last executing test programs: 18.319195346s ago: executing program 1 (id=1066): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000002c0)={0x1, 0x2, 0x3}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r2, &(0x7f00000057c0)=[{{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000002d80)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000003ec0)=[{&(0x7f0000000740)="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", 0x2a1}], 0x1}}], 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000024c0)=[@text16={0x10, &(0x7f0000002440)="66660f38804773b8dd008ed80fc7aa9d00baf80c66b88c8e918b66efbafc0c66ed66b94d0b000066b80010000066ba000000000f300f01c56766c74424000a0000006766c74424020f0000006766c744240600000000670f011c240f08660f3adf36a77074baf80c66b85ca0c18b66efbafc0c66ed", 0x75}], 0x1, 0x8, &(0x7f0000002500), 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x37c, r6}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800090109000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000005840)={0x2020}, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="ad56b6c5820fae9d6dcd3292ea54ddbeef915d564c90c20049", 0x19) 17.586904081s ago: executing program 0 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x4, &(0x7f0000000180)={0x6, 0x6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="000000000a0001000180c2001500000008000f0001"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8}, 0x10) sendmmsg$inet(r7, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15.095224965s ago: executing program 0 (id=1073): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r4, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x3c}, 0x1, 0xffffffff00000003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000580)={'#! ', './file0', [{}, {0x20, '/proc/sys/net/ipv4/vs/cache_bypass\x00'}], 0xa, "15bf3158f3b4c5beaa8a9ea511953cef08b81dedc6989a86c441759f9143160456a26319d35748b0fa16e646523ab5bd24785a1acbae1d23a93b9e516d3c74821654c0362f19a9637c363623"}, 0x7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x7fff, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = dup(0xffffffffffffffff) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$IOMMU_DESTROY$ioas(r11, 0x3b80, &(0x7f00000000c0)={0x8}) dup(r12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x0, 0x2, 0x0, 0x93, 0x2, [{0x2}], "b36e"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "ddc6"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) 15.04614898s ago: executing program 0 (id=1074): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x3, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x5b72fb7c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000048040)=""/102400, 0x19000) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x5, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) futex(0x0, 0x0, 0x3d, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x80001, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) userfaultfd(0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) 15.020138094s ago: executing program 1 (id=1075): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) dup3(r1, r0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, 0x0) epoll_pwait2(r4, &(0x7f00000008c0)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="1e7a2821fc1cb4eb1d22fa039553430983f3c2a5b13d664de50b71797ad72580e4f5fd784615631508b5dad9e6d665069593c2c34e9475159b9a2b407280203c039fde9243ff4e4ccb00e7521befcd2cb2528130ca71e6e1793fac659118b1ff7f9f08317b7d2c670e38c0ab16d2bcd2944639e117785182b141ec0eaf8c04ba2c7a5992cb13173e8904e0dfa01c93d272ec904be59c7de500904f53690ebad883fae676762589f813d33d3fd38f3390f170596ce91d944a91090852a08b946ecafd4a2e0c23ae1f558622e47da53d16f8bc27ad8d03f0be6ccce1acf0f89d5564"], 0x0, 0x1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) close_range(r2, 0xffffffffffffffff, 0x0) 14.876046071s ago: executing program 4 (id=1076): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2bf2c1f142f14a3b93f2c544694f06e41d879308a48eaa592f9ba0c98a311476b83715e6d5de249ad6f4cc39e41c072983b3807068296c0a8a126afd9179cd34228f72ae7f6a0ef87c212613911c6af728e183aded364588b6aa37a56e5110b330fe3351a56cc5624848d51abea1c44f901a79e42b69e7c16cc8be349f52f9c7546935e2d166a4b1d2df4514104dfd94b62c9558", @ANYRES16=r2, @ANYRES32, @ANYBLOB="14005e8008000200000000000800010000000000"], 0x30}}, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB="91d1c13700000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setpgid(0x0, r3) creat(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x40049366, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r6, 0x0, 0x2, 0x0, 0x0, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)="11acbd7fe608c82999b01869cfc8161b30", 0x6a}}, 0x40024) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) 14.655434731s ago: executing program 2 (id=1077): unshare(0x22020400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ptrace$getregs(0xffffffffffffffff, 0x0, 0x6, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) open(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x45}], 0x300) sendto$inet(r2, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000040), 0x0}, 0x20) connect$inet(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000080)="70bd21c8e4da1827deb28edde2105040a2f334491a433a", 0x17) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000000c0)=0x80000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 13.70176424s ago: executing program 1 (id=1078): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd04, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r7, 0x6, &(0x7f0000000180)=0xf11f) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@empty, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc0000000001010400000000070000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000aa0800074000000000380006801400050020aedbd5412c214206000000000000020c000380040001"], 0xcc}}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000380)="b0cd90c759dc0aa5e71f164f61", 0xd}], 0x1, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@empty}]}]}}}], 0x58}, 0x0) 13.620981338s ago: executing program 2 (id=1079): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r1 = socket(0x0, 0x803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14}}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000003040)=ANY=[], 0xb) io_setup(0x9, &(0x7f0000000080)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x3, &(0x7f0000002440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="f16a7ded56857b0e", 0x8}, 0x0, 0x0]) write$eventfd(r5, &(0x7f0000000100), 0x8) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, 0x0, 0x0) epoll_create1(0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@rand_addr, @dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x1, [@multicast1]}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x7800, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@generic={0x82, 0xb, "b3295e1f43248b2949"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1, 0xfffffffe}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty, 0xffd200}]}, @rr={0x7, 0x3}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)={'#! ', '', [{0x20, 'sit0\x00'}, {0x20, 'sit0\x00'}, {0x20, '2\xec\xd0\xe3\xbbpi\xae\xc0\xd4\xa9\x13\xfef\xd6;D\x1b\xcba%\xe2\x01\x8a\xa5\xcc\x06[\xe9S\xad\xf5=\xa8O\x9e\xd1\x87\x12\'\xa29\x87\xed\x93\x99_[\x8ei\xa3\xb0\xea\xee\xc2\xaaZ\x15?\xca\xd0\xee\xafv\xe9tyt\xfb\xab\xf8\x8a\xc4\xa0\xf0VmZ\x01O4\b\xa1\xfd\x15\x1c\xef\xa2\xafZ/)\xff\x80+|\x13\x8d\x996^\xa5\xaf\xa4\xa0D\xe9\x14\xf5\xcfpCk\x14]\r3t\x18\xc63\xbb\xdcN\x7f\xc3t\xef\xb42\x1f\xf7u\xcc\xa5\x1f\xae;\x9b'}, {0x20, '(\\%'}, {0x20, '/d\x00\x01\x00\x00vm\x00'}, {0x20, '/%\xc6\xa9#'}]}, 0xb0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) 12.816734225s ago: executing program 4 (id=1080): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r6 = dup(r5) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r6, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$inet(0x2, 0x80001, 0x84) 12.811372941s ago: executing program 3 (id=1081): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x100, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1}], 0x0, 0x5, 0x8, 0x0, 0x6}}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x6b, &(0x7f0000000180)=""/107, 0x41100, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xd, 0x200, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x4, 0x5, 0xf, 0x7}, {0x3, 0x4, 0xf, 0xa}, {0x3, 0x4, 0xe, 0x5}, {0x5, 0x3, 0x10, 0xc}], 0x10, 0xc}, 0x90) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f00000003c0)=0x6f8780) r7 = syz_open_dev$swradio(&(0x7f0000000f00), 0x0, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000014c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff2509000400"}) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000f40)={0x6, 0x5, 0x1, "c1aad3f740d7a4aedd947ea38c93ed18b1ade52be0221a36f597464c7efb1275", 0x30324c4a}) 10.51901464s ago: executing program 1 (id=1082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r4, 0x0, 0x44004) unshare(0x64000600) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0xc, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x20, 0x1}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0x9, 0x81}, {0x7, 0x8}, {0xc, 0x7}]}, @datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x3, 0xffffffff}], '2'}]}, {0x0, [0x61, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x5f, 0x61, 0x0, 0x2e]}}, &(0x7f0000000040)=""/30, 0x7c, 0x1e, 0x1, 0x5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040f0400000308"], 0x7) socket$packet(0x11, 0x2, 0x300) 10.380479514s ago: executing program 0 (id=1083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x4, &(0x7f0000000180)={0x6, 0x6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="000000000a0001000180c2001500000008000f0001"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8}, 0x10) sendmmsg$inet(r7, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) 9.832061308s ago: executing program 4 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f80), r1) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x120}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000800000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x40000004}) write$char_usb(r7, &(0x7f00000002c0)="be", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.327772106s ago: executing program 3 (id=1085): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/address_bits', 0x301, 0x1) write$binfmt_script(r0, &(0x7f0000012300)={'#! ', './file0'}, 0xb) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fcdbdf250a00000008000300", @ANYRES32=r1, @ANYBLOB="04006e8024006e800400010004000100040002000400020004000100040001000400010004230200080037000200000009000700a471765e160000001100070000b81762f467f51b239ecebd4e000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r6 = getpid() r7 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) write(r7, &(0x7f0000000340)="badcb39e3e6ab27fa01a3fd16f8eecebac9a8bfa9087fc9cf1ef650bf69a914bfe3b5a27c377b70ca66b93be1e7a3cb7065293bfab07a6343949d60ee46610f47783a1a06a5eb7fc5e12825c64c52f5e09a69514900f915d92667997ff656123f3331e4e65a039044d5f772c6f3917abadf6b1f24108605920d9c5939650a4c818bf0b0d2165661457a11c506adb6504ca573f", 0x93) r8 = dup(r7) write$cgroup_pid(r8, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) sendfile(r7, r8, &(0x7f0000000100), 0x6c03) prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x4000)=nil) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001", @ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8f1}, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(r6, 0x7, &(0x7f0000000000)={0x40, 0x9}, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlink(0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES16=r11, @ANYBLOB="01000000000013000000010000060000000009410000004c00180000020062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r5, @ANYRES16=r11, @ANYBLOB="04002dbd7000ffdbdf25010000000000000009410000004c00180000000675647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x4) 8.07526588s ago: executing program 3 (id=1086): unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/514, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) unshare(0x24020400) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x9, 0x8, 0x101, 0x1, 0x8, 0x9, 0xff, 0x6, 0x7, 0x8, 0x5, 0xc60, 0x80000001, 0x6, 0x10000, 0xef]}) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='gfs2\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) 8.073719704s ago: executing program 2 (id=1096): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0}, 0x90) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xe0ca, 0x8}, 0xc) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x0, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f00000004c0)='./cgroup.net/cgroup.procs\x00', r3, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x1, 0x800, 0x851, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xe}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000003380)) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="5f8af8ff10000000180000005c0000000000000009000000185100000a00000000000000000000772087a3c5df9314ded300d486d931"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xd, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, r0, r4], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x2}, {0x4, 0x5, 0x2, 0x5}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x1, 0x9}], 0x10, 0x7}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) delete_module(0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000a00)={&(0x7f00000005c0)={{@hyper, 0x80}, {@my=0x1, 0x6}, 0x400, "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"}, 0x418}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$video(&(0x7f0000000580), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000000080)={0x0, 0x4001, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 7.990194541s ago: executing program 0 (id=1087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x4, &(0x7f0000000180)={0x6, 0x6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="000000000a0001000180c2001500000008000f0001"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8}, 0x10) sendmmsg$inet(r7, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) 5.907724135s ago: executing program 3 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f0000000200)='nfs\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10010001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/132, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) 5.857561097s ago: executing program 4 (id=1089): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) dup3(r1, r0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, 0x0) epoll_pwait2(r4, &(0x7f00000008c0)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="1e7a2821fc1cb4eb1d22fa039553430983f3c2a5b13d664de50b71797ad72580e4f5fd784615631508b5dad9e6d665069593c2c34e9475159b9a2b407280203c039fde9243ff4e4ccb00e7521befcd2cb2528130ca71e6e1793fac659118b1ff7f9f08317b7d2c670e38c0ab16d2bcd2944639e117785182b141ec0eaf8c04ba2c7a5992cb13173e8904e0dfa01c93d272ec904be59c7de500904f53690ebad883fae676762589f813d33d3fd38f3390f170596ce91d944a91090852a08b946ecafd4a2e0c23ae1f558622e47da53d16f8bc27ad8d03f0be6ccce1acf0f89d5564"], 0x0, 0x1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) close_range(r2, 0xffffffffffffffff, 0x0) 5.791279941s ago: executing program 2 (id=1090): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4f, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000003060102000000000000040000000000050001000700"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xb, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x7}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r9, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000080)={0x4000000}) 5.686535326s ago: executing program 0 (id=1091): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @private2}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) prctl$PR_MCE_KILL(0x43, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.619307023s ago: executing program 1 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491", 0xfe}, {&(0x7f0000001480)="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", 0x7f9}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r5}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0xfffffffffffffe8e, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"6d38832db43c8a5cde96a485f99758cf"}}}}, 0xa0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) sendto$l2tp(r6, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003b00070100000000000000000400000004000000"], 