last executing test programs: 4m41.072157619s ago: executing program 0 (id=81): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x9}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m38.666662618s ago: executing program 0 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff03, 0x0) 4m37.305322873s ago: executing program 0 (id=88): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x657b, &(0x7f00000003c0)={0x0, 0x78ec, 0x2, 0x0, 0x2}, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 4m37.023629235s ago: executing program 0 (id=90): syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 4m36.425556513s ago: executing program 0 (id=95): r0 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x2370}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m36.092148036s ago: executing program 0 (id=98): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 4m35.769122582s ago: executing program 32 (id=98): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 4m3.170310134s ago: executing program 1 (id=167): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r2) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4m1.502687562s ago: executing program 1 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4m0.419061134s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m58.722235264s ago: executing program 1 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m57.436378534s ago: executing program 1 (id=178): syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, r0, 0xdf, 0xd48c, 0xffff, 0xabea, 0xfffffffe, 0x6074, 0x5, 0x1, 0x7f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x82) 3m56.910451085s ago: executing program 1 (id=181): socket(0x15, 0x5, 0x0) epoll_create1(0x0) epoll_create1(0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) 3m41.701369035s ago: executing program 33 (id=181): socket(0x15, 0x5, 0x0) epoll_create1(0x0) epoll_create1(0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) 25.25475257s ago: executing program 2 (id=633): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xffffffff}, 0x1c) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4, 0x6, 0xce, 0x0, 0x9ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', '\x00', ["1af0b1ba1cb8fd54c9c939a1", '\x00\x00\x00\x00\n\x00', '\x00', "0e4a8ce4ea1c3c00"]}) r2 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x6, 0xfffffffffffffffe, 0x4, 0xffffffff, 0xff, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 22.137988086s ago: executing program 2 (id=641): r0 = socket(0x6, 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x104100, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282dd98576d79a19ad5552c2fa441cbd3dc0443c02586f3f0433a78df09c913ee8861052de5e4996be333f27fd5d531d7c552b7af20b2c828a31761d9c9b0", 0x1003, r4}, 0x38) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x4, 0x2, 0xa, 0x0, r5}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x5, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 17.952924314s ago: executing program 5 (id=651): socket(0x11, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pipe(&(0x7f0000000240)) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 17.749581382s ago: executing program 2 (id=652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x2802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448dd, &(0x7f0000000240)) 13.945652823s ago: executing program 5 (id=657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x20, 0x9, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20008060) 13.089543572s ago: executing program 3 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.967132948s ago: executing program 6 (id=660): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x44e, &(0x7f00000000c0)={0x0, 0x809abf, 0x1000, 0xfffffffe, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x31713}) io_uring_enter(r2, 0x3516, 0x1, 0x0, 0x0, 0x0) 11.345647841s ago: executing program 5 (id=661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x90) 10.240920867s ago: executing program 5 (id=662): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 9.966438582s ago: executing program 4 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) 9.73518655s ago: executing program 3 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000fb243f60e56a1eb3a5ac573a1268fe534db877750ea50968d6c05b6a3c94ff15a79a92eededc312dc69f3acd0606fd8fe2ee74751c7fb4f1007db953104fb62605dc7c55a43bc69115ff67ce5acadc248b77a2eb46ac2f756f7d735d49935cb51837ae7e2fe0840c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}) r4 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.859315696s ago: executing program 4 (id=665): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@private, @private, 0x0}, &(0x7f0000000080)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in=@local, 0x4e23, 0x2, 0x4e23, 0x1, 0x0, 0xa0, 0x20, 0x6c, r2, r3}, {0x7fffffff, 0xfffffffffffff8c8, 0x8, 0x2, 0x1, 0x7, 0xe1, 0x1}, {0xffffffffffffff3e, 0x6, 0x139, 0x5}, 0x200, 0x6e6bb3, 0x2, 0x0, 0x2, 0x2}, {{@in=@remote, 0x4d3, 0x6d77292639689bf3}, 0x2, @in6=@local, 0x3506, 0x0, 0x3, 0x8c, 0xf480, 0x1000, 0xb}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.04037855s ago: executing program 4 (id=666): listen(0xffffffffffffffff, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x0, 0x0, 0x10000347}) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 7.774586975s ago: executing program 3 (id=667): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4c041) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r3, 0x4, {0x0, 0x0, 0x4}, 0xff}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x1, {0x2, 0xff, 0x4}}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000003c0)={0x1d, r6, 0x1, {0x1, 0x0, 0x4}, 0xff}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40a00000000000079100800000000003dd047fbc1ef9f54642110c4098cb2e03c8e83c101fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.626167185s ago: executing program 4 (id=668): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000000)="10208100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r3, 0x18, 0x0, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, 0x140a, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r5, 0x84, 0x24, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) 7.516171577s ago: executing program 2 (id=669): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 7.399349052s ago: executing program 6 (id=670): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 6.767577172s ago: executing program 3 (id=671): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000d041) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.617485556s ago: executing program 6 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100), 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0xb], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffb}, {0xffffffff}, {0x2000004}, {}, {}, {0x7}, {}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x10}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000480)={0x2, 0x2}, 0x2) 6.605811205s ago: executing program 2 (id=673): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000000000)=0xffffffffffffff1d) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\t'}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 5.115136383s ago: executing program 3 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240080e4) landlock_create_ruleset(&(0x7f0000000140)={0x8f68, 0x1}, 0x18, 0x0) 5.024244833s ago: executing program 4 (id=675): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174"], 