last executing test programs: 6m56.391526502s ago: executing program 3 (id=152): socket(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xe}, {0x7, 0x1, 0xb, 0x7}}}, &(0x7f0000000200)='syzkaller\x00', 0xe, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 6m55.305103402s ago: executing program 3 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r2, 0x10000052, 0x0, &(0x7f0000000180)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000000c0)={{}, {0xd, 0x4}, 0x3, 0x3}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 6m53.431314564s ago: executing program 3 (id=160): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000000200000000", @ANYRES64=0x0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x2, 0x0, @void}, 0x10) 6m51.963755398s ago: executing program 3 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f00000005c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) 6m50.504033311s ago: executing program 3 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r4, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="00000000da120addb7080000000000007b8af807020200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sync() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6m48.018269045s ago: executing program 3 (id=172): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) ioperm(0x8, 0xbe, 0x5e) sysinfo(&(0x7f00000003c0)=""/67) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/285], 0x70}}, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 6m32.90512199s ago: executing program 32 (id=172): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) ioperm(0x8, 0xbe, 0x5e) sysinfo(&(0x7f00000003c0)=""/67) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/285], 0x70}}, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 6m22.979610628s ago: executing program 33 (id=199): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m52.191903426s ago: executing program 0 (id=503): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c84", 0xc9}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="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", 0x1de}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 4m50.7344985s ago: executing program 7 (id=507): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00236ce58fcfed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x4216332b, 0x0) 4m50.315822736s ago: executing program 0 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r5, 0x0, 0x0) close(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000055c0), 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) 4m49.305978919s ago: executing program 7 (id=512): r0 = open$dir(0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000002c0)=""/74, &(0x7f0000000140)=0x4a) socket(0x840000000002, 0x3, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0xa5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0x0, 0xffffffff, 0x21, 0x0, 0x0}) r3 = getpid() r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x500, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) sched_setscheduler(r3, 0x5, &(0x7f0000000180)=0xfffeffff) r6 = socket$kcm(0x10, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m46.88182321s ago: executing program 7 (id=515): syz_emit_ethernet(0x237, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x201, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61e"}, {0x0, 0x19, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac01"}]}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4m45.444543832s ago: executing program 7 (id=517): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) ioperm(0x8, 0xbe, 0x5e) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) sysinfo(&(0x7f00000003c0)=""/67) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x41}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r2}, 0x18) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) socket$key(0xf, 0x3, 0x2) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 4m43.184629587s ago: executing program 7 (id=519): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x10}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x4, &(0x7f0000000340)='GPL\x00'}, 0x30) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) 4m42.956538238s ago: executing program 0 (id=521): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 4m42.955835322s ago: executing program 7 (id=522): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000206010300000000fffff000000000000500010006000000050005000a0000000900020073797a32000000000500040000000000140007800800064000000000080013400000004011000300686173683a6970"], 0x68}}, 0x0) 4m42.108107686s ago: executing program 0 (id=524): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x4) 4m40.148022437s ago: executing program 6 (id=217): r0 = socket$inet(0x2, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42902) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$video(0x0, 0x8000, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) 4m39.187988991s ago: executing program 0 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x4000000008) syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000040), &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 4m38.067866108s ago: executing program 0 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8000002000000000000000190000bbfc01000000000000000000000000000043481f667c44806507db"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0xe6a4d86a3a7a1790) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x100, &(0x7f0000001e00)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a17477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfd7d38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deaddca4c60529c7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f429a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc20e30da511b47683db01ac69398685211dfbbae3e2ed0a50e7313bff500c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a321068c553dced04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f7700001338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000000000000000000000000000000000e1d0e710fe07e55b00000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a36ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad73f61ab6aa190f17c7ef0bf0b2c31961d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5189829b6b0679b5d65a6d072034cecc457776c5faef33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee36cfda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a8dfe5e173660bebf9c255f538687df5ae9374a794481152892620597c3c831a119ba16ea3157e265a651f66652391f63bc48e8a19e940000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00b3461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2000000}, 0x2c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) syz_open_dev$vcsu(0x0, 0x5, 0x240703) 4m37.067247192s ago: executing program 6 (id=531): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) ioperm(0x8, 0xbe, 0x5e) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) sysinfo(&(0x7f00000003c0)=""/67) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x41}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r2}, 0x18) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) socket$key(0xf, 0x3, 0x2) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 4m34.412665874s ago: executing program 34 (id=510): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0xc0403d11, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 4m27.553188727s ago: executing program 35 (id=522): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000206010300000000fffff000000000000500010006000000050005000a0000000900020073797a32000000000500040000000000140007800800064000000000080013400000004011000300686173683a6970"], 0x68}}, 0x0) 4m22.894820882s ago: executing program 36 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8000002000000000000000190000bbfc01000000000000000000000000000043481f667c44806507db"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0xe6a4d86a3a7a1790) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x100, &(0x7f0000001e00)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00b3461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2000000}, 0x2c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) syz_open_dev$vcsu(0x0, 0x5, 0x240703) 4m21.80522485s ago: executing program 37 (id=531): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) ioperm(0x8, 0xbe, 0x5e) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) sysinfo(&(0x7f00000003c0)=""/67) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x41}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r2}, 0x18) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) socket$key(0xf, 0x3, 0x2) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 4m0.288152464s ago: executing program 4 (id=616): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x20042, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 4m0.075609279s ago: executing program 4 (id=618): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 3m58.839962653s ago: executing program 4 (id=619): write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r1, &(0x7f00000004c0)=""/143, 0x8f) close_range(r0, 0xffffffffffffffff, 0x0) 3m58.613625123s ago: executing program 4 (id=621): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3m56.515918963s ago: executing program 4 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040), &(0x7f00000003c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="650a00000000000061116400000000001800000000000000000000000000000095000000000000007c6fe1689aba46407fa1decfe8a922e1f9fff92ce3a0a65025c5d73990905970cbb3115eb3a096499b441cf121aa3f191372e8939e13057241d50309580e918ccf1f7d599140fc2dd85bf5c647035efb962029e660b20e056cf75f2d833fd8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m55.246750438s ago: executing program 4 (id=626): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) sysinfo(&(0x7f00000003c0)=""/67) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x41}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r2}, 0x18) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) close(0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/285], 0x70}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 3m39.85503149s ago: executing program 38 (id=626): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) sysinfo(&(0x7f00000003c0)=""/67) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x41}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r2}, 0x18) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000240)={{@hyper, 0x5}, 0x1, 0x0, 0x5}) close(0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/285], 0x70}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0xc00000c0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x1, 0x1, 0x3}}, 0x80) 3m8.19356376s ago: executing program 8 (id=731): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x19}, 0x1c) connect$inet6(r5, &(0x7f0000000740)={0xa, 0x0, 0x0, @dev}, 0x1c) 3m7.207423071s ago: executing program 8 (id=735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000200000100000a98000000060a0b0400000000000000000200fffc6c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f080001400000000034000580090001006d657461000000002400028008000240000000100800014000000012080001400000000e080002400000000e0900010073797a30000000000900020073797a320000000078000000090a010200000000"], 0x2e0}}, 0x20000840) 3m5.845740513s ago: executing program 8 (id=737): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) 2m58.456881531s ago: executing program 8 (id=751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) 2m54.864705349s ago: executing program 8 (id=756): io_setup(0x9, &(0x7f0000000b80)=0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) eventfd2(0xe, 0x80000) close(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x3) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x73, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x876b}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100009000000000000000000", @ANYRES32=0x0, @ANYBLOB="14920600008000001c001280110001"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600"], 0x124}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000009c0)) 2m50.244255507s ago: executing program 8 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m34.875456118s ago: executing program 39 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12.396472545s ago: executing program 9 (id=1055): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 8.746649014s ago: executing program 2 (id=1065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000080)) 8.500784161s ago: executing program 9 (id=1066): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r0}) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) userfaultfd(0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 8.015978094s ago: executing program 1 (id=1067): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) setreuid(r0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}, {}]}, 0x1d) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 6.282282048s ago: executing program 1 (id=1069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xfc4db2a4f972f9a2, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) fcntl$setown(r0, 0x8, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0xa, 0x2, 0x4, 0x2, 'syz0\x00', 0x10001}, 0x3, 0x10, 0x3, r2, 0x9, 0x6, 'syz0\x00', &(0x7f0000000600)=['\xf91A\xcbPJn?3\xec\b\x00', '\x00', 'A\xe3\xc1\xabN\xb3\xb16\x91cF\xbd\xa4\x9eR\x05].\x9e\xb3\x98\x04\xc4\xaa\x1ep|\xa2\xae\xfdx\x1b#\xdc\xcb\xa79\x97\x8bv\xbf\'~h\xc9P`(c\xe5\x8f\xf1\xf4\xd8X\xb2S\xec\xd1\x9a\xc2\xb3\x94\x879`\xbbSVG|\x1c\x84\xf2\xf3\xdc\xea\a\xb3/\xc7\xf9g\x9ck\xb9~BGa\xa7\xdayp\xa2V=;[\x124\xeb\x94\xe9%\x10\x103&P\r\x11\xdbrl\x94\xde\xbea\x9d\xd5X\x98\x80\xbc\xfb\xe5\x88\x03\xf0^\x9fo\xa6\nl\x9e\n[\xd7\x01\x10\xe8 *z` hU\xdd\x99\x85j2]\x95G\x03>\xefu\x86v\xc0c\xe9\x8c\xd0\x8dO\xd2\xfa\xd8\xac\xb1\xca\xebhk\xcd\xdc\xb08D;\xb2_\xb5\xad\xfeY\xe7\xfd\x01\xc2\xc7\xc4\x962\x1f\xbak\xe85\x12Y\xed6\xb3l\x1cJ\x9e\xe6p\x9a\xf1d\xda>F\xf3!\x19\x8b@\xef]\xcc_<\x12M\xf5{\xdb\xb2T\xcb\xe0\xd0\t_\xfe\xf2s*\xedW\xed\xe9\x85\n\"xz[\xfbe\x19\x91\x1f\xda\x02\xbcI,\x81\xb1\'7\xfc}\r6E\xdf\xefj\x9a\x9b', '\x04z~~\xb0\xab\x8b\x9ed\xce_m\xa9\xfd\x11\xfb\xc9\xfdu2\x91*V_\xb5\xbc\xda\xea\xeeU\xa6\xab\x8eN\x14\x86\x94x.<\x98(*(\x19\xce\xb0\x8b\xad8x\xb9\x0fat\xc3\x8ddI:\x7f\xe5\xc0\xba$\x115FB\x1e\x850\xfa\x8b\x00^\a\x04\x85\x12S\x18><\xf0\xa5\xb8\xca\x02\xfb\xebo\x97\x890h\x86.\x8cQ\xed;R\xd0\x9a!