0x24}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)={'#! ', './file0'}, 0xb) 2.566112148s ago: executing program 2 (id=1093): r0 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x11) syz_emit_vhci(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="310325bd00080023004a30ee0380976017ec164eec96a372ee126b56235c5708bd0a3fa9dc2753f486d02e74ff326b25543c86d6157d53fcdc6171078b406f0c64e32c0399f909216f8e5dac0d557011c1d5f57bc7613b4e71fc7f7f027b081e725f350bbf7c08c926ae3a76f9ceed1ea1ceb8b54113a3e4cfbaba72e3f2d448e45f7a18d30b8aca1fb51e4b8923f7e3333a50060b8b2b3bc4d30e064f860a403d", @ANYRES32=r2, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x28044040}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="3a00030007"], 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.39963252s ago: executing program 4 (id=1094): close(0xffffffffffffffff) socket(0x2, 0x3, 0x21) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"90125830", 0x0, 0x5, 0x9, 0x0, 0x6, "471d85552605000000000000001ff3", '\x00', "e1aa6045", "41f336e7", ["c81de44b0091fb7ce7442d42", "6d5eb3eec70d84000c00b4bd", "34334e40c300e1a48d9d3300", "e996c9c4d21135876ea2fff7"]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000000162079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) listen(r3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe) listen(0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x80000000, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x3ffe, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = fanotify_init(0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r8, 0x165, 0x22, r9, 0x0) fanotify_mark(r8, 0x102, 0x28, r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.915519953s ago: executing program 3 (id=1095): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2840, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/65, 0x41}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000100)='syscall\x00') lseek(r6, 0x68, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29}, 0x14}}, 0x0) 178.248265ms ago: executing program 4 (id=1097): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001180)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000200000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x58}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0xae39, r1}, 0x38) 51.096584ms ago: executing program 3 (id=1098): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xf95, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f0000000340)={0xb7, 0x7, 0x3, 0x8, 0xff, 0x106, 0x7, 0x1}, &(0x7f0000000640)={0x2, 0xa, 0x0, 0x0, 0x7, 0x3, 0x9}, &(0x7f0000000300)={0x8c, 0xec, 0xe, 0x42, 0x7, 0x401, 0x80000000000005, 0xc}, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 49.587961ms ago: executing program 2 (id=1099): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@broadcast, @in6=@private2}, {@in6=@rand_addr=' \x01\x00'}, @in6=@remote, {}, {}, {0x0, 0x2}, 0x0, 0x3503}, 0x6, 0x80000}}, 0xf8}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r6) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ppoll(&(0x7f0000000000)=[{r7, 0x4047}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x3f, &(0x7f0000000300), 0x4e}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) 0s ago: executing program 1 (id=1100): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$inet(0x2, 0x80001, 0x84) kernel console output (not intermixed with test programs): omiscuous mode [ 471.357866][ T5528] hsr_slave_1: left promiscuous mode [ 471.364567][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.386691][ T5528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.398771][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.408540][ T5528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.466185][ T5528] veth1_macvtap: left promiscuous mode [ 471.472065][ T5528] veth0_macvtap: left promiscuous mode [ 471.477627][ T5528] veth1_vlan: left promiscuous mode [ 471.499301][ T5528] veth0_vlan: left promiscuous mode [ 472.280457][ T5528] team0 (unregistering): Port device team_slave_1 removed [ 472.342566][ T5528] team0 (unregistering): Port device team_slave_0 removed [ 473.078654][ T9153] Bluetooth: hci3: command 0x0406 tx timeout [ 474.430503][ T9242] netlink: 'syz.1.555': attribute type 16 has an invalid length. [ 475.303523][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.515432][ T9145] chnl_net:caif_netlink_parms(): no params data found [ 480.171614][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.209270][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.232597][ T9145] bridge_slave_0: entered allmulticast mode [ 480.264821][ T9145] bridge_slave_0: entered promiscuous mode [ 480.291377][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.310932][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.330595][ T9145] bridge_slave_1: entered allmulticast mode [ 480.349891][ T9145] bridge_slave_1: entered promiscuous mode [ 480.437348][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 480.463894][ T9285] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 480.510948][ T9145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.584960][ T9145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.615078][ T8911] veth0_vlan: entered promiscuous mode [ 480.703504][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 480.770839][ T9145] team0: Port device team_slave_0 added [ 480.865056][ T9145] team0: Port device team_slave_1 added [ 480.933638][ T8911] veth1_vlan: entered promiscuous mode [ 481.071967][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.079811][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.110614][ T9145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.144489][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.304463][ T5311] libceph: connect (1)[c::]:6789 error -101 [ 481.315467][ T5311] libceph: mon0 (1)[c::]:6789 connect error [ 481.824767][ T9305] ceph: No mds server is up or the cluster is laggy [ 481.873665][ T5311] libceph: connect (1)[c::]:6789 error -101 [ 481.877999][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.935640][ T5311] libceph: mon0 (1)[c::]:6789 connect error [ 481.948713][ T9145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.263687][ T9145] hsr_slave_0: entered promiscuous mode [ 483.305060][ T9145] hsr_slave_1: entered promiscuous mode [ 483.320254][ T9145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.327920][ T9145] Cannot create hsr debugfs directory [ 483.553825][ T8911] veth0_macvtap: entered promiscuous mode [ 483.778191][ T9335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.798258][ T8911] veth1_macvtap: entered promiscuous mode [ 484.153613][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.401392][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.422244][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.479669][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.540737][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.578252][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.618012][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.673192][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.721160][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.783706][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.875933][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.904450][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.923843][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.940763][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.992701][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.022150][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.040569][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.071783][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.140770][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.351293][ T8911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.381289][ T8911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.422282][ T8911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.459458][ T8911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.113912][ T9364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.173084][ T5359] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 488.469570][ T5359] usb 5-1: Using ep0 maxpacket: 32 [ 488.686424][ T5359] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 488.799094][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.973820][ T5359] usb 5-1: config 0 descriptor?? [ 488.988665][ T5359] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 489.041152][ T5359] gspca_sunplus: reg_w_riv err -71 [ 489.046388][ T5359] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 489.070626][ T5359] usb 5-1: USB disconnect, device number 8 [ 490.227287][ T9375] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 490.512431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.531029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.717473][ T8082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.756306][ T8082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.766508][ T9145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 490.786160][ T9145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 490.818563][ T9145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 490.852014][ T9145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 490.924538][ T9153] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 490.924658][ T9153] Bluetooth: hci4: unknown advertising packet type: 0x0b [ 490.932727][ T9153] Bluetooth: hci4: Malformed LE Event: 0x02 [ 491.577071][ T9396] 9pnet_fd: Insufficient options for proto=fd [ 491.603509][ T9396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.503'. [ 492.308466][ T9145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.156255][ T9403] netlink: 'syz.2.577': attribute type 16 has an invalid length. [ 493.371871][ T9145] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.700752][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.707972][ T5362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.848756][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.856128][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.103431][ T9417] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 495.319377][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 495.619403][ T9365] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 496.178431][ T9434] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 496.205471][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 496.251372][ T46] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 496.269140][ T46] usb 5-1: config 0 has no interface number 0 [ 496.287422][ T46] usb 5-1: New USB device found, idVendor=0af0, idProduct=8120, bcdDevice=56.54 [ 496.346981][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.397446][ T46] usb 5-1: config 0 descriptor?? [ 496.411961][ T9145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.424233][ T46] usb 5-1: can't set config #0, error -71 [ 496.450287][ T46] usb 5-1: USB disconnect, device number 9 [ 496.501757][ T9365] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.531374][ T9365] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 496.653252][ T9365] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 496.666953][ T5359] libceph: connect (1)[c::]:6789 error -101 [ 496.685420][ T9365] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.695132][ T9365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.712948][ T5359] libceph: mon0 (1)[c::]:6789 connect error [ 497.224467][ T9427] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 497.257273][ T9365] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.286908][ T9145] veth0_vlan: entered promiscuous mode [ 497.326713][ T9440] ceph: No mds server is up or the cluster is laggy [ 497.363483][ T9145] veth1_vlan: entered promiscuous mode [ 498.467377][ T9145] veth0_macvtap: entered promiscuous mode [ 498.502988][ T9145] veth1_macvtap: entered promiscuous mode [ 498.555353][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.597215][ T9459] VFS: could not find a valid V7 on nullb0. [ 498.611777][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.622940][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.644026][ T9459] hpfs: Bad magic ... probably not HPFS [ 498.651217][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.669787][ T9460] mmap: syz.2.585 (9460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 498.684661][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.704423][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.719211][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 498.745390][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.762906][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.776742][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.789508][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.801310][ T9145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.815120][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.827244][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.846679][ T5282] usb 2-1: USB disconnect, device number 7 [ 498.858879][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.003926][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.013948][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.031628][ T46] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.058436][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.070283][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.361711][ T46] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.374855][ T46] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.384749][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.821453][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.839268][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.859463][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.888338][ T9456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.909824][ T9145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.932817][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.995987][ T9145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.052101][ T9145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.086882][ T9145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.103693][ T9145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.310946][ T5230] usb 1-1: USB disconnect, device number 14 [ 501.667119][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.693564][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.762686][ T5528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.785384][ T5528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.963963][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.162745][ T9489] qrtr: Invalid version 48 [ 502.516881][ T9494] bridge1: entered promiscuous mode [ 502.557022][ T9494] bridge1: entered allmulticast mode [ 503.798395][ T9505] ceph: No mds server is up or the cluster is laggy [ 503.809413][ T9365] libceph: connect (1)[c::]:6789 error -101 [ 503.815483][ T9365] libceph: mon0 (1)[c::]:6789 connect error [ 504.053440][ T9503] netlink: 5304 bytes leftover after parsing attributes in process `syz.3.595'. [ 505.675085][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 505.691418][ T9523] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 505.719248][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 505.729173][ T9519] ceph: No mds server is up or the cluster is laggy [ 505.745169][ T9513] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 508.412253][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 508.418338][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 509.491758][ T9541] Process accounting resumed [ 510.952777][ T5359] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 511.260258][ T5359] usb 1-1: Using ep0 maxpacket: 32 [ 511.410497][ T5359] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 511.496187][ T5359] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 511.561601][ T5359] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 511.605961][ T5359] usb 1-1: Product: syz [ 511.626332][ T5359] usb 1-1: Manufacturer: syz [ 511.650433][ T5359] usb 1-1: SerialNumber: syz [ 511.678568][ T5359] usb 1-1: config 0 descriptor?? [ 511.690166][ T9554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 511.967032][ T46] usb 1-1: USB disconnect, device number 15 [ 514.279415][ T9153] Bluetooth: hci4: command 0x0406 tx timeout [ 514.332923][ T9609] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 514.332923][ T9609] The