last executing test programs: 48.759705093s ago: executing program 2 (id=957): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x3, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) 47.641498793s ago: executing program 2 (id=958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) r2 = io_uring_setup(0x2282, &(0x7f0000000140)) r3 = dup3(r1, r2, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) 47.299548659s ago: executing program 2 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 46.686595472s ago: executing program 2 (id=963): syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 46.440946555s ago: executing program 5 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 45.954267714s ago: executing program 5 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f"], 0x60}}, 0x0) 44.625928285s ago: executing program 5 (id=970): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 44.557757937s ago: executing program 2 (id=972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "1c3740826e209748", "1567d10072e13c2e915f855917822789", "80ff2e21", "58df30d4704b36e2"}, 0x28) 41.940205686s ago: executing program 5 (id=973): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) 41.623482105s ago: executing program 2 (id=976): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001900)={&(0x7f0000000340)={0x27, r3, 0xffffffffffffffff, 0x4, 0x6d, 0x27, "42cd2fa900d89e48e4119a5ab384b4b740fc4e18c79ac2f7bb0ed10a6367cebd67813bf3eac6bf1d12e782aa21485f100c150084bb1f9260e7e6db13263876", 0x32}, 0x58, &(0x7f00000017c0)=[{&(0x7f00000003c0)="9e0b0fab0f2b2f72c664bd3642b82f0b27f98311dad5f050c5fe16e7b521eebf0bdab2396b649a31ccf0604d7312a06148490dc54516b0c6be1e0b582d", 0x3d}, {&(0x7f00000005c0)="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", 0xd80}, {&(0x7f0000000400)="49c84a9a87f6bc0589c7c32b61f1abc283367c4ec5644a2b996a746a8f4970b037b874851d9709d0bb2a13d5fc74a86bd7cd88d51322fa22a8b850643cff3bec625cd01ce7c646c77c695f5c4d055fb6fd401c32281d7937de4bdee2abaf13980a2292551c6ca8e39501975245742eacc338d6111dec2a64bd539bf98771901ef34e8a77fb1f52f1cdb9750bc0", 0x8d}, {&(0x7f00000015c0)="24c9ecc7be7462ae168fc1e9e73ee75056c6a583fcb40aac59edac9735f5eb4f270c501f458d87babc87a9c4a26c2b35013f28cec82903b458ed514b002f6d29c50dbe5c23d145e59d25673e29f5bdf29c2227f57fc979b3ae3c498ec4bbc05aeebbde3f9b976bf58bc1401145a798823600d55f6e917f4367fbe0cda462f5e28aff0bec4e8db6b058695c3ec6a8a576b9551c5030faa67833a0603105ac3f034f4e33d51b523666d763744389c7722811dc2940e55711e17783cf6d2d6b973d0d7ed3ec7826762ea1700fb846d6e82d30ffc89228a27bc9e466540bd7a6e7b5cecb8875b4a538f7a0ca3a53cacff89c1c8718258d443d07", 0xf8}, {&(0x7f00000004c0)="d21bf76a1532734b02fa6d2ce4d56799cab4", 0x12}, {&(0x7f0000000500)="6f7ebe93cc1ba07a9d2854706ae11792a51153864bd28c01d2ff6676953a05e72f5bf8dd2809353b939b9c477e4690fae15f54753514bb3c97ef1afce3dd1f6c70123235fb63ca8ee82f3d16e0e9b66bfca3cf30cc5d1179", 0x58}, {&(0x7f00000016c0)="7d484a2ec2a7f787958a0e2f2241586976448111442a1700d4bc502721214b2a9c24d197fb91282b0b1edff85deeea29102286b5851e78a130b190273ce8db4018bddedf5302f8e00558195be3352c00f5649b70aaf1986b63ad4e8df773ce143359d0e35447561e6d4250a50dbd76f322b4a037c8723acf6aa45c2c478767e6c003594fd156e4cd72039032c94034a94d35c3e6cf14bb43b68bb1e7b045527fc67b0aff207d7921b537676ff2f3b522026a51abeac4e7c920056c15c9536ef28e2f9424b90f658448", 0xc9}], 0x7, &(0x7f0000001800)={0xc, 0x10a, 0x1}, 0xc}, 0x2000085c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 39.616227017s ago: executing program 5 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10) r0 = io_uring_setup(0x3773, &(0x7f0000000140)={0x0, 0x38c9, 0x800, 0x3, 0xbe}) r1 = syz_io_uring_setup(0x4010d, &(0x7f00000000c0)={0x0, 0x2, 0x8000, 0xfffffffc, 0xfffffffe, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r9, 0x4007) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xf0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 37.23900673s ago: executing program 3 (id=987): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x3}, 0x60) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) copy_file_range(r5, &(0x7f0000000080)=0x6, r4, &(0x7f0000000140)=0x24e3, 0x401, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 37.111572663s ago: executing program 5 (id=988): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000002c000100000000000000000004000080250011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a52"], 0x38}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000400)='0', 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)=0x548) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@mcast1, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xff}, 0x0, @in=@loopback, 0xfffffffd, 0x0, 0x0, 0xb7}}, 0xe4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) close(r0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0xfffd, 0x0, 0x2, 0x0, 0x120, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3d2400000000, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x8}, 0xfffffffd, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x6c}, 0x0, @in=@empty, 0x1, 0x0, 0x3, 0xb7}}, 0xe4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000400)="259a71a76d0910054c6588a888a2", 0x0, 0xf0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 34.332906235s ago: executing program 3 (id=990): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) 32.395688017s ago: executing program 3 (id=993): r0 = io_uring_setup(0x17ba, &(0x7f00000002c0)={0x0, 0xe392, 0x1, 0x1, 0x8}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.703146014s ago: executing program 3 (id=996): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0xe5e4, 0x7fffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x2a1346a3, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x0, 0x2, 0xd59f80, 0xffd, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x7, 0x8, 0x2b, 0x27, {0xffff945a, 0x1}, 0x3, 0xf1}}) 31.48269879s ago: executing program 3 (id=997): socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x707b, 0x0, 0x2000004, 0x289}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 31.211602585s ago: executing program 3 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2041d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x0, 0x1, {}, 0x9}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fcntl$setlease(r3, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fb00) 31.085235748s ago: executing program 1 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10) r0 = io_uring_setup(0x3773, &(0x7f0000000140)={0x0, 0x38c9, 0x800, 0x3, 0xbe}) r1 = syz_io_uring_setup(0x4010d, &(0x7f00000000c0)={0x0, 0x2, 0x8000, 0xfffffffc, 0xfffffffe, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r9, 0x4007) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xf0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 29.959526374s ago: executing program 1 (id=1002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x3}, 0x60) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916340000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) copy_file_range(r5, &(0x7f0000000080)=0x6, r4, &(0x7f0000000140)=0x24e3, 0x401, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 27.374210116s ago: executing program 1 (id=1006): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r2, 0x6}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x9, 0x4, 0x2}, 0x10, 0x27832, r6, 0x0, &(0x7f0000000b40)=[r0], 0x0, 0x10, 0x9, @void, @value}, 0x94) close_range(r8, 0xffffffffffffffff, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) sendfile(r7, r6, 0x0, 0x20000023893) 26.500524051s ago: executing program 32 (id=976): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001900)={&(0x7f0000000340)={0x27, r3, 0xffffffffffffffff, 0x4, 0x6d, 0x27, "42cd2fa900d89e48e4119a5ab384b4b740fc4e18c79ac2f7bb0ed10a6367cebd67813bf3eac6bf1d12e782aa21485f100c150084bb1f9260e7e6db13263876", 0x32}, 0x58, &(0x7f00000017c0)=[{&(0x7f00000003c0)="9e0b0fab0f2b2f72c664bd3642b82f0b27f98311dad5f050c5fe16e7b521eebf0bdab2396b649a31ccf0604d7312a06148490dc54516b0c6be1e0b582d", 0x3d}, {&(0x7f00000005c0)="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", 0xd80}, {&(0x7f0000000400)="49c84a9a87f6bc0589c7c32b61f1abc283367c4ec5644a2b996a746a8f4970b037b874851d9709d0bb2a13d5fc74a86bd7cd88d51322fa22a8b850643cff3bec625cd01ce7c646c77c695f5c4d055fb6fd401c32281d7937de4bdee2abaf13980a2292551c6ca8e39501975245742eacc338d6111dec2a64bd539bf98771901ef34e8a77fb1f52f1cdb9750bc0", 0x8d}, {&(0x7f00000015c0)="24c9ecc7be7462ae168fc1e9e73ee75056c6a583fcb40aac59edac9735f5eb4f270c501f458d87babc87a9c4a26c2b35013f28cec82903b458ed514b002f6d29c50dbe5c23d145e59d25673e29f5bdf29c2227f57fc979b3ae3c498ec4bbc05aeebbde3f9b976bf58bc1401145a798823600d55f6e917f4367fbe0cda462f5e28aff0bec4e8db6b058695c3ec6a8a576b9551c5030faa67833a0603105ac3f034f4e33d51b523666d763744389c7722811dc2940e55711e17783cf6d2d6b973d0d7ed3ec7826762ea1700fb846d6e82d30ffc89228a27bc9e466540bd7a6e7b5cecb8875b4a538f7a0ca3a53cacff89c1c8718258d443d07", 0xf8}, {&(0x7f00000004c0)="d21bf76a1532734b02fa6d2ce4d56799cab4", 0x12}, {&(0x7f0000000500)="6f7ebe93cc1ba07a9d2854706ae11792a51153864bd28c01d2ff6676953a05e72f5bf8dd2809353b939b9c477e4690fae15f54753514bb3c97ef1afce3dd1f6c70123235fb63ca8ee82f3d16e0e9b66bfca3cf30cc5d1179", 0x58}, {&(0x7f00000016c0)="7d484a2ec2a7f787958a0e2f2241586976448111442a1700d4bc502721214b2a9c24d197fb91282b0b1edff85deeea29102286b5851e78a130b190273ce8db4018bddedf5302f8e00558195be3352c00f5649b70aaf1986b63ad4e8df773ce143359d0e35447561e6d4250a50dbd76f322b4a037c8723acf6aa45c2c478767e6c003594fd156e4cd72039032c94034a94d35c3e6cf14bb43b68bb1e7b045527fc67b0aff207d7921b537676ff2f3b522026a51abeac4e7c920056c15c9536ef28e2f9424b90f658448", 0xc9}], 0x7, &(0x7f0000001800)={0xc, 0x10a, 0x1}, 0xc}, 0x2000085c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 25.25158589s ago: executing program 1 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timerfd_create(0x9, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfad2, 0x0, 0xffffffff}, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 24.093074959s ago: executing program 1 (id=1016): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x2c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 23.993384263s ago: executing program 1 (id=1017): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0xa, @in=@broadcast, 0x1}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 21.956360811s ago: executing program 33 (id=988): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000002c000100000000000000000004000080250011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a52"], 0x38}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000400)='0', 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)=0x548) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@mcast1, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xff}, 0x0, @in=@loopback, 0xfffffffd, 0x0, 0x0, 0xb7}}, 0xe4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) close(r0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0xfffd, 0x0, 0x2, 0x0, 0x120, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3d2400000000, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x8}, 0xfffffffd, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x6c}, 0x0, @in=@empty, 0x1, 0x0, 0x3, 0xb7}}, 0xe4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000400)="259a71a76d0910054c6588a888a2", 0x0, 0xf0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 21.642673002s ago: executing program 0 (id=1021): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) 20.739594569s ago: executing program 0 (id=1022): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xfffffffffffffc40}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[], 0x2c}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) timerfd_create(0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8208200) accept4$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000380)=0x10, 0x800) 20.605564098s ago: executing program 4 (id=1024): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 19.666626116s ago: executing program 0 (id=1025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, 0x0, 0x0, 0x20044000) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 19.591639955s ago: executing program 0 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10) r0 = io_uring_setup(0x3773, &(0x7f0000000140)={0x0, 0x38c9, 0x800, 0x3, 0xbe}) r1 = syz_io_uring_setup(0x4010d, &(0x7f00000000c0)={0x0, 0x2, 0x8000, 0xfffffffc, 0xfffffffe, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r9, 0x4007) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xf0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 19.570774509s ago: executing program 4 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timerfd_create(0x9, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfad2, 0x0, 0xffffffff}, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 19.439662201s ago: executing program 0 (id=1028): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x2c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 19.387272288s ago: executing program 0 (id=1029): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440fdd544f9b0176aeeef844967f4cbb2a56842c683bd04fcb9b85331f3e5d78605f7e72a5dcdbd67196ca41d2aea01e4bb568a09730c70000000500674d363d207a4b9194175a14bc040ef5a5a34989b90decd8d5df4acf3b486829fadaf16d47268ec47f6e0c60c8cf5e4da2824c50185a2dc218846279", @ANYRES16=r1, @ANYRESDEC], 0x7c}}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023022301020905"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) 17.868085867s ago: executing program 4 (id=1030): r0 = socket$inet6(0xa, 0x5, 0x7d) r1 = signalfd4(r0, &(0x7f0000000080)={[0x1]}, 0x8, 0x80000) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0xffff2eee, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x1}) dup(0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) readahead(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0xe23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x14, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 16.119842023s ago: executing program 34 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2041d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x0, 0x1, {}, 0x9}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fcntl$setlease(r3, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fb00) 16.10780915s ago: executing program 4 (id=1032): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) 15.359676991s ago: executing program 4 (id=1033): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0xe5e4, 0x7fffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x2a1346a3, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x0, 0x2, 0xd59f80, 0xffd, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x7, 0x8, 0x2b, 0x27, {0xffff945a, 0x1}, 0x3, 0xf1}}) 15.358093042s ago: executing program 4 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6472000000000000000000000000000000000000000000000000000000000500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 8.509618996s ago: executing program 35 (id=1017): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0xa, @in=@broadcast, 0x1}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.49750848s ago: executing program 36 (id=1029): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440fdd544f9b0176aeeef844967f4cbb2a56842c683bd04fcb9b85331f3e5d78605f7e72a5dcdbd67196ca41d2aea01e4bb568a09730c70000000500674d363d207a4b9194175a14bc040ef5a5a34989b90decd8d5df4acf3b486829fadaf16d47268ec47f6e0c60c8cf5e4da2824c50185a2dc218846279", @ANYRES16=r1, @ANYRESDEC], 0x7c}}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023022301020905"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) 