\xf5\r\xb7`\x89\xa4Nd\x9e\xab,(xv\x8e\xd4\v\xa2\x05\x03$LxC]Q\xd5^\x9aU{Y\xc5\xbb{\xe9\r\xd7\xd6\xf0\xe1 \xcf\x91\xf6\xd0\xd9\n\xc6\xf9;\xc4\xe1\x97WAh\f)N\x89\xd6\xb1\x8f4\xe9v\xc5-{ \x98\x12\xf1\xb7\xd6b`g\xa4\xbb\xdf\'\x04\xdf\x7f\xb3x\x8c\x87\xc2\xc5\xa2\'=\x83C$\xb36\xc9s\xbb%\x9e\f\x8dd\x9c\xca\xb0\x14\xfdN\xad\xf7g\f@D#E\xcdo\x10s\xc8\xa8\xb6\x8e9>\x03\xbe`cc+Z\xd4\x10B\xaf\x92\xf6\xa8\x81PR\xd0\xe9\xa4\x83', '/dev/cpu/#/msr\x00', '/dev/ptmx\x00', '-*\x00', '(', 'fdinfo\x00'], 0x24e}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x230484) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x1}}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 6.137924423s ago: executing program 5 (id=1070): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000005e00)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009c1b06223d15055c6d39aecad6836294e3e1fc38b80cd5eb20b39dc7dceb316fa1203f802b4368850fdef916202a989ea54a4e806012876e8631b718a72fc1de2fa7f100eae8a434158d0ed0d6a9061d60971bcf895342571bae0ea58240ebdd0f6f3dd42fa0f9754224a9c2045d2e098e5ca269bb943549e2c2e191b7da91b8645dfdb324ceaf445cdc974884e2d5ac6dbf8b92da3a8a65176db66ca798dce71880c5e6837b5a99b6696d5003a06f62bbfb0b9ba0a6ffbfc2dd37662e077430379386d8fa4d69645ee6e80be3abf802401b0e8382824a68cf51cde62ac89470edf8c757396564c8079d89017df3182005ec9fe433b122f1c02ca72eb68e41fc7ff69975649149ff4be64bd665e56a5fe9ef4d6ee02ff30ad883c0178534e09d2f578bd10d3bfc6888f43be72714a436d1045b6a0298d0804f82bc984e271c346d1e30886f81feb02b8320d47dc752b2dd23b4d8e20f2bda7ff84c57d63da96f044f8daaac7cb7132ef6000000000000000000"], 0x1, 0x5e15, &(0x7f000000bc40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) creat(&(0x7f0000000440)='./file1\x00', 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0x4030582b, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) fdatasync(r5) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 5.300114094s ago: executing program 1 (id=1071): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") setuid(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000780)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000700)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) 5.299922803s ago: executing program 2 (id=1072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.902661921s ago: executing program 1 (id=1073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x4, "0f5f"}]}}}}}}}}, 0x0) 4.663236861s ago: executing program 1 (id=1074): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)={[{@data_checksum={'data_checksum', 0x3d, 'crc32c'}}, {@journal_transaction_names}, {@norecovery}, {@fsck}, {@journal_flush_disabled}, {@norecovery}, {@background_compression={'background_compression', 0x3d, 'zstd'}}, {@reconstruct_alloc}, {@compression={'compression', 0x3d, 'none'}}, {@errors_continue}]}, 0x1, 0x5920, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105442, 0x1ff) fallocate(r0, 0x10, 0x2, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) read(r1, &(0x7f0000000000), 0x2000) creat(&(0x7f0000000240)='./file1\x00', 0xd) 4.312114828s ago: executing program 2 (id=1075): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0x10000, 0x0, 0x0, 0x0, 0x0, "bb68af00008000000000000900"}) 4.266441067s ago: executing program 9 (id=1076): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 3.862064079s ago: executing program 5 (id=1077): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) iopl(0x3) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) ioperm(0x8, 0x8000000000000c0, 0x5e) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000000c0)={0x0, "9a925e154c42b22fde5be9f23f9870e069709386c2bf06845fef2d1dab038595", 0x3, 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) sysinfo(0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1c) 3.359595503s ago: executing program 2 (id=1078): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}}) syz_open_dev$evdev(&(0x7f0000000840), 0x1, 0x206c2) write$char_usb(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 3.298763513s ago: executing program 9 (id=1079): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) setreuid(r0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}, {}]}, 0x1d) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 2.536027483s ago: executing program 5 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.483403877s ago: executing program 1 (id=1081): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xfc4db2a4f972f9a2, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) fcntl$setown(r0, 0x8, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0xa, 0x2, 0x4, 0x2, 'syz0\x00', 0x10001}, 0x3, 0x10, 0x3, r2, 0x9, 0x6, 'syz0\x00', &(0x7f0000000600)=['\xf91A\xcbPJn?3\xec\b\x00', '\x00', 'A\xe3\xc1\xabN\xb3\xb16\x91cF\xbd\xa4\x9eR\x05].\x9e\xb3\x98\x04\xc4\xaa\x1ep|\xa2\xae\xfdx\x1b#\xdc\xcb\xa79\x97\x8bv\xbf\'~h\xc9P`(c\xe5\x8f\xf1\xf4\xd8X\xb2S\xec\xd1\x9a\xc2\xb3\x94\x879`\xbbSVG|\x1c\x84\xf2\xf3\xdc\xea\a\xb3/\xc7\xf9g\x9ck\xb9~BGa\xa7\xdayp\xa2V=;[\x124\xeb\x94\xe9%\x10\x103&P\r\x11\xdbrl\x94\xde\xbea\x9d\xd5X\x98\x80\xbc\xfb\xe5\x88\x03\xf0^\x9fo\xa6\nl\x9e\n[\xd7\x01\x10\xe8 *z` hU\xdd\x99\x85j2]\x95G\x03>\xefu\x86v\xc0c\xe9\x8c\xd0\x8dO\xd2\xfa\xd8\xac\xb1\xca\xebhk\xcd\xdc\xb08D;\xb2_\xb5\xad\xfeY\xe7\xfd\x01\xc2\xc7\xc4\x962\x1f\xbak\xe85\x12Y\xed6\xb3l\x1cJ\x9e\xe6p\x9a\xf1d\xda>F\xf3!\x19\x8b@\xef]\xcc_<\x12M\xf5{\xdb\xb2T\xcb\xe0\xd0\t_\xfe\xf2s*\xedW\xed\xe9\x85\n\"xz[\xfbe\x19\x91\x1f\xda\x02\xbcI,\x81\xb1\'7\xfc}\r6E\xdf\xefj\x9a\x9b', '\x04z~~\xb0\xab\x8b\x9ed\xce_m\xa9\xfd\x11\xfb\xc9\xfdu2\x91*V_\xb5\xbc\xda\xea\xeeU\xa6\xab\x8eN\x14\x86\x94x.<\x98(*(\x19\xce\xb0\x8b\xad8x\xb9\x0fat\xc3\x8ddI:\x7f\xe5\xc0\xba$\x115FB\x1e\x850\xfa\x8b\x00^\a\x04\x85\x12S\x18><\xf0\xa5\xb8\xca\x02\xfb\xebo\x97\x890h\x86.\x8cQ\xed;R\xd0\x9a!\xf5\r\xb7`\x89\xa4Nd\x9e\xab,(xv\x8e\xd4\v\xa2\x05\x03$LxC]Q\xd5^\x9aU{Y\xc5\xbb{\xe9\r\xd7\xd6\xf0\xe1 \xcf\x91\xf6\xd0\xd9\n\xc6\xf9;\xc4\xe1\x97WAh\f)N\x89\xd6\xb1\x8f4\xe9v\xc5-{ \x98\x12\xf1\xb7\xd6b`g\xa4\xbb\xdf\'\x04\xdf\x7f\xb3x\x8c\x87\xc2\xc5\xa2\'=\x83C$\xb36\xc9s\xbb%\x9e\f\x8dd\x9c\xca\xb0\x14\xfdN\xad\xf7g\f@D#E\xcdo\x10s\xc8\xa8\xb6\x8e9>\x03\xbe`cc+Z\xd4\x10B\xaf\x92\xf6\xa8\x81PR\xd0\xe9\xa4\x83', '/dev/cpu/#/msr\x00', '/dev/ptmx\x00', '-*\x00', '(', 'fdinfo\x00'], 0x24e}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x230484) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x1}}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 2.172627418s ago: executing program 5 (id=1082): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000240)={0x4, 0x0, 0x8, 0x400, 0xca, "daf6f14f781b335e09244e58e7267cb3cb2cab", 0x7fff, 0x5}) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002740)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 2.008133396s ago: executing program 9 (id=1083): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xfc4db2a4f972f9a2, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) fcntl$setown(r0, 0x8, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0xa, 0x2, 0x4, 0x2, 'syz0\x00', 0x10001}, 0x3, 0x10, 0x3, r2, 0x9, 0x6, 'syz0\x00', &(0x7f0000000600)=['\xf91A\xcbPJn?3\xec\b\x00', '\x00', 'A\xe3\xc1\xabN\xb3\xb16\x91cF\xbd\xa4\x9eR\x05].\x9e\xb3\x98\x04\xc4\xaa\x1ep|\xa2\xae\xfdx\x1b#\xdc\xcb\xa79\x97\x8bv\xbf\'~h\xc9P`(c\xe5\x8f\xf1\xf4\xd8X\xb2S\xec\xd1\x9a\xc2\xb3\x94\x879`\xbbSVG|\x1c\x84\xf2\xf3\xdc\xea\a\xb3/\xc7\xf9g\x9ck\xb9~BGa\xa7\xdayp\xa2V=;[\x124\xeb\x94\xe9%\x10\x103&P\r\x11\xdbrl\x94\xde\xbea\x9d\xd5X\x98\x80\xbc\xfb\xe5\x88\x03\xf0^\x9fo\xa6\nl\x9e\n[\xd7\x01\x10\xe8 *z` hU\xdd\x99\x85j2]\x95G\x03>\xefu\x86v\xc0c\xe9\x8c\xd0\x8dO\xd2\xfa\xd8\xac\xb1\xca\xebhk\xcd\xdc\xb08D;\xb2_\xb5\xad\xfeY\xe7\xfd\x01\xc2\xc7\xc4\x962\x1f\xbak\xe85\x12Y\xed6\xb3l\x1cJ\x9e\xe6p\x9a\xf1d\xda>F\xf3!\x19\x8b@\xef]\xcc_<\x12M\xf5{\xdb\xb2T\xcb\xe0\xd0\t_\xfe\xf2s*\xedW\xed\xe9\x85\n\"xz[\xfbe\x19\x91\x1f\xda\x02\xbcI,\x81\xb1\'7\xfc}\r6E\xdf\xefj\x9a\x9b', '\x04z~~\xb0\xab\x8b\x9ed\xce_m\xa9\xfd\x11\xfb\xc9\xfdu2\x91*V_\xb5\xbc\xda\xea\xeeU\xa6\xab\x8eN\x14\x86\x94x.<\x98(*(\x19\xce\xb0\x8b\xad8x\xb9\x0fat\xc3\x8ddI:\x7f\xe5\xc0\xba$\x115FB\x1e\x850\xfa\x8b\x00^\a\x04\x85\x12S\x18><\xf0\xa5\xb8\xca\x02\xfb\xebo\x97\x890h\x86.\x8cQ\xed;R\xd0\x9a!\xf5\r\xb7`\x89\xa4Nd\x9e\xab,(xv\x8e\xd4\v\xa2\x05\x03$LxC]Q\xd5^\x9aU{Y\xc5\xbb{\xe9\r\xd7\xd6\xf0\xe1 \xcf\x91\xf6\xd0\xd9\n\xc6\xf9;\xc4\xe1\x97WAh\f)N\x89\xd6\xb1\x8f4\xe9v\xc5-{ \x98\x12\xf1\xb7\xd6b`g\xa4\xbb\xdf\'\x04\xdf\x7f\xb3x\x8c\x87\xc2\xc5\xa2\'=\x83C$\xb36\xc9s\xbb%\x9e\f\x8dd\x9c\xca\xb0\x14\xfdN\xad\xf7g\f@D#E\xcdo\x10s\xc8\xa8\xb6\x8e9>\x03\xbe`cc+Z\xd4\x10B\xaf\x92\xf6\xa8\x81PR\xd0\xe9\xa4\x83', '/dev/cpu/#/msr\x00', '/dev/ptmx\x00', '-*\x00', '(', 'fdinfo\x00'], 0x24e}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x230484) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x1}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) 1.688130837s ago: executing program 5 (id=1084): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)) 1.020744356s ago: executing program 9 (id=1085): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 1.013157563s ago: executing program 5 (id=1086): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r0}) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) userfaultfd(0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 188.568164ms ago: executing program 2 (id=1087): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 2 (id=1088): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0x10000, 0x0, 0x0, 0x0, 0x0, "bb68af00008000000000000900"}) kernel console output (not intermixed with test programs): 31036][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.828682][ T5849] Bluetooth: hci8: command tx timeout [ 293.946575][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.024450][ T8001] veth1_vlan: entered promiscuous mode [ 294.215274][ T8080] hsr_slave_0: entered promiscuous mode [ 294.221576][ T8161] program syz.2.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.239555][ T8080] hsr_slave_1: entered promiscuous mode [ 294.252295][ T8161] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 294.307895][ T8080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.340638][ T8080] Cannot create hsr debugfs directory [ 294.541430][ T5849] Bluetooth: hci7: command tx timeout [ 294.557176][ T8001] veth0_macvtap: entered promiscuous mode [ 294.710230][ T8001] veth1_macvtap: entered promiscuous mode [ 294.781129][ T5849] Bluetooth: hci9: command tx timeout [ 294.837780][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.856547][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.992265][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.009479][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.020386][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.054378][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.101378][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.137650][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.162870][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.212974][ T8184] vlan2: entered promiscuous mode [ 295.218036][ T8184] dummy0: entered promiscuous mode [ 295.242300][ T8184] dummy0: left promiscuous mode [ 295.325449][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.380949][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.408224][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.440939][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.477424][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.501106][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.531115][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.556785][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.608823][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.747433][ T8001] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.788693][ T8001] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.830768][ T8001] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.839509][ T8001] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.901762][ T5849] Bluetooth: hci8: command tx timeout [ 295.934915][ T8193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.065127][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 296.606830][ T6945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.626653][ T5854] Bluetooth: hci7: command tx timeout [ 296.639212][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.669668][ T6945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.740391][ T8080] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 296.749145][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 296.759898][ T8080] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 296.775766][ T8080] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 296.797568][ T8080] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 296.840843][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.877055][ T5854] Bluetooth: hci9: command tx timeout [ 296.969801][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.987681][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.021251][ T8135] bridge_slave_0: entered allmulticast mode [ 297.028271][ T8135] bridge_slave_0: entered promiscuous mode [ 297.468511][ T5946] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 297.489887][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.497570][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.505933][ T8150] bridge_slave_0: entered allmulticast mode [ 297.521122][ T8150] bridge_slave_0: entered promiscuous mode [ 297.532944][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.550625][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.558282][ T8135] bridge_slave_1: entered allmulticast mode [ 297.581930][ T8135] bridge_slave_1: entered promiscuous mode [ 297.710836][ T5946] usb 9-1: Using ep0 maxpacket: 16 [ 297.719483][ T5946] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 297.742792][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.779834][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.798305][ T5946] usb 9-1: Product: syz [ 297.810518][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.823684][ T5946] usb 9-1: Manufacturer: syz [ 297.841386][ T5946] usb 9-1: SerialNumber: syz [ 297.846729][ T8150] bridge_slave_1: entered allmulticast mode [ 297.885711][ T8150] bridge_slave_1: entered promiscuous mode [ 297.894209][ T5946] usb 9-1: config 0 descriptor?? [ 297.927702][ T5946] appledisplay 9-1:0.0: Could not find int-in endpoint [ 297.952188][ T5946] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 297.982448][ T5854] Bluetooth: hci8: command tx timeout [ 298.016962][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.026343][ T8225] program syz.2.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.093964][ T8225] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 298.148795][ T5856] usb 9-1: USB disconnect, device number 2 [ 298.199565][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.223822][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 298.295539][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.313275][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.458631][ T8135] team0: Port device team_slave_0 added [ 298.475828][ T8135] team0: Port device team_slave_1 added [ 298.512099][ T8150] team0: Port device team_slave_0 added [ 298.540504][ T8150] team0: Port device team_slave_1 added [ 298.763207][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.770563][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.796890][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.949110][ T5849] Bluetooth: hci9: command tx timeout [ 299.011988][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.079302][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.095271][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.121157][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.199739][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.270491][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.299462][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.318729][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.356264][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.661485][ T5849] Bluetooth: hci8: command tx timeout [ 300.838083][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.043697][ T5849] Bluetooth: hci9: command tx timeout [ 301.068394][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.095112][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.703789][ T8252] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 301.998366][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.066403][ T8150] hsr_slave_0: entered promiscuous mode [ 302.475793][ T8150] hsr_slave_1: entered promiscuous mode [ 303.087246][ T8261] program syz.8.