task syz.2.611 (9609) triggered the difference, watch for misbehavior. [ 515.074751][ T9617] netlink: 164880 bytes leftover after parsing attributes in process `syz.4.609'. [ 515.089778][ T5240] Bluetooth: hci5: link tx timeout [ 515.097100][ T5240] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 515.110244][ T9617] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 515.868365][ T9629] (syz.1.613,9629,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 515.877103][ T9629] (syz.1.613,9629,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 515.951099][ T9630] netlink: 'syz.1.613': attribute type 29 has an invalid length. [ 515.959917][ T9630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.613'. [ 515.969477][ T9629] netlink: 'syz.1.613': attribute type 29 has an invalid length. [ 515.977298][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.613'. [ 516.760651][ T5359] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 517.349310][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 517.401511][ T5359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 517.420002][ T5359] usb 4-1: not running at top speed; connect to a high speed hub [ 517.453446][ T5359] usb 4-1: config 1 interface 0 has no altsetting 0 [ 517.472170][ T5359] usb 4-1: string descriptor 0 read error: -22 [ 517.478609][ T5359] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 517.506951][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.620064][ T29] audit: type=1326 audit(1725296173.586:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 518.344829][ T29] audit: type=1326 audit(1725296173.586:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 518.457245][ T29] audit: type=1326 audit(1725296173.586:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 518.636849][ T29] audit: type=1326 audit(1725296173.586:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 519.497576][ T29] audit: type=1326 audit(1725296173.586:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 519.605529][ T29] audit: type=1326 audit(1725296173.596:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 519.653297][ T29] audit: type=1326 audit(1725296173.596:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 519.768423][ T29] audit: type=1326 audit(1725296173.596:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6299d7899f code=0x7ffc0000 [ 519.813570][ T5359] usb 4-1: USB disconnect, device number 7 [ 519.849692][ T29] audit: type=1326 audit(1725296173.596:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 519.891034][ T29] audit: type=1326 audit(1725296173.596:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6299d79eb9 code=0x7ffc0000 [ 522.611063][ T9706] capability: warning: `syz.2.628' uses 32-bit capabilities (legacy support in use) [ 523.262917][ T9708] vivid-000: kernel_thread() failed [ 524.541518][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 524.541539][ T29] audit: type=1326 audit(1725296180.516:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9719 comm="syz.1.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x0 [ 525.856848][ T9153] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 526.171599][ T9750] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 526.406562][ T9756] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 528.239689][ T9765] macsec1: entered promiscuous mode [ 528.245075][ T9765] macvlan0: entered promiscuous mode [ 528.286725][ T9768] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.680022][ T9765] macvlan0: left promiscuous mode [ 530.266175][ T9783] ceph: No mds server is up or the cluster is laggy [ 530.368075][ T5230] libceph: connect (1)[c::]:6789 error -101 [ 530.734222][ T5230] libceph: mon0 (1)[c::]:6789 connect error [ 530.996163][ T9792] netlink: 'syz.3.644': attribute type 16 has an invalid length. [ 532.090227][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.648'. [ 532.409186][ T5359] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 532.741062][ T5359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.018932][ T5359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.052341][ T5359] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.227703][ T5359] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.415908][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.437058][ T5359] usb 5-1: config 0 descriptor?? [ 535.984206][ T9809] delete_channel: no stack [ 536.005572][ T5359] usbhid 5-1:0.0: can't add hid device: -71 [ 536.039297][ T5359] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 536.144532][ T5359] usb 5-1: USB disconnect, device number 10 [ 537.485288][ T9873] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 538.057634][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 539.530943][ T29] audit: type=1326 audit(1725296195.276:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 539.759269][ T5231] IPVS: starting estimator thread 0... [ 539.801793][ T29] audit: type=1326 audit(1725296195.276:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 539.824016][ T29] audit: type=1326 audit(1725296195.286:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 539.849142][ T9895] IPVS: using max 24 ests per chain, 57600 per kthread [ 539.893257][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 539.969567][ T29] audit: type=1326 audit(1725296195.286:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 539.995222][ T29] audit: type=1326 audit(1725296195.286:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 540.040516][ T29] audit: type=1326 audit(1725296195.286:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 540.062339][ T29] audit: type=1326 audit(1725296195.286:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 540.123933][ T29] audit: type=1326 audit(1725296195.286:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 540.151249][ T29] audit: type=1326 audit(1725296195.296:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 540.182787][ T29] audit: type=1326 audit(1725296195.296:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce4579eb9 code=0x7ffc0000 [ 541.078426][ T9917] syz.4.666 (9917): attempted to duplicate a private mapping with mremap. This is not supported. [ 541.119252][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 543.662678][ T9943] mkiss: ax0: crc mode is auto. [ 546.884087][ T5231] libceph: connect (1)[c::]:6789 error -101 [ 547.038789][ T5231] libceph: mon0 (1)[c::]:6789 connect error [ 547.077127][ T9949] ceph: No mds server is up or the cluster is laggy [ 547.117321][ T9936] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.670'. [ 548.287016][ T9958] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 548.307176][ T9958] overlayfs: failed to set xattr on upper [ 548.363106][ T9958] overlayfs: ...falling back to redirect_dir=nofollow. [ 548.376305][ T9958] overlayfs: ...falling back to index=off. [ 548.382716][ T9958] overlayfs: ...falling back to uuid=null. [ 548.467649][ T9972] netlink: 'syz.0.677': attribute type 16 has an invalid length. [ 549.022494][ T9971] Bluetooth: MGMT ver 1.23 [ 550.166862][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 550.972549][ T5282] libceph: connect (1)[c::]:6789 error -101 [ 551.000389][ T5282] libceph: mon0 (1)[c::]:6789 connect error [ 551.139800][T10014] nbd0: detected capacity change from 0 to 12 [ 551.173547][T10010] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.686'. [ 551.198773][ T9447] block nbd0: Send control failed (result -89) [ 551.226852][ T9447] block nbd0: Request send failed, requeueing [ 551.264568][ T5282] libceph: connect (1)[c::]:6789 error -101 [ 551.272198][ T5282] libceph: mon0 (1)[c::]:6789 connect error [ 551.280567][ T9153] block nbd0: Receive control failed (result -32) [ 551.297691][ T1037] block nbd0: Dead connection, failed to find a fallback [ 551.306268][ T1037] block nbd0: shutting down sockets [ 551.313002][ T1037] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.322815][ T1037] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.334176][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.350090][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.399572][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.408776][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.436571][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.440906][T10004] ceph: No mds server is up or the cluster is laggy [ 551.459904][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.486539][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.518209][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.536736][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.566419][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.599166][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.607921][T10024] netlink: 'syz.3.688': attribute type 16 has an invalid length. [ 551.608433][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.664356][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.685973][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.807973][ T9447] ldm_validate_partition_table(): Disk read failed. [ 551.815851][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.825639][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 551.887469][ T9447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.187389][T10028] ./bus: Can't lookup blockdev [ 552.608629][ T9447] Buffer I/O error on dev nbd0, logical block 0, async page read [ 552.778969][ T9447] Dev nbd0: unable to read RDB block 0 [ 552.913610][ T9447] nbd0: unable to read partition table [ 553.028549][ T9447] nbd0: partition table beyond EOD, truncated [ 553.312189][ T9447] ldm_validate_partition_table(): Disk read failed. [ 553.339896][ T9447] Dev nbd0: unable to read RDB block 0 [ 553.345757][ T9447] nbd0: unable to read partition table [ 554.120777][ T9447] nbd0: partition table beyond EOD, truncated [ 554.589626][ T5282] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 555.031013][ T5282] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 555.106975][T10045] netlink: 48 bytes leftover after parsing attributes in process `syz.1.693'. [ 555.116780][T10045] netlink: 48 bytes leftover after parsing attributes in process `syz.1.693'. [ 555.130960][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.301765][ T5282] usb 4-1: config 0 descriptor?? [ 555.891597][T10035] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 555.982511][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 555.982527][ T29] audit: type=1326 audit(1725296211.966:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.1.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x0 [ 556.167635][ T5282] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 556.186892][ T5282] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 556.329677][ T5282] [drm:udl_init] *ERROR* Selecting channel failed [ 556.348738][ T5282] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 556.388357][ T5282] [drm] Initialized udl on minor 2 [ 556.671165][ T5282] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 556.720835][T10054] syz.4.696 (10054) used greatest stack depth: 18352 bytes left [ 556.735162][ T5282] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 556.749963][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 556.761383][ T5282] usb 4-1: USB disconnect, device number 8 [ 556.767927][ T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 558.122702][T10086] ceph: No mds server is up or the cluster is laggy [ 558.135674][ T5231] libceph: connect (1)[c::]:6789 error -101 [ 558.144445][ T5231] libceph: mon0 (1)[c::]:6789 connect error [ 559.276503][T10104] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.724033][T10113] binder_alloc: binder_alloc_mmap_handler: 10106 20ffc000-20ffd000 already mapped failed -16 [ 560.525093][ T5280] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 561.791912][ T5280] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 561.848666][ T5280] usb 2-1: config 0 has no interface number 0 [ 561.886163][ T5280] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.938259][ T5280] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.965791][ T5280] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 561.977096][ T5280] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 561.985751][ T5280] usb 2-1: Manufacturer: syz [ 561.995413][ T5280] usb 2-1: config 0 descriptor?? [ 562.135326][ T5280] usbhid 2-1:0.18: can't add hid device: -71 [ 562.143914][ T5280] usbhid 2-1:0.18: probe with driver usbhid failed with error -71 [ 562.155996][ T5280] usb 2-1: USB disconnect, device number 8 [ 562.282520][ T29] audit: type=1326 audit(1725296218.246:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10117 comm="syz.3.711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6b5779eb9 code=0x0 [ 562.345555][T10135] can: request_module (can-proto-0) failed. [ 562.549202][ T25] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 562.738438][ T25] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 562.746999][ T25] usb 5-1: config 0 has no interface number 0 [ 562.754950][ T25] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0xD has invalid maxpacket 40068, setting to 64 [ 562.784792][ T25] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 562.809516][ T25] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 562.885371][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65 [ 562.924192][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.962742][ T25] usb 5-1: config 0 descriptor?? [ 562.988044][T10154] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.718'. [ 563.011592][T10137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.024642][T10137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.046034][ T25] adutux 5-1:0.110: interrupt endpoints not found [ 563.651314][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.534114][T10166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.635536][T10164] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 565.323431][ T5282] usb 5-1: USB disconnect, device number 11 [ 565.439505][ T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 565.537851][T10179] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.725'. [ 565.651632][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 565.680020][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 565.697173][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.727867][ T25] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 565.746179][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.785206][ T25] usb 4-1: Product: syz [ 565.807004][ T9153] Bluetooth: hci2: command 0x0406 tx timeout [ 565.879660][ T5230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 566.524680][T10184] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 566.549387][ T25] usb 4-1: Manufacturer: syz [ 566.593335][ T25] usb 4-1: SerialNumber: syz [ 566.623275][ T25] usb 4-1: config 0 descriptor?? [ 566.931968][ T5230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.952101][ T5230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.966443][ T5230] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.077613][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.428317][T10192] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.729'. [ 567.886457][ T5230] usb 3-1: SerialNumber: syz [ 568.296963][T10180] fuse: Unknown parameter 'goup_id' [ 569.343796][ T5230] usb 3-1: 0:2 : does not exist [ 569.364248][ T5230] usb 3-1: unit 5: unexpected type 0x09 [ 569.378225][ T5280] usb 4-1: USB disconnect, device number 9 [ 569.391377][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 569.582977][ T5230] usb 3-1: USB disconnect, device number 10 [ 570.727201][ T9447] udevd[9447]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.849281][ T29] audit: type=1326 audit(1725296226.826:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.4.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c1179eb9 code=0x0 [ 571.529256][ T9365] psmouse serio3: Failed to reset mouse on : -5 [ 572.677298][ T5231] libceph: connect (1)[c::]:6789 error -101 [ 572.775407][T10248] ceph: No mds server is up or the cluster is laggy [ 572.788264][ T5231] libceph: mon0 (1)[c::]:6789 connect error [ 573.361770][T10258] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 575.650068][ T9365] misc userio: Buffer overflowed, userio client isn't keeping up [ 577.446795][ T9365] input: PS/2 Generic Mouse as /devices/serio3/input/input15 [ 577.728957][ T9365] psmouse serio3: Failed to enable mouse on [ 578.089576][ T29] audit: type=1326 audit(1725296234.066:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.0.