last executing test programs: 18.932394636s ago: executing program 4 (id=437): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 17.094831035s ago: executing program 4 (id=440): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4$nfc_llcp(r4, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_OIF={0x8}]}, 0x24}}, 0xea5bc50b6199d77e) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) 15.980909384s ago: executing program 4 (id=443): socket$unix(0x1, 0x5, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xffffbffffffffffc, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) pipe2$watch_queue(&(0x7f0000000240), 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0xeeee0000, 0x1000, &(0x7f0000cd1000/0x1000)=nil}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) read(0xffffffffffffffff, &(0x7f0000000480)=""/82, 0x52) 13.445889726s ago: executing program 2 (id=450): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa08, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 13.443563835s ago: executing program 1 (id=451): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 11.865721321s ago: executing program 2 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'dvmrp1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) close(0x3) 11.390750543s ago: executing program 1 (id=454): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 9.902392047s ago: executing program 3 (id=456): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 9.708070084s ago: executing program 1 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 9.161388967s ago: executing program 3 (id=459): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1e502d00000000000109022400"], 0x0) 8.51326946s ago: executing program 2 (id=460): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 7.400693917s ago: executing program 1 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x0, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x5, 0x3}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.864508041s ago: executing program 2 (id=463): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x84) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) syz_clone(0x631ca480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 6.75965895s ago: executing program 0 (id=464): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000100000000000000000a81000052a4f2cf004022cd772bc660eb070f000a0c3b104d7e5f6c73d7c7cbe1bbfa775164d9ab3c72b8988d546d163ece530160657a68330d7042bf45796e17137181080f656a0fd090ba84ccf0"], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.456252541s ago: executing program 0 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x1, [0x5]}}) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) 5.092688551s ago: executing program 0 (id=467): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) 5.043464465s ago: executing program 3 (id=468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0) 4.971546746s ago: executing program 1 (id=469): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e0000001000000000000000000000000000000000400"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 4.901946571s ago: executing program 0 (id=470): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x3) 4.182291254s ago: executing program 4 (id=471): getpriority(0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000080)=0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x3, 0x20000000, 0x3000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.998124613s ago: executing program 0 (id=472): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa1000000000000070100"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x80, 0x0, 0x271}, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 3.996486018s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) 2.305680192s ago: executing program 3 (id=474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r2, 0x400454de, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) 1.385162317s ago: executing program 4 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000500)={0x0, "6a8a53f23af8fe18db314e60b2ddf1c85fb1ee69665e9c75e894eee4cac50e669c81042d5eab7a08c35390bd51b8b86fc34affb176bba090aff137d2370b6bc4", 0x1c}, 0x48, 0xfffffffffffffffd) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x3, &(0x7f0000000300)) 1.301988151s ago: executing program 1 (id=476): socket$kcm(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r3, 0x0, 0x0) 357.929592ms ago: executing program 4 (id=477): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 269.963042ms ago: executing program 0 (id=478): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1e502d00000000000109022400"], 0x0) 125.732083ms ago: executing program 2 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) 0s ago: executing program 2 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 78.318703][ T5851] cgroup: Unknown subsys name 'net' [ 78.475185][ T5851] cgroup: Unknown subsys name 'cpuset' [ 78.485648][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.920914][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.915632][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.919706][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.937540][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.939272][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.945782][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.955473][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.964157][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.973672][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.992502][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.992942][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.003655][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.012646][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.021393][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.029034][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.053579][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.054224][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.064981][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.071054][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.087702][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.112323][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.122754][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.153780][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.166981][ T5184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.177875][ T5184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.188214][ T5184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.754385][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 83.848729][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 83.979776][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 84.049251][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.057579][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.066491][ T5870] bridge_slave_0: entered allmulticast mode [ 84.074019][ T5870] bridge_slave_0: entered promiscuous mode [ 84.083918][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 84.141275][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.149427][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.157037][ T5870] bridge_slave_1: entered allmulticast mode [ 84.165043][ T5870] bridge_slave_1: entered promiscuous mode [ 84.277816][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.309970][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.319591][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.329484][ T5862] bridge_slave_0: entered allmulticast mode [ 84.337205][ T5862] bridge_slave_0: entered promiscuous mode [ 84.348241][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.363611][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 84.380119][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.388010][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.396051][ T5862] bridge_slave_1: entered allmulticast mode [ 84.404250][ T5862] bridge_slave_1: entered promiscuous mode [ 84.526042][ T5870] team0: Port device team_slave_0 added [ 84.557652][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.566004][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.574391][ T5861] bridge_slave_0: entered allmulticast mode [ 84.582191][ T5861] bridge_slave_0: entered promiscuous mode [ 84.593356][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.606463][ T5870] team0: Port device team_slave_1 added [ 84.619329][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.626992][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.634502][ T5872] bridge_slave_0: entered allmulticast mode [ 84.641805][ T5872] bridge_slave_0: entered promiscuous mode [ 84.650539][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.659260][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.666981][ T5861] bridge_slave_1: entered allmulticast mode [ 84.675068][ T5861] bridge_slave_1: entered promiscuous mode [ 84.687022][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.721243][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.729282][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.737688][ T5872] bridge_slave_1: entered allmulticast mode [ 84.746072][ T5872] bridge_slave_1: entered promiscuous mode [ 84.848772][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.856726][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.885263][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.901103][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.910165][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.940727][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.984926][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.999716][ T5862] team0: Port device team_slave_0 added [ 85.016839][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.029083][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.039831][ T5878] bridge_slave_0: entered allmulticast mode [ 85.050223][ T5878] bridge_slave_0: entered promiscuous mode [ 85.064584][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.079972][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.093467][ T5862] team0: Port device team_slave_1 added [ 85.114402][ T5875] Bluetooth: hci2: command tx timeout [ 85.114399][ T5868] Bluetooth: hci0: command tx timeout [ 85.132190][ T5184] Bluetooth: hci1: command tx timeout [ 85.144526][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.156319][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.165916][ T5878] bridge_slave_1: entered allmulticast mode [ 85.175826][ T5878] bridge_slave_1: entered promiscuous mode [ 85.188084][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.199219][ T5868] Bluetooth: hci3: command tx timeout [ 85.271871][ T5868] Bluetooth: hci4: command tx timeout [ 85.337194][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.345985][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.380413][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.408979][ T5872] team0: Port device team_slave_0 added [ 85.419421][ T5861] team0: Port device team_slave_0 added [ 85.433747][ T5870] hsr_slave_0: entered promiscuous mode [ 85.442751][ T5870] hsr_slave_1: entered promiscuous mode [ 85.451113][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.459231][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.497055][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.516401][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.532786][ T5872] team0: Port device team_slave_1 added [ 85.541526][ T5861] team0: Port device team_slave_1 added [ 85.561994][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.614300][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.622337][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.656136][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.727699][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.738045][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.772800][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.797083][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.805491][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.835115][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.889263][ T5878] team0: Port device team_slave_0 added [ 85.896830][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.904656][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.934904][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.976134][ T5878] team0: Port device team_slave_1 added [ 85.998111][ T5862] hsr_slave_0: entered promiscuous mode [ 86.005909][ T5862] hsr_slave_1: entered promiscuous mode [ 86.013263][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 86.020054][ T5862] Cannot create hsr debugfs directory [ 86.075576][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.083514][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.113946][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.129162][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.137162][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.167674][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.224625][ T5861] hsr_slave_0: entered promiscuous mode [ 86.232511][ T5861] hsr_slave_1: entered promiscuous mode [ 86.238994][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 86.245693][ T5861] Cannot create hsr debugfs directory [ 86.294388][ T5872] hsr_slave_0: entered promiscuous mode [ 86.301489][ T5872] hsr_slave_1: entered promiscuous mode [ 86.308779][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 86.315360][ T5872] Cannot create hsr debugfs directory [ 86.440921][ T5878] hsr_slave_0: entered promiscuous mode [ 86.448198][ T5878] hsr_slave_1: entered promiscuous mode [ 86.455047][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 86.461059][ T5878] Cannot create hsr debugfs directory [ 86.899047][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.913813][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.947007][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.981766][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.043247][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.066695][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.094156][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.108389][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.167976][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.191027][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.199074][ T5868] Bluetooth: hci2: command tx timeout [ 87.202304][ T5875] Bluetooth: hci1: command tx timeout [ 87.207428][ T5184] Bluetooth: hci0: command tx timeout [ 87.235389][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.247746][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.272315][ T5184] Bluetooth: hci3: command tx timeout [ 87.350981][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.364305][ T5184] Bluetooth: hci4: command tx timeout [ 87.370859][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.383973][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.412356][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.510570][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.532889][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.558274][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.580015][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.634942][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.668109][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.725020][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.754072][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.773554][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.785008][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.792886][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.830687][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.838553][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.850143][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.858135][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.874552][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.882072][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.957520][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.004066][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.012172][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.059737][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.078221][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.086553][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.170938][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.199744][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.265733][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.273056][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.306819][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.315979][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.400594][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.445162][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.454006][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.508145][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.517807][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.615656][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.851209][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.936042][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.158226][ T5861] veth0_vlan: entered promiscuous mode [ 89.174260][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.188293][ T5870] veth0_vlan: entered promiscuous mode [ 89.217308][ T5861] veth1_vlan: entered promiscuous mode [ 89.244430][ T5870] veth1_vlan: entered promiscuous mode [ 89.281163][ T5184] Bluetooth: hci0: command tx timeout [ 89.281182][ T5875] Bluetooth: hci2: command tx timeout [ 89.290570][ T5184] Bluetooth: hci1: command tx timeout [ 89.352691][ T5184] Bluetooth: hci3: command tx timeout [ 89.394858][ T5872] veth0_vlan: entered promiscuous mode [ 89.404754][ T5870] veth0_macvtap: entered promiscuous mode [ 89.417108][ T5870] veth1_macvtap: entered promiscuous mode [ 89.432486][ T5184] Bluetooth: hci4: command tx timeout [ 89.477199][ T5861] veth0_macvtap: entered promiscuous mode [ 89.492826][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.506922][ T5872] veth1_vlan: entered promiscuous mode [ 89.524280][ T5861] veth1_macvtap: entered promiscuous mode [ 89.544513][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.580861][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.611129][ T5862] veth0_vlan: entered promiscuous mode [ 89.627872][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.639733][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.659851][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.679538][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.710165][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.742234][ T5872] veth0_macvtap: entered promiscuous mode [ 89.784765][ T5872] veth1_macvtap: entered promiscuous mode [ 89.800332][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.815518][ T5862] veth1_vlan: entered promiscuous mode [ 89.840947][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.860071][ T3543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870364][ T3543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.898688][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.914811][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.946946][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.998219][ T5878] veth0_vlan: entered promiscuous mode [ 90.005693][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.016439][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.062712][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.072231][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.110304][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.141218][ T5878] veth1_vlan: entered promiscuous mode [ 90.192293][ T5862] veth0_macvtap: entered promiscuous mode [ 90.213258][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.222810][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.248720][ T5862] veth1_macvtap: entered promiscuous mode [ 90.316441][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.329192][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.348687][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.387602][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.408782][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.413719][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.425487][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.443939][ T5878] veth0_macvtap: entered promiscuous mode [ 90.493061][ T5984] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.495917][ T5878] veth1_macvtap: entered promiscuous mode [ 90.535200][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562796][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.579144][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.604903][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.614497][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.642780][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.731862][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.758803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.809158][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.915693][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.926963][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.942980][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.965314][ T3543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.980991][ T3543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.039966][ T3543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.060024][ T3543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354261][ T5184] Bluetooth: hci2: command tx timeout [ 91.360930][ T5184] Bluetooth: hci0: command tx timeout [ 91.367122][ T5184] Bluetooth: hci1: command tx timeout [ 91.432949][ T5868] Bluetooth: hci3: command tx timeout [ 91.512433][ T5868] Bluetooth: hci4: command tx timeout [ 91.660946][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.686710][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.891419][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.932917][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.573482][ T43] cfg80211: failed to load regulatory.db [ 92.584570][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.638937][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.662960][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.008692][ T6007] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.088605][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9'. [ 93.288988][ T6013] IPVS: Error connecting to the multicast addr [ 93.886977][ T6009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.901999][ T6020] ======================================================= [ 93.901999][ T6020] WARNING: The mand mount option has been deprecated and [ 93.901999][ T6020] and is ignored by this kernel. Remove the mand [ 93.901999][ T6020] option from the mount to silence this warning. [ 93.901999][ T6020] ======================================================= [ 94.147364][ T6023] binder: BINDER_SET_CONTEXT_MGR already set [ 94.184455][ T6023] binder: 6022:6023 ioctl 4018620d 200000004a80 returned -16 [ 95.004975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.036361][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.540708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.569710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.463384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 97.565016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.999310][ T6061] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 98.024030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.067258][ T6062] loop2: detected capacity change from 0 to 512 [ 98.100052][ T6062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.134689][ T6062] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.171380][ T6058] loop3: detected capacity change from 0 to 4096 [ 98.210678][ T6062] EXT4-fs (loop2): 1 truncate cleaned up [ 98.230879][ T6061] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.249637][ T6062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.280139][ T6062] syz.2.20 (pid 6062) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 98.327937][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.358722][ T6058] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 99.689037][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.138064][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 101.662009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.662432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.865358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.962226][ T6097] [U] .h0FwZ,iqgҏV2sO [ 101.990415][ T6096] [U] ` w* [ 102.070805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.336680][ T6107] netlink: 'syz.2.31': attribute type 11 has an invalid length. [ 102.345402][ T6107] netlink: 224 bytes leftover after parsing attributes in process `syz.2.31'. [ 103.860257][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.443115][ T30] audit: type=1326 audit(1758653086.384:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.36" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f960498eec9 code=0x0 [ 107.970044][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 108.015500][ T6147] bond1: entered promiscuous mode [ 108.022777][ T6147] bond1: entered allmulticast mode [ 108.039443][ T6147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.670829][ T6147] bond1 (unregistering): Released all slaves [ 109.205360][ T6164] loop3: detected capacity change from 0 to 164 [ 110.083246][ T6164] iso9660: Unknown parameter '0x0000000000000000000000000000000000000x0000000000000000' [ 118.674357][ T6233] warning: `syz.4.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.161294][ T6225] syz.0.60 (6225) used greatest stack depth: 16176 bytes left [ 119.354649][ T6239] netlink: 'syz.3.63': attribute type 32 has an invalid length. [ 119.442693][ T6241] tipc: Started in network mode [ 119.449714][ T6241] tipc: Node identity 8a8fd8c65737, cluster identity 4711 [ 119.490389][ T6241] tipc: Enabled bearer , priority 0 [ 119.544572][ T6241] syzkaller0: entered promiscuous mode [ 119.563770][ T6241] syzkaller0: entered allmulticast mode [ 119.712412][ T6241] tipc: Resetting bearer [ 119.760224][ T6241] syzkaller0: tun_net_xmit 90 [ 119.811084][ T6238] tipc: Resetting bearer [ 119.980772][ T6238] tipc: Disabling bearer [ 124.235541][ T6286] process 'syz.3.74' launched '/dev/fd/6' with NULL argv: empty string added [ 125.474006][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 125.532735][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 126.714140][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 128.837058][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 128.846816][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.563258][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.593522][ T6325] loop4: detected capacity change from 0 to 512 [ 130.970936][ T6330] netlink: 512 bytes leftover after parsing attributes in process `syz.3.84'. [ 131.048067][ T6325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.082791][ T6325] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.865821][ T30] audit: type=1326 audit(1758653112.364:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb85698eec9 code=0x0 [ 132.274957][ T6355] loop3: detected capacity