0s ago: executing program 37 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6472000000000000000000000000000000000000000000000000000000000500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 74.565059][ T5821] cgroup: Unknown subsys name 'net' [ 74.705435][ T5821] cgroup: Unknown subsys name 'cpuset' [ 74.713654][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.065576][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.320172][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.347486][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.373591][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.375594][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.385548][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.388355][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.395154][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.403183][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.411530][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.417801][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.423640][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.432344][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.437366][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.445692][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.452955][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.459487][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.465642][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.481605][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.489716][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.497637][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.505096][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.505479][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.519801][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.521513][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.539258][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.542754][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.547668][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.561660][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.562249][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.577012][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.577037][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.577305][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.598394][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.601944][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.617521][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.629488][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.047321][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 81.155131][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 81.307666][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 81.338550][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.346526][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.354816][ T5833] bridge_slave_0: entered allmulticast mode [ 81.362448][ T5833] bridge_slave_0: entered promiscuous mode [ 81.419686][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.427554][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.434902][ T5833] bridge_slave_1: entered allmulticast mode [ 81.443932][ T5833] bridge_slave_1: entered promiscuous mode [ 81.460153][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 81.487815][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 81.534987][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.542403][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.549631][ T5852] bridge_slave_0: entered allmulticast mode [ 81.556977][ T5852] bridge_slave_0: entered promiscuous mode [ 81.583452][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.595522][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.608406][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 81.618109][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.626041][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.633643][ T5852] bridge_slave_1: entered allmulticast mode [ 81.641022][ T5852] bridge_slave_1: entered promiscuous mode [ 81.710842][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.785072][ T5833] team0: Port device team_slave_0 added [ 81.793113][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.816000][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.823356][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.830680][ T5832] bridge_slave_0: entered allmulticast mode [ 81.837558][ T5832] bridge_slave_0: entered promiscuous mode [ 81.846500][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.853775][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.861077][ T5832] bridge_slave_1: entered allmulticast mode [ 81.868757][ T5832] bridge_slave_1: entered promiscuous mode [ 81.891528][ T5833] team0: Port device team_slave_1 added [ 81.999675][ T5852] team0: Port device team_slave_0 added [ 82.009217][ T5852] team0: Port device team_slave_1 added [ 82.031723][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.045821][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.074448][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.081949][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.089165][ T5850] bridge_slave_0: entered allmulticast mode [ 82.096524][ T5850] bridge_slave_0: entered promiscuous mode [ 82.165111][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.172682][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.200295][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.212412][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.219524][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.233589][ T5850] bridge_slave_1: entered allmulticast mode [ 82.240584][ T5850] bridge_slave_1: entered promiscuous mode [ 82.247715][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.254877][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.280891][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.293733][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.300914][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.327511][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.339028][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.346729][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.354442][ T5835] bridge_slave_0: entered allmulticast mode [ 82.361903][ T5835] bridge_slave_0: entered promiscuous mode [ 82.371932][ T5832] team0: Port device team_slave_0 added [ 82.378019][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.385566][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.393042][ T5835] bridge_slave_1: entered allmulticast mode [ 82.399999][ T5835] bridge_slave_1: entered promiscuous mode [ 82.417760][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.425093][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.451254][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.478523][ T5832] team0: Port device team_slave_1 added [ 82.510022][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.517441][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.524919][ T5843] bridge_slave_0: entered allmulticast mode [ 82.532244][ T5843] bridge_slave_0: entered promiscuous mode [ 82.542055][ T5838] Bluetooth: hci2: command tx timeout [ 82.573640][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.588095][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.596352][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.604563][ T5843] bridge_slave_1: entered allmulticast mode [ 82.612098][ T5843] bridge_slave_1: entered promiscuous mode [ 82.621340][ T5838] Bluetooth: hci0: command tx timeout [ 82.636267][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.648173][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.670855][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.693969][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.703359][ T5838] Bluetooth: hci4: command tx timeout [ 82.703424][ T5844] Bluetooth: hci1: command tx timeout [ 82.709023][ T5842] Bluetooth: hci5: command tx timeout [ 82.720794][ T5841] Bluetooth: hci3: command tx timeout [ 82.766975][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.774927][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.801827][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.844353][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.868274][ T5852] hsr_slave_0: entered promiscuous mode [ 82.875155][ T5852] hsr_slave_1: entered promiscuous mode [ 82.895016][ T5850] team0: Port device team_slave_0 added [ 82.901816][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.908875][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.935177][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.949149][ T5835] team0: Port device team_slave_0 added [ 82.957528][ T5835] team0: Port device team_slave_1 added [ 82.976270][ T5833] hsr_slave_0: entered promiscuous mode [ 82.982766][ T5833] hsr_slave_1: entered promiscuous mode [ 82.989100][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.997199][ T5833] Cannot create hsr debugfs directory [ 83.022992][ T5850] team0: Port device team_slave_1 added [ 83.062105][ T5843] team0: Port device team_slave_0 added [ 83.068560][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.075802][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.102635][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.148911][ T5843] team0: Port device team_slave_1 added [ 83.168464][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.175895][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.202918][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.239074][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.246321][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.273590][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.331759][ T5832] hsr_slave_0: entered promiscuous mode [ 83.338230][ T5832] hsr_slave_1: entered promiscuous mode [ 83.350249][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.357981][ T5832] Cannot create hsr debugfs directory [ 83.369795][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.377411][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.403603][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.430962][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.437965][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.464508][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.509860][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.516996][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.543376][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.663448][ T5835] hsr_slave_0: entered promiscuous mode [ 83.669962][ T5835] hsr_slave_1: entered promiscuous mode [ 83.677197][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.684913][ T5835] Cannot create hsr debugfs directory [ 83.708024][ T5850] hsr_slave_0: entered promiscuous mode [ 83.714771][ T5850] hsr_slave_1: entered promiscuous mode [ 83.720952][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.728538][ T5850] Cannot create hsr debugfs directory [ 83.839935][ T5843] hsr_slave_0: entered promiscuous mode [ 83.848082][ T5843] hsr_slave_1: entered promiscuous mode [ 83.854898][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.863398][ T5843] Cannot create hsr debugfs directory [ 84.070887][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.105358][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.139531][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.177864][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.248383][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.295984][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.319644][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.344412][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.402434][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.423490][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.474907][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.517357][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.543211][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.553753][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.583129][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.596774][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.620997][ T5838] Bluetooth: hci2: command tx timeout [ 84.654869][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.685265][ T5850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.701127][ T5838] Bluetooth: hci0: command tx timeout [ 84.701636][ T5850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.743224][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.758599][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.777439][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.784318][ T5838] Bluetooth: hci1: command tx timeout [ 84.791054][ T5842] Bluetooth: hci5: command tx timeout [ 84.796592][ T5842] Bluetooth: hci3: command tx timeout [ 84.801379][ T5850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.802541][ T5838] Bluetooth: hci4: command tx timeout [ 84.827831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.835093][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.851438][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.860362][ T5850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.883696][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.890939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.918349][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.015810][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.082457][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.126254][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.133460][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.152158][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.173735][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.205292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.212479][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.239851][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.308574][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.339111][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.377469][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.384737][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.399364][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.450361][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.457539][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.479651][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.486830][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.543974][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.553609][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.560781][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.583284][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.608304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.616169][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.686999][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.694231][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.735425][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.829370][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.940306][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.947512][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.992407][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.999560][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.108781][ T5833] veth0_vlan: entered promiscuous mode [ 