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x0 [ 579.013676][ T5245] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 579.774641][T10296] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 580.000459][T10300] input: syz0 as /devices/virtual/input/input16 [ 580.417476][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 580.427767][T10307] netlink: 52 bytes leftover after parsing attributes in process `syz.4.754'. [ 580.436818][T10307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'. [ 580.446634][T10307] vlan0: entered allmulticast mode [ 580.453232][T10307] veth0_vlan: entered allmulticast mode [ 582.303284][T10321] veth1: mtu less than device minimum [ 582.370957][T10321] Process accounting resumed [ 582.460102][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 582.814392][ T5280] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 583.434114][ T25] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.bb [ 583.444288][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.453192][ T25] usb 4-1: Product: syz [ 583.457735][ T25] usb 4-1: Manufacturer: syz [ 583.463184][ T25] usb 4-1: SerialNumber: syz [ 583.472117][ T25] usb 4-1: config 0 descriptor?? [ 583.481312][ T25] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 583.621751][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 583.714882][T10327] netlink: 'syz.1.762': attribute type 16 has an invalid length. [ 584.030008][ T25] gspca_sunplus: reg_r err -110 [ 584.633521][ T5280] usb 5-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 584.633544][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.635032][ T5280] usb 5-1: config 0 descriptor?? [ 584.636413][ T5280] usb 5-1: bad CDC descriptors [ 584.636673][ T5280] cdc_acm 5-1:0.0: Zero length descriptor references [ 584.636700][ T5280] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 584.790301][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.806631][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.863815][ T25] usb 5-1: USB disconnect, device number 12 [ 585.159499][ T5230] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 585.209405][ T9365] usb 4-1: USB disconnect, device number 10 [ 585.237497][T10338] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 585.286699][T10338] batman_adv: batadv0: Adding interface: team0 [ 585.293777][T10338] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.320552][T10338] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 585.338533][T10339] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 585.346814][T10339] netlink: 2 bytes leftover after parsing attributes in process `syz.2.765'. [ 585.356392][T10339] team0: entered promiscuous mode [ 585.363765][T10339] team_slave_0: entered promiscuous mode [ 585.373704][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.379999][T10339] team_slave_1: entered promiscuous mode [ 585.433347][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.436984][T10339] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.462398][T10339] batman_adv: batadv0: Interface activated: team0 [ 585.474177][T10339] batman_adv: batadv0: Interface deactivated: team0 [ 585.481301][T10339] batman_adv: batadv0: Removing interface: team0 [ 585.481479][ T5230] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 585.512720][ T5230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.514661][T10339] bridge0: port 3(team0) entered blocking state [ 585.523264][T10339] bridge0: port 3(team0) entered disabled state [ 585.535736][T10339] team0: entered allmulticast mode [ 585.542016][T10339] team_slave_0: entered allmulticast mode [ 585.548100][T10339] team_slave_1: entered allmulticast mode [ 585.566516][T10339] bridge0: port 3(team0) entered blocking state [ 585.574675][T10339] bridge0: port 3(team0) entered forwarding state [ 585.611253][ T5230] usb 1-1: config 0 descriptor?? [ 586.149237][ T9365] libceph: connect (1)[c::]:6789 error -101 [ 586.626943][ T9365] libceph: mon0 (1)[c::]:6789 connect error [ 586.652375][ T5230] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 586.665990][ T5230] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 586.676975][ T5230] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 586.687558][ T5230] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 586.698740][ T5230] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 586.713351][ T5230] holtek 0003:1241:5015.0005: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 586.733214][ T5230] holtek 0003:1241:5015.0005: no inputs found [ 586.753957][T10350] ceph: No mds server is up or the cluster is laggy [ 588.601445][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 591.712742][ T5231] usb 1-1: USB disconnect, device number 17 [ 593.201264][T10394] netlink: 203452 bytes leftover after parsing attributes in process `syz.1.777'. [ 593.224618][T10394] netlink: 'syz.1.777': attribute type 2 has an invalid length. [ 593.373372][T10392] efs: device does not support 512 byte blocks [ 594.136213][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 594.169939][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 594.446118][T10413] ceph: No mds server is up or the cluster is laggy [ 594.459984][ T5283] libceph: connect (1)[c::]:6789 error -101 [ 594.466475][ T5283] libceph: mon0 (1)[c::]:6789 connect error [ 595.556921][T10434] qrtr: Invalid version 48 [ 595.572880][T10433] nullb0: AHDI p1 [ 595.581937][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 595.600711][T10429] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.787'. [ 595.671220][T10434] loop7: detected capacity change from 0 to 7 [ 595.692704][T10434] Dev loop7: unable to read RDB block 7 [ 595.700612][T10434] loop7: unable to read partition table [ 595.708882][T10434] loop7: partition table beyond EOD, truncated [ 595.723162][T10434] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 595.723162][T10434] ) failed (rc=-5) [ 595.793815][ T5245] Bluetooth: hci5: unexpected event for opcode 0x200f [ 596.005301][T10443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.193614][T10453] netlink: 'syz.3.792': attribute type 16 has an invalid length. [ 597.201642][T10453] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.792'. [ 597.840774][T10451] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.791'. [ 598.566143][T10451] netlink: 'syz.0.791': attribute type 2 has an invalid length. [ 599.819562][ T5245] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 599.830071][ T5245] Bluetooth: hci5: Injecting HCI hardware error event [ 599.840978][ T5245] Bluetooth: hci5: hardware error 0x00 [ 601.079516][ T5283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 601.434943][ T5283] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 601.454716][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.466260][ T5283] usb 2-1: Product: syz [ 601.474858][ T5283] usb 2-1: Manufacturer: syz [ 601.484338][ T5283] usb 2-1: SerialNumber: syz [ 601.494490][T10488] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.799'. [ 601.504383][ T5283] usb 2-1: config 0 descriptor?? [ 601.510287][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 601.526971][ T5283] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 601.545020][ T5283] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 601.968890][ T5283] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 602.229563][ T5245] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 603.253461][T10514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.190619][ T5280] usb 2-1: USB disconnect, device number 9 [ 604.232751][T10524] netlink: 203452 bytes leftover after parsing attributes in process `syz.3.809'. [ 604.243189][T10521] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 604.254270][T10524] netlink: 'syz.3.809': attribute type 2 has an invalid length. [ 605.828882][T10538] ceph: No mds server is up or the cluster is laggy [ 605.839691][ T5283] libceph: connect (1)[c::]:6789 error -101 [ 605.856384][ T5283] libceph: mon0 (1)[c::]:6789 connect error [ 606.216831][T10552] syz.0.814: attempt to access beyond end of device [ 606.216831][T10552] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 606.230154][T10552] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 607.668479][T10560] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 607.676733][T10560] netlink: 3 bytes leftover after parsing attributes in process `syz.0.815'. [ 608.698458][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 609.366937][T10578] netlink: 203452 bytes leftover after parsing attributes in process `syz.3.821'. [ 609.653801][T10578] netlink: 'syz.3.821': attribute type 2 has an invalid length. [ 609.827384][ T5245] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 611.620549][T10587] tmpfs: Bad value for 'nr_inodes' [ 611.817414][T10602] netlink: 'syz.2.826': attribute type 16 has an invalid length. [ 612.260629][ T9365] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 612.491455][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'. [ 612.779227][ T9365] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.809486][ T9365] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 612.859114][ T9365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.053729][ T9365] usb 1-1: config 0 descriptor?? [ 613.063309][ T9365] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 613.110072][ T5231] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 613.470941][T10619] program syz.2.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.182596][ T5283] libceph: connect (1)[c::]:6789 error -101 [ 614.197232][ T5283] libceph: mon0 (1)[c::]:6789 connect error [ 614.889164][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.901466][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.911416][ T5231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 614.924431][ T5231] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 614.940712][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.955778][ T5231] usb 4-1: config 0 descriptor?? [ 615.062098][T10622] ceph: No mds server is up or the cluster is laggy [ 615.399734][T10638] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.834'. [ 616.716751][ T5230] usb 1-1: USB disconnect, device number 18 [ 616.802339][T10648] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.838'. [ 616.822092][ T5231] usbhid 4-1:0.0: can't add hid device: -71 [ 616.837777][T10648] netlink: 'syz.0.838': attribute type 2 has an invalid length. [ 616.859485][ T5231] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 617.032941][ T5231] usb 4-1: USB disconnect, device number 11 [ 619.015791][ T29] audit: type=1326 audit(1725296274.996:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10671 comm="syz.0.842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6299d79eb9 code=0x0 [ 619.692288][T10673] netlink: 'syz.2.840': attribute type 16 has an invalid length. [ 619.960884][T10684] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.846'. [ 620.179322][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.395613][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.041044][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.100583][T10698] netlink: 'syz.1.850': attribute type 16 has an invalid length. [ 621.250807][T10701] netlink: 203452 bytes leftover after parsing attributes in process `syz.2.852'. [ 621.279907][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.304344][T10701] netlink: 'syz.2.852': attribute type 2 has an invalid length. [ 622.769279][ T5280] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 622.942269][ T9153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 623.006292][ T9153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 623.034805][ T9153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 623.063034][ T9153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 623.086538][ T9153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 623.113195][ T9153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.215937][ T5280] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 623.299315][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.369126][ T12] bridge_slave_1: left allmulticast mode [ 623.374917][ T12] bridge_slave_1: left promiscuous mode [ 623.389192][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.417542][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.475324][ T5280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.495091][ T12] bridge_slave_0: left allmulticast mode [ 623.504054][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.513049][ T12] bridge_slave_0: left promiscuous mode [ 623.543869][ T5280] usb 2-1: config 0 descriptor?? [ 623.556980][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.637231][ T5280] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 624.732139][ T5280] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 624.751446][ T5280] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 624.847789][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.105949][T10760] netlink: 'syz.0.861': attribute type 9 has an invalid length. [ 625.113878][T10760] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.861'. [ 625.239391][ T5245] Bluetooth: hci5: command tx timeout [ 625.559875][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.574062][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.585266][ T12] bond0 (unregistering): Released all slaves [ 625.598476][T10735] netlink: 'syz.4.856': attribute type 16 has an invalid length. [ 626.428153][T10779] netlink: 'syz.2.864': attribute type 58 has an invalid length. [ 626.466228][T10776] netlink: 'syz.0.862': attribute type 16 has an invalid length. [ 626.649256][ T5280] usb 2-1: USB disconnect, device number 10 [ 627.428724][ T5245] Bluetooth: hci5: command tx timeout [ 629.489280][ T5245] Bluetooth: hci5: command tx timeout [ 629.878521][T10807] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.868'. [ 629.930465][T10716] chnl_net:caif_netlink_parms(): no params data found [ 629.974435][T10807] netlink: 'syz.0.868': attribute type 2 has an invalid length. [ 630.035148][T10808] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.870'. [ 630.459521][ T12] hsr_slave_0: left promiscuous mode [ 630.481014][ T12] hsr_slave_1: left promiscuous mode [ 630.501847][T10825] netlink: 'syz.1.871': attribute type 9 has an invalid length. [ 630.526455][T10825] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.871'. [ 630.542559][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.558303][T10837] program syz.0.