sip not found [ 654.258503][T10797] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 654.361408][T10797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.666184][T10804] bond3: (slave veth5): Enslaving as an active interface with a down link [ 655.080222][T10809] IPVS: Scheduler module ip_vs_sip not found [ 655.489116][T10817] IPVS: Scheduler module ip_vs_sip not found [ 656.274598][T10835] 9pnet_fd: Insufficient options for proto=fd [ 657.984420][T10863] netlink: 'syz.5.1336': attribute type 1 has an invalid length. [ 658.122202][T10863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.313135][T10870] bond1: (slave veth3): Enslaving as an active interface with a down link [ 658.424082][T10864] IPVS: Scheduler module ip_vs_sip not found [ 660.185588][T10903] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 662.656276][T10923] IPVS: Scheduler module ip_vs_sip not found [ 662.861297][T10932] netlink: 'syz.9.1352': attribute type 1 has an invalid length. [ 662.968406][T10932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.083144][T10936] bond2: (slave veth5): Enslaving as an active interface with a down link [ 663.341986][T10931] IPVS: Scheduler module ip_vs_sip not found [ 667.690947][T10984] IPVS: Scheduler module ip_vs_sip not found [ 668.561316][T10991] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 668.693548][T10991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 668.818732][T10993] bond4: (slave veth7): Enslaving as an active interface with a down link [ 671.274036][ T5812] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 671.780027][T11031] netlink: 'syz.9.1385': attribute type 1 has an invalid length. [ 671.876867][T11031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 672.104835][T11035] bond3: (slave veth7): Enslaving as an active interface with a down link [ 673.923375][T11050] overlay: ./file0 is not a directory [ 675.360565][ T5812] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 675.369194][ T5812] Bluetooth: hci1: Injecting HCI hardware error event [ 675.377032][ T5812] Bluetooth: hci1: hardware error 0x00 [ 676.112044][T11068] netlink: 'syz.6.1399': attribute type 1 has an invalid length. [ 676.222013][T11068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.471740][T11071] bond1: (slave veth3): Enslaving as an active interface with a down link [ 676.901947][ T5815] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 677.433548][ T5812] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 679.765007][T11109] netlink: 'syz.5.1414': attribute type 1 has an invalid length. [ 679.853915][T11109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 680.055043][T11113] bond2: (slave veth5): Enslaving as an active interface with a down link [ 680.950327][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 680.958953][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 680.968202][ T5812] Bluetooth: hci2: hardware error 0x00 [ 681.304673][ T5815] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 682.772703][T11143] netlink: 'syz.5.1427': attribute type 2 has an invalid length. [ 683.030738][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 684.178929][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.501226][ T9595] libceph: connect (1)[c::]:6789 error -101 [ 684.507715][ T9595] libceph: mon0 (1)[c::]:6789 connect error [ 684.834604][ T9595] libceph: connect (1)[c::]:6789 error -101 [ 684.841376][ T9595] libceph: mon0 (1)[c::]:6789 connect error [ 685.006923][T11152] ceph: No mds server is up or the cluster is laggy [ 685.381965][T11162] netlink: 'syz.9.1432': attribute type 1 has an invalid length. [ 685.498115][ T5815] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 685.506865][ T5815] Bluetooth: hci3: Injecting HCI hardware error event [ 685.515007][ T5815] Bluetooth: hci3: hardware error 0x00 [ 685.567400][T11162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 686.196456][T11170] bond4: (slave veth9): Enslaving as an active interface with a down link [ 686.532286][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1436'. [ 687.718144][T11199] syz_tun: entered promiscuous mode [ 687.730413][T11199] batadv_slave_0: entered promiscuous mode [ 687.740229][T11199] hsr1: entered allmulticast mode [ 