0x20}}, 0x0) 5.023541072s ago: executing program 2 (id=676): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.965312854s ago: executing program 6 (id=677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) membarrier(0x4, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 4.275597605s ago: executing program 5 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00x\x00\x00\x00\x00\x00\x00']}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.872235463s ago: executing program 3 (id=679): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) connect$ax25(r2, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 3.125417324s ago: executing program 6 (id=680): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 960.820673ms ago: executing program 4 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x143140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x4}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009102"]) 4.61753ms ago: executing program 5 (id=682): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) r1 = syz_clone(0x8a000000, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x100000, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) 0s ago: executing program 6 (id=683): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "9f9f00", 0x8000, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x3e}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 76.119467][ T5812] cgroup: Unknown subsys name 'net' [ 76.277748][ T5812] cgroup: Unknown subsys name 'cpuset' [ 76.287577][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.916671][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.111777][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.121631][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.130605][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.139081][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.143867][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.146815][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.154783][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.162244][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.168510][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.183576][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.191284][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.199555][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.213443][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.223329][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.230910][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.239645][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.248921][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.249035][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.258036][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.271037][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.271785][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.286744][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.297998][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.306537][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.315019][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.323921][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.323929][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.344331][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.345202][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.362646][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.804762][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 82.872284][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.892152][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.976573][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 83.073760][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.081367][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.092490][ T5836] bridge_slave_0: entered allmulticast mode [ 83.099610][ T5836] bridge_slave_0: entered promiscuous mode [ 83.124979][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 83.145133][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.152293][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.163598][ T5836] bridge_slave_1: entered allmulticast mode [ 83.170525][ T5836] bridge_slave_1: entered promiscuous mode [ 83.220538][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.231529][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.239485][ T5835] bridge_slave_0: entered allmulticast mode [ 83.250242][ T5835] bridge_slave_0: entered promiscuous mode [ 83.293435][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.302190][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.309718][ T5835] bridge_slave_1: entered allmulticast mode [ 83.316958][ T5835] bridge_slave_1: entered promiscuous mode [ 83.345671][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.363454][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.371231][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.378989][ T5829] bridge_slave_0: entered allmulticast mode [ 83.386162][ T5829] bridge_slave_0: entered promiscuous mode [ 83.393893][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.401182][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.408772][ T5829] bridge_slave_1: entered allmulticast mode [ 83.416376][ T5829] bridge_slave_1: entered promiscuous mode [ 83.436170][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.464988][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.482142][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.490222][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.498083][ T5822] bridge_slave_0: entered allmulticast mode [ 83.505406][ T5822] bridge_slave_0: entered promiscuous mode [ 83.539359][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.560508][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.568187][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.575666][ T5822] bridge_slave_1: entered allmulticast mode [ 83.582430][ T5822] bridge_slave_1: entered promiscuous mode [ 83.608447][ T5836] team0: Port device team_slave_0 added [ 83.626348][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.646529][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.653735][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.661183][ T5823] bridge_slave_0: entered allmulticast mode [ 83.668509][ T5823] bridge_slave_0: entered promiscuous mode [ 83.680917][ T5836] team0: Port device team_slave_1 added [ 83.708532][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.730305][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.753889][ T5829] team0: Port device team_slave_0 added [ 83.760356][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.771778][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.779378][ T5823] bridge_slave_1: entered allmulticast mode [ 83.787326][ T5823] bridge_slave_1: entered promiscuous mode [ 83.805151][ T5835] team0: Port device team_slave_0 added [ 83.821678][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.842621][ T5829] team0: Port device team_slave_1 added [ 83.866902][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.873873][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.901276][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.914671][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.921654][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.947793][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.960751][ T5835] team0: Port device team_slave_1 added [ 83.987727][ T5822] team0: Port device team_slave_0 added [ 83.994897][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.001881][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.028862][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.080929][ T5822] team0: Port device team_slave_1 added [ 84.097332][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.104913][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.131080][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.145680][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.157954][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.167821][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.175345][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.202227][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.215260][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.222402][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.248780][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.287962][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.297993][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.324560][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.337714][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.344911][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.372017][ T5837] Bluetooth: hci1: command tx timeout [ 84.372519][ T5828] Bluetooth: hci2: command tx timeout [ 84.377844][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.389382][ T5837] Bluetooth: hci0: command tx timeout [ 84.428743][ T5823] team0: Port device team_slave_0 added [ 84.434735][ T5837] Bluetooth: hci3: command tx timeout [ 84.443945][ T5823] team0: Port device team_slave_1 added [ 84.444255][ T5837] Bluetooth: hci4: command tx timeout [ 84.472914][ T5836] hsr_slave_0: entered promiscuous mode [ 84.483065][ T5836] hsr_slave_1: entered promiscuous mode [ 84.513465][ T5829] hsr_slave_0: entered promiscuous mode [ 84.520010][ T5829] hsr_slave_1: entered promiscuous mode [ 84.526287][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.534227][ T5829] Cannot create hsr debugfs directory [ 84.605454][ T5835] hsr_slave_0: entered promiscuous mode [ 84.611662][ T5835] hsr_slave_1: entered promiscuous mode [ 84.621979][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.630047][ T5835] Cannot create hsr debugfs directory [ 84.646365][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.653388][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.680274][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.693787][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.701053][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.727586][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.750384][ T5822] hsr_slave_0: entered promiscuous mode [ 84.757162][ T5822] hsr_slave_1: entered promiscuous mode [ 84.763316][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.771401][ T5822] Cannot create hsr debugfs directory [ 84.901904][ T5823] hsr_slave_0: entered promiscuous mode [ 84.910285][ T5823] hsr_slave_1: entered promiscuous mode [ 84.916646][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.924672][ T5823] Cannot create hsr debugfs directory [ 85.230801][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.251306][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.275637][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.300427][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.312999][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.326381][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.359334][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.376157][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.457435][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.467185][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.486597][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.498824][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.566117][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.597688][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.609063][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.640853][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.679054][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.691477][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.707432][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.732939][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.787529][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.808529][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.853112][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.870814][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.898431][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.905778][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.917632][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.925075][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.942883][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.950174][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.969053][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.009490][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.016656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.101053][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.132138][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.160232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.167499][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.192187][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.221532][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.228757][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.259513][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.316394][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.378294][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.385479][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.414923][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.422098][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.434945][ T5837] Bluetooth: hci0: command tx timeout [ 86.440424][ T5837] Bluetooth: hci1: command tx timeout [ 86.446554][ T5828] Bluetooth: hci2: command tx timeout [ 86.462646][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.502568][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.515568][ T5828] Bluetooth: hci4: command tx timeout [ 86.521047][ T5828] Bluetooth: hci3: command tx timeout [ 86.527961][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.535140][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.600393][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.607617][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.641450][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.691265][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.826423][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.888323][ T5835] veth0_vlan: entered promiscuous mode [ 86.946387][ T5835] veth1_vlan: entered promiscuous mode [ 87.062942][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.083517][ T5835] veth0_macvtap: entered promiscuous mode [ 87.113268][ T5829] veth0_vlan: entered promiscuous mode [ 87.196382][ T5835] veth1_macvtap: entered promiscuous mode [ 87.217159][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.231685][ T5829] veth1_vlan: entered promiscuous mode [ 87.340056][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.371219][ T5822] veth0_vlan: entered promiscuous