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.569964][T10837] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 630.592603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.622709][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.639231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.684653][ T12] veth1_macvtap: left promiscuous mode [ 630.696295][ T12] veth0_macvtap: left promiscuous mode [ 630.703910][ T12] veth1_vlan: left promiscuous mode [ 630.709573][ T12] veth0_vlan: left promiscuous mode [ 631.570544][ T5245] Bluetooth: hci5: command tx timeout [ 631.613473][T10844] Cannot find add_set index 2 as target [ 632.353462][ T12] team0 (unregistering): Port device team_slave_1 removed [ 632.411211][ T12] team0 (unregistering): Port device team_slave_0 removed [ 633.370108][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.279357][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.290786][T10716] bridge_slave_0: entered allmulticast mode [ 634.298666][T10716] bridge_slave_0: entered promiscuous mode [ 634.320600][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.352704][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.364724][T10716] bridge_slave_1: entered allmulticast mode [ 634.390130][T10716] bridge_slave_1: entered promiscuous mode [ 634.596901][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.684209][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.117677][T10716] team0: Port device team_slave_0 added [ 635.820048][T10716] team0: Port device team_slave_1 added [ 635.860714][T10884] netlink: 203452 bytes leftover after parsing attributes in process `syz.1.881'. [ 635.949386][T10884] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 636.357893][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.416313][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.532082][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.597962][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.615660][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.713810][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.123915][T10716] hsr_slave_0: entered promiscuous mode [ 637.203806][T10716] hsr_slave_1: entered promiscuous mode [ 637.274643][T10716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.329212][T10716] Cannot create hsr debugfs directory [ 637.610791][T10910] netlink: 'syz.0.884': attribute type 9 has an invalid length. [ 637.628671][T10910] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.884'. [ 638.471578][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 643.136295][T10955] xt_connbytes: Forcing CT accounting to be enabled [ 643.143358][T10955] No such timeout policy "syz0" [ 645.386931][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 645.753680][T10716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.800401][T10716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.842200][T10716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.884092][T10716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 646.313713][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.400320][T10716] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.436794][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.444144][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.495111][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.502297][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.901162][T11009] 9pnet_fd: Insufficient options for proto=fd [ 647.064124][T11009] Invalid ELF header magic: != ELF [ 647.084138][ T29] audit: type=1804 audit(1725296303.006:148): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.898" name="/newroot/87/bus/bus" dev="overlay" ino=497 res=1 errno=0 [ 648.073691][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.117233][T10716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.184667][T11024] netlink: 203452 bytes leftover after parsing attributes in process `syz.4.901'. [ 649.250578][T11024] netlink: 'syz.4.901': attribute type 2 has an invalid length. [ 649.264132][T10716] veth0_vlan: entered promiscuous mode [ 649.315077][T10716] veth1_vlan: entered promiscuous mode [ 649.451959][T10716] veth0_macvtap: entered promiscuous mode [ 649.508567][T10716] veth1_macvtap: entered promiscuous mode [ 649.587372][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.627485][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.662974][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.708136][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.751181][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.766044][ T9153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 649.779266][ T9153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 649.791736][ T9153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 649.941549][ T9153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 649.950780][ T9153] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 649.958221][ T9153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 649.963387][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.417220][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.726286][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.745656][T10716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.825261][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.847954][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.858568][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.882393][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.893263][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.906267][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.916833][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.927871][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.938373][T10716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.953143][T10716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.973207][T10716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.098684][T10716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.141724][T10716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.175882][T10716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.203191][T10716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.520402][ T9153] Bluetooth: hci6: command tx timeout [ 652.811036][ T8082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.851474][ T8082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.898166][T11032] chnl_net:caif_netlink_parms(): no params data found [ 652.929410][T11069] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 652.970879][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.022607][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.353579][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.381909][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.396700][T11085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.413527][T11032] bridge_slave_0: entered allmulticast mode [ 653.451533][T11032] bridge_slave_0: entered promiscuous mode [ 653.476658][T11032] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.506563][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.514216][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 653.528716][T11032] bridge_slave_1: entered allmulticast mode [ 653.537415][T11085] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 653.566600][T11032] bridge_slave_1: entered promiscuous mode [ 654.600683][ T9153] Bluetooth: hci6: command tx timeout [ 654.643913][T11032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.683554][T11032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.319690][T11104] delete_channel: no stack [ 655.995469][T11032] team0: Port device team_slave_0 added [ 656.162241][T11112] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.911'. [ 656.188559][T11112] netlink: 'syz.0.911': attribute type 2 has an invalid length. [ 656.198150][T11032] team0: Port device team_slave_1 added [ 656.422229][T11032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.447523][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.473408][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.603012][T11032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.661431][T11032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.695784][ T9153] Bluetooth: hci6: command tx timeout [ 656.703792][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.730956][T11032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.919578][T11032] hsr_slave_0: entered promiscuous mode [ 657.152418][T11032] hsr_slave_1: entered promiscuous mode [ 657.889422][T11032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.897107][T11032] Cannot create hsr debugfs directory [ 658.403204][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 659.712598][ T5282] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 659.752708][ T9153] Bluetooth: hci6: command tx timeout [ 659.985385][ T5282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 660.012244][ T5282] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 660.164673][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.227892][ T5282] usb 1-1: config 0 descriptor?? [ 660.276002][ T5282] smsusb:smsusb_probe: board id=8, interface number 0 [ 660.328678][ T5282] smsusb:smsusb_probe: Device initialized with return code -19 [ 660.675231][ T9153] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 660.763975][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 660.783115][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 660.824397][ T5283] usb 1-1: USB disconnect, device number 19 [ 661.009316][ T5282] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 661.065842][T11032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.229258][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 661.256185][ T5282] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 661.281577][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 661.322639][ T5282] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 661.332161][T11032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.349219][ T5282] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 661.357705][ T5282] usb 5-1: Product: syz [ 661.374245][ T5282] usb 5-1: Manufacturer: syz [ 661.378917][ T5282] usb 5-1: SerialNumber: syz [ 661.394736][ T5282] usb 5-1: config 0 descriptor?? [ 661.423098][ T5282] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 661.462836][ T5282] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 661.689049][T11032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.798471][T11173] bridge0: port 3(bond0) entered blocking state [ 661.825168][T11173] bridge0: port 3(bond0) entered disabled state [ 662.000769][ T5230] usb 5-1: USB disconnect, device number 13 [ 662.105344][T11173] bond0: entered allmulticast mode [ 662.291631][T11173] bond_slave_0: entered allmulticast mode [ 662.304703][ T5230] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 662.405821][T11173] bond_slave_1: entered allmulticast mode [ 662.411720][T11173] team0: entered allmulticast mode [ 662.416864][T11173] team_slave_0: entered allmulticast mode [ 662.423346][T11173] team_slave_1: entered allmulticast mode [ 662.435218][T11173] bond0: entered promiscuous mode [ 662.462816][T11173] bond_slave_0: entered promiscuous mode [ 662.475426][T11173] bond_slave_1: entered promiscuous mode [ 662.501010][T11173] team0: entered promiscuous mode [ 662.506107][T11173] team_slave_0: entered promiscuous mode [ 662.531877][T11173] team_slave_1: entered promiscuous mode [ 662.548303][T11173] bridge0: port 3(bond0) entered blocking state [ 662.555405][T11173] bridge0: port 3(bond0) entered forwarding state [ 662.636309][T11032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.865749][T11032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 663.901327][T11206] netlink: 203452 bytes leftover after parsing attributes in process `syz.4.922'. [ 663.971921][T11206] netlink: 'syz.4.922': attribute type 2 has an invalid length. [ 663.994759][T11032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.037913][T11032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.100790][T11032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.357255][T11032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.445644][T11032] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.478387][ T29] audit: type=1326 audit(1725296320.456:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.1.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x0 [ 664.527353][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.534514][ T8082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.603239][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.610423][ T8082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.289851][T11032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.569405][ T9153] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 665.603999][ T9153] Bluetooth: hci4: ACL packet for unknown connection handle 2248 [ 666.477822][T11032] veth0_vlan: entered promiscuous mode [ 666.483880][ T5245] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 666.558532][T11032] veth1_vlan: entered promiscuous mode [ 666.620114][T11032] veth0_macvtap: entered promiscuous mode [ 666.704027][T11032] veth1_macvtap: entered promiscuous mode [ 666.858342][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.886466][T11255] netlink: 'syz.1.933': attribute type 3 has an invalid length. [ 666.894317][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.894343][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.958156][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.003919][T11253] Cannot find set identified by id 0 to match [ 667.043726][T11255] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.933'. [ 667.054539][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.070407][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.090536][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.104958][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.141567][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.173536][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.252852][T11032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.374298][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.417999][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.458054][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.471981][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.524888][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.576290][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.616414][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.639161][ T5245] Bluetooth: hci4: command 0x0406 tx timeout [ 667.654460][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.690508][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.703002][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.728461][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.740541][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.761344][T11032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.794185][T11032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.818250][T11032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.844318][T11032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.878845][T11032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.061388][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.074467][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.203667][ T8082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.253429][ T8082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.312768][T11284] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 670.543944][ T29] audit: type=1804 audit(1725296326.526:150): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.939" name="/newroot/199/file0/bus" dev="hugetlbfs" ino=36522 res=1 errno=0 [ 670.607078][T11303] qrtr: Invalid version 48 [ 670.796294][ T29] audit: type=1804 audit(1725296326.566:151): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.939" name="/newroot/199/file0/bus" dev="hugetlbfs" ino=36522 res=1 errno=0 [ 671.118285][T11303] ip6t_srh: unknown srh match flags 4000 [ 671.634937][ T29] audit: type=1804 audit(1725296326.596:152): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.939" name="/newroot/199/file0/bus" dev="hugetlbfs" ino=36522 res=1 errno=0 [ 671.697502][T11296] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 671.892125][ T5245] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 673.570756][T11316] netlink: 'syz.1.946': attribute type 16 has an invalid length. [ 674.463774][T11333] input: syz0 as /devices/virtual/input/input18 [ 680.680974][T11346] netlink: 203452 bytes leftover after parsing attributes in process `syz.1.953'. [ 680.729290][T11346] netlink: 'syz.1.953': attribute type 2 has an invalid length. [ 681.994799][ T9153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.006587][ T9153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.016466][ T9153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.026342][ T9153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.035972][ T9153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 682.043856][ T9153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.560943][ T9153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 683.575145][ T9153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 683.586463][ T9153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 683.596459][ T9153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 683.605633][ T9153] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 683.614466][ T9153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 684.139284][ T9153] Bluetooth: hci5: command tx timeout [ 685.726862][ T9153] Bluetooth: hci7: command tx timeout [ 686.228262][ T9153] Bluetooth: hci5: command tx timeout [ 686.389740][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.885948][ T9153] Bluetooth: hci7: command tx timeout [ 688.280774][ T9153] Bluetooth: hci5: command tx timeout [ 689.804755][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.891453][T11401] netlink: 'syz.4.962': attribute type 16 has an invalid length. [ 689.959214][ T9153] Bluetooth: hci7: command tx timeout [ 690.348830][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.371342][ T9153] Bluetooth: hci5: command tx timeout [ 690.576138][T11415] netlink: 165 bytes leftover after parsing attributes in process `syz.4.966'. [ 690.595858][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.606945][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.619295][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.628650][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.636851][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 