change from 0 to 512 [ 132.464943][ T6355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.516452][ T6355] EXT4-fs (loop3): 1 truncate cleaned up [ 132.545580][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.304397][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.447805][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.459760][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.527509][ T5870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.824272][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 136.105965][ T6387] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 136.249938][ T6394] kvm: pic: non byte write [ 136.525473][ T6387] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.609243][ T6392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.689347][ T6396] bond_slave_0: entered promiscuous mode [ 136.697475][ T6396] bond_slave_1: entered promiscuous mode [ 136.706107][ T6396] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 136.717627][ T6396] syz_tun: entered promiscuous mode [ 136.779394][ T6396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.835976][ T6396] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 137.034818][ T6396] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 137.105820][ T6396] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 137.476090][ T6393] syz.4.101 (6393): drop_caches: 2 [ 138.372364][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.104'. [ 141.237145][ T6426] bridge1: entered allmulticast mode [ 143.577102][ T6454] loop0: detected capacity change from 0 to 4096 [ 143.669475][ T6454] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.888106][ T6454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.450177][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.217104][ T6508] loop4: detected capacity change from 0 to 2048 [ 153.273508][ T6508] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 153.362438][ T6508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.746180][ T6515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.135'. [ 153.803150][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.135'. [ 154.215208][ T6515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.135'. [ 154.881653][ T6515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.135'. [ 155.720035][ T6530] tipc: Failed to remove unknown binding: 66,1,1/0:487526761/487526763 [ 155.980581][ T6530] tipc: Failed to remove unknown binding: 66,1,1/0:487526761/487526763 [ 156.071819][ T6530] tipc: Failed to remove unknown binding: 66,1,1/0:487526761/487526763 [ 162.863228][ T6577] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 162.948317][ T6577] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 164.972269][ T6605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.308401][ T6619] netlink: 3 bytes leftover after parsing attributes in process `syz.1.161'. [ 166.321655][ T6619] 0X: renamed from caif0 [ 167.056074][ T6619] 0X: entered allmulticast mode [ 167.068911][ T6619] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 169.223587][ T6636] loop3: detected capacity change from 0 to 512 [ 169.366378][ T6640] loop0: detected capacity change from 0 to 1024 [ 169.385131][ T6640] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.401874][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.416152][ T6636] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.461984][ T6640] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.627988][ T6640] JBD2: no valid journal superblock found [ 169.793044][ T6640] EXT4-fs (loop0): Could not load journal inode [ 170.966905][ T6650] loop0: detected capacity change from 0 to 8192 [ 170.977181][ T5870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.088565][ T6650] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.642287][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.046163][ T6660] bond_slave_0: entered promiscuous mode [ 174.052645][ T6660] bond_slave_1: entered promiscuous mode [ 174.111080][ T6660] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.164743][ T6660] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 177.373259][ T6699] usb usb1: check_ctrlrecip: process 6699 (syz.2.180) requesting ep 01 but needs 81 [ 177.386616][ T6699] usb usb1: usbfs: process 6699 (syz.2.180) did not claim interface 0 before use [ 179.638252][ T6716] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 181.535703][ T30] audit: type=1800 audit(1758653162.444:4): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 184.256351][ T6741] loop4: detected capacity change from 0 to 128 [ 184.905664][ T6741] vfat: Unknown parameter '' [ 188.991129][ T6772] overlayfs: failed to clone upperpath [ 191.301250][ T6796] binder: 6794:6796 ioctl 40045569 b returned -22 [ 192.730347][ T6805] loop0: detected capacity change from 0 to 16 [ 192.917414][ T6805] erofs (device loop0): mounted with root inode @ nid 36. [ 194.805186][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.813144][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.020692][ T30] audit: type=1800 audit(1758653176.974:5): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.200" name="bus" dev="ramfs" ino=11489 res=0 errno=0 [ 199.080449][ T6835] Zero length message leads to an empty skb [ 199.823284][ T6842] loop3: detected capacity change from 0 to 32768 [ 199.835541][ T6842] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.214 (6842) [ 199.857303][ T6842] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.871204][ T6842] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 200.747915][ T6842] BTRFS info (device loop3): enabling ssd optimizations [ 200.758661][ T6842] BTRFS info (device loop3): enabling free space tree [ 200.801825][ T30] audit: type=1800 audit(1758653181.754:6): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 200.827408][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.170913][ T5870] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.433886][ T30] audit: type=1326 audit(1758653186.354:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.2.