86.137145][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.204023][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.211997][ T5833] veth1_vlan: entered promiscuous mode [ 86.315279][ T969] cfg80211: failed to load regulatory.db [ 86.370234][ T5833] veth0_macvtap: entered promiscuous mode [ 86.433664][ T5833] veth1_macvtap: entered promiscuous mode [ 86.523267][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.580182][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.599553][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.611974][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.662166][ T5852] veth0_vlan: entered promiscuous mode [ 86.685280][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.697067][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.711185][ T5838] Bluetooth: hci2: command tx timeout [ 86.720836][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.729749][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.790897][ T5838] Bluetooth: hci0: command tx timeout [ 86.855361][ T5852] veth1_vlan: entered promiscuous mode [ 86.877675][ T5838] Bluetooth: hci4: command tx timeout [ 86.883361][ T5842] Bluetooth: hci3: command tx timeout [ 86.888791][ T5842] Bluetooth: hci5: command tx timeout [ 86.894957][ T5841] Bluetooth: hci1: command tx timeout [ 87.006886][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.080838][ T5832] veth0_vlan: entered promiscuous mode [ 87.125403][ T5852] veth0_macvtap: entered promiscuous mode [ 87.176367][ T5852] veth1_macvtap: entered promiscuous mode [ 87.202231][ T5832] veth1_vlan: entered promiscuous mode [ 87.269310][ T5835] veth0_vlan: entered promiscuous mode [ 87.295453][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.307848][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.322399][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.388895][ T5835] veth1_vlan: entered promiscuous mode [ 87.410165][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.429634][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.446851][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.458736][ T5832] veth0_macvtap: entered promiscuous mode [ 87.473855][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.486947][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.513468][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.522875][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.532163][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.545051][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.560128][ T5843] veth0_vlan: entered promiscuous mode [ 87.575349][ T5843] veth1_vlan: entered promiscuous mode [ 87.595743][ T5850] veth0_vlan: entered promiscuous mode [ 87.618218][ T5832] veth1_macvtap: entered promiscuous mode [ 87.647622][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.656077][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.706353][ T5850] veth1_vlan: entered promiscuous mode [ 87.718480][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.729647][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.739701][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.751636][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.762921][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.774304][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.785281][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.796854][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.812161][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.823956][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.869494][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878500][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.887697][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.897264][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.929059][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.953647][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.987417][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.028603][ T5843] veth0_macvtap: entered promiscuous mode [ 88.054976][ T5835] veth0_macvtap: entered promiscuous mode [ 88.063143][ T5945] loop0: detected capacity change from 0 to 512 [ 88.071595][ T5843] veth1_macvtap: entered promiscuous mode [ 88.102999][ T5945] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 88.113776][ T5850] veth0_macvtap: entered promiscuous mode [ 88.123615][ T5835] veth1_macvtap: entered promiscuous mode [ 88.137919][ T5945] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1: attempt to clear invalid blocks 2 len 1 [ 88.147791][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.161973][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.175045][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.175286][ T5945] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 88.185612][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.185641][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.185663][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.187127][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.194480][ T5945] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 88.211957][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.228394][ T5945] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1: invalid indirect mapped block 1819239214 (level 0) [ 88.238877][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.260940][ T5945] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1: invalid indirect mapped block 1819239214 (level 1) [ 88.276769][ T5850] veth1_macvtap: entered promiscuous mode [ 88.315273][ T5945] EXT4-fs (loop0): 1 truncate cleaned up [ 88.320253][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.332146][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.339050][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.361475][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.372285][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.382986][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.393505][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.405617][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.453107][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472490][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.493242][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.500641][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524285][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.563502][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.633355][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.662849][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.681534][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.723383][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.739841][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.750332][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.767964][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.788327][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.798739][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.821270][ T5838] Bluetooth: hci2: command tx timeout [ 88.828288][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.846763][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.857789][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.870603][ T5838] Bluetooth: hci0: command tx timeout [ 88.885588][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.904227][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.927799][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.943495][ T5838] Bluetooth: hci3: command tx timeout [ 88.949064][ T5838] Bluetooth: hci4: command tx timeout [ 88.955243][ T5838] Bluetooth: hci5: command tx timeout [ 88.960870][ T5838] Bluetooth: hci1: command tx timeout [ 88.972754][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.988735][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.540814][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.909297][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.931079][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.052327][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.069152][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.079680][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.089594][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.107624][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.117949][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.135442][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.146624][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.176739][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.216919][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.268368][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.281802][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.291716][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.302300][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.358621][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.369513][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.380026][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.390880][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.402183][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.412985][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.423903][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.434549][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.445458][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.483188][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.528376][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.647975][ T5850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.686209][ T5850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.724903][ T5850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.759494][ T5850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.909057][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.952665][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.565348][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.775565][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.919052][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939898][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.094640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.113793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.229192][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.265588][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.378074][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.404611][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.516348][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.527319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.558514][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.336057][ T5979] xt_hashlimit: size too large, truncated to 1048576 [ 94.609197][ T6001] loop0: detected capacity change from 0 to 512 [ 94.677820][ T6001] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 94.735239][ T6001] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.17: attempt to clear invalid blocks 2 len 1 [ 94.855597][ T6001] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 94.872151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.960882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 95.200660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.227437][ T6001] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.17: invalid indirect mapped block 1819239214 (level 0) [ 95.316975][ T6001] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.17: invalid indirect mapped block 1819239214 (level 1) [ 95.456568][ T6001] EXT4-fs (loop0): 1 truncate cleaned up [ 95.742078][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.451623][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.506397][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.841041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.940776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.111288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.370588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.378932][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.510647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.520920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.068248][ T6050] Process accounting resumed [ 101.858664][ T6049] loop0: detected capacity change from 0 to 4096 [ 101.873887][ T6049] ======================================================= [ 101.873887][ T6049] WARNING: The mand mount option has been deprecated and [ 101.873887][ T6049] and is ignored by this kernel. Remove the mand [ 101.873887][ T6049] option from the mount to silence this warning. [ 101.873887][ T6049] ======================================================= [ 101.930858][ T5837] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.936705][ T6049] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 102.090691][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 102.106261][ T5837] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.167979][ T6049] ntfs3(loop0): failed to convert "c46c" to cp1250 [ 102.300047][ T5837] usb 4-1: config 0 has no interface number 0 [ 102.308661][ T5837] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 6090, setting to 64 [ 102.319846][ T5837] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.328992][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.367251][ T5837] usb 4-1: config 0 descriptor?? [ 103.381449][ T5837] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 103.633520][ T6045] netlink: 56 bytes leftover after parsing attributes in process `syz.3.29'. [ 103.650221][ T5837] usb 4-1: USB disconnect, device number 2 [ 103.902268][ T6068] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.218957][ T6082] netlink: 'syz.5.40': attribute type 1 has an invalid length. [ 105.272397][ T6082] netlink: 224 bytes leftover after parsing attributes in process `syz.5.40'. [ 105.890085][ T6096] process 'syz.1.42' launched '/dev/fd/7' with NULL argv: empty string added [ 107.843457][ T6111] Process accounting resumed [ 108.661821][ T5838] Bluetooth: hci6: sending frame failed (-49) [ 108.669084][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 108.752633][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 108.803371][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 109.012033][ T6093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.43'. [ 111.154025][ T5842] Bluetooth: hci5: Malformed Event: 0x2f [ 112.312255][ T6135] loop2: detected capacity change from 0 to 4096 [ 112.386172][ T6135] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 112.792293][ T6135] ntfs3(loop2): failed to convert "c46c" to cp1250 [ 113.250660][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.470606][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 113.492667][ T5837] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.533004][ T5837] usb 2-1: config 0 has no interface number 0 [ 113.539208][ T5837] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 6090, setting to 64 [ 113.637330][ T5837] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.715432][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.738028][ T5837] usb 2-1: config 0 descriptor?? [ 114.764134][ T5837] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 114.986965][ T6157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.55'. [ 115.130705][ T5837] usb 2-1: USB disconnect, device number 2 [ 116.268875][ T6181] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 117.183010][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'. [ 117.663734][ T6194] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 117.670589][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.502941][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 118.520702][ T6195] vhci_hcd: connection closed [ 118.747795][ T66] vhci_hcd: stop threads [ 119.650597][ T5896] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 119.666868][ T66] vhci_hcd: release socket [ 119.692016][ T66] vhci_hcd: disconnect device [ 119.819862][ T5842] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 120.010354][ T6210] fuse: Bad value for 'fd' [ 120.195742][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 121.247766][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 121.821366][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.315684][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 123.380995][ T5900] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.389111][ T5900] usb 3-1: config 0 has no interface number 0 [ 123.437841][ T5900] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 6090, setting to 64 [ 123.506790][ T5900] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.553693][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.621347][ T5900] usb 3-1: config 0 descriptor?? [ 123.661773][ T5900] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 124.143276][ T6267] ISOFS: Unable to identify CD-ROM format. [ 124.201955][ T6267] Process accounting resumed [ 124.229733][ T6267] Zero length message leads to an empty skb [ 124.779772][ T5926] usb 3-1: USB disconnect, device number 2 [ 124.820663][ T5896] vhci_hcd: vhci_device speed not set [ 126.262237][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 126.340820][ T6282] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 126.347388][ T6282] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.395387][ T6289] loop2: detected capacity change from 0 to 16 [ 126.600677][ T6282] vhci_hcd vhci_hcd.0: Device attached [ 126.631353][ T6289] erofs (device loop2): mounted with root inode @ nid 36. [ 126.758208][ T6286] vhci_hcd: connection closed [ 126.961548][ T1130] vhci_hcd: stop threads [ 127.000660][ T5926] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 127.040183][ T1130] vhci_hcd: release socket [ 127.064208][ T1130] vhci_hcd: disconnect device [ 127.128575][ T6298] syz.2.84: attempt to access beyond end of device [ 127.128575][ T6298] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 127.609627][ T6308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.86'. [ 131.614999][ T6327] 9pnet_virtio: no channels available for device syz [ 131.833037][ T6332] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 131.864766][ T6327] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure [ 132.152247][ T5926] vhci_hcd: vhci_device speed not set [ 132.386596][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.913260][ T5842] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 134.797714][ T6351] Process accounting resumed [ 136.651899][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.105'. [ 137.531086][ T6395] loop1: detected capacity change from 0 to 4096 [ 139.014875][ T6429] syzkaller1: entered promiscuous mode [ 139.046434][ T6429] syzkaller1: entered allmulticast mode [ 139.458702][ T6438] Process accounting resumed [ 143.526320][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'. [ 144.157856][ T6472] loop5: detected capacity change from 0 to 4096 [ 146.250591][ T5842] Bluetooth: hci2: command tx timeout [ 147.650623][ T5842] Bluetooth: hci2: Malformed Event: 0x2f [ 148.139839][ T6522] Process accounting resumed [ 148.960927][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 149.822666][ T6537] ISOFS: Unable to identify CD-ROM format. [ 149.867023][ T6537] Process accounting resumed [ 151.198066][ T6548] overlayfs: missing 'lowerdir' [ 154.825448][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 156.443613][ T5842] Bluetooth: hci4: unknown advertising packet type: 0xaa [ 156.443684][ T5842] Bluetooth: hci4: unknown advertising packet type: 0x79 [ 157.553880][ T6579] Process accounting resumed [ 158.666282][ T5842] Bluetooth: hci2: Malformed Event: 0x2f [ 159.855661][ T6607] loop4: detected capacity change from 0 to 1024 [ 159.895801][ T5842] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 160.075105][ T6607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.135597][ T6607] EXT4-fs (loop4): shut down requested (0) [ 160.743162][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.939051][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.511688][ T6671] Process accounting resumed [ 165.757026][ T6675] loop1: detected capacity change from 0 to 4096 [ 167.142084][ T5842] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 167.532708][ T6704] loop2: detected capacity change from 0 to 16 [ 167.599537][ T6704] erofs (device loop2): mounted with root inode @ nid 36. [ 168.272960][ T6718] xt_hashlimit: size too large, truncated to 1048576 [ 171.798037][ T6749] capability: warning: `syz.1.191' uses 32-bit capabilities (legacy support in use) [ 171.842102][ T6750] netlink: 'syz.5.190': attribute type 4 has an invalid length. [ 172.372368][ T6761] input: syz0 as /devices/virtual/input/input6 [ 173.564523][ T6766] ISOFS: Unable to identify CD-ROM format. [ 173.778957][ T6766] Process accounting resumed [ 174.901157][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 175.422706][ T6787] xt_hashlimit: size too large, truncated to 1048576 [ 178.780950][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.199'. [ 179.148334][ T6830] Process accounting resumed [ 179.933530][ T35] Bluetooth: hci6: Frame reassembly failed (-84) [ 180.005105][ T6726] Bluetooth: hci6: Frame reassembly failed (-84) [ 181.755763][ T6860] loop0: detected capacity change from 0 to 1024 [ 181.840591][ T5896] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.877370][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.900721][ T5838] Bluetooth: hci6: command 0x1003 tx timeout [ 181.901018][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 182.039763][ T6860] EXT4-fs (loop0): shut down requested (0) [ 182.091029][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.176260][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 182.226509][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.260590][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.332524][ T6881] loop5: detected capacity change from 0 to 16 [ 182.335385][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.381152][ T6881] erofs (device loop5): mounted with root inode @ nid 36. [ 182.392892][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.458097][ T5896] usb 2-1: config 0 descriptor?? [ 182.492668][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.520277][ T6851] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.012100][ T5896] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 183.099558][ T5896] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 183.295204][ T5896] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 183.398415][ T5896] usb 2-1: USB disconnect, device number 3 [ 183.402571][ T6906] syz.5.223: attempt to access beyond end of device [ 183.402571][ T6906] loop5: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 184.897991][ T6935] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.922101][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.420835][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 185.450052][ T5896] usb 1-1: no configurations [ 185.469613][ T5896] usb 1-1: can't read configurations, error -22 [ 185.666729][ T5896] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.265089][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 186.307768][ T5896] usb 1-1: no configurations [ 186.359603][ T5896] usb 1-1: can't read configurations, error -22 [ 186.449093][ T5896] usb usb1-port1: attempt power cycle [ 186.478833][ T6947] loop5: detected capacity change from 0 to 1024 [ 186.656461][ T6947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.717117][ T6947] EXT4-fs (loop5): shut down requested (0) [ 186.841868][ T5896] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.898489][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 186.932223][ T6964] ISOFS: Unable to identify CD-ROM format. [ 186.944970][ T6964] Process accounting resumed [ 186.958238][ T5896] usb 1-1: no configurations [ 186.975666][ T5896] usb 1-1: can't read configurations, error -22 [ 187.011858][ T5850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.141390][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 187.237108][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 187.253126][ T5896] usb 1-1: no configurations [ 187.257812][ T5896] usb 1-1: can't read configurations, error -22 [ 187.294097][ T5896] usb usb1-port1: unable to enumerate USB device [ 187.551105][ T5925] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 187.984161][ T5925] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 188.044369][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.121851][ T5925] usb 6-1: config 0 has no interfaces? [ 188.411787][ T6996] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 188.531653][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.543548][ T5925] usb 6-1: config 0 has no interfaces? [ 188.597597][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.650589][ T5925] usb 6-1: config 0 has no interfaces? [ 188.670220][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.712957][ T5925] usb 6-1: config 0 has no interfaces? [ 188.738841][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.837432][ T5925] usb 6-1: config 0 has no interfaces? [ 188.972342][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.129003][ T5925] usb 6-1: config 0 has no interfaces? [ 189.158132][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.352100][ T5925] usb 6-1: config 0 has no interfaces? [ 189.465690][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.497575][ T5925] usb 6-1: config 0 has no interfaces? [ 189.549952][ T5925] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.579488][ T5925] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.619168][ T5925] usb 6-1: Product: syz [ 189.810536][ T5925] usb 6-1: Manufacturer: syz [ 189.823779][ T5925] usb 6-1: SerialNumber: syz [ 190.851126][ T5925] usb 6-1: config 0 descriptor?? [ 191.430142][ T5925] usb 6-1: can't set config #0, error -71 [ 191.500908][ T5925] usb 6-1: USB disconnect, device number 2 [ 191.685177][ T7027] loop5: detected capacity change from 0 to 1024 [ 191.788428][ T7027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.198189][ T6080] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 192.239226][ T6080] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 192.326582][ T6080] EXT4-fs (loop5): This should not happen!! Data will be lost [ 192.326582][ T6080] [ 192.370643][ T6080] EXT4-fs (loop5): Total free blocks count 0 [ 192.414309][ T6080] EXT4-fs (loop5): Free/Dirty block details [ 192.420386][ T6080] EXT4-fs (loop5): free_blocks=68451041280 [ 192.446932][ T6080] EXT4-fs (loop5): dirty_blocks=240 [ 192.477561][ T6080] EXT4-fs (loop5): Block reservation details [ 192.501531][ T6080] EXT4-fs (loop5): i_reserved_data_blocks=15 [ 192.578255][ T5850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.650987][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.820615][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 192.840770][ T5842] Bluetooth: hci4: unknown advertising packet type: 0xaa [ 192.840812][ T5842] Bluetooth: hci4: unknown advertising packet type: 0x79 [ 192.871475][ T5896] usb 4-1: no configurations [ 192.943291][ T7056] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 192.981184][ T5896] usb 4-1: can't read configurations, error -22 [ 193.235740][ T5896] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.386842][ T7075] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 193.451734][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 193.498748][ T5896] usb 4-1: no configurations [ 193.559849][ T5896] usb 4-1: can't read configurations, error -22 [ 193.606071][ T5896] usb usb4-port1: attempt power cycle [ 193.829024][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.980741][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.992514][ T7086] loop4: detected capacity change from 0 to 1024 [ 194.044789][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 194.066324][ T5896] usb 4-1: no configurations [ 194.095609][ T7086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.337358][ T5896] usb 4-1: can't read configurations, error -22 [ 194.480652][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 194.553503][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 194.571445][ T5896] usb 4-1: no configurations [ 194.576096][ T5896] usb 4-1: can't read configurations, error -22 [ 194.618442][ T6080] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 194.631345][ T5896] usb usb4-port1: unable to enumerate USB device [ 194.881431][ T6080] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 620 with error 28 [ 194.893898][ T6080] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.893898][ T6080] [ 194.905995][ T6080] EXT4-fs (loop4): Total free blocks count 0 [ 194.913727][ T6080] EXT4-fs (loop4): Free/Dirty block details [ 194.927040][ T6080] EXT4-fs (loop4): free_blocks=68451041280 [ 194.938465][ T7112] veth1_macvtap: left promiscuous mode [ 194.939874][ T6080] EXT4-fs (loop4): dirty_blocks=624 [ 195.464286][ T6080] EXT4-fs (loop4): Block reservation details [ 195.480700][ T6080] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 195.524967][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.818715][ T7121] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.064608][ T7136] : entered promiscuous mode [ 199.503017][ T7165] block nbd5: shutting down sockets [ 199.506856][ T7176] loop1: detected capacity change from 0 to 1024 [ 199.672348][ T7176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.084020][ T7188] Process accounting resumed [ 200.089011][ T7188] kernel write not supported for file /155/clear_refs (pid: 7188 comm: syz.5.295) [ 200.163246][ T35] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 200.204741][ T7194] ISOFS: Unable to identify CD-ROM format. [ 200.217323][ T7194] Process accounting resumed [ 200.240660][ T35] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 392 with error 28 [ 200.269601][ T35] EXT4-fs (loop1): This should not happen!! Data will be lost [ 200.269601][ T35] [ 200.288562][ T35] EXT4-fs (loop1): Total free blocks count 0 [ 200.295939][ T35] EXT4-fs (loop1): Free/Dirty block details [ 200.318443][ T35] EXT4-fs (loop1): free_blocks=68451041280 [ 200.342704][ T35] EXT4-fs (loop1): dirty_blocks=400 [ 200.348008][ T35] EXT4-fs (loop1): Block reservation details [ 200.390587][ T35] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 200.456475][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.922536][ T5977] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 201.030619][ T5900] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 201.130632][ T5977] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 201.174187][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.205925][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.222981][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.240152][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.263247][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.288199][ T5900] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.301195][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.338489][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.344132][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.385666][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.392864][ T5900] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 201.405265][ T7225] input: syz0 as /devices/virtual/input/input11 [ 201.420879][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.432690][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.460152][ T5900] usb 5-1: Product: syz [ 201.479700][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.479997][ T5900] usb 5-1: Manufacturer: syz [ 201.523680][ T5900] usb 5-1: SerialNumber: syz [ 201.527880][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.532490][ T5900] usb 5-1: config 0 descriptor?? [ 201.574560][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.611367][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.651918][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.720538][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.736444][ T5900] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 201.828503][ T5900] usb 5-1: USB disconnect, device number 2 [ 202.008038][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.034532][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.050677][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.103911][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.286082][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.300138][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.309854][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.311166][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.318285][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.345554][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.362586][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.381658][ T5977] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 202.400626][ T5977] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 202.538531][ T5977] usb 6-1: Product: syz [ 202.610886][ T5977] usb 6-1: Manufacturer: syz [ 202.615756][ T5977] usb 6-1: SerialNumber: syz [ 202.640284][ T5977] usb 6-1: config 0 descriptor?? [ 202.649464][ T5977] yurex 6-1:0.0: Could not find endpoints [ 202.864961][ T5977] usb 6-1: USB disconnect, device number 3 [ 204.378369][ T7268] loop4: detected capacity change from 0 to 1024 [ 204.481658][ T7268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.504504][ T7195] ALSA: mixer_oss: invalid OSS volume '·' [ 205.118381][ T6726] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 205.260700][ T6726] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 584 with error 28 [ 205.365664][ T6726] EXT4-fs (loop4): This should not happen!! Data will be lost [ 205.365664][ T6726] [ 205.447285][ T6726] EXT4-fs (loop4): Total free blocks count 0 [ 205.494461][ T6726] EXT4-fs (loop4): Free/Dirty block details [ 205.571307][ T6726] EXT4-fs (loop4): free_blocks=68451041280 [ 205.577194][ T6726] EXT4-fs (loop4): dirty_blocks=592 [ 205.773261][ T7295] input: syz0 as /devices/virtual/input/input12 [ 205.856374][ T6726] EXT4-fs (loop4): Block reservation details [ 205.866642][ T6726] EXT4-fs (loop4): i_reserved_data_blocks=37 [ 205.915505][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.232819][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 206.239194][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 206.252982][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 206.260849][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 206.267301][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 206.680768][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 206.946915][ T5912] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.983476][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.051977][ T5912] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.077931][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.105055][ T5912] usb 3-1: Product: syz [ 207.130286][ T5912] usb 3-1: Manufacturer: syz [ 207.418936][ T5912] usb 3-1: SerialNumber: syz [ 207.427132][ T5912] usb 3-1: config 0 descriptor?? [ 208.186966][ T7331] loop3: detected capacity change from 0 to 1024 [ 208.295891][ T5912] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 208.374584][ T5912] usb 3-1: USB disconnect, device number 3 [ 208.376469][ T7331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.600561][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.223662][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.491909][ T5837] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.711200][ T7412] Process accounting resumed [ 212.947304][ T5837] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.940669][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.009240][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.068872][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.103509][ T5837] usb 4-1: Product: syz [ 214.143114][ T5837] usb 4-1: Manufacturer: syz [ 214.181906][ T5837] usb 4-1: SerialNumber: syz [ 214.457857][ T5837] usb 4-1: config 0 descriptor?? [ 214.713941][ T5837] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 214.796513][ T5856] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 214.938406][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.974314][ T5900] usb 4-1: USB disconnect, device number 7 [ 215.511775][ T7456] netlink: 71 bytes leftover after parsing attributes in process `syz.2.357'. [ 215.541251][ T5977] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 215.755471][ T7447] kernel profiling enabled (shift: 7) [ 216.083783][ T7447] input: syz0 as /devices/virtual/input/input13 [ 217.172050][ T5856] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 218.432043][ T5977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.471320][ T3602] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 218.505092][ T5977] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 218.522523][ T5977] usb 5-1: can't read configurations, error -71 [ 218.721618][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 218.840129][ T5926] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 218.850598][ T5926] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 218.871770][ T3602] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.166181][ T3602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.606258][ T3602] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.783730][ T3602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.793599][ T3602] usb 1-1: Product: syz [ 219.797800][ T3602] usb 1-1: Manufacturer: syz [ 219.805741][ T3602] usb 1-1: SerialNumber: syz [ 219.812793][ T3602] usb 1-1: config 0 descriptor?? [ 219.900731][ T3602] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 220.148527][ T5900] usb 1-1: USB disconnect, device number 6 [ 220.194767][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.850668][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 221.863291][ T5926] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 221.876577][ T5926] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 224.102860][ T5926] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 224.157863][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.513509][ T5926] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 226.711567][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 226.723833][ T5926] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 226.738039][ T5926] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 227.268243][ T7650] loop1: detected capacity change from 0 to 32768 [ 227.297062][ T7650] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc64_nonzero: got 781ab114ae4a1f93 should be 0000000000000000 [ 227.440776][ T7650] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 227.458160][ T7650] invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], shutting down [ 227.476817][ T7650] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 0 [ 227.486260][ T7650] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 227.495533][ T7650] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 227.505332][ T7650] bcachefs (loop1): shutting down [ 227.523865][ T7650] bcachefs (loop1): shutdown complete [ 228.063937][ T7669] serio: Serial port ptm0 [ 229.020797][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 229.060588][ T5926] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 229.103274][ T5926] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 229.321455][ T7650] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 231.342335][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 231.349094][ T5926] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 231.367383][ T5926] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 234.910440][ T7772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.125463][ T7778] Process accounting resumed [ 235.685372][ T7801] input: syz0 as /devices/virtual/input/input14 [ 239.401001][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 239.599402][ T5912] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 239.641184][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.832251][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.880832][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.888897][ T5912] usb 5-1: Product: syz [ 239.940140][ T5912] usb 5-1: Manufacturer: syz [ 239.965632][ T5912] usb 5-1: SerialNumber: syz [ 240.003304][ T5912] usb 5-1: config 0 descriptor?? [ 240.091772][ T5912] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 240.256104][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.259090][ T5912] usb 5-1: USB disconnect, device number 5 [ 241.159419][ T7882] input: syz0 as /devices/virtual/input/input15 [ 243.197626][ T7900] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 245.280668][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 245.462504][ T5900] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.478498][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.566580][ T5900] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.587506][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.617416][ T5900] usb 2-1: Product: syz [ 245.624217][ T5900] usb 2-1: Manufacturer: syz [ 245.633390][ T5900] usb 2-1: SerialNumber: syz [ 245.641398][ T5900] usb 2-1: config 0 descriptor?? [ 245.690691][ T5900] usb 2-1: selecting invalid altsetting 0 [ 246.159445][ T5900] usb 2-1: USB disconnect, device number 4 [ 246.506458][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.733583][ T7990] ISOFS: Unable to identify CD-ROM format. [ 247.746116][ T7990] Process accounting resumed [ 247.825884][ T7999] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 247.891312][ T7999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.482'. [ 248.050046][ T8003] 9pnet_virtio: no channels available for device syz [ 252.205815][ T5837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 252.419677][ T5837] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 252.500643][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.571894][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.626988][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.655778][ T8061] input: syz0 as /devices/virtual/input/input16 [ 252.664437][ T5837] usb 4-1: Product: syz [ 252.668627][ T5837] usb 4-1: Manufacturer: syz [ 252.700960][ T5837] usb 4-1: SerialNumber: syz [ 252.953081][ T5837] usb 4-1: config 0 descriptor?? [ 252.969147][ T5837] usb 4-1: selecting invalid altsetting 0 [ 253.177279][ T5837] usb 4-1: USB disconnect, device number 8 [ 255.319841][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.778067][ T8136] input: syz0 as /devices/virtual/input/input17 [ 258.760587][ T3602] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 258.932310][ T3602] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 258.950642][ T3602] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.959581][ T3602] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.969498][ T3602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.988138][ T3602] usb 3-1: Product: syz [ 259.000901][ T3602] usb 3-1: Manufacturer: syz [ 259.005622][ T3602] usb 3-1: SerialNumber: syz [ 259.052074][ T3602] usb 3-1: config 0 descriptor?? [ 259.278087][ T3602] usb 3-1: selecting invalid altsetting 0 [ 259.355251][ T3602] usb 3-1: USB disconnect, device number 4 [ 259.604904][ T8196] loop4: detected capacity change from 0 to 16 [ 259.705624][ T8196] erofs (device loop4): mounted with root inode @ nid 36. [ 259.723558][ T5895] udevd[5895]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.242707][ T8210] input: syz0 as /devices/virtual/input/input18 [ 261.529223][ T8225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.014730][ T8242] syz.4.524: attempt to access beyond end of device [ 262.014730][ T8242] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 262.470584][ T8243] ISOFS: Unable to identify CD-ROM format. [ 262.567708][ T8243] Process accounting resumed [ 264.172247][ T8254] ALSA: mixer_oss: invalid OSS volume '' [ 266.492480][ T8287] input: syz0 as /devices/virtual/input/input19 [ 267.952401][ T8324] loop2: detected capacity change from 0 to 16 [ 268.008331][ T8324] erofs (device loop2): mounted with root inode @ nid 36. [ 268.302349][ T8332] syzkaller1: entered promiscuous mode [ 268.307878][ T8332] syzkaller1: entered allmulticast mode [ 269.651863][ T8352] input: syz0 as /devices/virtual/input/input20 [ 270.188870][ T8372] syz.2.554: attempt to access beyond end of device [ 270.188870][ T8372] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 272.663943][ T8414] syzkaller1: entered promiscuous mode [ 272.696915][ T8414] syzkaller1: entered allmulticast mode [ 272.752387][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.752577][ T8416] input: syz0 as /devices/virtual/input/input21 [ 272.960636][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 272.993738][ T5900] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 273.032082][ T5900] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.075184][ T5900] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.140566][ T5900] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.190599][ T5900] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.249190][ T5900] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.311884][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.318936][ T5900] usb 5-1: GET_CAPABILITIES returned 0 [ 274.340097][ T5900] usbtmc 5-1:16.0: can't read capabilities [ 274.625038][ T5896] usb 5-1: USB disconnect, device number 6 [ 277.567270][ T8485] input: syz0 as /devices/virtual/input/input22 [ 277.653545][ T8488] xt_hashlimit: size too large, truncated to 1048576 [ 279.861952][ T8520] ceph: No mds server is up or the cluster is laggy [ 279.883518][ T5977] libceph: connect (1)[c::]:6789 error -101 [ 280.333837][ T5977] libceph: mon0 (1)[c::]:6789 connect error [ 283.670650][ T8557] xt_hashlimit: size too large, truncated to 1048576 [ 285.382571][ T8569] input: syz0 as /devices/virtual/input/input23 [ 287.348895][ T8600] ISOFS: Unable to identify CD-ROM format. [ 287.438978][ T8605] Process accounting resumed [ 288.256933][ T8626] xt_hashlimit: size too large, truncated to 1048576 [ 292.410947][ T5977] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 292.980030][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 293.016380][ T5977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.263295][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.273936][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.284824][ T5977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.299666][ T5977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.331925][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.280026][ T8680] fuse: Bad value for 'fd' [ 294.450627][ T5977] usb 5-1: GET_CAPABILITIES returned 0 [ 294.456167][ T5977] usbtmc 5-1:16.0: can't read capabilities [ 294.723670][ T5977] usb 5-1: USB disconnect, device number 7 [ 296.058103][ T8696] ISOFS: Unable to identify CD-ROM format. [ 296.111352][ T8696] Process accounting resumed [ 301.045927][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 301.420967][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 301.427968][ T5896] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.450552][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.460437][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.481431][ T5896] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.589352][ T5896] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.630581][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.535282][ T8777] loop4: detected capacity change from 0 to 16 [ 302.720641][ T5896] usb 2-1: usb_control_msg returned -71 [ 302.742304][ T5896] usbtmc 2-1:16.0: can't read capabilities [ 302.765418][ T8777] erofs (device loop4): mounted with root inode @ nid 36. [ 302.773055][ T5896] usb 2-1: USB disconnect, device number 5 [ 303.250347][ T8788] syz.4.667: attempt to access beyond end of device [ 303.250347][ T8788] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 303.365634][ T8790] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 303.398094][ T8790] netlink: 2 bytes leftover after parsing attributes in process `syz.0.670'. [ 303.442187][ T8790] team0: entered promiscuous mode [ 303.447308][ T8790] team_slave_0: entered promiscuous mode [ 303.511179][ T8790] team_slave_1: entered promiscuous mode [ 303.531238][ T8790] bridge0: port 3(team0) entered blocking state [ 303.563009][ T8790] bridge0: port 3(team0) entered disabled state [ 303.569521][ T8790] team0: entered allmulticast mode [ 303.654476][ T8790] team_slave_0: entered allmulticast mode [ 303.660364][ T8790] team_slave_1: entered allmulticast mode [ 303.841284][ T8790] bridge0: port 3(team0) entered blocking state [ 303.848035][ T8790] bridge0: port 3(team0) entered forwarding state [ 306.463282][ T5926] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 306.656918][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 306.839602][ T5926] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 306.879319][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.950954][ T5926] usb 6-1: Product: syz [ 306.972490][ T5926] usb 6-1: Manufacturer: syz [ 306.987842][ T8847] netlink: 68 bytes leftover after parsing attributes in process `syz.1.685'. [ 307.008003][ T5926] usb 6-1: SerialNumber: syz [ 307.022450][ T5926] usb 6-1: config 0 descriptor?? [ 307.881690][ T5926] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 307.938192][ T5926] gspca_sunplus: reg_w_riv err -71 [ 307.971103][ T5926] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 308.061040][ T5926] usb 6-1: USB disconnect, device number 4 [ 309.105648][ T3602] libceph: connect (1)[c::]:6789 error -101 [ 309.160800][ T3602] libceph: mon0 (1)[c::]:6789 connect error [ 309.289494][ T8873] netlink: 'syz.4.690': attribute type 10 has an invalid length. [ 309.316645][ T8867] ceph: No mds server is up or the cluster is laggy [ 309.330587][ T8873] netlink: 2 bytes leftover after parsing attributes in process `syz.4.690'. [ 309.431863][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 309.440632][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 309.482652][ T8877] bridge1: entered promiscuous mode [ 309.509895][ T8877] bridge1: entered allmulticast mode [ 309.663796][ T8873] team0: entered promiscuous mode [ 309.684576][ T8873] team_slave_0: entered promiscuous mode [ 309.706387][ T8873] team_slave_1: entered promiscuous mode [ 309.713523][ T8873] bridge0: port 3(team0) entered blocking state [ 309.731251][ T8873] bridge0: port 3(team0) entered disabled state [ 309.745351][ T8873] team0: entered allmulticast mode [ 309.780596][ T8873] team_slave_0: entered allmulticast mode [ 309.855371][ T8873] team_slave_1: entered allmulticast mode [ 309.943384][ T8873] bridge0: port 3(team0) entered blocking state [ 309.949820][ T8873] bridge0: port 3(team0) entered forwarding state [ 312.802309][ T8903] netlink: 68 bytes leftover after parsing attributes in process `syz.2.700'. [ 312.888443][ T8916] loop3: detected capacity change from 0 to 16 [ 313.012090][ T8916] erofs (device loop3): mounted with root inode @ nid 36. [ 313.391928][ T5926] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 313.551098][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 314.060867][ T5926] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 314.110594][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.145969][ T8926] syz.3.702: attempt to access beyond end of device [ 314.145969][ T8926] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 314.223147][ T5926] usb 5-1: Product: syz [ 314.227767][ T5926] usb 5-1: Manufacturer: syz [ 314.322685][ T5926] usb 5-1: SerialNumber: syz [ 314.348664][ T5926] usb 5-1: config 0 descriptor?? [ 314.797678][ T5926] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 315.531549][ T5926] gspca_sunplus: reg_w_riv err -71 [ 315.549197][ T5926] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 315.608298][ T5926] usb 5-1: USB disconnect, device number 8 [ 316.171215][ T8954] blktrace: Concurrent blktraces are not allowed on sg0 [ 316.263592][ T8954] serio: Serial port ptm0 [ 316.364417][ T8963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.711'. [ 316.796474][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.190994][ T8989] netlink: 68 bytes leftover after parsing attributes in process `syz.5.717'. [ 320.217688][ T8995] vivid-000: kernel_thread() failed [ 320.778737][ T9017] bond_slave_0: entered promiscuous mode [ 320.784856][ T9017] bond_slave_1: entered promiscuous mode [ 320.821220][ T9017] macvlan2: entered allmulticast mode [ 320.830632][ T9017] bond0: entered allmulticast mode [ 320.849596][ T9017] bond_slave_0: entered allmulticast mode [ 320.855841][ T9017] bond_slave_1: entered allmulticast mode [ 320.874099][ T9017] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.679088][ T9069] netlink: 'syz.1.735': attribute type 10 has an invalid length. [ 325.688889][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.697374][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.723689][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.730852][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.738351][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.745484][ T9069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.778650][ T9069] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 327.112405][ T9089] loop4: detected capacity change from 0 to 16 [ 327.131938][ T9089] erofs (device loop4): mounted with root inode @ nid 36. [ 328.124980][ T9094] syz.4.740: attempt to access beyond end of device [ 328.124980][ T9094] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 328.377550][ T9069] syz.1.735 (9069) used greatest stack depth: 16784 bytes left [ 330.676345][ T9116] blktrace: Concurrent blktraces are not allowed on sg0 [ 331.705880][ T9116] serio: Serial port ptm0 [ 331.751770][ T9124] bond_slave_0: entered promiscuous mode [ 331.757595][ T9124] bond_slave_1: entered promiscuous mode [ 331.818997][ T9124] macvlan2: entered allmulticast mode [ 331.844645][ T9124] bond0: entered allmulticast mode [ 331.864947][ T9124] bond_slave_0: entered allmulticast mode [ 331.913336][ T9124] bond_slave_1: entered allmulticast mode [ 331.987964][ T9124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.586537][ T9140] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 332.635067][ T9140] netlink: 2 bytes leftover after parsing attributes in process `syz.2.756'. [ 333.481444][ T9140] team0: entered promiscuous mode [ 333.721371][ T9140] team_slave_0: entered promiscuous mode [ 333.727400][ T9140] team_slave_1: entered promiscuous mode [ 334.533085][ T9140] bridge0: port 3(team0) entered blocking state [ 334.775313][ T9140] bridge0: port 3(team0) entered disabled state [ 334.850904][ T9140] team0: entered allmulticast mode [ 334.856092][ T9140] team_slave_0: entered allmulticast mode [ 334.970608][ T9140] team_slave_1: entered allmulticast mode [ 335.026999][ T9140] bridge0: port 3(team0) entered blocking state [ 335.033427][ T9140] bridge0: port 3(team0) entered forwarding state [ 337.277979][ T9178] blktrace: Concurrent blktraces are not allowed on sg0 [ 337.351914][ T9178] serio: Serial port ptm0 [ 337.974669][ T5900] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 338.220755][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 338.260798][ T5900] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 338.269197][ T5900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.335050][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.374120][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.437285][ T5900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.508305][ T5900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.512747][ T9193] input: syz1 as /devices/virtual/input/input24 [ 338.557625][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.030395][ T5900] usb 4-1: GET_CAPABILITIES returned 0 [ 339.042763][ T5900] usbtmc 4-1:16.0: can't read capabilities [ 340.018170][ T5900] usb 4-1: USB disconnect, device number 9 [ 342.653324][ T9221] loop3: detected capacity change from 0 to 16 [ 342.743329][ T9221] erofs (device loop3): mounted with root inode @ nid 36. [ 343.054128][ T9221] syz.3.779: attempt to access beyond end of device [ 343.054128][ T9221] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 345.436298][ T9257] trusted_key: encrypted_key: key user:syz not found [ 347.860809][ T9263] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 349.566575][ T9284] loop4: detected capacity change from 0 to 16 [ 349.859996][ T9290] blktrace: Concurrent blktraces are not allowed on sg0 [ 349.914595][ T9290] serio: Serial port ptm0 [ 349.945131][ T9284] erofs (device loop4): mounted with root inode @ nid 36. [ 350.241074][ T9284] syz.4.797: attempt to access beyond end of device [ 350.241074][ T9284] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 351.365539][ T9302] Process accounting resumed [ 351.916020][ T9314] trusted_key: encrypted_key: key user:syz not found [ 356.084727][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.911758][ T9356] Process accounting resumed [ 358.752959][ T9371] trusted_key: encrypted_key: key user:syz not found [ 364.146546][ T9403] Process accounting resumed [ 364.201667][ T5900] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 364.376756][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 364.404901][ T5900] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 364.429171][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.470620][ T5900] usb 5-1: Product: syz [ 364.478186][ T5900] usb 5-1: Manufacturer: syz [ 365.484630][ T5900] usb 5-1: SerialNumber: syz [ 366.173656][ T5900] usb 5-1: config 0 descriptor?? [ 366.653876][ T5900] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 366.681584][ T5900] gspca_sunplus: reg_w_riv err -71 [ 366.686808][ T5900] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 366.742493][ T5900] usb 5-1: USB disconnect, device number 9 [ 369.167864][ T9452] Process accounting resumed [ 369.451910][ T9461] blktrace: Concurrent blktraces are not allowed on sg0 [ 374.354985][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 375.250770][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 375.493351][ T5899] usb 2-1: unable to read config index 0 descriptor/all [ 375.562161][ T5899] usb 2-1: can't read configurations, error -71 [ 375.657976][ T9498] Process accounting resumed [ 375.784943][ T9507] blktrace: Concurrent blktraces are not allowed on sg0 [ 377.910588][ T9519] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 378.145056][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.020538][ T9539] netlink: 'syz.5.872': attribute type 10 has an invalid length. [ 379.485059][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.492407][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.502957][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.510038][ T9539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.517586][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.524710][ T9539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.534804][ T9539] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 381.768678][ T9560] xt_hashlimit: size too large, truncated to 1048576 [ 382.769941][ T9557] Process accounting resumed [ 384.331241][ T9577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.882'. [ 387.567778][ T9624] xt_hashlimit: size too large, truncated to 1048576 [ 390.090600][ T3602] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 390.252005][ T3602] usb 5-1: Using ep0 maxpacket: 8 [ 390.447929][ T3602] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 390.457955][ T3602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.466809][ T3602] usb 5-1: Product: syz [ 390.471477][ T3602] usb 5-1: Manufacturer: syz [ 390.476263][ T3602] usb 5-1: SerialNumber: syz [ 392.026209][ T3602] usb 5-1: config 0 descriptor?? [ 392.459796][ T3602] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 392.489066][ T3602] gspca_sunplus: reg_w_riv err -71 [ 392.495540][ T3602] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 393.408443][ T3602] usb 5-1: USB disconnect, device number 10 [ 393.836515][ T9668] block nbd3: shutting down sockets [ 393.909386][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 394.132895][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 395.858615][ T9709] xt_hashlimit: size too large, truncated to 1048576 [ 397.837760][ T9727] ISOFS: Unable to identify CD-ROM format. [ 397.885605][ T9727] Process accounting resumed [ 398.700942][ T3602] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 398.902073][ T3602] usb 4-1: Using ep0 maxpacket: 8 [ 398.916279][ T3602] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 398.934559][ T3602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.980817][ T3602] usb 4-1: Product: syz [ 398.985028][ T3602] usb 4-1: Manufacturer: syz [ 398.989633][ T3602] usb 4-1: SerialNumber: syz [ 399.056193][ T3602] usb 4-1: config 0 descriptor?? [ 400.183110][ T3602] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 400.454143][ T3602] gspca_sunplus: reg_w_riv err -71 [ 400.467141][ T9747] overlayfs: failed to clone upperpath [ 400.471010][ T3602] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 400.510614][ T3602] usb 4-1: USB disconnect, device number 10 [ 401.008284][ T9754] bridge0: port 3(team0) entered disabled state [ 401.787839][ T9766] xt_hashlimit: size too large, truncated to 1048576 [ 403.033785][ T9754] team0 (unregistering): left allmulticast mode [ 403.040331][ T9754] team_slave_0: left allmulticast mode [ 403.060625][ T9754] team_slave_1: left allmulticast mode [ 403.067656][ T9754] bridge0: port 3(team0) entered disabled state [ 403.164101][ T9754] team_slave_0: left promiscuous mode [ 403.264190][ T9754] team0 (unregistering): Port device team_slave_0 removed [ 403.481480][ T9754] team_slave_1: left promiscuous mode [ 404.373953][ T9754] team0 (unregistering): Port device team_slave_1 removed [ 405.323566][ T9784] fuse: Bad value for 'fd' [ 407.722401][ T9818] 9p: Unknown Cache mode or invalid value fscach [ 407.817054][ T9821] xt_hashlimit: size too large, truncated to 1048576 [ 410.220913][ T9841] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 