mode [ 87.402154][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.418521][ T5829] veth0_macvtap: entered promiscuous mode [ 87.441573][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.451494][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.462722][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.472012][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.489324][ T5836] veth0_vlan: entered promiscuous mode [ 87.507952][ T5822] veth1_vlan: entered promiscuous mode [ 87.543776][ T5829] veth1_macvtap: entered promiscuous mode [ 87.567053][ T5836] veth1_vlan: entered promiscuous mode [ 87.686555][ T5823] veth0_vlan: entered promiscuous mode [ 87.703959][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.724359][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.745688][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.768415][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.780196][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.791816][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.835235][ T5823] veth1_vlan: entered promiscuous mode [ 87.848713][ T5822] veth0_macvtap: entered promiscuous mode [ 87.860680][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.870393][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.881008][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889871][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.906589][ T5836] veth0_macvtap: entered promiscuous mode [ 87.928877][ T5822] veth1_macvtap: entered promiscuous mode [ 87.949910][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.966893][ T5836] veth1_macvtap: entered promiscuous mode [ 87.976452][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.040805][ T5823] veth0_macvtap: entered promiscuous mode [ 88.060724][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.062621][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.087113][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.092260][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.105437][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.117239][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.132435][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.143317][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.154932][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.165419][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.176044][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.186177][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.196743][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.211395][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.228600][ T5823] veth1_macvtap: entered promiscuous mode [ 88.260901][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.282741][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.294345][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.309998][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.321257][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.341671][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.353976][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.366850][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.378075][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.389317][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.408246][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.410387][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.419994][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.450003][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.461369][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.481549][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.490618][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.500278][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.509405][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.521424][ T5828] Bluetooth: hci2: command tx timeout [ 88.526960][ T5837] Bluetooth: hci1: command tx timeout [ 88.532389][ T5837] Bluetooth: hci0: command tx timeout [ 88.546918][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.557817][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.567859][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.578574][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.588836][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.600058][ T5828] Bluetooth: hci3: command tx timeout [ 88.605587][ T5837] Bluetooth: hci4: command tx timeout [ 88.611161][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.621106][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.632160][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.643944][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.660254][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.661685][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.680902][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.689926][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.698887][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.712002][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.727520][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.757535][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.768657][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.780103][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.790097][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.800697][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.810662][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.821400][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.833516][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.992186][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.031050][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.049317][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.059796][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.127469][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.154992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.186233][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.200404][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.262693][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.311808][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.313462][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.323632][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.337996][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.441376][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.469356][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.581448][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.611878][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.364716][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.728490][ T5828] Bluetooth: hci2: command tx timeout [ 90.734588][ T5828] Bluetooth: hci0: command tx timeout [ 90.740106][ T5828] Bluetooth: hci1: command tx timeout [ 90.746567][ T5837] Bluetooth: hci3: command tx timeout [ 90.752102][ T5837] Bluetooth: hci4: command tx timeout [ 91.044669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.134468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.580722][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 91.708956][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.732999][ T5938] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10'. [ 92.320714][ T47] cfg80211: failed to load regulatory.db [ 