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82b978eec9 code=0x0 [ 207.394972][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 207.401746][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.408414][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 207.419195][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 207.425770][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 207.824079][ T6025] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 207.855812][ T6923] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 207.930720][ T6924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.230'. [ 208.385842][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.439444][ T6923] bond0: (slave team0): Enslaving as an active interface with an up link [ 208.581734][ T6025] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.608388][ T6025] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 208.631768][ T6025] usb 3-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 208.673039][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.685647][ T6926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.742992][ T6025] usb 3-1: config 0 descriptor?? [ 209.614107][ T5941] usb 3-1: USB disconnect, device number 2 [ 209.819461][ T5982] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 210.975075][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.215928][ T5982] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 211.226513][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.290845][ T5982] usb 2-1: config 0 descriptor?? [ 211.947121][ T5982] usbhid 2-1:0.0: can't add hid device: -71 [ 211.995676][ T5982] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.176625][ T6961] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 212.621698][ T5982] usb 2-1: USB disconnect, device number 2 [ 218.055225][ T30] audit: type=1800 audit(1758653198.924:8): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.248" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=11020 res=0 errno=0 [ 221.479722][ T7010] loop1: detected capacity change from 0 to 2048 [ 222.156337][ T7010] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 222.216802][ T30] audit: type=1326 audit(1758653203.144:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 222.242779][ T7027] syz.0.257 uses obsolete (PF_INET,SOCK_PACKET) [ 222.290559][ T30] audit: type=1326 audit(1758653203.144:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 222.318412][ T30] audit: type=1326 audit(1758653203.144:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 222.438159][ T30] audit: type=1326 audit(1758653203.144:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 222.617575][ T30] audit: type=1326 audit(1758653203.144:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 222.904855][ T30] audit: type=1326 audit(1758653203.144:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 222.931409][ T30] audit: type=1326 audit(1758653203.144:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f669f78ef03 code=0x7ffc0000 [ 224.016070][ T30] audit: type=1326 audit(1758653203.204:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f669f78d97f code=0x7ffc0000 [ 225.072438][ T30] audit: type=1326 audit(1758653203.364:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f669f78ef57 code=0x7ffc0000 [ 225.175439][ T7045] (syz.1.264,7045,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 225.188342][ T30] audit: type=1326 audit(1758653203.364:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f669f78d710 code=0x7ffc0000 [ 225.238805][ T7054] netlink: 'syz.4.267': attribute type 3 has an invalid length. [ 225.283358][ T7054] syz_tun: entered allmulticast mode [ 225.482240][ T30] audit: type=1326 audit(1758653203.364:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f669f78db2a code=0x7ffc0000 [ 225.510555][ T30] audit: type=1326 audit(1758653203.414:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 226.196236][ T7052] syz_tun: left allmulticast mode [ 226.255101][ T30] audit: type=1326 audit(1758653203.434:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f78eec9 code=0x7ffc0000 [ 229.771206][ T30] audit: type=1326 audit(1758653210.704:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.3.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9acbf8eec9 code=0x0 [ 230.403317][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.415546][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.904308][ T7095] capability: warning: `syz.1.279' uses deprecated v2 capabilities in a way that may be insecure [ 233.003808][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.086185][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.561926][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.600670][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.661847][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.682391][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.868843][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 238.917229][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 246.731909][ T5926] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 247.035607][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 249.134713][ T5926] usb 2-1: unable to read config index 0 descriptor/all [ 249.151772][ T5926] usb 2-1: can't read configurations, error -71 [ 252.846511][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 253.058834][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 253.711778][ T5926] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 253.875448][ T7228] ceph: No mds server is up or the cluster is laggy [ 254.348991][ T43] libceph: connect (1)[c::]:6789 error -101 [ 254.408630][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 254.485417][ T7245] loop1: detected capacity change from 0 to 512 [ 254.522607][ T7245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.532107][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.561855][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 254.631630][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 254.681198][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64 [ 254.712264][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.735304][ T5926] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 254.738708][ T7245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.746248][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.771904][ T5926] usb 1-1: Product: syz [ 254.776246][ T5926] usb 1-1: Manufacturer: syz [ 254.782066][ T5926] usb 1-1: SerialNumber: syz [ 254.804030][ T5926] usb 1-1: config 0 descriptor?? [ 254.829910][ T7230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.838462][ T7245] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.908072][ T5926] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 254.947110][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 254.947329][ T7250] loop3: detected capacity change from 0 to 512 [ 254.978931][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 255.012612][ T7250] EXT4-fs: Ignoring removed nobh option [ 255.070395][ T7250] EXT4-fs (loop3): failed to initialize system zone (-117) [ 255.110810][ T7250] EXT4-fs (loop3): mount failed [ 255.235703][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.544741][ T5926] usb 1-1: USB disconnect, device number 2 [ 255.619448][ T7256] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 256.284861][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.294757][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.724358][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 256.737407][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 256.751174][ T5875] Bluetooth: hci2: hardware error 0x00 [ 258.870078][ T52] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 