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.096877][ T8261] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 303.112652][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.160976][ T8150] Cannot create hsr debugfs directory [ 303.168532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.175669][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.374913][ T8268] input: syz0 as /devices/virtual/input/input13 [ 303.414647][ T8135] hsr_slave_0: entered promiscuous mode [ 303.443461][ T8135] hsr_slave_1: entered promiscuous mode [ 303.500947][ T8135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.519551][ T8135] Cannot create hsr debugfs directory [ 303.599722][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.606885][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.139129][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.564691][ T8364] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 313.572638][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.615'. [ 313.582553][ T8364] bridge0: port 1(ipvlan1) entered blocking state [ 313.589110][ T8364] bridge0: port 1(ipvlan1) entered disabled state [ 313.596928][ T8364] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 315.495618][ T8080] veth0_vlan: entered promiscuous mode [ 315.544418][ T8080] veth1_vlan: entered promiscuous mode [ 316.668694][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.675409][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.194725][ T8080] veth0_macvtap: entered promiscuous mode [ 318.276368][ T8080] veth1_macvtap: entered promiscuous mode [ 318.651251][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.932586][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.109300][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.310928][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.329802][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.341433][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.351774][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.363052][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.403136][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.443746][ T8441] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.628'. [ 319.460943][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.546455][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.572495][ T8441] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 319.590930][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.664346][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.014812][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.097466][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.160791][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.218072][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.250448][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.273705][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.292653][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.451041][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.491224][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.525100][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.557021][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.588548][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.644197][ T8446] netlink: 'syz.8.629': attribute type 10 has an invalid length. [ 320.660877][ T8446] netlink: 40 bytes leftover after parsing attributes in process `syz.8.629'. [ 320.711245][ T8446] ipvlan1: entered promiscuous mode [ 320.716835][ T8446] ipvlan1: entered allmulticast mode [ 320.741592][ T8446] veth0_vlan: entered allmulticast mode [ 320.753127][ T8446] bridge0: port 3(ipvlan1) entered blocking state [ 320.769996][ T8446] bridge0: port 3(ipvlan1) entered disabled state [ 320.802095][ T8446] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 321.246644][ T8461] dccp_invalid_packet: P.Data Offset(100) too large [ 321.706175][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.632'. [ 322.156585][ T8469] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 322.801506][ T5947] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 322.973029][ T5947] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 323.002676][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.023494][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.052023][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.072946][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.105916][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.139815][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.171088][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.201563][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.235488][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.268189][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.298131][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.330950][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.371846][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.400802][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.437848][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.468781][ T5947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 323.495001][ T5947] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 323.515358][ T5947] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 323.545062][ T5947] usb 3-1: Product: syz [ 323.578070][ T5947] usb 3-1: Manufacturer: syz [ 323.601295][ T5947] usb 3-1: SerialNumber: syz [ 323.617863][ T5947] usb 3-1: config 0 descriptor?? [ 323.862602][ T5947] usb 3-1: USB disconnect, device number 5 [ 325.118110][ T8522] netlink: 256 bytes leftover after parsing attributes in process `syz.2.637'. [ 326.164054][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.185471][ T8080] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.194354][ T8080] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.210763][ T8080] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.229654][ T8080] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.265715][ T8135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.282828][ T8135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.659306][ T8135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.754537][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.771559][ T8555] random: crng reseeded on system resumption [ 329.846877][ T8135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.998598][ T8560] program syz.2.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.008264][ T8560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 330.237554][ T35] bridge_slave_1: left allmulticast mode [ 330.255102][ T35] bridge_slave_1: left promiscuous mode [ 330.292888][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.312690][ T35] bridge_slave_0: left allmulticast mode [ 330.318402][ T35] bridge_slave_0: left promiscuous mode [ 330.426820][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.502982][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.561514][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.625846][ T35] bond0 (unregistering): Released all slaves [ 333.816791][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 333.816812][ T29] audit: type=1800 audit(1731601425.582:254): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.652" name="/" dev="9p" ino=2 res=0 errno=0 [ 334.716093][ T8598] program syz.8.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.725732][ T8598] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 334.822683][ T8603] vivid-004: disconnect [ 335.332610][ T8599] vivid-004: reconnect [ 335.562719][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.570595][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.717245][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.731467][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.741035][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.749444][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.758547][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.766227][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.353725][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.363362][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.812020][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.920119][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.955819][ T8150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.051768][ T8619] tipc: Started in network mode [ 337.062177][ T8619] tipc: Node identity , cluster identity 4711 [ 337.078866][ T8619] tipc: Failed to obtain node identity [ 337.147720][ T8619] tipc: Enabling of bearer rejected, failed to enable media [ 337.202267][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.209509][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.263569][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.270805][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.303528][ T8150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.400825][ T35] hsr_slave_0: left promiscuous mode [ 337.421995][ T35] hsr_slave_1: left promiscuous mode [ 337.441868][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.472936][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.511904][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.519492][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.619026][ T35] veth1_macvtap: left promiscuous mode [ 337.641344][ T35] veth0_macvtap: left promiscuous mode [ 337.657906][ T35] veth1_vlan: left promiscuous mode [ 337.687738][ T35] veth0_vlan: left promiscuous mode [ 338.061212][ T5854] Bluetooth: hci0: command tx timeout [ 338.150647][ T35] infiniband syz0: set down [ 338.416020][ T35] infiniband syz2: set down [ 339.949527][ T35] team0 (unregistering): Port device team_slave_1 removed [ 340.010639][ T35] team0 (unregistering): Port device team_slave_0 removed [ 340.141254][ T5854] Bluetooth: hci0: command tx timeout [ 340.472908][ T8150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 340.515716][ T8150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 340.743127][ T51] smc: removing ib device syz0 [ 340.818354][ T68] smc: removing ib device syz2 [ 342.275238][ T5854] Bluetooth: hci0: command tx timeout [ 342.880916][ T5856] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 343.121021][ T5856] usb 9-1: Using ep0 maxpacket: 16 [ 343.134181][ T5856] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.171806][ T5856] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 343.210911][ T5856] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.255163][ T5856] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 343.266930][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.276057][ T5856] usb 9-1: Product: syz [ 343.280254][ T5856] usb 9-1: Manufacturer: syz [ 343.286878][ T5856] usb 9-1: SerialNumber: syz [ 343.294472][ T5856] usb 9-1: config 0 descriptor?? [ 343.304271][ T5856] appledisplay 9-1:0.0: Could not find int-in endpoint [ 343.312552][ T5856] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 343.432359][ T29] audit: type=1326 audit(1731601435.202:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f262cf7e719 code=0x0 [ 343.530307][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.642629][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.676590][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.683937][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.687362][ T5843] usb 9-1: USB disconnect, device number 3 [ 343.795696][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.802974][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.929128][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.305378][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 344.316795][ T5849] Bluetooth: hci0: command tx timeout [ 344.953378][ T8135] veth0_vlan: entered promiscuous mode [ 344.965384][ T8135] veth1_vlan: entered promiscuous mode [ 345.706023][ T8135] veth0_macvtap: entered promiscuous mode [ 345.761000][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.806051][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.022830][ T8606] bridge_slave_0: entered allmulticast mode [ 346.096812][ T8606] bridge_slave_0: entered promiscuous mode [ 346.166628][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.188234][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.207699][ T8606] bridge_slave_1: entered allmulticast mode [ 346.215484][ T8606] bridge_slave_1: entered promiscuous mode [ 346.263452][ T8135] veth1_macvtap: entered promiscuous mode [ 346.428205][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.518494][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.559062][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.012556][ T8606] team0: Port device team_slave_0 added [ 347.060289][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.089289][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.120818][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.145208][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.197222][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.230285][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.261164][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 347.279077][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.310815][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.330875][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.391767][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.404084][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.650888][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 348.588508][ T8606] team0: Port device team_slave_1 added [ 348.631964][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.652888][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 348.676514][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.732940][ T5905] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 348.750724][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.758902][ T5905] usb 3-1: Product: syz [ 348.769840][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.9.694'. [ 348.778711][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.9.694'. [ 348.873687][ T5905] usb 3-1: Manufacturer: syz [ 348.878360][ T5905] usb 3-1: SerialNumber: syz [ 349.008663][ T5905] usb 3-1: config 0 descriptor?? [ 349.021987][ T5905] appledisplay 3-1:0.0: Could not find int-in endpoint [ 349.064192][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.079209][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.125338][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.175899][ T5905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 349.223307][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.223331][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.223367][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.288313][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.288344][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.288364][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.288382][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.288399][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.288418][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.288435][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.288454][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.288471][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.288490][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.289876][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.294814][ T8135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.294859][ T8135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.294897][ T8135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.294934][ T8135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.439503][ T5905] usb 3-1: USB disconnect, device number 6 [ 352.975962][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.978984][ T8606] hsr_slave_0: entered promiscuous mode [ 352.986313][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.043131][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.069549][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.076893][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.092942][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.093945][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.111659][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.119670][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.120329][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.145458][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.153117][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.153487][ T8606] hsr_slave_1: entered promiscuous mode [ 353.389573][ T8606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.413502][ T8606] Cannot create hsr debugfs directory [ 354.508364][ T35] IPVS: stop unused estimator thread 0... [ 354.965669][ T8606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.078592][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 355.262526][ T5854] Bluetooth: hci1: command tx timeout [ 