690.645403][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.678600][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.811630][T11415] netlink: 'syz.4.966': attribute type 25 has an invalid length. [ 690.821184][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.966'. [ 690.840392][T11417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.966'. [ 690.864677][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.966'. [ 690.908645][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.439404][ T1105] bridge_slave_1: left allmulticast mode [ 691.445106][ T1105] bridge_slave_1: left promiscuous mode [ 691.466767][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.499683][ T1105] bridge_slave_0: left allmulticast mode [ 691.505353][ T1105] bridge_slave_0: left promiscuous mode [ 691.517040][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.052163][ T9153] Bluetooth: hci7: command tx timeout [ 692.691424][ T9153] Bluetooth: hci3: command tx timeout [ 693.109681][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.133855][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.155358][ T1105] bond0 (unregistering): Released all slaves [ 693.170657][T11365] chnl_net:caif_netlink_parms(): no params data found [ 693.196234][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 693.309606][T11378] chnl_net:caif_netlink_parms(): no params data found [ 693.636789][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 693.693001][T11365] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.702742][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.712475][T11365] bridge_slave_0: entered allmulticast mode [ 693.720968][T11365] bridge_slave_0: entered promiscuous mode [ 693.810553][T11365] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.821006][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.828445][T11365] bridge_slave_1: entered allmulticast mode [ 693.836909][T11365] bridge_slave_1: entered promiscuous mode [ 693.881139][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.893059][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.906452][T11378] bridge_slave_0: entered allmulticast mode [ 693.917558][T11378] bridge_slave_0: entered promiscuous mode [ 694.044658][ T1105] hsr_slave_0: left promiscuous mode [ 694.057229][ T1105] hsr_slave_1: left promiscuous mode [ 694.066572][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.086179][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.105453][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.144130][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.277951][ T1105] veth1_macvtap: left promiscuous mode [ 694.284470][ T1105] veth0_macvtap: left promiscuous mode [ 694.294037][ T1105] veth1_vlan: left promiscuous mode [ 694.299545][ T1105] veth0_vlan: left promiscuous mode [ 694.769369][ T9153] Bluetooth: hci3: command tx timeout [ 695.148957][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 695.212842][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 695.827226][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.837444][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.846325][T11378] bridge_slave_1: entered allmulticast mode [ 695.854262][T11378] bridge_slave_1: entered promiscuous mode [ 695.910861][T11365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.968650][T11365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.052254][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.103140][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.158922][T11365] team0: Port device team_slave_0 added [ 696.172827][T11414] chnl_net:caif_netlink_parms(): no params data found [ 696.240000][T11378] team0: Port device team_slave_0 added [ 696.248110][T11365] team0: Port device team_slave_1 added [ 696.357658][T11378] team0: Port device team_slave_1 added [ 696.398736][T11365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.407265][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.434154][T11365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.495295][T11365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.504363][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.559533][T11365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.661128][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.668206][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.716911][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.764506][T11365] hsr_slave_0: entered promiscuous mode [ 696.778750][T11365] hsr_slave_1: entered promiscuous mode [ 696.790117][T11365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.797706][T11365] Cannot create hsr debugfs directory [ 696.849542][ T9153] Bluetooth: hci3: command tx timeout [ 696.911232][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.918213][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.957104][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.046979][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.055227][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.062730][T11414] bridge_slave_0: entered allmulticast mode [ 697.070111][T11414] bridge_slave_0: entered promiscuous mode [ 697.116498][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.145102][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.152953][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.160785][T11414] bridge_slave_1: entered allmulticast mode [ 697.170787][T11414] bridge_slave_1: entered promiscuous mode [ 697.238698][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.266813][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.278934][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.353226][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.399886][T11378] hsr_slave_0: entered promiscuous mode [ 697.414733][T11378] hsr_slave_1: entered promiscuous mode [ 697.429132][T11378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.436745][T11378] Cannot create hsr debugfs directory [ 697.485829][T11414] team0: Port device team_slave_0 added [ 697.533899][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.564580][T11414] team0: Port device team_slave_1 added [ 697.710271][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.717249][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.743740][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.777204][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.801036][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.831245][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.984632][T11414] hsr_slave_0: entered promiscuous mode [ 697.991635][T11414] hsr_slave_1: entered promiscuous mode [ 697.997816][T11414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.006593][T11414] Cannot create hsr debugfs directory [ 698.329372][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.473348][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.598064][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.726783][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.784025][T11365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.803976][T11365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 698.820291][T11365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.843934][T11365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.929515][ T9153] Bluetooth: hci3: command tx timeout [ 699.084078][ T1105] bond0: left allmulticast mode [ 699.088988][ T1105] bond_slave_0: left allmulticast mode [ 699.096799][ T1105] bond_slave_1: left allmulticast mode [ 699.102473][ T1105] team0: left allmulticast mode [ 699.107334][ T1105] team_slave_0: left allmulticast mode [ 699.113648][ T1105] team_slave_1: left allmulticast mode [ 699.120841][ T1105] bond0: left promiscuous mode [ 699.125625][ T1105] bond_slave_0: left promiscuous mode [ 699.132556][ T1105] bond_slave_1: left promiscuous mode [ 699.138110][ T1105] team0: left promiscuous mode [ 699.143510][ T1105] team_slave_0: left promiscuous mode [ 699.149715][ T1105] team_slave_1: left promiscuous mode [ 699.155465][ T1105] bridge0: port 3(bond0) entered disabled state [ 699.164040][ T1105] bridge_slave_1: left allmulticast mode [ 699.169899][ T1105] bridge_slave_1: left promiscuous mode [ 699.175651][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.184386][ T1105] bridge_slave_0: left allmulticast mode [ 699.190429][ T1105] bridge_slave_0: left promiscuous mode [ 699.196171][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.205525][ T1105] bridge_slave_1: left allmulticast mode [ 699.211264][ T1105] bridge_slave_1: left promiscuous mode [ 699.216991][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.227564][ T1105] bridge_slave_0: left allmulticast mode [ 699.235657][ T1105] bridge_slave_0: left promiscuous mode [ 699.247989][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.056255][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.067776][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.082674][ T1105] bond0 (unregistering): (slave team0): Releasing backup interface [ 700.093547][ T1105] bond0 (unregistering): Released all slaves [ 700.267034][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.278894][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.298339][ T1105] bond0 (unregistering): Released all slaves [ 700.522024][T11365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.574835][T11365] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.588294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.595494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.615253][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.622429][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.176235][T11378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 701.246136][T11378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.349153][T11378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.370228][T11378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.435639][ T1105] hsr_slave_0: left promiscuous mode [ 701.442937][ T1105] hsr_slave_1: left promiscuous mode [ 701.449995][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.457442][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.466156][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.474098][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.489940][ T1105] hsr_slave_0: left promiscuous mode [ 701.495933][ T1105] hsr_slave_1: left promiscuous mode [ 701.504521][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.513921][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.522234][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.529792][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.565957][ T1105] veth1_macvtap: left promiscuous mode [ 701.571740][ T1105] veth0_macvtap: left promiscuous mode [ 701.577307][ T1105] veth1_vlan: left promiscuous mode [ 701.582742][ T1105] veth0_vlan: left promiscuous mode [ 701.590526][ T1105] veth1_macvtap: left promiscuous mode [ 701.596060][ T1105] veth0_macvtap: left promiscuous mode [ 701.604125][ T1105] veth1_vlan: left promiscuous mode [ 701.609769][ T1105] veth0_vlan: left promiscuous mode [ 702.328085][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 702.382871][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 703.525451][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 703.587068][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 704.201648][T11365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.506068][T11365] veth0_vlan: entered promiscuous mode [ 704.536778][T11365] veth1_vlan: entered promiscuous mode [ 704.578163][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.639601][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.676861][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.684070][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.716680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.723895][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.741272][T11365] veth0_macvtap: entered promiscuous mode [ 704.811282][T11365] veth1_macvtap: entered promiscuous mode [ 704.961780][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.979075][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.988939][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.025345][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.050442][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.079136][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.091342][T11365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.149564][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.185628][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.198856][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.219247][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.236506][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.248358][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.258820][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.269575][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.294224][T11365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.326939][T11365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.353680][T11365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.363084][T11365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.372142][T11365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.423076][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.431459][T11414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 705.444115][T11414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 705.457341][T11414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.503153][T11414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.632928][ T5362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.649731][ T5362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.696518][T11378] veth0_vlan: entered promiscuous mode [ 705.711614][ T8078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.724887][ T8078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.778842][T11378] veth1_vlan: entered promiscuous mode [ 705.949194][T11378] veth0_macvtap: entered promiscuous mode [ 706.107812][T11378] veth1_macvtap: entered promiscuous mode [ 706.147317][T11559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.950'. [ 706.252163][T11414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.277153][T11414] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.305383][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.312739][ T5362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.326364][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.333719][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.448444][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.476983][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 706.496576][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.519552][T11564] nbd: must specify at least one socket [ 706.541999][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.587378][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.638659][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.667944][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.718273][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.799439][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.840548][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.082216][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.117038][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.158791][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.215552][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.225527][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.235998][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.245886][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.256349][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.428709][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.838585][ T29] audit: type=1326 audit(1725296364.346:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 709.097689][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.161322][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.267619][ T29] audit: type=1326 audit(1725296364.346:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 709.468640][T11378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.516581][ T29] audit: type=1326 audit(1725296364.346:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa86a578850 code=0x7ffc0000 [ 709.540426][T11378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.549765][T11378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.558496][T11378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.582598][ T29] audit: type=1326 audit(1725296364.346:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 709.638025][ T29] audit: type=1326 audit(1725296364.346:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 709.760900][ T29] audit: type=1326 audit(1725296364.346:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 709.935197][ T29] audit: type=1326 audit(1725296364.346:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 710.601683][T11611] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 710.735109][ T29] audit: type=1326 audit(1725296364.346:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 711.043444][ T29] audit: type=1326 audit(1725296364.346:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 711.065359][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.077038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.153450][ T29] audit: type=1326 audit(1725296364.346:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11578 comm="syz.1.