258.874791][ T5875] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 258.880251][ T52] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 259.000158][ T7284] tipc: Started in network mode [ 259.007009][ T7284] tipc: Node identity d6978e7c7eb3, cluster identity 4711 [ 259.046718][ T7284] tipc: Enabled bearer , priority 0 [ 259.131924][ T7286] syzkaller0: entered promiscuous mode [ 259.162187][ T7286] syzkaller0: entered allmulticast mode [ 259.384836][ T7284] tipc: Resetting bearer [ 259.523407][ T7282] tipc: Resetting bearer [ 259.814698][ T7282] tipc: Disabling bearer [ 263.238192][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 263.258326][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 263.278671][ T52] Bluetooth: hci1: hardware error 0x00 [ 266.419260][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 266.542990][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 268.633288][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.644920][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.154859][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.155806][ T30] audit: type=1326 audit(1758653251.114:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960498eec9 code=0x7ffc0000 [ 270.215880][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.252034][ T30] audit: type=1326 audit(1758653251.164:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960498eec9 code=0x7ffc0000 [ 270.322945][ T30] audit: type=1326 audit(1758653251.164:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960498eec9 code=0x7ffc0000 [ 270.411263][ T30] audit: type=1326 audit(1758653251.164:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960498eec9 code=0x7ffc0000 [ 270.450146][ T7391] loop1: detected capacity change from 0 to 4096 [ 270.478436][ T30] audit: type=1326 audit(1758653251.164:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960498eec9 code=0x7ffc0000 [ 270.532585][ T7391] EXT4-fs (loop1): Test dummy encryption mode enabled [ 270.654119][ T7391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.661910][ T30] audit: type=1326 audit(1758653251.174:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f960498eec9 code=0x7ffc0000 [ 270.809000][ T30] audit: type=1326 audit(1758653251.174:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f960498ef03 code=0x7ffc0000 [ 270.990611][ T30] audit: type=1326 audit(1758653251.214:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f960498d97f code=0x7ffc0000 [ 271.117442][ T30] audit: type=1326 audit(1758653251.364:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f960498ef57 code=0x7ffc0000 [ 271.161361][ T30] audit: type=1326 audit(1758653251.394:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f960498d710 code=0x7ffc0000 [ 271.252920][ T5963] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.297081][ T5963] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.357439][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.426649][ T5963] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.462071][ T5963] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.085076][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.096744][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.108376][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.254762][ T7464] infiniband syz2: set active [ 279.262680][ T7464] infiniband syz2: added wg2 [ 279.282758][ T9] wg2 speed is unknown, defaulting to 1000 [ 279.330027][ T7464] RDS/IB: syz2: added [ 279.338299][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.475745][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.609103][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.761704][ T7464] wg2 speed is unknown, defaulting to 1000 [ 279.892585][ T7464] wg2 speed is unknown, defaulting to 1000 [ 281.841098][ T7484] loop1: detected capacity change from 0 to 16 [ 281.923125][ T7484] erofs: Unknown parameter '' [ 282.534982][ T7488] wg2 speed is unknown, defaulting to 1000 [ 287.181705][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 287.344644][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.117770][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.129697][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.152714][ T43] usb 3-1: config 0 descriptor?? [ 288.250077][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 288.831851][ T7529] loop1: detected capacity change from 0 to 40427 [ 288.846446][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.871709][ T7529] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 288.882989][ T7529] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 288.896436][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.910795][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 288.937262][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 288.946344][ T7529] F2FS-fs (loop1): invalid crc value [ 289.571678][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 289.586312][ T7529] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 289.602224][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 289.624559][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 289.634444][ T7529] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.644008][ T7529] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.658425][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 289.669110][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 289.801167][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 289.809767][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 289.818189][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 289.862270][ T7532] wg2 speed is unknown, defaulting to 1000 [ 290.685324][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 290.992304][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.002182][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.028310][ T43] pwc: Registered as video103. [ 291.085040][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 291.133463][ T7549] binder: 7548:7549 ioctl c0306201 2000000003c0 returned -14 [ 291.238670][ T43] usb 3-1: USB disconnect, device number 3 [ 292.929192][ T7549] syz.3.393 (7549): drop_caches: 2 [ 293.240170][ T7569] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 294.504474][ T7582] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 294.516139][ T7582] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1 [ 297.549865][ T7596] team0: Port device vxlan0 added [ 297.563953][ T6052] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.595460][ T6052] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.612510][ T6052] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.634378][ T6052] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.558388][ T7620] overlayfs: failed to clone upperpath [ 299.796055][ T7622] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 299.818081][ T7622] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 