355.269196][ T5849] Bluetooth: hci3: command tx timeout [ 355.404018][ T8606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.142485][ T8797] fuse: Unknown parameter 'use00000000000000000000' [ 357.261864][ T8606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.341666][ T5854] Bluetooth: hci1: command tx timeout [ 357.347163][ T5854] Bluetooth: hci3: command tx timeout [ 357.528100][ T8606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.750442][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.781861][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.799034][ T8759] bridge_slave_0: entered allmulticast mode [ 357.821486][ T8759] bridge_slave_0: entered promiscuous mode [ 357.844647][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.863449][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.873358][ T8759] bridge_slave_1: entered allmulticast mode [ 357.880857][ T8759] bridge_slave_1: entered promiscuous mode [ 357.936707][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 357.989644][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.193445][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.341453][ T8606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.505212][ T8606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.645800][ T8606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.783274][ T8759] team0: Port device team_slave_0 added [ 358.792038][ T8759] team0: Port device team_slave_1 added [ 358.847179][ T8606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.972629][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.093289][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.115563][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.221186][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.284085][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.422902][ T5849] Bluetooth: hci1: command tx timeout [ 359.471742][ T5854] Bluetooth: hci3: command tx timeout [ 359.813440][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.820476][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.915129][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.996123][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.003334][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.011726][ T8842] fuse: Unknown parameter 'use00000000000000000000' [ 360.025283][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.032543][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.075298][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.092988][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.100300][ T8758] bridge_slave_0: entered allmulticast mode [ 360.138336][ T8758] bridge_slave_0: entered promiscuous mode [ 360.307815][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.315650][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.323193][ T8758] bridge_slave_1: entered allmulticast mode [ 360.330330][ T8758] bridge_slave_1: entered promiscuous mode [ 360.404124][ T8759] hsr_slave_0: entered promiscuous mode [ 360.411192][ T8759] hsr_slave_1: entered promiscuous mode [ 360.440823][ T8759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.460897][ T8759] Cannot create hsr debugfs directory [ 360.723022][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.501092][ T5854] Bluetooth: hci3: command tx timeout [ 361.511410][ T5854] Bluetooth: hci1: command tx timeout [ 361.542411][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.662226][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.750603][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.884618][ T8857] ISOFS: Unable to identify CD-ROM format. [ 361.908247][ T8758] team0: Port device team_slave_0 added [ 361.943052][ T8758] team0: Port device team_slave_1 added [ 362.123342][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.207061][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.224479][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.317250][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.582998][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.622297][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.629652][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.707985][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.847156][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.255980][ T8758] hsr_slave_0: entered promiscuous mode [ 364.281462][ T8758] hsr_slave_1: entered promiscuous mode [ 364.294781][ T8758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.318861][ T8758] Cannot create hsr debugfs directory [ 365.226834][ T8879] fuse: Unknown parameter 'user_i00000000000000000000' [ 365.433846][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.467852][ T8606] veth0_vlan: entered promiscuous mode [ 365.483390][ T8606] veth1_vlan: entered promiscuous mode [ 365.559916][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.652214][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.719530][ T8606] veth0_macvtap: entered promiscuous mode [ 365.734187][ T8606] veth1_macvtap: entered promiscuous mode [ 365.774379][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.884521][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.913627][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.937426][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.959407][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.980364][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.084659][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.203996][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.216479][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.226517][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.237242][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.242263][ T8894] netlink: 100 bytes leftover after parsing attributes in process `syz.8.735'. [ 366.247147][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.269740][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.281447][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.292309][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.304790][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.317402][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.328571][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.350777][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.370772][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.390727][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.417790][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.428732][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.439489][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.449962][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.460808][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.472468][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.344814][ T8606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.360949][ T8606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.431534][ T8606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.440297][ T8606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.565317][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.836071][ T8759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.257266][ T8759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.297849][ T8759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.450554][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.539581][ T8759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.721653][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.993801][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.040916][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.093581][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.497842][ T8254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.534362][ T8254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.769966][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.916031][ T8972] netlink: 100 bytes leftover after parsing attributes in process `syz.1.746'. [ 372.926045][ T8969] xt_TCPMSS: Only works on TCP SYN packets [ 373.002204][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.020486][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.065080][ T8759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.075929][ T8759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.432116][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.235574][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.242858][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.323347][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.330563][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.653211][ T8758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.794094][ T8758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.954020][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.042848][ T8758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.772527][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.970957][ T8758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.215018][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.221705][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.309871][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.210286][ T35] bridge_slave_1: left allmulticast mode [ 379.437756][ T35] bridge_slave_1: left promiscuous mode [ 379.444127][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.945401][ T9049] netlink: 112 bytes leftover after parsing attributes in process `syz.8.756'. [ 379.954568][ T9049] openvswitch: netlink: Message has 13 unknown bytes. [ 380.760781][ T29] audit: type=1326 audit(1731601471.862:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec37e719 code=0x7fc00000 [ 380.940551][ T35] bridge_slave_0: left allmulticast mode [ 380.978513][ T35] bridge_slave_0: left promiscuous mode [ 380.999448][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.005809][ T9058] dccp_v4_rcv: dropped packet with invalid checksum [ 381.382857][ T35] bridge_slave_1: left allmulticast mode [ 381.388556][ T35] bridge_slave_1: left promiscuous mode [ 381.666975][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.358903][ T35] bridge_slave_0: left allmulticast mode [ 382.364849][ T35] bridge_slave_0: left promiscuous mode [ 382.404261][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.911813][ T35] bridge_slave_1: left allmulticast mode [ 382.917705][ T35] bridge_slave_1: left promiscuous mode [ 382.971124][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.053344][ T35] bridge_slave_0: left allmulticast mode [ 383.060221][ T35] bridge_slave_0: left promiscuous mode [ 383.070380][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.170603][ T35] bridge_slave_1: left allmulticast mode [ 383.208387][ T35] bridge_slave_1: left promiscuous mode [ 383.214729][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.250230][ T35] bridge_slave_0: left allmulticast mode [ 383.256972][ T35] bridge_slave_0: left promiscuous mode [ 383.262967][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.293200][ T35] bridge_slave_1: left allmulticast mode [ 383.300129][ T35] bridge_slave_1: left promiscuous mode [ 383.306771][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.338943][ T35] bridge_slave_0: left allmulticast mode [ 383.345808][ T35] bridge_slave_0: left promiscuous mode [ 383.351865][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.550085][ T9152] fuse: Unknown parameter 'user_i00000000000000000000' [ 392.864296][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 395.354583][ T9201] overlayfs: missing 'lowerdir' [ 398.065440][ T9226] vivid-008: disconnect [ 398.182309][ T9221] vivid-008: reconnect [ 400.413346][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.423737][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.433203][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.443491][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.453707][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 400.464851][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.329031][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.348448][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.362721][ T35] bond0 (unregistering): Released all slaves [ 401.519596][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.548348][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.578150][ T35] bond0 (unregistering): Released all slaves [ 401.799748][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.832319][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.857328][ T35] bond0 (unregistering): Released all slaves [ 402.032705][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.051164][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.074829][ T35] bond0 (unregistering): Released all slaves [ 402.249048][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.260406][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.275044][ T35] bond0 (unregistering): Released all slaves [ 402.384001][ T35] bond0 (unregistering): Released all slaves [ 402.548659][ T53] Bluetooth: hci4: command tx timeout [ 402.757545][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.774448][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.785874][ T8759] veth0_vlan: entered promiscuous mode [ 402.844326][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.851593][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.971864][ T53] Bluetooth: hci4: command tx timeout [ 405.015408][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.022652][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.143601][ T8759] veth1_vlan: entered promiscuous mode [ 405.336279][ T8758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.359170][ T9323] ISOFS: Unable to identify CD-ROM format. [ 405.409434][ T8758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.645127][ T8759] veth0_macvtap: entered promiscuous mode [ 405.675476][ T8759] veth1_macvtap: entered promiscuous mode [ 406.102472][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.135624][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.239462][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.252393][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.280900][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.513824][ T9342] vivid-002: disconnect [ 407.012792][ T9336] vivid-002: reconnect [ 407.233819][ T5849] Bluetooth: hci4: command tx timeout [ 407.273485][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.284073][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.360861][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.371201][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.381859][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.401094][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.412082][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.422826][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.433718][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.445589][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.601286][ T9250] chnl_net:caif_netlink_parms(): no params data found [ 408.694884][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.744787][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.801747][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.889122][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.920933][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.941145][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.957648][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.987560][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.998769][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.011630][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.022823][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.033821][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.044404][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.066192][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.109198][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.139714][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.265822][ T53] Bluetooth: hci4: command tx timeout [ 409.325053][ T8759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.360784][ T8759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.369549][ T8759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.394378][ T8759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.101573][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.110513][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.145834][ T9250] bridge_slave_0: entered allmulticast mode [ 410.171195][ T9250] bridge_slave_0: entered promiscuous mode [ 410.198927][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.233750][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.261877][ T9250] bridge_slave_1: entered allmulticast mode [ 410.294412][ T9250] bridge_slave_1: entered promiscuous mode [ 411.450122][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 412.094923][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.102885][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.655733][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.118744][ T9416] vivid-002: disconnect [ 414.430239][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.441377][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.458759][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.471799][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.484092][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.493679][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.525846][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.564675][ T9409] vivid-002: reconnect [ 414.573716][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.582052][ T5851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 414.589967][ T5854] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 414.600446][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.607886][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 415.143707][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.539649][ T9250] team0: Port device team_slave_0 added [ 415.581513][ T9250] team0: Port device team_slave_1 added [ 415.910635][ T9438] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.736089][ T5849] Bluetooth: hci6: command tx timeout [ 416.742124][ T53] Bluetooth: hci5: command tx timeout [ 417.406659][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.428937][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.555920][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.834932][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.878995][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.951712][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.743660][ T9466] vivid-008: disconnect [ 418.780800][ T5849] Bluetooth: hci6: command tx timeout [ 418.786429][ T5849] Bluetooth: hci5: command tx timeout [ 418.853252][ T9457] vivid-008: reconnect [ 420.474422][ T9250] hsr_slave_0: entered promiscuous mode [ 420.484390][ T9250] hsr_slave_1: entered promiscuous mode [ 420.539833][ T9250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.547739][ T9250] Cannot create hsr debugfs directory [ 420.861101][ T53] Bluetooth: hci5: command tx timeout [ 420.867709][ T53] Bluetooth: hci6: command tx timeout [ 421.477633][ T9412] chnl_net:caif_netlink_parms(): no params data found [ 421.644872][ T35] hsr_slave_0: left promiscuous mode [ 421.770359][ T35] hsr_slave_1: left promiscuous mode [ 421.914157][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.941497][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.384117][ T5849] Bluetooth: hci6: command tx timeout [ 423.396617][ T5849] Bluetooth: hci5: command tx timeout [ 423.469965][ T9526] Bluetooth: MGMT ver 1.23 [ 423.493627][ T9526] vivid-002: disconnect [ 424.006976][ T9523] vivid-002: reconnect [ 424.400850][ T35] hsr_slave_0: left promiscuous mode [ 424.524419][ T35] hsr_slave_1: left promiscuous mode [ 424.552810][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.560442][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.605671][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.619344][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.694422][ T35] hsr_slave_0: left promiscuous mode [ 424.710721][ T35] hsr_slave_1: left promiscuous mode [ 424.788902][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.830224][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.875565][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.897714][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.029274][ T35] hsr_slave_0: left promiscuous mode [ 425.170931][ T35] hsr_slave_1: left promiscuous mode [ 425.204502][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.214127][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.286622][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.323876][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.360089][ T35] hsr_slave_0: left promiscuous mode [ 426.171461][ T35] hsr_slave_1: left promiscuous mode [ 426.187784][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.201782][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.212100][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.223616][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.258525][ T35] hsr_slave_0: left promiscuous mode [ 426.409306][ T35] hsr_slave_1: left promiscuous mode [ 426.831059][ T35] veth1_macvtap: left promiscuous mode [ 426.836631][ T35] veth0_macvtap: left promiscuous mode [ 426.843801][ T35] veth1_vlan: left promiscuous mode [ 426.849207][ T35] veth0_vlan: left promiscuous mode [ 426.945006][ T35] veth1_macvtap: left promiscuous mode [ 426.973869][ T35] veth0_macvtap: left promiscuous mode [ 426.979523][ T35] veth1_vlan: left promiscuous mode [ 427.016056][ T35] veth0_vlan: left promiscuous mode [ 427.271466][ T35] veth1_macvtap: left promiscuous mode [ 427.277072][ T35] veth0_macvtap: left promiscuous mode [ 427.283724][ T35] veth1_vlan: left promiscuous mode [ 427.289073][ T35] veth0_vlan: left promiscuous mode [ 428.345462][ T35] veth1_macvtap: left promiscuous mode [ 428.352286][ T35] veth0_macvtap: left promiscuous mode [ 428.358229][ T35] veth1_vlan: left promiscuous mode [ 428.364445][ T35] veth0_vlan: left promiscuous mode [ 428.389867][ T35] veth1_macvtap: left promiscuous mode [ 428.396294][ T35] veth0_macvtap: left promiscuous mode [ 428.405850][ T35] veth1_vlan: left promiscuous mode [ 428.421572][ T35] veth0_vlan: left promiscuous mode [ 429.023153][ T9597] vivid-008: disconnect [ 429.542937][ T9591] vivid-008: reconnect [ 432.438263][ T35] team0 (unregistering): Port device team_slave_1 removed [ 432.581597][ T35] team0 (unregistering): Port device team_slave_0 removed [ 434.359469][ T35] team0 (unregistering): Port device team_slave_1 removed [ 434.466149][ T35] team0 (unregistering): Port device team_slave_0 removed [ 435.846791][ T9656] sctp: failed to load transform for md5: -2 [ 436.314828][ T35] team0 (unregistering): Port device team_slave_1 removed [ 436.356930][ T35] team0 (unregistering): Port device team_slave_0 removed [ 437.051999][ T35] team0 (unregistering): Port device team_slave_1 removed [ 437.094157][ T35] team0 (unregistering): Port device team_slave_0 removed [ 437.795204][ T35] team0 (unregistering): Port device team_slave_1 removed [ 437.838352][ T35] team0 (unregistering): Port device team_slave_0 removed [ 438.815885][ T35] team0 (unregistering): Port device wg2 removed [ 439.507197][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.514678][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.581385][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.312587][ T9686] vivid-002: disconnect [ 440.419611][ T9678] vivid-002: reconnect [ 440.555741][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.570910][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.588547][ T9412] bridge_slave_0: entered allmulticast mode [ 440.624317][ T9412] bridge_slave_0: entered promiscuous mode [ 440.643466][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.667575][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.695539][ T9412] bridge_slave_1: entered allmulticast mode [ 440.716778][ T9412] bridge_slave_1: entered promiscuous mode [ 440.747684][ T9411] chnl_net:caif_netlink_parms(): no params data found [ 442.315453][ T9412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.429053][ T9412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.845613][ T9412] team0: Port device team_slave_0 added [ 442.982351][ T9412] team0: Port device team_slave_1 added [ 443.053266][ T9411] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.094257][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.130209][ T9411] bridge_slave_0: entered allmulticast mode [ 443.161949][ T9411] bridge_slave_0: entered promiscuous mode [ 443.408222][ T9411] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.462275][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.501166][ T9411] bridge_slave_1: entered allmulticast mode [ 443.528265][ T9411] bridge_slave_1: entered promiscuous mode [ 443.549763][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.561975][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.658723][ T9412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.843020][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.860450][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.930951][ T9412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.073013][ T9411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.152460][ T9411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.261619][ T8254] Bluetooth: hci1: Frame reassembly failed (-84) [ 444.354343][ T9412] hsr_slave_0: entered promiscuous mode [ 444.374876][ T9412] hsr_slave_1: entered promiscuous mode [ 444.382376][ T9412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.389959][ T9412] Cannot create hsr debugfs directory [ 444.478902][ T9411] team0: Port device team_slave_0 added [ 444.522554][ T9411] team0: Port device team_slave_1 added [ 444.774339][ T9411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.810938][ T9411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.852978][ T9411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.021890][ T9411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.051152][ T9411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.150991][ T9411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.251411][ T9250] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 445.281456][ T9250] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 445.306914][ T9250] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 445.407376][ T9250] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 445.486866][ T9411] hsr_slave_0: entered promiscuous mode [ 445.524069][ T9411] hsr_slave_1: entered promiscuous mode [ 445.556031][ T9411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.565545][ T9411] Cannot create hsr debugfs directory [ 445.650149][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.172931][ T9766] vivid-008: disconnect [ 446.301349][ T5849] Bluetooth: hci1: command 0x1003 tx timeout [ 446.301511][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 446.377171][ T9412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.620164][ T9412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.682055][ T9763] vivid-008: reconnect [ 449.784248][ T9412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.973709][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.119152][ T9250] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.141051][ T35] IPVS: stop unused estimator thread 0... [ 450.274866][ T9412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.288207][ T35] IPVS: stop unused estimator thread 0... [ 450.343789][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.350954][ T6945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.508667][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.515907][ T6945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.790429][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.241338][ T35] bridge_slave_1: left allmulticast mode [ 452.259258][ T35] bridge_slave_1: left promiscuous mode [ 452.265851][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.286939][ T35] bridge_slave_0: left allmulticast mode [ 452.301474][ T35] bridge_slave_0: left promiscuous mode [ 452.309975][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.350092][ T35] bridge_slave_1: left allmulticast mode [ 452.357539][ T35] bridge_slave_1: left promiscuous mode [ 452.421092][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.440564][ T35] bridge_slave_0: left allmulticast mode [ 452.452114][ T35] bridge_slave_0: left promiscuous mode [ 452.478396][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.439052][ T9841] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.882'. [ 454.230329][ T9849] vivid-002: disconnect [ 454.263980][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.287835][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.318717][ T35] bond0 (unregistering): Released all slaves [ 454.777435][ T9845] vivid-002: reconnect [ 456.563205][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.575039][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.105506][ T35] bond0 (unregistering): Released all slaves [ 458.486973][ T9411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 459.000829][ T9411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.077086][ T9411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.000811][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.091241][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.107352][ T9411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.114484][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.250300][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.259175][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.267660][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.446675][ T35] hsr_slave_0: left promiscuous mode [ 461.473247][ T35] hsr_slave_1: left promiscuous mode [ 461.498347][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.506239][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.514963][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.580928][ T5919] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 461.702596][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.718460][ T35] hsr_slave_0: left promiscuous mode [ 461.726532][ T35] hsr_slave_1: left promiscuous mode [ 461.733878][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.742779][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.757286][ T9919] vivid-004: disconnect [ 461.780385][ T35] veth1_macvtap: left promiscuous mode [ 461.786120][ T35] veth0_macvtap: left promiscuous mode [ 461.792704][ T35] veth1_vlan: left promiscuous mode [ 461.798103][ T35] veth0_vlan: left promiscuous mode [ 461.866852][ T5919] usb 10-1: unable to get BOS descriptor or descriptor too short [ 461.885902][ T5919] usb 10-1: config 2 has an invalid interface number: 224 but max is 0 [ 461.900019][ T5919] usb 10-1: config 2 has no interface number 0 [ 461.911074][ T5919] usb 10-1: config 2 interface 224 has no altsetting 0 [ 461.923053][ T5919] usb 10-1: New USB device found, idVendor=19d2, idProduct=ff6e, bcdDevice=4d.9a [ 461.944030][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.962795][ T5919] usb 10-1: Product: syz [ 461.972113][ T5919] usb 10-1: Manufacturer: syz [ 461.982579][ T5919] usb 10-1: SerialNumber: syz [ 462.071052][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 462.291021][ T9917] vivid-004: reconnect [ 463.411459][ T5849] Bluetooth: hci1: command tx timeout [ 464.311407][ T5919] option 10-1:2.224: GSM modem (1-port) converter detected [ 464.329470][ T5919] usb 10-1: USB disconnect, device number 2 [ 464.338093][ T5919] option 10-1:2.224: device disconnected [ 465.420748][ T5849] Bluetooth: hci1: command tx timeout [ 468.756231][ T5854] Bluetooth: hci1: command tx timeout [ 469.969493][ T9966] vivid-002: disconnect [ 470.369115][ T35] team0 (unregistering): Port device team_slave_1 removed [ 470.458383][ T9964] vivid-002: reconnect [ 470.787551][ T5854] Bluetooth: hci1: command tx timeout [ 471.166051][ T9976] ISOFS: Unable to identify CD-ROM format. [ 471.316140][ T35] team0 (unregistering): Port device team_slave_0 removed [ 472.550891][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.562187][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.574261][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.599218][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.608463][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 472.616588][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.785307][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.799773][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.815393][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.827716][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.838150][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 473.846013][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.179784][ T35] team0 (unregistering): Port device team_slave_1 removed [ 474.219930][ T35] team0 (unregistering): Port device team_slave_0 removed [ 474.709594][ T5849] Bluetooth: hci3: command tx timeout [ 475.991829][ T5849] Bluetooth: hci4: command tx timeout [ 476.786886][ T5849] Bluetooth: hci3: command tx timeout [ 477.140391][ T9985] chnl_net:caif_netlink_parms(): no params data found [ 477.515263][ T9895] chnl_net:caif_netlink_parms(): no params data found [ 478.281843][ T5854] Bluetooth: hci4: command tx timeout [ 478.829830][T10044] vivid-002: disconnect [ 478.923158][ T5854] Bluetooth: hci3: command tx timeout [ 479.250909][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.279385][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.310177][T10041] vivid-002: reconnect [ 479.310994][ T9985] bridge_slave_0: entered allmulticast mode [ 479.351581][ T9985] bridge_slave_0: entered promiscuous mode [ 479.379873][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.400912][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.449880][ T9985] bridge_slave_1: entered allmulticast mode [ 479.472990][ T9985] bridge_slave_1: entered promiscuous mode [ 480.526770][ T5854] Bluetooth: hci4: command tx timeout [ 480.595176][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.618890][ T9992] chnl_net:caif_netlink_parms(): no params data found [ 480.769897][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.952857][ T5854] Bluetooth: hci3: command tx timeout [ 481.901836][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.909625][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.951663][ T9895] bridge_slave_0: entered allmulticast mode [ 481.970291][ T9895] bridge_slave_0: entered promiscuous mode [ 482.349455][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.370912][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.526068][ T9895] bridge_slave_1: entered allmulticast mode [ 482.545106][ T9895] bridge_slave_1: entered promiscuous mode [ 482.551172][ T5854] Bluetooth: hci4: command tx timeout [ 482.751149][ T9985] team0: Port device team_slave_0 added [ 482.844656][ T9985] team0: Port device team_slave_1 added [ 482.906763][ T9895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.069308][ T9895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.237403][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.261016][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.289589][ T9992] bridge_slave_0: entered allmulticast mode [ 485.322053][ T9992] bridge_slave_0: entered promiscuous mode [ 485.361668][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.368663][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.281884][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.295056][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.302501][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.329370][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.871830][ T9895] team0: Port device team_slave_0 added [ 486.880062][ T9992] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.890351][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.927220][ T9992] bridge_slave_1: entered allmulticast mode [ 486.996441][ T9992] bridge_slave_1: entered promiscuous mode [ 487.101994][ T9895] team0: Port device team_slave_1 added [ 487.134798][ T9985] hsr_slave_0: entered promiscuous mode [ 487.194416][ T9985] hsr_slave_1: entered promiscuous mode [ 487.264422][ T9985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.287228][ T9985] Cannot create hsr debugfs directory [ 487.482181][ T9992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.505801][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.523292][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.609945][ T9895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.676348][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.713831][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.774315][ T9895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.460351][ T9992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.584350][ T9992] team0: Port device team_slave_0 added [ 489.755461][ T9895] hsr_slave_0: entered promiscuous mode [ 489.791669][ T9895] hsr_slave_1: entered promiscuous mode [ 489.828122][ T9895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.860942][ T9895] Cannot create hsr debugfs directory [ 491.251690][ T9992] team0: Port device team_slave_1 added [ 492.044361][T10170] sctp: failed to load transform for md5: -2 [ 493.140950][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.170195][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.289161][ T9992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.423495][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.444657][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.537528][T10197] ISOFS: Unable to identify CD-ROM format. [ 493.566926][ T9992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.205062][ T9992] hsr_slave_0: entered promiscuous mode [ 494.235748][ T9992] hsr_slave_1: entered promiscuous mode [ 494.262070][ T9992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.290966][ T9992] Cannot create hsr debugfs directory [ 496.696707][ T9985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 496.725719][ T9985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 497.149751][ T9985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 497.215588][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 497.533980][ T9985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.454329][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.461575][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.616154][ T9985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.658781][ T35] bridge_slave_1: left allmulticast mode [ 501.660337][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 501.691968][ T35] bridge_slave_1: left promiscuous mode [ 501.697823][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.774088][ T35] bridge_slave_0: left allmulticast mode [ 501.779960][ T35] bridge_slave_0: left promiscuous mode [ 501.792956][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.005195][ T35] bridge_slave_1: left allmulticast mode [ 502.054729][ T35] bridge_slave_1: left promiscuous mode [ 502.772851][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.239408][ T35] bridge_slave_0: left allmulticast mode [ 503.245345][ T35] bridge_slave_0: left promiscuous mode [ 503.252020][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.285826][ T35] bridge_slave_1: left allmulticast mode [ 503.314180][ T35] bridge_slave_1: left promiscuous mode [ 503.319909][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.373909][ T35] bridge_slave_0: left allmulticast mode [ 503.405647][ T35] bridge_slave_0: left promiscuous mode [ 503.431952][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.057003][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.077819][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.099942][ T35] bond0 (unregistering): Released all slaves [ 504.120543][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.133964][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.146603][ T35] bond0 (unregistering): Released all slaves [ 504.260815][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.274058][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.286070][ T35] bond0 (unregistering): Released all slaves [ 504.410129][ T9985] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.759819][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.767029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.722413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.729603][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.996245][T10303] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.971'. [ 506.084686][ T35] hsr_slave_0: left promiscuous mode [ 506.117638][ T35] hsr_slave_1: left promiscuous mode [ 506.179002][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.246361][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.578528][ T35] hsr_slave_0: left promiscuous mode [ 506.604289][ T35] hsr_slave_1: left promiscuous mode [ 506.619999][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.638564][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.698777][ T35] hsr_slave_0: left promiscuous mode [ 506.729368][ T35] hsr_slave_1: left promiscuous mode [ 506.770909][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.793558][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.965038][T10322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.266075][ T35] team0 (unregistering): Port device team_slave_1 removed [ 508.352359][ T35] team0 (unregistering): Port device team_slave_0 removed [ 508.731676][ T35] team0 (unregistering): Port device team_slave_1 removed [ 508.767410][ T35] team0 (unregistering): Port device team_slave_0 removed [ 509.093024][ T35] team0 (unregistering): Port device team_slave_1 removed [ 509.136868][ T35] team0 (unregistering): Port device team_slave_0 removed [ 509.518222][ T9985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 509.612589][ T9985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.935189][T10329] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 510.369050][ T9895] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 510.402731][ T9895] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.422374][ T9895] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 510.507164][ T9895] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 511.915593][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.105116][ T9895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.144258][ T9895] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.205504][ T9895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.240540][ T9895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.067977][T10388] netlink: 'syz.2.988': attribute type 3 has an invalid length. [ 514.100423][T10388] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.988'. [ 514.312726][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.319884][ T9614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.369627][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.376822][ T9614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.728297][ T9992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 515.202960][ T9992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 515.219775][ T9992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 515.230053][ T9992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 515.537509][ T9895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.880126][ T9985] veth0_vlan: entered promiscuous mode [ 516.685811][ T5854] Bluetooth: hci4: command tx timeout [ 516.754358][ T9985] veth1_vlan: entered promiscuous mode [ 516.790378][ T9992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.969610][ T9992] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.168162][ T9985] veth0_macvtap: entered promiscuous mode [ 517.194819][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.202044][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.416694][ T9895] veth0_vlan: entered promiscuous mode [ 517.483610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.490852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.503794][ T9985] veth1_macvtap: entered promiscuous mode [ 517.856619][ T9895] veth1_vlan: entered promiscuous mode [ 518.090478][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.195324][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.259021][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.329409][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.345052][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.357650][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.360344][ T29] audit: type=1326 audit(1731601610.132:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.9.1000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec7397e719 code=0x0 [ 518.378082][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.422866][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.483168][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 518.505418][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.559046][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.575099][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.585136][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.614407][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.628307][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.714456][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.733254][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.812572][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.832882][ T9985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.852463][ T9985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.870544][ T9985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.884608][ T9985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.939866][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.017851][ T9895] veth0_macvtap: entered promiscuous mode [ 519.063523][ T9895] veth1_macvtap: entered promiscuous mode [ 519.340400][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.385624][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.538095][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.621724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.936879][ T35] bridge_slave_1: left allmulticast mode [ 521.162094][ T35] bridge_slave_1: left promiscuous mode [ 521.171798][T10489] capability: warning: `syz.1.1005' uses 32-bit capabilities (legacy support in use) [ 521.280934][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 521.297695][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.839193][ T35] bridge_slave_0: left allmulticast mode [ 521.846411][ T35] bridge_slave_0: left promiscuous mode [ 521.853865][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.744678][ T29] audit: type=1326 audit(1731601615.512:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10507 comm="syz.2.1012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f262cf7e719 code=0x0 [ 524.096064][T10514] input: syz0 as /devices/virtual/input/input14 [ 524.180221][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.190891][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.202103][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.221470][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.236099][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 524.249695][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.430401][ T5849] Bluetooth: hci1: command tx timeout [ 527.744651][T10554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.621719][ T5849] Bluetooth: hci1: command tx timeout [ 528.780573][T10561] 9pnet_fd: Insufficient options for proto=fd [ 528.851084][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.878679][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.895898][ T35] bond0 (unregistering): Released all slaves [ 528.975284][T10528] lo speed is unknown, defaulting to 1000 [ 529.089808][T10528] lo speed