410.227492][ T9841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.333258][ T9841] vhci_hcd vhci_hcd.0: Device attached [ 410.340073][ T9844] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 410.346616][ T9844] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.393650][ T9846] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 410.400336][ T9846] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.432224][ T9844] vhci_hcd vhci_hcd.0: Device attached [ 410.447702][ T9853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.548094][ T9841] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.581005][ T5977] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 410.600020][ T9841] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.609463][ T9846] vhci_hcd vhci_hcd.0: Device attached [ 410.682411][ T9848] vhci_hcd: connection closed [ 410.684416][ T9847] vhci_hcd: connection closed [ 410.689177][ T9842] vhci_hcd: connection reset by peer [ 410.726909][ T1118] vhci_hcd: stop threads [ 410.736683][ T1118] vhci_hcd: release socket [ 410.761589][ T1118] vhci_hcd: disconnect device [ 410.770265][ T1118] vhci_hcd: stop threads [ 410.775886][ T1118] vhci_hcd: release socket [ 410.789229][ T1118] vhci_hcd: disconnect device [ 410.794649][ T1118] vhci_hcd: stop threads [ 410.804305][ T1118] vhci_hcd: release socket [ 410.810185][ T1118] vhci_hcd: disconnect device [ 411.046872][ T9858] loop2: detected capacity change from 0 to 4096 [ 411.060924][ T9858] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 412.185200][ T9858] ntfs3(loop2): failed to convert "c46c" to cp1250 [ 412.916739][ T9879] xt_hashlimit: size too large, truncated to 1048576 [ 415.866295][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 416.655410][ T5977] vhci_hcd: vhci_device speed not set [ 416.980793][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 418.420785][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 418.445320][ T5896] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 418.487025][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.531756][ T5896] usb 5-1: Product: syz [ 418.550660][ T5896] usb 5-1: Manufacturer: syz [ 418.566261][ T5896] usb 5-1: SerialNumber: syz [ 418.600333][ T5896] usb 5-1: config 0 descriptor?? [ 418.702904][ T9931] xt_hashlimit: size too large, truncated to 1048576 [ 419.578187][ T5896] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 420.608957][ T9950] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 421.078816][ T5896] gspca_sunplus: reg_w_riv err -110 [ 421.097381][ T5896] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 421.954827][ T5899] usb 5-1: USB disconnect, device number 11 [ 424.940722][ T9993] xt_hashlimit: size too large, truncated to 1048576 [ 426.223463][T10000] netlink: 36 bytes leftover after parsing attributes in process `syz.5.988'. [ 426.327433][T10001] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 431.864560][T10042] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 432.011881][T10046] xt_hashlimit: size too large, truncated to 1048576 [ 436.127719][ T5900] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 436.280745][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 436.290557][ T5900] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 436.299630][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.315296][ T5900] usb 5-1: Product: syz [ 436.319495][ T5900] usb 5-1: Manufacturer: syz [ 436.324212][ T5900] usb 5-1: SerialNumber: syz [ 436.331119][ T5900] usb 5-1: config 0 descriptor?? [ 436.553535][ T5900] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 437.488868][T10089] fuse: Bad value for 'group_id' [ 437.494049][T10089] fuse: Bad value for 'group_id' [ 438.071010][ T5900] gspca_sunplus: reg_w_riv err -71 [ 438.076304][ T5900] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 438.088920][ T5900] usb 5-1: USB disconnect, device number 12 [ 438.618157][T10097] xt_hashlimit: size too large, truncated to 1048576 [ 439.590855][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.024712][T10115] bridge0: port 3(team0) entered disabled state [ 441.558331][T10115] team0 (unregistering): left allmulticast mode [ 441.593010][T10115] team_slave_0: left allmulticast mode [ 441.691002][T10115] team_slave_1: left allmulticast mode [ 441.704285][T10115] bridge0: port 3(team0) entered disabled state [ 441.717712][T10115] team_slave_0: left promiscuous mode [ 441.760722][T10115] team0 (unregistering): Port device team_slave_0 removed [ 441.779909][T10115] team_slave_1: left promiscuous mode [ 441.808176][T10115] team0 (unregistering): Port device team_slave_1 removed [ 442.091246][T10125] fuse: Bad value for 'group_id' [ 442.096239][T10125] fuse: Bad value for 'group_id' [ 443.333879][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 443.340447][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 443.470267][T10129] ceph: No mds server is up or the cluster is laggy [ 444.152843][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 444.350740][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 444.358460][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.370028][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 444.381280][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 444.392503][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 444.401574][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.411312][ T8] usb 5-1: config 0 descriptor?? [ 444.418288][T10137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 444.426986][ T8] hub 5-1:0.0: USB hub found [ 444.839278][ T8] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 444.850375][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 444.856588][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 444.882399][ T8] usb 5-1: USB disconnect, device number 13 [ 501.036803][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.475510][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.300822][ T30] INFO: task kworker/1:2:3602 blocked for more than 143 seconds. [ 566.308709][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 566.316416][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.325137][ T30] task:kworker/1:2 state:D stack:21808 pid:3602 tgid:3602 ppid:2 flags:0x00004000 [ 566.335733][ T30] Workqueue: events rfkill_sync_work [ 566.341436][ T30] Call Trace: [ 566.344713][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 566.347638][ T30] __schedule+0x186c/0x4be0 [ 566.352371][ T30] ? __pfx___schedule+0x10/0x10 [ 566.358042][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 566.367054][ T30] ? __pfx_lock_release+0x10/0x10 [ 566.372640][ T30] ? kick_pool+0x1bd/0x620 [ 566.377094][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.382746][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.388421][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 566.394051][ T30] ? schedule+0x90/0x320 [ 566.431628][ T30] schedule+0x14b/0x320 [ 566.436291][ T30] schedule_preempt_disabled+0x13/0x30 [ 566.480214][ T30] __mutex_lock+0x817/0x1010 [ 566.489135][ T30] ? __mutex_lock+0x602/0x1010 [ 566.495828][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 566.501470][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 566.506529][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.512599][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 566.518606][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 566.525045][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 566.530121][ T30] nfc_rfkill_set_block+0x50/0x310 [ 566.535321][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 566.541158][ T30] rfkill_set_block+0x1f3/0x440 [ 566.546031][ T30] rfkill_sync_work+0x12a/0x220 [ 566.550952][ T30] ? process_scheduled_works+0x976/0x1840 [ 566.556712][ T30] process_scheduled_works+0xa68/0x1840 [ 566.562377][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.568389][ T30] ? assign_work+0x364/0x3d0 [ 566.573072][ T30] worker_thread+0x870/0xd30 [ 566.577699][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.583438][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.589126][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 566.595157][ T30] ? __kthread_parkme+0x169/0x1d0 [ 566.600248][ T30] ? __pfx_worker_thread+0x10/0x10 [ 566.605641][ T30] kthread+0x7ab/0x920 [ 566.609738][ T30] ? __pfx_kthread+0x10/0x10 [ 566.614732][ T30] ? __pfx_worker_thread+0x10/0x10 [ 566.619871][ T30] ? __pfx_kthread+0x10/0x10 [ 566.624543][ T30] ? __pfx_kthread+0x10/0x10 [ 566.629164][ T30] ? __pfx_kthread+0x10/0x10 [ 566.633824][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.639040][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.644757][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 566.650001][ T30] ? __pfx_kthread+0x10/0x10 [ 566.654684][ T30] ret_from_fork+0x4d/0x80 [ 566.659128][ T30] ? __pfx_kthread+0x10/0x10 [ 566.663798][ T30] ret_from_fork_asm+0x1a/0x30 [ 566.668606][ T30] [ 566.671696][ T30] INFO: task udevd:5202 blocked for more than 143 seconds. [ 566.678918][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 566.686278][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.694989][ T30] task:udevd state:D stack:21600 pid:5202 tgid:5202 ppid:1 flags:0x00000002 [ 566.705286][ T30] Call Trace: [ 566.708575][ T30] [ 566.711571][ T30] __schedule+0x186c/0x4be0 [ 566.716138][ T30] ? __pfx___schedule+0x10/0x10 [ 566.721069][ T30] ? __pfx_lock_release+0x10/0x10 [ 566.726126][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 566.732072][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.737745][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.743486][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 566.749396][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 566.755774][ T30] ? schedule+0x90/0x320 [ 566.760032][ T30] schedule+0x14b/0x320 [ 566.764293][ T30] schedule_preempt_disabled+0x13/0x30 [ 566.769788][ T30] __mutex_lock+0x817/0x1010 [ 566.774429][ T30] ? __mutex_lock+0x602/0x1010 [ 566.779220][ T30] ? uevent_show+0x17d/0x340 [ 566.783920][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 566.788974][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.794755][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 566.799568][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.805301][ T30] ? uevent_show+0x163/0x340 [ 566.809919][ T30] uevent_show+0x17d/0x340 [ 566.814415][ T30] dev_attr_show+0x57/0xc0 [ 566.818854][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 566.824031][ T30] sysfs_kf_seq_show+0x333/0x4c0 [ 566.829022][ T30] seq_read_iter+0x441/0xd70 [ 566.833698][ T30] vfs_read+0x977/0xb40 [ 566.837886][ T30] ? __pfx_vfs_read+0x10/0x10 [ 566.842747][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.848433][ T30] ksys_read+0x18f/0x2b0 [ 566.852834][ T30] ? __pfx_ksys_read+0x10/0x10 [ 566.857641][ T30] ? do_syscall_64+0x100/0x230 [ 566.862661][ T30] ? do_syscall_64+0xb6/0x230 [ 566.867367][ T30] do_syscall_64+0xf3/0x230 [ 566.872010][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.877683][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.883674][ T30] RIP: 0033:0x7f3b2a916b6a [ 566.888100][ T30] RSP: 002b:00007ffc43e93618 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.896621][ T30] RAX: ffffffffffffffda RBX: 000055d6a1e986d0 RCX: 00007f3b2a916b6a [ 566.904642][ T30] RDX: 0000000000001000 RSI: 000055d6a1f14800 RDI: 000000000000000c [ 566.912705][ T30] RBP: 000055d6a1e986d0 R08: 000000000000000c R09: 0000000000000002 [ 566.920737][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 566.928719][ T30] R13: 0000000000003fff R14: 00007ffc43e93af8 R15: 000000000000000a [ 566.936804][ T30] [ 566.939882][ T30] INFO: task kworker/1:8:5977 blocked for more than 143 seconds. [ 566.947889][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 566.955293][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.964035][ T30] task:kworker/1:8 state:D stack:21912 pid:5977 tgid:5977 ppid:2 flags:0x00004000 [ 566.974295][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 566.981094][ T30] Call Trace: [ 566.984394][ T30] [ 566.987343][ T30] __schedule+0x186c/0x4be0 [ 566.991957][ T30] ? try_to_wake_up+0x959/0x1470 [ 566.996924][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.002758][ T30] ? __pfx___schedule+0x10/0x10 [ 567.007630][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.013674][ T30] ? __pfx_lock_release+0x10/0x10 [ 567.018724][ T30] ? kick_pool+0x45c/0x620 [ 567.031627][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.036941][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.042676][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 567.047902][ T30] ? schedule+0x90/0x320 [ 567.052193][ T30] schedule+0x14b/0x320 [ 567.056370][ T30] schedule_preempt_disabled+0x13/0x30 [ 567.061905][ T30] __mutex_lock+0x817/0x1010 [ 567.066521][ T30] ? __mutex_lock+0x602/0x1010 [ 567.071348][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 567.077622][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 567.082730][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.088396][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.094458][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.100911][ T30] ? process_scheduled_works+0x976/0x1840 [ 567.106655][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 567.112870][ T30] process_scheduled_works+0xa68/0x1840 [ 567.118488][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.124649][ T30] ? assign_work+0x364/0x3d0 [ 567.129275][ T30] worker_thread+0x870/0xd30 [ 567.133947][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.139616][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.145326][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 567.151307][ T30] ? __kthread_parkme+0x169/0x1d0 [ 567.156342][ T30] ? __pfx_worker_thread+0x10/0x10 [ 567.161526][ T30] kthread+0x7ab/0x920 [ 567.165726][ T30] ? __pfx_kthread+0x10/0x10 [ 567.170345][ T30] ? __pfx_worker_thread+0x10/0x10 [ 567.175554][ T30] ? __pfx_kthread+0x10/0x10 [ 567.180177][ T30] ? __pfx_kthread+0x10/0x10 [ 567.185956][ T30] ? __pfx_kthread+0x10/0x10 [ 567.190625][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.195840][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.201578][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 567.206822][ T30] ? __pfx_kthread+0x10/0x10 [ 567.211497][ T30] ret_from_fork+0x4d/0x80 [ 567.215942][ T30] ? __pfx_kthread+0x10/0x10 [ 567.220595][ T30] ret_from_fork_asm+0x1a/0x30 [ 567.225410][ T30] [ 567.228480][ T30] INFO: task syz.2.976:9948 blocked for more than 144 seconds. [ 567.236785][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 567.244187][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.252927][ T30] task:syz.2.976 state:D stack:22752 pid:9948 tgid:9948 ppid:5843 flags:0x00004006 [ 567.263214][ T30] Call Trace: [ 567.266501][ T30] [ 567.269430][ T30] __schedule+0x186c/0x4be0 [ 567.274038][ T30] ? __pfx___schedule+0x10/0x10 [ 567.278916][ T30] ? __pfx_lock_release+0x10/0x10 [ 567.284036][ T30] ? schedule+0x90/0x320 [ 567.288302][ T30] schedule+0x14b/0x320 [ 567.292536][ T30] schedule_timeout+0xb0/0x290 [ 567.297342][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 567.302824][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.308825][ T30] ? wait_for_completion+0x2fe/0x620 [ 567.314224][ T30] ? wait_for_completion+0x2fe/0x620 [ 567.319531][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.324785][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.330522][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 567.335749][ T30] ? wait_for_completion+0x2fe/0x620 [ 567.341123][ T30] wait_for_completion+0x355/0x620 [ 567.346268][ T30] ? rcu_is_watching+0x15/0xb0 [ 567.351124][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 567.356787][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.362525][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.368185][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 567.373279][ T30] __flush_work+0xa47/0xc60 [ 567.377811][ T30] ? __flush_work+0xe9/0xc60 [ 567.382470][ T30] ? __pfx___flush_work+0x10/0x10 [ 567.387521][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 567.392900][ T30] ? __pfx___cancel_work+0x10/0x10 [ 567.398036][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 567.403156][ T30] ? nfc_genl_device_removed+0x25c/0x380 [ 567.408823][ T30] __cancel_work_sync+0xbc/0x110 [ 567.413870][ T30] rfkill_unregister+0x96/0x230 [ 567.418748][ T30] nfc_unregister_device+0x96/0x2a0 [ 567.424172][ T30] virtual_ncidev_close+0x56/0x90 [ 567.429230][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 567.435026][ T30] __fput+0x3eb/0x9f0 [ 567.439073][ T30] task_work_run+0x251/0x310 [ 567.443729][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.449394][ T30] ? _raw_spin_unlock+0x3e/0x50 [ 567.454308][ T30] ? __pfx_task_work_run+0x10/0x10 [ 567.459458][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 567.465370][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 567.471069][ T30] do_syscall_64+0x100/0x230 [ 567.475687][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.481419][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.487360][ T30] RIP: 0033:0x7fc46f38cd29 [ 567.494110][ T30] RSP: 002b:00007ffd7de99458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 567.502634][ T30] RAX: 0000000000000000 RBX: 00007fc46f5a7ba0 RCX: 00007fc46f38cd29 [ 567.510691][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 567.518685][ T30] RBP: 00007fc46f5a7ba0 R08: 00000000000036a4 R09: 00007ffd7de9974f [ 567.526740][ T30] R10: 00007fc46f5a7ac0 R11: 0000000000000246 R12: 00000000000671a5 [ 567.534812][ T30] R13: 00007fc46f5a6240 R14: 0000000000000032 R15: ffffffffffffffff [ 567.542900][ T30] [ 567.545960][ T30] [ 567.545960][ T30] Showing all locks held in the system: [ 567.553766][ T30] 1 lock held by khungtaskd/30: [ 567.558623][ T30] #0: ffffffff8e93a020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 567.568602][ T30] 4 locks held by kworker/1:2/3602: [ 567.573983][ T30] #0: ffff88801ac78d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 567.586440][ T30] #1: ffffc9000cd27c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 567.598952][ T30] #2: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 567.609103][ T30] #3: ffff888057571100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 567.618961][ T30] 4 locks held by udevd/5202: [ 567.623748][ T30] #0: ffff88802fd6db08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 567.632690][ T30] #1: ffff8880311ef088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 567.642336][ T30] #2: ffff8880328005a8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 567.651887][ T30] #3: ffff888057571100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 567.661020][ T30] 2 locks held by getty/5589: [ 567.665708][ T30] #0: ffff888034c480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 567.675604][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 567.685845][ T30] 3 locks held by kworker/1:8/5977: [ 567.691125][ T30] #0: ffff88801ac78d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 567.702236][ T30] #1: ffffc900042cfc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 567.715844][ T30] #2: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 567.727292][ T30] 1 lock held by syz.2.976/9948: [ 567.732313][ T30] #0: ffff888057571100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 567.742222][ T30] 3 locks held by syz.5.988/10000: [ 567.747355][ T30] #0: ffffffff8fd27070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.755729][ T30] #1: ffffffff8fd26f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 567.764836][ T30] #2: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 567.774934][ T30] 2 locks held by syz.3.999/10028: [ 567.780058][ T30] #0: ffffffff8fd27070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.788389][ T30] #1: ffffffff8fd26f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 567.797513][ T30] 2 locks held by syz-executor/10074: [ 567.802965][ T30] #0: ffff888022743918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 567.813120][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 567.823190][ T30] 2 locks held by syz.1.1017/10091: [ 567.828394][ T30] #0: ffffffff8fd27070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.836662][ T30] #1: ffffffff8fd26f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 567.845861][ T30] 2 locks held by syz-executor/10107: [ 567.851288][ T30] #0: ffff888055467918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 567.861441][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 567.871513][ T30] 2 locks held by syz.0.1029/10127: [ 567.876723][ T30] #0: ffffffff8fd27070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.885033][ T30] #1: ffffffff8fd26f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 567.894149][ T30] 2 locks held by syz-executor/10145: [ 567.899535][ T30] #0: ffff888057621118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 567.909722][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 567.919770][ T30] 2 locks held by syz.4.1034/10149: [ 567.925037][ T30] #0: ffffffff8fd27070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.933312][ T30] #1: ffffffff8fd26f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 567.942394][ T30] 2 locks held by syz-executor/10154: [ 567.947778][ T30] #0: ffff888027965918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 567.957916][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 567.967954][ T30] 2 locks held by syz-executor/10156: [ 567.973375][ T30] #0: ffff88807a4b5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 567.983524][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 567.993656][ T30] 2 locks held by syz-executor/10158: [ 567.999034][ T30] #0: ffff88805b868118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.009176][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.019210][ T30] 2 locks held by syz-executor/10160: [ 568.024912][ T30] #0: ffff88807ef59918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.035259][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.045520][ T30] 2 locks held by syz-executor/10162: [ 568.051186][ T30] #0: ffff888024d68918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.070786][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.080979][ T30] 2 locks held by syz-executor/10164: [ 568.087136][ T30] #0: ffff888055b5a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.097255][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.107285][ T30] 2 locks held by syz-executor/10166: [ 568.112718][ T30] #0: ffff88802a061918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.122841][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.132972][ T30] 2 locks held by syz-executor/10168: [ 568.138366][ T30] #0: ffff888056d83118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.148540][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.158679][ T30] 2 locks held by syz-executor/10174: [ 568.164132][ T30] #0: ffff888026eb3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.175624][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.185688][ T30] 2 locks held by syz-executor/10176: [ 568.191174][ T30] #0: ffff888012289118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.201418][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.211539][ T30] 2 locks held by syz-executor/10178: [ 568.216915][ T30] #0: ffff88807dfaa118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.227238][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.237463][ T30] 2 locks held by syz-executor/10180: [ 568.242925][ T30] #0: ffff88805648a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 568.253064][ T30] #1: ffffffff8ff99108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 568.263146][ T30] [ 568.265483][ T30] ============================================= [ 568.265483][ T30] [ 568.273939][ T30] NMI backtrace for cpu 0 [ 568.273953][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 568.273979][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 568.273994][ T30] Call Trace: [ 568.274003][ T30] [ 568.274012][ T30] dump_stack_lvl+0x241/0x360 [ 568.274047][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.274073][ T30] ? __pfx__printk+0x10/0x10 [ 568.274127][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 568.274176][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 568.274215][ T30] ? _printk+0xd5/0x120 [ 568.274254][ T30] ? __pfx__printk+0x10/0x10 [ 568.274293][ T30] ? __wake_up_klogd+0xcc/0x110 [ 568.274326][ T30] ? __pfx__printk+0x10/0x10 [ 568.274366][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.274405][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 568.274440][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 568.274473][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 568.274517][ T30] watchdog+0xff6/0x1040 [ 568.274552][ T30] ? watchdog+0x1ea/0x1040 [ 568.274590][ T30] ? __pfx_watchdog+0x10/0x10 [ 568.274623][ T30] kthread+0x7ab/0x920 [ 568.274658][ T30] ? __pfx_kthread+0x10/0x10 [ 568.274696][ T30] ? __pfx_watchdog+0x10/0x10 [ 568.274730][ T30] ? __pfx_kthread+0x10/0x10 [ 568.274764][ T30] ? __pfx_kthread+0x10/0x10 [ 568.274803][ T30] ? __pfx_kthread+0x10/0x10 [ 568.274837][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.274862][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.274909][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 568.274939][ T30] ? __pfx_kthread+0x10/0x10 [ 568.274977][ T30] ret_from_fork+0x4d/0x80 [ 568.275009][ T30] ? __pfx_kthread+0x10/0x10 [ 568.275045][ T30] ret_from_fork_asm+0x1a/0x30 [ 568.275091][ T30] [ 568.275101][ T30] Sending NMI from CPU 0 to CPUs 1: [ 568.455084][ C1] NMI backtrace for cpu 1 [ 568.455102][ C1] CPU: 1 UID: 0 PID: 1118 Comm: kworker/u8:7 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 568.455132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 568.455147][ C1] Workqueue: bat_events batadv_nc_worker [ 568.455186][ C1] RIP: 0010:lock_release+0x244/0xa30 [ 568.455220][ C1] Code: 0a 00 00 48 89 f0 48 c1 e8 03 48 89 44 24 48 42 0f b6 04 38 84 c0 0f 85 78 05 00 00 8b 06 85 c0 0f 84 2e 02 00 00 48 89 34 24 <48> 89 54 24 08 48 89 5c 24 28 4c 89 64 24 10 48 89 44 24 38 8d 58 [ 568.455239][ C1] RSP: 0018:ffffc90003fff980 EFLAGS: 00000006 [ 568.455257][ C1] RAX: 0000000000000003 RBX: 0000000000000246 RCX: ffffc90003fffa03 [ 568.455272][ C1] RDX: 1ffff920007fff40 RSI: ffff88802716e4d8 RDI: ffffffff8c6026e0 [ 568.455289][ C1] RBP: ffffc90003fffaa8 R08: ffffffff901b8637 R09: 1ffffffff20370c6 [ 568.455306][ C1] R10: dffffc0000000000 R11: fffffbfff20370c7 R12: 1ffff920007fff3c [ 568.455323][ C1] R13: ffff88802716da00 R14: ffffffff8e93a020 R15: dffffc0000000000 [ 568.455343][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 568.455362][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.455377][ C1] CR2: 00007ffefbf94ff8 CR3: 000000000e738000 CR4: 0000000000350ef0 [ 568.455394][ C1] Call Trace: [ 568.455402][ C1] [ 568.455411][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 568.455448][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 568.455480][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 568.455524][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 568.455552][ C1] ? nmi_handle+0x151/0x5a0 [ 568.455586][ C1] ? nmi_handle+0x2a/0x5a0 [ 568.455619][ C1] ? lock_release+0x244/0xa30 [ 568.455649][ C1] ? default_do_nmi+0x63/0x160 [ 568.455684][ C1] ? exc_nmi+0x123/0x1f0 [ 568.455716][ C1] ? end_repeat_nmi+0xf/0x53 [ 568.455754][ C1] ? lock_release+0x244/0xa30 [ 568.455785][ C1] ? lock_release+0x244/0xa30 [ 568.455815][ C1] ? lock_release+0x244/0xa30 [ 568.455846][ C1] [ 568.455853][ C1] [ 568.455862][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 568.455892][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.455928][ C1] ? batadv_nc_worker+0xcb/0x610 [ 568.455960][ C1] ? __pfx_lock_release+0x10/0x10 [ 568.455992][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.456026][ C1] ? batadv_nc_worker+0xcb/0x610 [ 568.456058][ C1] batadv_nc_worker+0x28b/0x610 [ 568.456091][ C1] ? batadv_nc_worker+0xcb/0x610 [ 568.456128][ C1] ? process_scheduled_works+0x976/0x1840 [ 568.456155][ C1] process_scheduled_works+0xa68/0x1840 [ 568.456195][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 568.456226][ C1] ? assign_work+0x364/0x3d0 [ 568.456254][ C1] worker_thread+0x870/0xd30 [ 568.456287][ C1] ? __kthread_parkme+0x169/0x1d0 [ 568.456317][ C1] ? __pfx_worker_thread+0x10/0x10 [ 568.456345][ C1] kthread+0x7ab/0x920 [ 568.456375][ C1] ? __pfx_kthread+0x10/0x10 [ 568.456407][ C1] ? __pfx_worker_thread+0x10/0x10 [ 568.456434][ C1] ? __pfx_kthread+0x10/0x10 [ 568.456464][ C1] ? __pfx_kthread+0x10/0x10 [ 568.456497][ C1] ? __pfx_kthread+0x10/0x10 [ 568.456527][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.456548][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.456582][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 568.456607][ C1] ? __pfx_kthread+0x10/0x10 [ 568.456639][ C1] ret_from_fork+0x4d/0x80 [ 568.456668][ C1] ? __pfx_kthread+0x10/0x10 [ 568.456699][ C1] ret_from_fork_asm+0x1a/0x30 [ 568.456733][ C1] [ 568.457382][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 568.805131][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 568.815289][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 568.825342][ T30] Call Trace: [ 568.828617][ T30] [ 568.831549][ T30] dump_stack_lvl+0x241/0x360 [ 568.836240][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.841445][ T30] ? __pfx__printk+0x10/0x10 [ 568.846049][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.852054][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.857789][ T30] ? vscnprintf+0x5d/0x90 [ 568.862139][ T30] panic+0x349/0x880 [ 568.866050][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.871701][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 568.877878][ T30] ? __pfx_panic+0x10/0x10 [ 568.882309][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.887957][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.893604][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 568.898989][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 568.905158][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 568.911336][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.916979][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 568.923152][ T30] watchdog+0x1035/0x1040 [ 568.927493][ T30] ? watchdog+0x1ea/0x1040 [ 568.931922][ T30] ? __pfx_watchdog+0x10/0x10 [ 568.936608][ T30] kthread+0x7ab/0x920 [ 568.940687][ T30] ? __pfx_kthread+0x10/0x10 [ 568.945289][ T30] ? __pfx_watchdog+0x10/0x10 [ 568.949974][ T30] ? __pfx_kthread+0x10/0x10 [ 568.954572][ T30] ? __pfx_kthread+0x10/0x10 [ 568.959177][ T30] ? __pfx_kthread+0x10/0x10 [ 568.963777][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.968978][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.974625][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 568.979828][ T30] ? __pfx_kthread+0x10/0x10 [ 568.984457][ T30] ret_from_fork+0x4d/0x80 [ 568.988884][ T30] ? __pfx_kthread+0x10/0x10 [ 568.993489][ T30] ret_from_fork_asm+0x1a/0x30 [ 568.998276][ T30] [ 569.001519][ T30] Kernel Offset: disabled [ 569.005927][ T30] Rebooting in 86400 seconds..