306.009079][ T5919] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 306.085519][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 306.402021][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.414459][ T5919] usb 1-1: config 0 has no interfaces? [ 306.431806][ T5919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 306.444386][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.465668][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.476763][ T43] usb 3-1: config 0 has no interfaces? [ 306.484360][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 306.498277][ T5919] usb 1-1: config 0 descriptor?? [ 306.504212][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.528667][ T43] usb 3-1: config 0 descriptor?? [ 306.726604][ T43] usb 1-1: USB disconnect, device number 3 [ 306.863846][ T5994] usb 3-1: USB disconnect, device number 4 [ 312.619658][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 312.630010][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 315.639467][ T5919] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 316.079912][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 316.103087][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.125055][ T7745] wg2 speed is unknown, defaulting to 1000 [ 316.154513][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.187189][ T7741] kvm: pic: non byte write [ 316.195815][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.206039][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.228619][ T5919] usb 3-1: Product: syz [ 316.239770][ T5919] usb 3-1: Manufacturer: syz [ 316.264262][ T5919] usb 3-1: SerialNumber: syz [ 317.312323][ T5919] usb 3-1: 0:2 : does not exist [ 317.336794][ T5919] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 317.448650][ T5919] usb 3-1: USB disconnect, device number 5 [ 317.707055][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.713990][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.787303][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.686828][ T7806] evm: overlay not supported [ 324.652032][ T939] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 324.995236][ T939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.056623][ T939] usb 4-1: config 0 has no interfaces? [ 325.102307][ T939] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 325.213315][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.242014][ T7822] tipc: Started in network mode [ 325.267827][ T939] usb 4-1: config 0 descriptor?? [ 325.293175][ T7822] tipc: Node identity 7221378aba8d, cluster identity 4711 [ 325.308764][ T7822] tipc: Enabled bearer , priority 0 [ 325.459486][ T7825] syzkaller0: entered promiscuous mode [ 325.477703][ T7825] syzkaller0: entered allmulticast mode [ 325.863888][ T6025] usb 4-1: USB disconnect, device number 2 [ 325.918098][ T7822] tipc: Resetting bearer [ 326.424150][ T939] tipc: Node number set to 3366729610 [ 326.594324][ T7820] tipc: Resetting bearer [ 326.629279][ T7820] tipc: Disabling bearer [ 326.818094][ T7826] wg2 speed is unknown, defaulting to 1000 [ 327.704399][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 327.704416][ T30] audit: type=1326 audit(2000000051.239:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f669f78eec9 code=0x0 [ 328.772831][ T7852] sp0: Synchronizing with TNC [ 331.932746][ T5878] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 331.942189][ T5878] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5878, name: syz-executor [ 331.952220][ T5878] preempt_count: 1, expected: 0 [ 331.957791][ T5878] RCU nest depth: 0, expected: 0 [ 331.963192][ T5878] 2 locks held by syz-executor/5878: [ 331.969435][ T5878] #0: ffff8880791e40e0 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 331.980311][ T5878] #1: ffff8880791e4998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0 [ 331.990987][ T5878] Preemption disabled at: [ 331.990996][ T5878] [<0000000000000000>] 0x0 [ 332.001036][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 332.001063][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.001081][ T5878] Call Trace: [ 332.001088][ T5878] [ 332.001095][ T5878] dump_stack_lvl+0x189/0x250 [ 332.001118][ T5878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.001129][ T5878] ? __pfx__printk+0x10/0x10 [ 332.001145][ T5878] ? print_lock_name+0xde/0x100 [ 332.001160][ T5878] __might_resched+0x495/0x610 [ 332.001179][ T5878] ? __pfx___might_resched+0x10/0x10 [ 332.001197][ T5878] ? __lock_acquire+0xab9/0xd20 [ 332.001223][ T5878] iput+0x2b/0xc50 [ 332.001236][ T5878] ? hook_sb_delete+0x1a8/0xbd0 [ 332.001251][ T5878] hook_sb_delete+0x6b5/0xbd0 [ 332.001264][ T5878] ? hook_sb_delete+0x1a8/0xbd0 [ 332.001279][ T5878] ? __pfx_hook_sb_delete+0x10/0x10 [ 332.001291][ T5878] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 332.001303][ T5878] ? evict_inodes+0x684/0x6d0 [ 332.001316][ T5878] ? __pfx_evict_inodes+0x10/0x10 [ 332.001331][ T5878] security_sb_delete+0x80/0x150 [ 332.001345][ T5878] generic_shutdown_super+0xaa/0x2c0 [ 332.001362][ T5878] kill_litter_super+0x76/0xb0 [ 332.001372][ T5878] deactivate_locked_super+0xbc/0x130 [ 332.001388][ T5878] cleanup_mnt+0x425/0x4c0 [ 332.001403][ T5878] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.001419][ T5878] task_work_run+0x1d4/0x260 [ 332.001434][ T5878] ? __pfx_task_work_run+0x10/0x10 [ 332.001444][ T5878] ? __x64_sys_umount+0x122/0x160 [ 332.001455][ T5878] ? exit_to_user_mode_loop+0x40/0x130 [ 332.001478][ T5878] exit_to_user_mode_loop+0xe9/0x130 [ 332.001501][ T5878] do_syscall_64+0x2bd/0xfa0 [ 332.001524][ T5878] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.001545][ T5878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.001562][ T5878] ? clear_bhb_loop+0x60/0xb0 [ 332.001581][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.001597][ T5878] RIP: 0033:0x7f82b97901f7 [ 332.001614][ T5878] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 332.001631][ T5878] RSP: 002b:00007ffc1ef18da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 332.001659][ T5878] RAX: 0000000000000000 RBX: 00007f82b9811d7d RCX: 00007f82b97901f7 [ 332.001673][ T5878] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1ef18e60 [ 332.001684][ T5878] RBP: 00007ffc1ef18e60 R08: 0000000000000000 R09: 0000000000000000 [ 332.001695][ T5878] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1ef19ef0 [ 332.001707][ T5878] R13: 00007f82b9811d7d R14: 0000000000051006 R15: 00007ffc1ef19f30 [ 332.001737][ T5878] [ 332.382010][ T939] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 332.533589][ T939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.545702][ T939] usb 1-1: config 0 has no interfaces? [ 332.551949][ T939] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 332.567607][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.603133][ T939] usb 1-1: config 0 descriptor?? [ 333.290805][ T7377] usb 1-1: USB disconnect, device number 4