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86a579eb9 code=0x7ffc0000 [ 711.214984][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.217199][T11623] netlink: 5 bytes leftover after parsing attributes in process `syz.1.977'. [ 711.231910][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.248971][T11414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.707377][T11633] loop7: detected capacity change from 0 to 16385 [ 712.730688][ T9153] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 712.926665][T11414] veth0_vlan: entered promiscuous mode [ 712.950528][T11633] loop7: detected capacity change from 16385 to 16321 [ 713.202775][T11414] veth1_vlan: entered promiscuous mode [ 713.837101][T11414] veth0_macvtap: entered promiscuous mode [ 714.017189][T11641] netlink: 'syz.4.982': attribute type 21 has an invalid length. [ 714.778930][T11641] netlink: 132 bytes leftover after parsing attributes in process `syz.4.982'. [ 714.834678][T11414] veth1_macvtap: entered promiscuous mode [ 714.969122][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 715.102808][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.147133][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.182652][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.199651][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.209186][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.232081][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.259321][ T5283] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 715.268275][ T25] usb 3-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 715.283645][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.283810][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.305413][ T25] usb 3-1: config 0 descriptor?? [ 715.378376][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.422018][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.449829][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.459989][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 715.466981][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.485027][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 715.496662][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.506959][ T5283] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 715.519236][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.526574][T11414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.541615][ T5283] usb 4-1: config 0 descriptor?? [ 715.607946][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.644260][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.654462][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.665761][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.675918][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.688265][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.698751][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.712366][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.739216][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.750201][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.767259][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.779406][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.796972][ T25] hid-generic 0003:0EEF:C002.0007: hidraw0: USB HID v0.00 Device [HID 0eef:c002] on usb-dummy_hcd.2-1/input0 [ 715.868489][T11414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.908233][T11414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.943313][T11414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.979302][T11414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.988090][T11414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.034291][ T9365] usb 3-1: USB disconnect, device number 11 [ 716.864086][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.259996][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.402136][ T5283] hid (null): invalid report_size 812540268 [ 717.441580][ T5283] hid (null): unknown global tag 0x83 [ 717.447043][ T5283] hid (null): unknown global tag 0xc [ 717.520848][ T5283] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 717.587572][ T5283] hid-generic 0003:0158:0100.0008: unexpected long global item [ 717.779726][ T5231] libceph: connect (1)[c::]:6789 error -101 [ 717.786441][ T5231] libceph: mon0 (1)[c::]:6789 connect error [ 718.061195][ T9365] libceph: connect (1)[c::]:6789 error -101 [ 718.115143][ T9365] libceph: mon0 (1)[c::]:6789 connect error [ 718.348644][T11699] ceph: No mds server is up or the cluster is laggy [ 718.369974][ T5283] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 718.451564][ T9153] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 718.458067][ T5283] usb 4-1: USB disconnect, device number 12 [ 718.461763][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: kworker/u9:1 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 718.478461][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 718.488573][ T9153] Workqueue: hci1 hci_rx_work [ 718.493297][ T9153] Call Trace: [ 718.496597][ T9153] [ 718.499547][ T9153] dump_stack_lvl+0x241/0x360 [ 718.504259][ T9153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.509489][ T9153] ? __pfx__printk+0x10/0x10 [ 718.514107][ T9153] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 718.519423][ T9153] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 718.525004][ T9153] sysfs_create_dir_ns+0x2ce/0x3a0 [ 718.530149][ T9153] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 718.535821][ T9153] kobject_add_internal+0x435/0x8d0 [ 718.541066][ T9153] kobject_add+0x152/0x220 [ 718.545514][ T9153] ? do_raw_spin_unlock+0x13c/0x8b0 [ 718.550738][ T9153] ? device_add+0x3e7/0xbf0 [ 718.555260][ T9153] ? __pfx_kobject_add+0x10/0x10 [ 718.560208][ T9153] ? _raw_spin_unlock+0x28/0x50 [ 718.565070][ T9153] ? get_device_parent+0x165/0x410 [ 718.570182][ T9153] device_add+0x4e5/0xbf0 [ 718.574516][ T9153] hci_conn_add_sysfs+0xe8/0x200 [ 718.579457][ T9153] le_conn_complete_evt+0xc9f/0x12e0 [ 718.584746][ T9153] ? trace_contention_end+0x3c/0x120 [ 718.590035][ T9153] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 718.595761][ T9153] ? __mutex_unlock_slowpath+0x21d/0x750 [ 718.601393][ T9153] ? __copy_skb_header+0x437/0x5b0 [ 718.606505][ T9153] ? skb_pull_data+0x112/0x230 [ 718.611273][ T9153] hci_le_enh_conn_complete_evt+0x185/0x420 [ 718.617173][ T9153] hci_event_packet+0xa55/0x1540 [ 718.622197][ T9153] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 718.627483][ T9153] ? __pfx_hci_event_packet+0x10/0x10 [ 718.632851][ T9153] ? do_raw_spin_unlock+0x13c/0x8b0 [ 718.638052][ T9153] ? hci_send_to_monitor+0xd8/0x7f0 [ 718.643250][ T9153] ? kcov_remote_start+0x97/0x7d0 [ 718.648274][ T9153] hci_rx_work+0x3e8/0xca0 [ 718.652695][ T9153] ? process_scheduled_works+0x945/0x1830 [ 718.658412][ T9153] process_scheduled_works+0xa2c/0x1830 [ 718.663980][ T9153] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.669965][ T9153] ? assign_work+0x364/0x3d0 [ 718.674559][ T9153] worker_thread+0x86d/0xd10 [ 718.679157][ T9153] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 718.685055][ T9153] ? __kthread_parkme+0x169/0x1d0 [ 718.690087][ T9153] ? __pfx_worker_thread+0x10/0x10 [ 718.695196][ T9153] kthread+0x2f0/0x390 [ 718.699268][ T9153] ? __pfx_worker_thread+0x10/0x10 [ 718.704390][ T9153] ? __pfx_kthread+0x10/0x10 [ 718.708980][ T9153] ret_from_fork+0x4b/0x80 [ 718.713397][ T9153] ? __pfx_kthread+0x10/0x10 [ 718.717983][ T9153] ret_from_fork_asm+0x1a/0x30 [ 718.722758][ T9153] [ 718.725836][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.749236][ T9153] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 718.763522][ T9153] Bluetooth: hci1: failed to register connection device [ 718.825488][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.850345][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.983203][T11708] netlink: 'syz.2.990': attribute type 9 has an invalid length. [ 719.005852][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.025214][T11708] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.990'. [ 719.033295][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.581747][T11733] overlay: Unknown parameter '\' [ 720.891442][ T5245] Bluetooth: hci1: command 0x0406 tx timeout [ 725.679341][T11768] netlink: 'syz.1.1000': attribute type 16 has an invalid length. [ 727.070190][ T9365] libceph: connect (1)[c::]:6789 error -101 [ 727.081868][ T9365] libceph: mon0 (1)[c::]:6789 connect error [ 727.132688][T11779] netlink: 'syz.2.1001': attribute type 9 has an invalid length. [ 727.147125][T11779] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.1001'. [ 727.281572][T11776] ceph: No mds server is up or the cluster is laggy [ 727.381297][T11782] binder: 11774:11782 ioctl c018620c 20000100 returned -1 [ 729.083409][T11799] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1004'. [ 729.614327][T11810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.479731][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 730.863272][T11812] hsr0: entered promiscuous mode [ 730.911629][T11812] macsec1: entered promiscuous mode [ 730.917076][T11812] macsec1: entered allmulticast mode [ 730.949409][T11812] hsr0: entered allmulticast mode [ 730.954583][T11812] hsr_slave_0: entered allmulticast mode [ 731.000096][T11812] hsr_slave_1: entered allmulticast mode [ 731.284694][T11834] netlink: 'syz.4.1012': attribute type 16 has an invalid length. [ 731.419587][ T5310] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 731.620370][ T5310] usb 4-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 731.630621][ T5310] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 731.663484][ T5310] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 731.673279][ T5310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.681840][ T5310] usb 4-1: Product: syz [ 731.686644][ T5310] usb 4-1: Manufacturer: syz [ 731.691578][ T5310] usb 4-1: SerialNumber: syz [ 732.014677][ T5310] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 732.125902][ T5310] usb 4-1: USB disconnect, device number 13 [ 732.146227][T11840] netdevsim netdevsim0 €: renamed from netdevsim0 (while UP) [ 732.516359][T11846] block device autoloading is deprecated and will be removed. [ 732.589298][ T5282] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 732.687943][T11855] netlink: 'syz.0.1015': attribute type 9 has an invalid length. [ 732.695856][T11855] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1015'. [ 732.809283][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 733.597819][T11863] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 733.633687][ T5282] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 733.719593][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.746099][ T5282] usb 2-1: config 0 descriptor?? [ 733.755649][ T5282] usb 2-1: bad CDC descriptors [ 733.886297][ T5282] usb 2-1: USB disconnect, device number 11 [ 735.016847][T11894] hfsplus: unable to find HFS+ superblock [ 735.645931][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 736.091500][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 736.999200][ T46] usb 5-1: config index 0 descriptor too short (expected 50212, got 36) [ 737.007595][ T46] usb 5-1: config 75 has too many interfaces: 117, using maximum allowed: 32 [ 737.016906][ T46] usb 5-1: config 75 has an invalid descriptor of length 0, skipping remainder of the config [ 737.071250][ T46] usb 5-1: config 75 has 0 interfaces, different from the descriptor's value: 117 [ 737.072265][ T5245] Bluetooth: hci4: unexpected cc 0x2007 length: 100 > 2 [ 737.114297][ T46] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 737.174247][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.184836][T11902] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 737.191934][T11902] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 737.208910][ T46] usb 5-1: can't set config #75, error -71 [ 737.242527][ T46] usb 5-1: USB disconnect, device number 14 [ 737.260036][T11902] vhci_hcd vhci_hcd.0: Device attached [ 737.384567][T11925] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 737.400058][T11902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1023'. [ 737.562027][T11926] Device name cannot be null; rc = [-22] [ 737.599368][ T5282] usb 12-1: SetAddress Request (2) to port 0 [ 737.607857][ T5282] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 737.714197][T11912] vhci_hcd: connection reset by peer [ 737.740824][ T12] vhci_hcd: stop threads [ 737.749598][ T12] vhci_hcd: release socket [ 737.772250][ T12] vhci_hcd: disconnect device [ 738.500917][ T5310] libceph: connect (1)[c::]:6789 error -101 [ 738.510330][ T5310] libceph: mon0 (1)[c::]:6789 connect error [ 738.909782][ T5310] libceph: connect (1)[c::]:6789 error -101 [ 738.927036][ T5310] libceph: mon0 (1)[c::]:6789 connect error [ 738.976155][T11940] ceph: No mds server is up or the cluster is laggy [ 739.389434][T11963] SET target dimension over the limit! [ 740.013380][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 740.241824][ T46] usb 2-1: config 0 has no interfaces? [ 740.298004][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.322251][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.358203][ T46] usb 2-1: config 0 descriptor?? [ 741.192899][ T5245] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 741.202172][ T5245] Bluetooth: hci4: Injecting HCI hardware error event [ 741.284671][ T5245] Bluetooth: hci4: hardware error 0x00 [ 741.343352][ T5310] usb 2-1: USB disconnect, device number 12 [ 742.443809][ T9153] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 742.680206][T12003] netlink: 'syz.3.1042': attribute type 16 has an invalid length. [ 742.760204][ T5282] usb 12-1: device descriptor read/8, error -110 [ 742.799324][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 742.998691][ T46] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 743.010946][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.053314][ T46] usb 3-1: config 0 descriptor?? [ 743.105240][ T46] usb 3-1: selecting invalid altsetting 1 [ 743.192698][ T46] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 743.233989][ T5282] usb usb12-port1: attempt power cycle [ 743.278010][ T9447] udevd[9447]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.374770][ T5359] usb 3-1: USB disconnect, device number 12 [ 743.404028][T12002] wg1: entered promiscuous mode [ 743.597675][ T5245] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 744.023801][ T5282] usb usb12-port1: unable to enumerate USB device [ 744.222567][T12012] ceph: No mds server is up or the cluster is laggy [ 744.460858][ T5245] Bluetooth: hci3: link tx timeout [ 744.467864][ T5245] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 744.503887][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 746.519257][ T5245] Bluetooth: hci3: command 0x0406 tx timeout [ 747.220627][T12051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1054'. [ 747.293827][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 748.441823][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.250369][T12062] netlink: 'syz.0.1056': attribute type 16 has an invalid length. [ 749.410506][ T12] wlan1: Trigger new scan to find an IBSS to join [ 749.691286][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 749.691304][ T29] audit: type=1326 audit(1725296405.676:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 749.763847][ T29] audit: type=1326 audit(1725296405.676:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 749.853028][ T29] audit: type=1326 audit(1725296405.676:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 749.928974][ T29] audit: type=1326 audit(1725296405.676:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 752.170776][T12097] pim6reg1: entered promiscuous mode [ 752.203246][T12097] pim6reg1: entered allmulticast mode [ 754.000539][T12100] netlink: 'syz.0.1067': attribute type 16 has an invalid length. [ 754.221920][T12124] netlink: 'syz.4.1071': attribute type 16 has an invalid length. [ 754.571534][ T5362] wlan1: Trigger new scan to find an IBSS to join [ 754.983718][T12136] fuse: Bad value for 'rootmode' [ 756.132067][ T62] wlan1: Creating new IBSS network, BSSID c6:d5:53:c7:2d:7b [ 757.170037][T12157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 757.179570][T12157] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 761.474590][T12215] netlink: 'syz.0.1083': attribute type 16 has an invalid length. [ 761.817434][ T5359] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 761.966169][ T29] audit: type=1326 audit(1725296417.946:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 762.306566][T12239] ./bus: Can't lookup blockdev [ 763.691782][ T29] audit: type=1326 audit(1725296417.946:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 763.796565][ T29] audit: type=1326 audit(1725296417.946:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 763.835416][T12240] netlink: 'syz.0.1087': attribute type 16 has an invalid length. [ 763.885259][ T29] audit: type=1326 audit(1725296417.946:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 764.189688][ T29] audit: type=1326 audit(1725296417.946:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 764.273589][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 766.976299][ T29] audit: type=1326 audit(1725296417.946:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 767.249954][ T29] audit: type=1326 audit(1725296417.946:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 767.271539][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.338246][ T29] audit: type=1326 audit(1725296417.946:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 767.421528][ T9153] Bluetooth: hci7: unexpected event 0x17 length: 14 > 6 [ 767.439166][ T29] audit: type=1326 audit(1725296417.946:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 767.492401][ T29] audit: type=1326 audit(1725296417.946:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f891c178850 code=0x7ffc0000 [ 767.582860][T12264] Bluetooth: MGMT ver 1.23 [ 767.598986][T12264] Bluetooth: hci3: service_discovery: expected 132 bytes, got 7 bytes [ 767.621443][T12269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.669361][ T29] audit: type=1326 audit(1725296417.946:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 767.705517][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 767.766189][T12269] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 767.791767][ T29] audit: type=1326 audit(1725296417.976:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 769.401149][T12277] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 769.431774][ T29] audit: type=1326 audit(1725296417.976:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 769.611186][ T29] audit: type=1326 audit(1725296417.976:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 769.636790][ T29] audit: type=1326 audit(1725296417.976:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c179eb9 code=0x7ffc0000 [ 789.863682][ T30] INFO: task syz.2.885:10919 blocked for more than 148 seconds. [ 789.930235][ T5311] kworker/0:6 (5311) used greatest stack depth: 18264 bytes left [ 790.001355][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 790.099360][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.156690][ T30] task:syz.2.885 state:D stack:21120 pid:10919 tgid:10915 ppid:8911 flags:0x00004002 [ 790.217616][ T30] Call Trace: SYZFAIL: failed to send rpc fd=3 want=18456 sent=0 n=-1 (errno 32: Broken pipe) [ 790.249175][ T30] [ 790.252174][ T30] __schedule+0x17ae/0x4a10 [ 790.256734][ T30] ? __pfx___schedule+0x10/0x10 [ 790.329110][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 790.348315][ T30] ? __pfx_lock_release+0x10/0x10 [ 790.390228][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 790.403782][ T30] ? schedule+0x90/0x320 [ 790.408087][ T30] schedule+0x14b/0x320 [ 790.427011][ T30] rpc_wait_bit_killable+0x1b/0x160 [ 790.438435][ T30] __wait_on_bit+0xb0/0x2f0 [ 790.443237][ T30] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 790.459092][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 790.477892][ T30] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 790.486019][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 790.510200][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 790.515810][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 790.530160][ T30] __rpc_execute+0x723/0x1460 [ 790.535177][ T30] ? __pfx___rpc_execute+0x10/0x10 [ 790.546815][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 790.552748][ T30] ? rpc_make_runnable+0xb5/0x1c0 [ 790.557814][ T30] rpc_execute+0x1ec/0x3f0 [ 790.569093][ T30] rpc_run_task+0x562/0x6c0 [ 790.590260][ T30] rpc_call_sync+0x197/0x2e0 [ 790.594885][ T30] ? __pfx_rpc_call_sync+0x10/0x10 [ 790.606915][ T30] rpcb_register+0x36b/0x670 [ 790.607867][T12189] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 790.621936][ T30] ? __pfx_rpcb_register+0x10/0x10 [ 790.627092][ T30] ? __pfx_rpcb_create_local+0x10/0x10 [ 790.648740][ T30] svc_unregister+0x208/0x730 [ 790.666462][ T30] svc_bind+0x1bb/0x1e0 [ 790.674058][ T30] nfsd_create_serv+0x3f0/0x760 [ 790.689343][ T30] ? __mutex_lock+0x9a5/0xd70 [ 790.694080][ T30] ? __pfx_nfsd_create_serv+0x10/0x10 [ 790.709274][ T30] ? __mutex_lock+0x527/0xd70 [ 790.717485][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 790.726442][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 790.740415][ T30] ? __asan_memset+0x23/0x50 [ 790.745045][ T30] ? netlink_unicast+0x7f6/0x990 [ 790.750550][ T30] ? __sock_sendmsg+0x221/0x270 [ 790.755399][ T30] ? __sys_sendmsg+0x2b0/0x3a0 [ 790.761132][ T30] nfsd_nl_listener_set_doit+0x135/0x1a90 [ 790.766860][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 790.775497][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 790.790001][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 790.801349][ T30] ? __nla_parse+0x40/0x60 [ 790.805819][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 790.827512][ T30] genl_rcv_msg+0xb14/0xec0 [ 790.834170][ T30] ? mark_lock+0x9a/0x350 [ 790.846202][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.859634][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 790.864686][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 790.886358][ T30] ? __pfx___might_resched+0x10/0x10 [ 790.891957][ T30] netlink_rcv_skb+0x1e3/0x430 [ 790.898758][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.906447][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 790.915176][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 790.929195][ T30] genl_rcv+0x28/0x40 [ 790.936819][ T30] netlink_unicast+0x7f6/0x990 [ 790.941850][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 790.949433][ T30] ? __virt_addr_valid+0x183/0x530 [ 790.958121][ T30] ? __check_object_size+0x49c/0x900 [ 790.967908][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 790.973541][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 790.990025][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.995373][ T30] ? __import_iovec+0x536/0x820 [ 791.003925][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 791.016889][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 791.026371][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.039272][ T30] __sock_sendmsg+0x221/0x270 [ 791.047603][ T30] ____sys_sendmsg+0x525/0x7d0 [ 791.058429][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 791.064144][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 791.070106][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 791.075584][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 791.082445][ T30] ? do_syscall_64+0x100/0x230 [ 791.087682][ T30] ? do_syscall_64+0xb6/0x230 [ 791.092606][ T30] do_syscall_64+0xf3/0x230 [ 791.100129][ T30] ? clear_bhb_loop+0x35/0x90 [ 791.107021][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.117156][ T30] RIP: 0033:0x7f5ce4579eb9 [ 791.126015][ T30] RSP: 002b:00007f5ce52f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.143089][ T30] RAX: ffffffffffffffda RBX: 00007f5ce4716208 RCX: 00007f5ce4579eb9 [ 791.159833][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 791.167835][ T30] RBP: 00007f5ce45e793e R08: 0000000000000000 R09: 0000000000000000 [ 791.182306][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.207597][ T30] R13: 0000000000000000 R14: 00007f5ce4716208 R15: 00007ffc4e2d2998 [ 791.226110][ T30] [ 791.231104][ T30] [ 791.231104][ T30] Showing all locks held in the system: [ 791.238844][ T30] 1 lock held by khungtaskd/30: [ 791.326815][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 791.340042][ T30] 3 locks held by kworker/0:2/941: [ 791.345199][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 791.359644][ T30] #1: ffffc900041dfd00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 791.370887][ T30] #2: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 791.396350][ T30] 2 locks held by getty/4978: [ 791.408621][ T30] #0: ffff88803072e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 791.426763][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 791.444796][ T30] 2 locks held by syz.2.885/10919: [ 791.457440][ T30] #0: ffffffff8fadefb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 791.476476][ T30] #1: ffffffff8ea09ce8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 791.487499][ T30] 2 locks held by kworker/u8:15/12199: [ 791.493011][ T30] 1 lock held by syz.2.1099/12292: [ 791.502081][ T30] #0: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 791.527866][ T30] 1 lock held by dhcpcd/12300: [ 791.532854][ T30] #0: ffff88806c31e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 791.549183][ T30] [ 791.551536][ T30] ============================================= [ 791.551536][ T30] [ 791.819101][ T30] NMI backtrace for cpu 1 [ 791.823493][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 791.834013][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 791.844082][ T30] Call Trace: [ 791.847367][ T30] [ 791.850308][ T30] dump_stack_lvl+0x241/0x360 [ 791.855005][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.860220][ T30] ? __pfx__printk+0x10/0x10 [ 791.864820][ T30] ? vprintk_emit+0x667/0x7c0 [ 791.869507][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 791.874546][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 791.879507][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 791.884979][ T30] ? _printk+0xd5/0x120 [ 791.889144][ T30] ? __pfx__printk+0x10/0x10 [ 791.893740][ T30] ? __wake_up_klogd+0xcc/0x110 [ 791.898602][ T30] ? __pfx__printk+0x10/0x10 [ 791.903205][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 791.908265][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 791.914271][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 791.920287][ T30] watchdog+0xff4/0x1040 [ 791.924549][ T30] ? watchdog+0x1ea/0x1040 [ 791.928989][ T30] ? __pfx_watchdog+0x10/0x10 [ 791.933681][ T30] kthread+0x2f0/0x390 [ 791.937765][ T30] ? __pfx_watchdog+0x10/0x10 [ 791.942456][ T30] ? __pfx_kthread+0x10/0x10 [ 791.947061][ T30] ret_from_fork+0x4b/0x80 [ 791.951484][ T30] ? __pfx_kthread+0x10/0x10 [ 791.956060][ T30] ret_from_fork_asm+0x1a/0x30 [ 791.960846][ T30] [ 791.965687][ T30] Sending NMI from CPU 1 to CPUs 0: [ 791.972098][ C0] NMI backtrace for cpu 0 [ 791.972111][ C0] CPU: 0 UID: 0 PID: 12181 Comm: kworker/u8:3 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 791.972130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 791.972141][ C0] Workqueue: bat_events batadv_nc_worker [ 791.972168][ C0] RIP: 0010:__lock_acquire+0xf44/0x2040 [ 791.972192][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 40 68 fa 93 be 08 00 00 00 e8 44 cf 87 00 48 0f a3 1d 6c 86 8a 12 <0f> 83 69 02 00 00 48 69 c3 c8 00 00 00 48 8d 98 40 e7 96 93 48 bf [ 791.972206][ C0] RSP: 0018:ffffc90009c7f8f0 EFLAGS: 00000057 [ 791.972219][ C0] RAX: 0000000000000001 RBX: 00000000000006cb RCX: ffffffff816fe1cc [ 791.972230][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff93fa6918 [ 791.972240][ C0] RBP: aecd1c49024e2631 R08: ffffffff93fa691f R09: 1ffffffff27f4d23 [ 791.972252][ C0] R10: dffffc0000000000 R11: fffffbfff27f4d24 R12: 0000000000000000 [ 791.972264][ C0] R13: ffff888068c2e4d8 R14: 1ffff1100d185caa R15: ffff888068c2e550 [ 791.972276][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 791.972289][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.972300][ C0] CR2: 0000000020285030 CR3: 000000000e534000 CR4: 00000000003506f0 [ 791.972314][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 791.972323][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 791.972333][ C0] Call Trace: [ 791.972339][ C0] [ 791.972346][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 791.972366][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 791.972387][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 791.972415][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 791.972434][ C0] ? nmi_handle+0x14f/0x5a0 [ 791.972449][ C0] ? nmi_handle+0x2a/0x5a0 [ 791.972464][ C0] ? __lock_acquire+0xf44/0x2040 [ 791.972483][ C0] ? default_do_nmi+0x63/0x160 [ 791.972504][ C0] ? exc_nmi+0x123/0x1f0 [ 791.972528][ C0] ? end_repeat_nmi+0xf/0x53 [ 791.972551][ C0] ? __lock_acquire+0xf3c/0x2040 [ 791.972571][ C0] ? __lock_acquire+0xf44/0x2040 [ 791.972591][ C0] ? __lock_acquire+0xf44/0x2040 [ 791.972613][ C0] ? __lock_acquire+0xf44/0x2040 [ 791.972633][ C0] [ 791.972638][ C0] [ 791.972651][ C0] lock_acquire+0x1ed/0x550 [ 791.972671][ C0] ? batadv_nc_worker+0xcb/0x610 [ 791.972696][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 791.972717][ C0] ? batadv_nc_worker+0xcb/0x610 [ 791.972738][ C0] ? __pfx_lock_release+0x10/0x10 [ 791.972760][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 791.972784][ C0] batadv_nc_worker+0xec/0x610 [ 791.972805][ C0] ? batadv_nc_worker+0xcb/0x610 [ 791.972825][ C0] ? batadv_nc_worker+0xcb/0x610 [ 791.972848][ C0] ? process_scheduled_works+0x945/0x1830 [ 791.972867][ C0] process_scheduled_works+0xa2c/0x1830 [ 791.972899][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 791.972923][ C0] ? assign_work+0x364/0x3d0 [ 791.972944][ C0] worker_thread+0x86d/0xd10 [ 791.972970][ C0] ? __kthread_parkme+0x169/0x1d0 [ 791.972991][ C0] ? __pfx_worker_thread+0x10/0x10 [ 791.973011][ C0] kthread+0x2f0/0x390 [ 791.973032][ C0] ? __pfx_worker_thread+0x10/0x10 [ 791.973051][ C0] ? __pfx_kthread+0x10/0x10 [ 791.973073][ C0] ret_from_fork+0x4b/0x80 [ 791.973094][ C0] ? __pfx_kthread+0x10/0x10 [ 791.973115][ C0] ret_from_fork_asm+0x1a/0x30 [ 791.973143][ C0] [ 792.477356][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 792.484264][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 792.494787][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 792.504861][ T30] Call Trace: [ 792.508160][ T30] [ 792.511111][ T30] dump_stack_lvl+0x241/0x360 [ 792.515828][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.521045][ T30] ? __pfx__printk+0x10/0x10 [ 792.525622][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 792.531592][ T30] ? vscnprintf+0x5d/0x90 [ 792.535903][ T30] panic+0x349/0x860 [ 792.539779][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 792.545920][ T30] ? __pfx_panic+0x10/0x10 [ 792.550321][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 792.555673][ T30] ? __irq_work_queue_local+0x137/0x410 [ 792.561204][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 792.566572][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 792.572708][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 792.578843][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 792.584983][ T30] watchdog+0x1033/0x1040 [ 792.589301][ T30] ? watchdog+0x1ea/0x1040 [ 792.593707][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.598363][ T30] kthread+0x2f0/0x390 [ 792.602418][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.607079][ T30] ? __pfx_kthread+0x10/0x10 [ 792.611656][ T30] ret_from_fork+0x4b/0x80 [ 792.616054][ T30] ? __pfx_kthread+0x10/0x10 [ 792.620628][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.625392][ T30] [ 792.628628][ T30] Kernel Offset: disabled [ 792.632942][ T30] Rebooting in 86400 seconds..