687.745620][T11199] syz_tun: entered allmulticast mode [ 687.752076][T11199] batadv_slave_0: entered allmulticast mode [ 687.831641][ T5815] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 687.844771][T11194] IPVS: Scheduler module ip_vs_sip not found [ 688.712804][T11213] netlink: 'syz.5.1445': attribute type 2 has an invalid length. [ 690.055532][T11223] netlink: 'syz.6.1449': attribute type 1 has an invalid length. [ 690.132298][T11223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 690.442842][T11225] bond2: (slave veth5): Enslaving as an active interface with a down link [ 690.618206][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1450'. [ 692.140588][T11241] IPVS: Scheduler module ip_vs_sip not found [ 692.986997][T11258] netlink: 'syz.5.1460': attribute type 2 has an invalid length. [ 694.365858][T11266] netlink: 'syz.5.1463': attribute type 1 has an invalid length. [ 694.434792][T11266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 694.671578][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1464'. [ 694.760582][T11268] bond3: (slave veth7): Enslaving as an active interface with a down link [ 695.964327][T11283] IPVS: Scheduler module ip_vs_sip not found [ 696.083950][ T5815] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 696.683801][T11300] netlink: 'syz.0.1473': attribute type 2 has an invalid length. [ 696.878774][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.099502][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.248665][T11303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.409713][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.944951][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1479'. [ 700.163038][ T5815] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 700.171961][ T5815] Bluetooth: hci4: Injecting HCI hardware error event [ 700.179590][ T5815] Bluetooth: hci4: hardware error 0x00 [ 701.045226][T11338] IPVS: Scheduler module ip_vs_sip not found [ 703.248644][T11360] tipc: Enabling of bearer rejected, failed to enable media [ 703.274174][ T5815] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 703.562629][T11363] netlink: 'syz.5.1487': attribute type 2 has an invalid length. [ 706.896263][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1492'. [ 707.416935][T11384] IPVS: Scheduler module ip_vs_sip not found [ 708.831315][T11400] tipc: Enabling of bearer rejected, failed to enable media [ 709.343699][T11405] @: renamed from vlan0 (while UP) [ 709.483172][T11407] netlink: 'syz.8.1502': attribute type 2 has an invalid length. [ 710.901191][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.907866][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.711929][T11414] IPVS: Scheduler module ip_vs_sip not found [ 712.843460][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1506'. [ 713.923147][T11436] tipc: Enabling of bearer rejected, failed to enable media [ 714.531526][T11446] netlink: 'syz.5.1516': attribute type 2 has an invalid length. [ 718.602308][T11456] IPVS: Scheduler module ip_vs_sip not found [ 718.846715][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1522'. [ 719.629550][T11472] overlayfs: failed to clone upperpath [ 720.617878][T11484] netlink: 'syz.8.1528': attribute type 2 has an invalid length. [ 723.473350][T11497] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 723.654620][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1536'. [ 723.918626][T11504] IPVS: Scheduler module ip_vs_sip not found [ 725.102943][T11521] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 728.410287][T11537] IPVS: Scheduler module ip_vs_sip not found [ 728.711186][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 729.562098][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 729.673075][T11559] netlink: 'syz.9.1554': attribute type 2 has an invalid length. [ 729.773760][T11562] bridge0: port 3(syz_tun) entered blocking state [ 729.781243][T11562] bridge0: port 3(syz_tun) entered disabled state [ 729.794545][T11562] syz_tun: entered allmulticast mode [ 729.803271][T11562] syz_tun: entered promiscuous mode [ 729.811062][T11562] bridge0: port 3(syz_tun) entered blocking state [ 729.817948][T11562] bridge0: port 3(syz_tun) entered forwarding state [ 732.353480][T11580] IPVS: Scheduler module ip_vs_sip not found [ 732.740434][T11593] batman_adv: batadv0: Adding interface: dummy0 [ 732.747024][T11593] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.776832][T11593] batman_adv: batadv0: Interface activated: dummy0 [ 732.937228][T11593] batadv0: mtu less than device minimum [ 732.945703][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 732.958762][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 732.971874][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 732.984880][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 732.997814][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 733.010903][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 733.023843][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 733.036816][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 733.049902][T11593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 733.095030][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1566'. [ 733.652937][T11603] IPVS: Scheduler module ip_vs_sip not found [ 734.269499][ C0] ===================================================== [ 734.276866][ C0] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 734.285428][ C0] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 734.291464][ C0] do_xdp_generic+0xd52/0x1690 [ 734.296438][ C0] __netif_receive_skb_core+0x2533/0x70c0 [ 734.302469][ C0] __netif_receive_skb+0xcc/0xac0 [ 734.307718][ C0] process_backlog+0x485/0xa00 [ 734.312736][ C0] __napi_poll+0xda/0x9c0 [ 734.317301][ C0] net_rx_action+0xa59/0x1ac0 [ 734.322230][ C0] handle_softirqs+0x166/0x6e0 [ 734.327163][ C0] __do_softirq+0x14/0x1b [ 734.331759][ C0] do_softirq+0x99/0x100 [ 734.336175][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 734.341466][ C0] tun_rx_batched+0x889/0x980 [ 734.346329][ C0] tun_get_user+0x4ee0/0x6b40 [ 734.351257][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 734.356458][ C0] vfs_write+0xb4b/0x1580 [ 734.361059][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 734.366145][ C0] ia32_sys_call+0x30f2/0x42c0 [ 734.371132][ C0] __do_fast_syscall_32+0xb0/0x150 [ 734.376483][ C0] do_fast_syscall_32+0x38/0x80 [ 734.381624][ C0] do_SYSENTER_32+0x1f/0x30 [ 734.386371][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.392982][ C0] [ 734.395406][ C0] Uninit was created at: [ 734.399986][ C0] __alloc_frozen_pages_noprof+0x689/0xf00 [ 734.406010][ C0] alloc_pages_mpol+0x328/0x860 [ 734.411139][ C0] alloc_pages_noprof+0x102/0x280 [ 734.416370][ C0] skb_page_frag_refill+0x3d8/0x730 [ 734.421871][ C0] tun_get_user+0x1c28/0x6b40 [ 734.426736][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 734.432007][ C0] vfs_write+0xb4b/0x1580 [ 734.436542][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 734.441678][ C0] ia32_sys_call+0x30f2/0x42c0 [ 734.446618][ C0] __do_fast_syscall_32+0xb0/0x150 [ 734.452014][ C0] do_fast_syscall_32+0x38/0x80 [ 734.457087][ C0] do_SYSENTER_32+0x1f/0x30 [ 734.461880][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.468425][ C0] [ 734.470959][ C0] CPU: 0 UID: 0 PID: 11621 Comm: syz.6.1576 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(none) [ 734.483294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.493572][ C0] ===================================================== [ 734.500692][ C0] Disabling lock debugging due to kernel taint [ 734.506964][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 734.513550][ C0] CPU: 0 UID: 0 PID: 11621 Comm: syz.6.1576 Tainted: G B 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(none) [ 734.527405][ C0] Tainted: [B]=BAD_PAGE [ 734.531659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.541849][ C0] Call Trace: [ 734.545230][ C0] [ 734.548172][ C0] __dump_stack+0x26/0x30 [ 734.552694][ C0] dump_stack_lvl+0x53/0x270 [ 734.557492][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 734.563538][ C0] dump_stack+0x1e/0x25 [ 734.567884][ C0] panic+0x4bd/0xd50 [ 734.572010][ C0] kmsan_report+0x31c/0x320 [ 734.576712][ C0] ? __msan_warning+0x1b/0x30 [ 734.581562][ C0] ? bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 734.587663][ C0] ? do_xdp_generic+0xd52/0x1690 [ 734.592791][ C0] ? __netif_receive_skb_core+0x2533/0x70c0 [ 734.598898][ C0] ? __netif_receive_skb+0xcc/0xac0 [ 734.604306][ C0] ? process_backlog+0x485/0xa00 [ 734.609402][ C0] ? __napi_poll+0xda/0x9c0 [ 734.614102][ C0] ? net_rx_action+0xa59/0x1ac0 [ 734.619104][ C0] ? handle_softirqs+0x166/0x6e0 [ 734.624196][ C0] ? __do_softirq+0x14/0x1b [ 734.628872][ C0] ? do_softirq+0x99/0x100 [ 734.633436][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 734.638787][ C0] ? tun_rx_batched+0x889/0x980 [ 734.643799][ C0] ? tun_get_user+0x4ee0/0x6b40 [ 734.648806][ C0] ? tun_chr_write_iter+0x3e9/0x5c0 [ 734.654162][ C0] ? vfs_write+0xb4b/0x1580 [ 734.658851][ C0] ? __ia32_sys_write+0x1f9/0x4d0 [ 734.664066][ C0] ? ia32_sys_call+0x30f2/0x42c0 [ 734.669151][ C0] ? __do_fast_syscall_32+0xb0/0x150 [ 734.674638][ C0] ? do_fast_syscall_32+0x38/0x80 [ 734.679864][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 734.684755][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.691481][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.696806][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.702133][ C0] ? __bpf_prog_run32+0xc2/0xf0 [ 734.707150][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 734.713678][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.718993][ C0] __msan_warning+0x1b/0x30 [ 734.723668][ C0] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 734.729654][ C0] do_xdp_generic+0xd52/0x1690 [ 734.734615][ C0] ? qdisc_run_end+0xc1/0x120 [ 734.739490][ C0] ? filter_irq_stacks+0x49/0x190 [ 734.744718][ C0] __netif_receive_skb_core+0x2533/0x70c0 [ 734.750655][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.755968][ C0] ? process_backlog+0x485/0xa00 [ 734.761078][ C0] ? __msan_warning+0x1b/0x30 [ 734.765930][ C0] ? filter_irq_stacks+0x13f/0x190 [ 734.771211][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.776545][ C0] __netif_receive_skb+0xcc/0xac0 [ 734.781773][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.787097][ C0] process_backlog+0x485/0xa00 [ 734.792012][ C0] ? net_rx_action+0x4d1/0x1ac0 [ 734.797041][ C0] ? __pfx_process_backlog+0x10/0x10 [ 734.802490][ C0] __napi_poll+0xda/0x9c0 [ 734.807035][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.812342][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 734.818360][ C0] net_rx_action+0xa59/0x1ac0 [ 734.823195][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.828504][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 734.834571][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 734.839841][ C0] handle_softirqs+0x166/0x6e0 [ 734.844792][ C0] __do_softirq+0x14/0x1b [ 734.849302][ C0] do_softirq+0x99/0x100 [ 734.853696][ C0] [ 734.856718][ C0] [ 734.859750][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 734.864936][ C0] ? tun_rx_batched+0x16c/0x980 [ 734.869951][ C0] tun_rx_batched+0x889/0x980 [ 734.874807][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.880126][ C0] tun_get_user+0x4ee0/0x6b40 [ 734.884972][ C0] ? stack_depot_save_flags+0x35/0x7b0 [ 734.890603][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.895901][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 734.901278][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 734.906498][ C0] vfs_write+0xb4b/0x1580 [ 734.911040][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 734.916764][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 734.921829][ C0] ia32_sys_call+0x30f2/0x42c0 [ 734.926748][ C0] __do_fast_syscall_32+0xb0/0x150 [ 734.932069][ C0] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 734.937983][ C0] do_fast_syscall_32+0x38/0x80 [ 734.943027][ C0] do_SYSENTER_32+0x1f/0x30 [ 734.947724][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.954249][ C0] RIP: 0023:0xf704e539 [ 734.958445][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 734.978319][ C0] RSP: 002b:00000000f503e520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 734.986906][ C0] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800002c0 [ 734.995007][ C0] RDX: 0000000000000026 RSI: 00000000f73b3ff4 RDI: 0000000000000000 [ 735.003107][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.011205][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 735.019298][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.027425][ C0] [ 735.030813][ C0] Kernel Offset: disabled [ 735.035198][ C0] Rebooting in 86400 seconds..