is unknown, defaulting to 1000 [ 529.096983][T10528] lo speed is unknown, defaulting to 1000 [ 529.106484][T10528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 529.123867][T10528] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 529.252545][T10528] lo speed is unknown, defaulting to 1000 [ 529.269163][T10528] lo speed is unknown, defaulting to 1000 [ 529.307704][T10513] lo speed is unknown, defaulting to 1000 [ 529.318264][ T9992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.359835][T10528] lo speed is unknown, defaulting to 1000 [ 529.366826][T10528] lo speed is unknown, defaulting to 1000 [ 529.373818][T10528] lo speed is unknown, defaulting to 1000 [ 529.380597][T10528] lo speed is unknown, defaulting to 1000 [ 529.387683][T10528] lo speed is unknown, defaulting to 1000 [ 530.744785][ T5849] Bluetooth: hci1: command tx timeout [ 531.079787][T10572] loop9: detected capacity change from 0 to 32768 [ 531.109864][T10572] ======================================================= [ 531.109864][T10572] WARNING: The mand mount option has been deprecated and [ 531.109864][T10572] and is ignored by this kernel. Remove the mand [ 531.109864][T10572] option from the mount to silence this warning. [ 531.109864][T10572] ======================================================= [ 531.300631][T10572] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 531.346417][ T35] hsr_slave_0: left promiscuous mode [ 531.388503][ T35] hsr_slave_1: left promiscuous mode [ 531.420054][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.442548][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.469150][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.495985][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.585398][ T35] veth1_macvtap: left promiscuous mode [ 531.602625][ T35] veth0_macvtap: left promiscuous mode [ 531.608688][ T35] veth1_vlan: left promiscuous mode [ 531.622575][ T35] veth0_vlan: left promiscuous mode [ 531.732711][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 532.000036][ T8080] ocfs2: Unmounting device (7,9) on (node local) [ 532.110828][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 532.180914][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 532.273560][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.285505][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.293860][ T9] usb 3-1: Product: syz [ 532.298043][ T9] usb 3-1: Manufacturer: syz [ 532.304006][ T9] usb 3-1: SerialNumber: syz [ 532.341945][ T9] usb 3-1: config 0 descriptor?? [ 532.574549][ T5947] usb 3-1: USB disconnect, device number 7 [ 532.873639][ T5849] Bluetooth: hci1: command tx timeout [ 532.932700][ T35] team0 (unregistering): Port device team_slave_1 removed [ 534.511771][ T35] team0 (unregistering): Port device team_slave_0 removed [ 534.588354][T10631] loop9: detected capacity change from 0 to 4096 [ 534.754899][T10635] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.951230][ T5849] Bluetooth: hci1: command tx timeout [ 535.038586][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.048420][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.058291][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.067053][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.075228][ T5854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 535.084734][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.850625][T10634] netlink: 'syz.5.1040': attribute type 4 has an invalid length. [ 535.899785][T10636] lo speed is unknown, defaulting to 1000 [ 535.921040][T10636] lo speed is unknown, defaulting to 1000 [ 535.945443][T10640] lo speed is unknown, defaulting to 1000 [ 535.967740][T10643] loop9: detected capacity change from 0 to 4096 [ 536.016339][T10644] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.042108][T10636] lo speed is unknown, defaulting to 1000 [ 536.369855][T10636] infiniband syz2: set down [ 536.374590][T10636] infiniband syz2: added lo [ 536.379508][T10636] syz2: rxe_create_cq: returned err = -12 [ 536.386580][T10636] infiniband syz2: Couldn't create ib_mad CQ [ 536.393194][T10636] infiniband syz2: Couldn't open port 1 [ 536.426756][T10643] loop9: detected capacity change from 4096 to 64 [ 536.457095][T10642] syz.9.1041: attempt to access beyond end of device [ 536.457095][T10642] loop9: rw=0, sector=224, nr_sectors = 8 limit=64 [ 536.464859][T10636] RDS/IB: syz2: added [ 536.472119][T10642] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 536.475669][T10636] smc: adding ib device syz2 with port count 1 [ 536.487195][T10643] syz.9.1041: attempt to access beyond end of device [ 536.487195][T10643] loop9: rw=0, sector=224, nr_sectors = 8 limit=64 [ 536.490558][T10636] smc: ib device syz2 port 1 has pnetid [ 536.503353][T10643] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 536.529277][T10649] syz.9.1041: attempt to access beyond end of device [ 536.529277][T10649] loop9: rw=0, sector=224, nr_sectors = 8 limit=64 [ 536.550903][T10649] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 536.574209][ T5843] lo speed is unknown, defaulting to 1000 [ 536.577914][T10513] chnl_net:caif_netlink_parms(): no params data found [ 536.598723][ T5904] lo speed is unknown, defaulting to 1000 [ 536.613994][T10636] lo speed is unknown, defaulting to 1000 [ 536.622304][ T57] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 536.732690][ T8080] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 536.751940][ T8080] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=12) [ 536.766242][ T8080] syz-executor: attempt to access beyond end of device [ 536.766242][ T8080] loop9: rw=395265, sector=4088, nr_sectors = 8 limit=64 [ 536.784325][ T8080] Buffer I/O error on dev loop9, logical block 511, lost sync page write [ 536.801962][ T57] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 536.811373][ T57] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 536.831109][ T8080] NILFS (loop9): unable to write superblock: err=-5 [ 536.858555][ T8080] Remounting filesystem read-only [ 536.869974][ T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 536.881265][ T8080] NILFS (loop9): error -5 truncating bmap (ino=12) [ 536.898482][ T57] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 536.909927][ T57] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 536.932938][ T57] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.942645][ T57] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.950839][ T57] usb 2-1: Product: syz [ 536.955014][ T57] usb 2-1: Manufacturer: syz [ 536.975821][ T8080] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 536.991934][T10636] lo speed is unknown, defaulting to 1000 [ 537.044958][ T57] cdc_wdm 2-1:1.0: skipping garbage [ 537.050229][ T57] cdc_wdm 2-1:1.0: skipping garbage [ 537.094731][ T57] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 537.103583][ T57] cdc_wdm 2-1:1.0: Unknown control protocol [ 537.187927][ T5849] Bluetooth: hci5: command tx timeout [ 537.207165][T10513] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.302228][T10513] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.399820][T10513] bridge_slave_0: entered allmulticast mode [ 537.566051][T10513] bridge_slave_0: entered promiscuous mode [ 537.764335][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.781915][T10513] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.800622][T10513] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.801901][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.808335][T10513] bridge_slave_1: entered allmulticast mode [ 537.893808][T10513] bridge_slave_1: entered promiscuous mode [ 538.035597][T10513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.085280][T10640] chnl_net:caif_netlink_parms(): no params data found [ 538.486629][T10513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.706771][T10636] lo speed is unknown, defaulting to 1000 [ 539.145688][T10513] team0: Port device team_slave_0 added [ 539.203440][T10513] team0: Port device team_slave_1 added [ 539.311183][ T5849] Bluetooth: hci5: command tx timeout [ 539.479044][ T9] usb 2-1: USB disconnect, device number 2 [ 539.618999][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.634393][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.751869][T10640] bridge_slave_0: entered allmulticast mode [ 539.762606][T10640] bridge_slave_0: entered promiscuous mode [ 539.787216][T10640] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.799581][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.800092][T10666] loop9: detected capacity change from 0 to 40427 [ 539.817422][T10640] bridge_slave_1: entered allmulticast mode [ 539.827469][T10666] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1fffff [ 539.830347][T10640] bridge_slave_1: entered promiscuous mode [ 539.845092][T10683] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'. [ 539.870404][T10513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.890252][T10666] F2FS-fs (loop9): invalid crc value [ 539.896155][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.918969][T10666] F2FS-fs (loop9): Found nat_bits in checkpoint [ 539.922946][T10513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.950568][T10636] lo speed is unknown, defaulting to 1000 [ 540.044827][T10513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.063022][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.125767][T10513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.203750][T10666] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 540.231938][T10640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.299254][T10640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.334757][T10636] lo speed is unknown, defaulting to 1000 [ 540.594876][T10513] hsr_slave_0: entered promiscuous mode [ 540.604353][T10513] hsr_slave_1: entered promiscuous mode [ 540.632195][T10513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.656345][T10513] Cannot create hsr debugfs directory [ 540.663771][T10666] F2FS-fs (loop9): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xc35/0x1b50 [ 540.700541][T10693] syz.9.1046: attempt to access beyond end of device [ 540.700541][T10693] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 540.728208][T10640] team0: Port device team_slave_0 added [ 540.759855][T10666] syz.9.1046: attempt to access beyond end of device [ 540.759855][T10666] loop9: rw=1, sector=45104, nr_sectors = 104 limit=40427 [ 540.818869][T10636] lo speed is unknown, defaulting to 1000 [ 540.836911][T10640] team0: Port device team_slave_1 added [ 540.922717][ T8080] F2FS-fs (loop9): access invalid blkaddr:2816 [ 540.950490][ T8080] CPU: 0 UID: 0 PID: 8080 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 540.961401][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 540.971478][ T8080] Call Trace: [ 540.974769][ T8080] [ 540.977711][ T8080] dump_stack_lvl+0x241/0x360 [ 540.982435][ T8080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.987670][ T8080] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 540.993595][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.999288][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.004961][ T8080] ? validate_chain+0x11e/0x5920 [ 541.009933][ T8080] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 541.015526][ T8080] f2fs_map_blocks+0xdd4/0x4f10 [ 541.020416][ T8080] ? mark_lock+0x9a/0x360 [ 541.024834][ T8080] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 541.030157][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.035826][ T8080] ? xa_load+0x2dd/0x350 [ 541.040118][ T8080] ? __pfx_xa_load+0x10/0x10 [ 541.044760][ T8080] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 541.050508][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.052011][T10693] F2FS-fs (loop9): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x195/0xb90 [ 541.056170][ T8080] ? folio_index+0xab/0x350 [ 541.072316][ T8080] f2fs_mpage_readpages+0xcae/0x2140 [ 541.077702][ T8080] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 541.083573][ T8080] ? __folio_batch_add_and_move+0x81a/0xf00 [ 541.089506][ T8080] ? __pfx_lock_release+0x10/0x10 [ 541.094657][ T8080] ? rcu_is_watching+0x15/0xb0 [ 541.099476][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.105153][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.110859][ T8080] ? f2fs_readahead+0x184/0x340 [ 541.115782][ T8080] read_pages+0x180/0x840 [ 541.120153][ T8080] ? percpu_ref_put+0x19/0x180 [ 541.124961][ T8080] ? __pfx_read_pages+0x10/0x10 [ 541.129856][ T8080] ? filemap_add_folio+0x26d/0x650 [ 541.135094][ T8080] ? __pfx_filemap_add_folio+0x10/0x10 [ 541.140637][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.146353][ T8080] page_cache_ra_unbounded+0x774/0x8a0 [ 541.151873][ T8080] f2fs_readdir+0x5b9/0xbf0 [ 541.156542][ T8080] ? __pfx___might_resched+0x10/0x10 [ 541.161985][ T8080] ? __pfx_f2fs_readdir+0x10/0x10 [ 541.167054][ T8080] ? trace_contention_end+0x3c/0x120 [ 541.172381][ T8080] ? iterate_dir+0x20c/0x800 [ 541.177005][ T8080] ? fdget_pos+0x24e/0x320 [ 541.181461][ T8080] ? end_current_label_crit_section+0x151/0x180 [ 541.187741][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.193420][ T8080] ? common_file_perm+0x1a6/0x210 [ 541.198492][ T8080] iterate_dir+0x573/0x800 [ 541.202937][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.208625][ T8080] __se_sys_getdents64+0x1d3/0x4a0 [ 541.213937][ T8080] ? __pfx___se_sys_getdents64+0x10/0x10 [ 541.219614][ T8080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.225646][ T8080] ? __pfx_filldir64+0x10/0x10 [ 541.230450][ T8080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.236999][ T8080] ? exc_page_fault+0x590/0x8c0 [ 541.241884][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.247570][ T8080] ? do_syscall_64+0xb6/0x230 [ 541.252297][ T8080] do_syscall_64+0xf3/0x230 [ 541.256842][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.262778][ T8080] RIP: 0033:0x7fec739b08b3 [ 541.267215][ T8080] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 541.287042][ T8080] RSP: 002b:00007ffea2969fe8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 541.295509][ T8080] RAX: ffffffffffffffda RBX: 000055555d496600 RCX: 00007fec739b08b3 [ 541.303739][ T8080] RDX: 0000000000008000 RSI: 000055555d496600 RDI: 0000000000000005 [ 541.311742][ T8080] RBP: 000055555d4965d4 R08: 0000000000000000 R09: 0000000000000000 [ 541.319915][ T8080] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 541.327918][ T8080] R13: 0000000000000010 R14: 000055555d4965d0 R15: 00007ffea296c290 [ 541.335945][ T8080] [ 541.352238][ T5849] Bluetooth: hci5: command tx timeout [ 541.375282][T10636] lo speed is unknown, defaulting to 1000 [ 541.394174][T10640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.412532][ T8080] F2FS-fs (loop9): access invalid blkaddr:2816 [ 541.418759][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 541.429624][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 541.439713][ T8080] Call Trace: [ 541.440954][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.442979][ T8080] [ 541.471882][ T8080] dump_stack_lvl+0x241/0x360 [ 541.476586][ T8080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.481943][ T8080] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 541.487897][ T8080] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 541.493499][ T8080] f2fs_map_blocks+0xdd4/0x4f10 [ 541.498366][ T8080] ? mark_lock+0x9a/0x360 [ 541.502768][ T8080] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 541.508278][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.513931][ T8080] ? xa_load+0x2dd/0x350 [ 541.518227][ T8080] ? __pfx_xa_load+0x10/0x10 [ 541.522865][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.528610][ T8080] ? folio_index+0xab/0x350 [ 541.533174][ T8080] f2fs_mpage_readpages+0xcae/0x2140 [ 541.538517][ T8080] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 541.544292][ T8080] ? __folio_batch_add_and_move+0x81a/0xf00 [ 541.550199][ T8080] ? __pfx_lock_release+0x10/0x10 [ 541.555251][ T8080] ? rcu_is_watching+0x15/0xb0 [ 541.560045][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.565702][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.571361][ T8080] ? f2fs_readahead+0x184/0x340 [ 541.576235][ T8080] read_pages+0x180/0x840 [ 541.580684][ T8080] ? percpu_ref_put+0x19/0x180 [ 541.585481][ T8080] ? __pfx_read_pages+0x10/0x10 [ 541.590355][ T8080] ? filemap_add_folio+0x26d/0x650 [ 541.595518][ T8080] ? __pfx_filemap_add_folio+0x10/0x10 [ 541.601000][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.606777][ T8080] page_cache_ra_unbounded+0x774/0x8a0 [ 541.612291][ T8080] f2fs_readdir+0x5b9/0xbf0 [ 541.616821][ T8080] ? __pfx___might_resched+0x10/0x10 [ 541.622167][ T8080] ? __pfx_f2fs_readdir+0x10/0x10 [ 541.627385][ T8080] ? trace_contention_end+0x3c/0x120 [ 541.632690][ T8080] ? iterate_dir+0x20c/0x800 [ 541.637301][ T8080] ? fdget_pos+0x24e/0x320 [ 541.641741][ T8080] ? end_current_label_crit_section+0x151/0x180 [ 541.648023][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.653718][ T8080] ? common_file_perm+0x1a6/0x210 [ 541.658780][ T8080] iterate_dir+0x573/0x800 [ 541.663219][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.668880][ T8080] __se_sys_getdents64+0x1d3/0x4a0 [ 541.674020][ T8080] ? __pfx___se_sys_getdents64+0x10/0x10 [ 541.679664][ T8080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.685670][ T8080] ? __pfx_filldir64+0x10/0x10 [ 541.690454][ T8080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.696813][ T8080] ? exc_page_fault+0x590/0x8c0 [ 541.701688][ T8080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.707356][ T8080] ? do_syscall_64+0xb6/0x230 [ 541.712090][ T8080] do_syscall_64+0xf3/0x230 [ 541.716621][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.722532][ T8080] RIP: 0033:0x7fec739b08b3 [ 541.726957][ T8080] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 541.746576][ T8080] RSP: 002b:00007ffea2969fe8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 541.755008][ T8080] RAX: ffffffffffffffda RBX: 000055555d496600 RCX: 00007fec739b08b3 [ 541.762993][ T8080] RDX: 0000000000008000 RSI: 000055555d496600 RDI: 0000000000000005 [ 541.770975][ T8080] RBP: 000055555d4965d4 R08: 0000000000000000 R09: 0000000000000000 [ 541.778960][ T8080] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 541.786944][ T8080] R13: 0000000000000010 R14: 000055555d4965d0 R15: 00007ffea296c290 [ 541.794942][ T8080] [ 541.895734][T10694] loop1: detected capacity change from 0 to 32768 [ 541.900790][T10640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.930533][ T8080] syz-executor: attempt to access beyond end of device [ 541.930533][ T8080] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 541.944850][T10694] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1054 (10694) [ 541.996983][ T8080] syz-executor: attempt to access beyond end of device [ 541.996983][ T8080] loop9: rw=2049, sector=45208, nr_sectors = 32 limit=40427 [ 542.022294][T10694] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 542.115522][ T8080] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 542.164424][ T8080] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 542.175586][T10636] lo speed is unknown, defaulting to 1000 [ 542.182049][T10640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.189021][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.223290][T10694] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 542.251804][ T8080] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 542.272887][T10694] BTRFS info (device loop1): using free-space-tree [ 542.302611][ T8080] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 542.551881][T10640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.290533][ T8606] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 543.421372][ T5849] Bluetooth: hci5: command tx timeout [ 543.823098][T10640] hsr_slave_0: entered promiscuous mode [ 543.839184][T10640] hsr_slave_1: entered promiscuous mode [ 543.852612][T10640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.894964][T10640] Cannot create hsr debugfs directory [ 543.951099][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 544.089217][T10731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1062'. [ 544.137053][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.191976][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 544.225783][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.243248][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 544.260590][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 544.282496][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.292600][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.321572][ T9] usb 6-1: Product: syz [ 544.401639][ T9] usb 6-1: Manufacturer: syz [ 544.415888][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 544.424438][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 544.433754][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 544.444723][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 544.656997][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.687351][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.706615][ T35] bridge_slave_1: left allmulticast mode [ 544.724943][ T35] bridge_slave_1: left promiscuous mode [ 544.743065][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.771255][ T35] bridge_slave_0: left allmulticast mode [ 544.808908][ T35] bridge_slave_0: left promiscuous mode [ 544.827234][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.875234][ T35] bridge_slave_1: left allmulticast mode [ 544.886032][ T35] bridge_slave_1: left promiscuous mode [ 544.897555][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.916983][ T35] bridge_slave_0: left allmulticast mode [ 544.927591][ T35] bridge_slave_0: left promiscuous mode [ 544.939187][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.063911][ T5849] Bluetooth: hci5: command tx timeout [ 546.834206][ T5969] usb 6-1: USB disconnect, device number 2 [ 547.509569][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.749532][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.856534][ T35] bond0 (unregistering): Released all slaves [ 548.054526][T10759] loop1: detected capacity change from 0 to 128 [ 548.135782][T10759] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.208862][T10759] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.275856][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.342151][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.358999][ T35] bond0 (unregistering): Released all slaves [ 548.423064][T10757] loop5: detected capacity change from 0 to 32768 [ 548.472426][ T29] audit: type=1800 audit(1731601640.232:259): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1070" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 548.482550][ T8606] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.504923][T10774] loop1: detected capacity change from 0 to 32768 [ 549.767967][ T35] hsr_slave_0: left promiscuous mode [ 549.794629][ T35] hsr_slave_1: left promiscuous mode [ 549.825960][T10774] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,background_compression=zstd,journal_flush_disabled,fsck,norecovery,reconstruct_alloc [ 549.845911][T10774] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 549.855974][T10774] bcachefs (loop1): Version upgrade required: [ 549.855974][T10774] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 549.855974][T10774] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 549.855974][T10774] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 549.939103][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.990376][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.009310][T10774] bcachefs (loop1): dropping and reconstructing all alloc info [ 550.093477][T10774] bcachefs (loop1): check_topology... done [ 550.099377][T10774] bcachefs (loop1): accounting_read... done [ 550.128233][T10774] bcachefs (loop1): alloc_read... done [ 550.134212][T10774] bcachefs (loop1): stripes_read... done [ 550.140002][T10774] bcachefs (loop1): snapshots_read... done [ 550.146578][T10774] bcachefs (loop1): check_allocations... done [ 550.196811][ T35] hsr_slave_0: left promiscuous mode [ 550.203109][ T35] hsr_slave_1: left promiscuous mode [ 550.226688][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.229207][T10774] bcachefs (loop1): going read-write [ 550.255453][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.256723][T10774] bcachefs (loop1): done starting filesystem [ 550.306416][ T35] veth1_macvtap: left promiscuous mode [ 550.318791][ T35] veth0_macvtap: left promiscuous mode [ 550.324917][ T35] veth1_vlan: left promiscuous mode [ 550.330424][ T35] veth0_vlan: left promiscuous mode [ 550.350776][ T57] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 550.361727][ T29] audit: type=1800 audit(1731601642.132:260): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1074" name="file1" dev="loop1" ino=536870912 res=0 errno=0 [ 550.398396][ T29] audit: type=1800 audit(1731601642.162:261): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1074" name="file1" dev="loop1" ino=536870912 res=0 errno=0 [ 550.514259][ T57] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.525559][ T57] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 550.537545][ T57] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.547162][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 550.560255][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 550.574513][ T57] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.584282][ T57] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.594104][ T57] usb 3-1: Product: syz [ 550.598670][ T57] usb 3-1: Manufacturer: syz [ 550.610565][ T57] cdc_wdm 3-1:1.0: skipping garbage [ 550.624981][ T57] cdc_wdm 3-1:1.0: skipping garbage [ 550.661214][T10774] syz.1.1074 (10774) used greatest stack depth: 13776 bytes left [ 550.690544][ T57] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 550.697546][ T57] cdc_wdm 3-1:1.0: Unknown control protocol [ 550.852985][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.891699][T10801] syz.1.1074 (10801) used greatest stack depth: 11376 bytes left [ 550.931672][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.989806][ T8606] bcachefs (loop1): shutting down [ 551.017573][ T8606] bcachefs (loop1): going read-only [ 551.053938][ T8606] bcachefs (loop1): finished waiting for writes to stop [ 551.103459][ T8606] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 551.372057][ T8606] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 551.407974][ T8606] bcachefs (loop1): unshutdown complete, journal seq 16 [ 551.418068][ T8606] bcachefs (loop1): done going read-only, filesystem not clean [ 551.585792][ T8606] bcachefs (loop1): shutdown complete [ 552.433524][ T35] team0 (unregistering): Port device team_slave_1 removed [ 552.559183][ T35] team0 (unregistering): Port device team_slave_0 removed [ 552.573038][T10820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 552.643342][T10820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 553.049633][ T5947] usb 3-1: USB disconnect, device number 8 [ 553.607167][ T8606] ------------[ cut here ]------------ [ 553.613276][ T8606] kernel BUG at fs/bcachefs/btree_cache.c:614! [ 553.646157][ T8606] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 553.653334][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 553.664295][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 553.674373][ T8606] RIP: 0010:bch2_fs_btree_cache_exit+0x1521/0x1530 [ 553.680921][ T8606] Code: fd 90 0f 0b e8 90 d3 80 fd 90 0f 0b e8 88 d3 80 fd 90 0f 0b e8 80 d3 80 fd 90 0f 0b e8 78 d3 80 fd 90 0f 0b e8 70 d3 80 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 [ 553.700552][ T8606] RSP: 0018:ffffc90004c8fc38 EFLAGS: 00010293 [ 553.706647][ T8606] RAX: ffffffff841416a0 RBX: 0000000000000002 RCX: ffff88802cbfda00 [ 553.714635][ T8606] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 553.722626][ T8606] RBP: ffff88807067b000 R08: ffffffff84140d4c R09: 1ffff110088803b6 [ 553.730612][ T8606] R10: dffffc0000000000 R11: ffffed10088803b7 R12: ffff88807067b228 [ 553.738601][ T8606] R13: dffffc0000000000 R14: ffff888044401c78 R15: ffff888044400000 [ 553.746587][ T8606] FS: 000055556f91b500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 553.755522][ T8606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.762103][ T8606] CR2: 00007f262dd63f98 CR3: 000000002f5ee000 CR4: 0000000000350ef0 [ 553.770075][ T8606] Call Trace: [ 553.773350][ T8606] [ 553.776287][ T8606] ? __die_body+0x5f/0xb0 [ 553.780623][ T8606] ? die+0x9e/0xc0 [ 553.784348][ T8606] ? do_trap+0x15a/0x3a0 [ 553.788604][ T8606] ? bch2_fs_btree_cache_exit+0x1521/0x1530 [ 553.794520][ T8606] ? do_error_trap+0x1dc/0x2c0 [ 553.799294][ T8606] ? bch2_fs_btree_cache_exit+0x1521/0x1530 [ 553.805210][ T8606] ? __pfx_do_error_trap+0x10/0x10 [ 553.810331][ T8606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.815979][ T8606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.821629][ T8606] ? handle_invalid_op+0x34/0x40 [ 553.826577][ T8606] ? bch2_fs_btree_cache_exit+0x1521/0x1530 [ 553.832488][ T8606] ? exc_invalid_op+0x38/0x50 [ 553.837174][ T8606] ? asm_exc_invalid_op+0x1a/0x20 [ 553.842204][ T8606] ? bch2_fs_btree_cache_exit+0xbcc/0x1530 [ 553.848027][ T8606] ? bch2_fs_btree_cache_exit+0x1520/0x1530 [ 553.853944][ T8606] ? bch2_fs_btree_cache_exit+0x1521/0x1530 [ 553.859852][ T8606] ? bch2_fs_btree_cache_exit+0x1520/0x1530 [ 553.865767][ T8606] bch2_fs_release+0x20e/0x7d0 [ 553.870542][ T8606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.876185][ T8606] ? kobject_put+0x44d/0x480 [ 553.880786][ T8606] kobject_put+0x231/0x480 [ 553.885211][ T8606] deactivate_locked_super+0xc6/0x130 [ 553.890599][ T8606] cleanup_mnt+0x41f/0x4b0 [ 553.895031][ T8606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.900683][ T8606] ? lockdep_hardirqs_on+0x99/0x150 [ 553.905896][ T8606] task_work_run+0x251/0x310 [ 553.910495][ T8606] ? __pfx_task_work_run+0x10/0x10 [ 553.915611][ T8606] ? __x64_sys_umount+0x123/0x170 [ 553.920640][ T8606] ? syscall_exit_to_user_mode+0xa3/0x370 [ 553.926377][ T8606] syscall_exit_to_user_mode+0x168/0x370 [ 553.932024][ T8606] do_syscall_64+0x100/0x230 [ 553.936621][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.942522][ T8606] RIP: 0033:0x7f061277fa47 [ 553.946936][ T8606] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 553.966548][ T8606] RSP: 002b:00007ffd8836af08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 553.974968][ T8606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f061277fa47 [ 553.982940][ T8606] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8836afc0 [ 553.990910][ T8606] RBP: 00007ffd8836afc0 R08: 0000000000000000 R09: 0000000000000000 [ 553.998881][ T8606] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8836c040 [ 554.006855][ T8606] R13: 00007f06127f15fc R14: 0000000000085f29 R15: 00007ffd8836c080 [ 554.014837][ T8606] [ 554.017848][ T8606] Modules linked in: [ 554.023200][ T8606] ---[ end trace 0000000000000000 ]--- [ 554.058234][ T8606] RIP: 0010:bch2_fs_btree_cache_exit+0x1521/0x1530 [ 554.081860][ T8606] Code: fd 90 0f 0b e8 90 d3 80 fd 90 0f 0b e8 88 d3 80 fd 90 0f 0b e8 80 d3 80 fd 90 0f 0b e8 78 d3 80 fd 90 0f 0b e8 70 d3 80 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 [ 554.120277][ T8606] RSP: 0018:ffffc90004c8fc38 EFLAGS: 00010293 [ 554.153193][ T8606] RAX: ffffffff841416a0 RBX: 0000000000000002 RCX: ffff88802cbfda00 [ 554.161572][ T8606] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 554.169665][ T8606] RBP: ffff88807067b000 R08: ffffffff84140d4c R09: 1ffff110088803b6 [ 554.178502][ T8606] R10: dffffc0000000000 R11: ffffed10088803b7 R12: ffff88807067b228 [ 554.186708][ T8606] R13: dffffc0000000000 R14: ffff888044401c78 R15: ffff888044400000 [ 554.200643][ T8606] FS: 000055556f91b500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 554.211270][ T8606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.218017][ T8606] CR2: 0000000020388030 CR3: 000000002f5ee000 CR4: 0000000000350ef0 [ 554.226846][ T8606] Kernel panic - not syncing: Fatal exception [ 554.233157][ T8606] Kernel Offset: disabled [ 554.237476][ T8606] Rebooting in 86400 seconds..