94.475518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.782571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.834758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 94.844483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.853702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.862625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.871441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 94.880376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.019889][ T5969] Invalid source name [ 95.024019][ T5969] UBIFS error (pid: 5969): cannot open "/dev/sg0", error -22 [ 98.712285][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.908813][ T6035] xt_TPROXY: Can be used only with -p tcp or -p udp [ 99.115850][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 99.132279][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.153290][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.200992][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 99.237315][ T6086] bridge_slave_0: left allmulticast mode [ 99.254358][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.282097][ T6086] bridge_slave_0: left promiscuous mode [ 99.314235][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.314361][ T5875] usb 1-1: Product: syz [ 99.359750][ T5875] usb 1-1: Manufacturer: syz [ 99.374504][ T6086] bridge_slave_1: left allmulticast mode [ 99.386651][ T6086] bridge_slave_1: left promiscuous mode [ 99.393765][ T5875] usb 1-1: SerialNumber: syz [ 99.394031][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.430573][ T6086] bond0: (slave bond_slave_0): Releasing backup interface [ 99.475301][ T5875] usb 1-1: config 0 descriptor?? [ 99.513901][ T6086] bond0: (slave bond_slave_1): Releasing backup interface [ 99.551696][ T6086] team0: Port device team_slave_0 removed [ 99.587701][ T6086] team0: Port device team_slave_1 removed [ 99.601774][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.632937][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.633507][ T5875] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 99.651765][ T6088] kvm: pic: level sensitive irq not supported [ 99.651937][ T6088] kvm: pic: non byte read [ 99.702518][ T6088] kvm: pic: non byte read [ 99.712620][ T6088] kvm: pic: single mode not supported [ 99.712716][ T6088] kvm: pic: non byte read [ 99.714705][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.749263][ T6088] kvm: pic: non byte read [ 99.756492][ T6088] kvm: pic: non byte read [ 99.775813][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.805396][ T2343] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 99.825387][ T2343] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 99.879256][ T5875] usb 1-1: USB disconnect, device number 2 [ 103.582869][ T6112] uprobe: syz.2.39:6112 failed to unregister, leaking uprobe [ 103.625315][ T6113] kvm: pic: non byte write [ 108.900904][ T6161] netlink: 'syz.1.52': attribute type 7 has an invalid length. [ 108.964778][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 109.068991][ T6168] futex_wake_op: syz.2.56 tries to shift op by 32; fix this program [ 109.993405][ T6168] warning: `syz.2.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.847558][ T6199] netlink: ct family unspecified [ 111.853581][ T6199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.154537][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 115.992556][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.69'. [ 116.002143][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 116.011253][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 116.324574][ T6231] delete_channel: no stack [ 117.403917][ T6244] netfs: Couldn't get user pages (rc=-14) [ 119.490632][ T6262] netlink: 'syz.1.79': attribute type 5 has an invalid length. [ 119.537760][ T6261] tipc: Started in network mode [ 119.549742][ T6261] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 119.565964][ T6261] tipc: Enabled bearer , priority 10 [ 120.321924][ T6262] syz.1.79 (6262) used greatest stack depth: 19496 bytes left [ 120.643412][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 120.674599][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.691195][ T2151] tipc: Node number set to 4269801488 [ 120.861607][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.631669][ T6281] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.702045][ T6290] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 124.726829][ T6312] syz.4.97 uses obsolete (PF_INET,SOCK_PACKET) [ 124.988729][ T6045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.279122][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 125.305046][ T6045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.313583][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 125.338508][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 125.366162][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 125.404407][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 125.503224][ T6045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.749298][ T6045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.815990][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.834503][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.842693][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.018580][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.029928][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.040352][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.420958][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.104'. [ 126.791393][ T6343] ip6t_srh: unknown srh invflags 7D00 [ 128.115536][ T5832] Bluetooth: hci1: command tx timeout [ 128.531315][ T6345] lo speed is unknown, defaulting to 1000 [ 128.844761][ T6045] bridge_slave_1: left allmulticast mode [ 128.851451][ T6045] bridge_slave_1: left promiscuous mode [ 128.987409][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.009763][ T6045] bridge_slave_0: left allmulticast mode [ 129.080906][ T6358] dns_resolver: Unsupported server list version (0) [ 129.826508][ T6045] bridge_slave_0: left promiscuous mode [ 129.841004][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.168067][ T2151] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.194465][ T5832] Bluetooth: hci1: command tx timeout [ 130.354223][ T2151] usb 2-1: Using ep0 maxpacket: 16 [ 130.381477][ T2151] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.412653][ T2151] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.454253][ T2151] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.463579][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.492527][ T2151] usb 2-1: Product: syz [ 130.512814][ T2151] usb 2-1: Manufacturer: syz [ 130.518916][ T2151] usb 2-1: SerialNumber: syz [ 130.771490][ T2151] usb 2-1: 0:2 : does not exist [ 130.802453][ T2151] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 130.813598][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.834657][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.855996][ T6045] bond0 (unregistering): Released all slaves [ 130.881925][ T2151] usb 2-1: USB disconnect, device number 2 [ 130.911069][ T6345] lo speed is unknown, defaulting to 1000 [ 130.966807][ T6345] lo speed is unknown, defaulting to 1000 [ 131.205728][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.206329][ T6345] infiniband syz2: set active [ 132.222330][ T6345] infiniband syz2: added lo [ 132.245479][ T6345] syz2: rxe_create_cq: returned err = -12 [ 132.251740][ T6345] infiniband syz2: Couldn't create ib_mad CQ [ 132.344476][ T5832] Bluetooth: hci1: command tx timeout [ 132.476106][ T6345] infiniband syz2: Couldn't open port 1 [ 132.515569][ T2151] lo speed is unknown, defaulting to 1000 [ 132.658433][ T6328] chnl_net:caif_netlink_parms(): no params data found [ 132.716667][ T6345] RDS/IB: syz2: added [ 132.726938][ T6345] smc: adding ib device syz2 with port count 1 [ 132.733453][ T6345] smc: ib device syz2 port 1 has pnetid [ 132.846388][ T10] lo speed is unknown, defaulting to 1000 [ 132.890425][ T6345] lo speed is unknown, defaulting to 1000 [ 132.914970][ T6391] process 'syz.1.116' launched './file0' with NULL argv: empty string added [ 133.230321][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.244512][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.291780][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.305075][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 133.328312][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.354416][ T6328] bridge_slave_0: entered allmulticast mode [ 133.374049][ T6328] bridge_slave_0: entered promiscuous mode [ 133.388946][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 133.416583][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.438454][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.450926][ T6328] bridge_slave_1: entered allmulticast mode [ 133.458571][ T6328] bridge_slave_1: entered promiscuous mode [ 133.512593][ T6345] lo speed is unknown, defaulting to 1000 [ 133.601231][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.853212][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.889020][ T6411] openvswitch: netlink: Duplicate or invalid key (type 0). [ 133.896945][ T6411] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.574142][ T5832] Bluetooth: hci1: command tx timeout [ 134.726949][ T6345] lo speed is unknown, defaulting to 1000 [ 135.010409][ T6328] team0: Port device team_slave_0 added [ 135.128576][ T6328] team0: Port device team_slave_1 added [ 135.995884][ T6345] lo speed is unknown, defaulting to 1000 [ 136.003116][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.042474][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.204759][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.300993][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.325086][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.386257][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 136.436501][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.462959][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 136.625928][ T6328] hsr_slave_0: entered promiscuous mode [ 136.632460][ T6328] hsr_slave_1: entered promiscuous mode [ 136.678075][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.697009][ T6328] Cannot create hsr debugfs directory [ 136.705139][ T6345] lo speed is unknown, defaulting to 1000 [ 137.334511][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.950756][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 138.017062][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.068059][ T6345] lo speed is unknown, defaulting to 1000 [ 138.072080][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.137096][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 138.184244][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.227538][ T9] usb 2-1: Product: syz [ 138.254392][ T9] usb 2-1: Manufacturer: syz [ 138.259077][ T9] usb 2-1: SerialNumber: syz [ 138.312758][ T9] usb 2-1: config 0 descriptor?? [ 138.438312][ T6328] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.479478][ T6328] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.575051][ T6328] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.794451][ T6328] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.544290][ T2151] usb 2-1: USB disconnect, device number 3 [ 140.728160][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.940987][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.221109][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.228344][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.876524][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.883883][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.986517][ T6328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.034181][ T6328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.161703][ T6045] hsr_slave_0: left promiscuous mode [ 142.225530][ T6045] hsr_slave_1: left promiscuous mode [ 142.241685][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.275759][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.893469][ T6045] veth1_macvtap: left promiscuous mode [ 142.945264][ T6045] veth0_macvtap: left promiscuous mode [ 142.971536][ T6045] veth1_vlan: left promiscuous mode [ 142.998034][ T6045] veth0_vlan: left promiscuous mode [ 144.239971][ T6504] netfs: Couldn't get user pages (rc=-14) [ 150.531622][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 151.004383][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 151.138691][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 153.690685][ T6548] bridge_slave_1: left allmulticast mode [ 153.738736][ T6548] bridge_slave_1: left promiscuous mode [ 153.754689][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.772680][ T6548] bridge_slave_0: left allmulticast mode [ 153.787978][ T6548] bridge_slave_0: left promiscuous mode [ 153.803282][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.650509][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.859497][ T6328] veth0_vlan: entered promiscuous mode [ 157.887409][ T6328] veth1_vlan: entered promiscuous mode [ 157.912562][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.167'. [ 157.970213][ T6328] veth0_macvtap: entered promiscuous mode [ 158.006825][ T6328] veth1_macvtap: entered promiscuous mode [ 158.090696][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.132222][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.155855][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.172235][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.243541][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.537078][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.550138][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.606674][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.377337][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.430572][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.469741][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.513135][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.544341][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.622006][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.455240][ T6328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.474309][ T6328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.483085][ T6328] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.492476][ T6328] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.453764][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.447773][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.693231][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.720812][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.900339][ T2343] pvrusb2: request_firmware fatal error with code=-110 [ 164.016260][ T2343] pvrusb2: Failure uploading firmware1 [ 164.041037][ T2343] pvrusb2: Device initialization was not successful. [ 164.094207][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 164.144118][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 164.193137][ T5875] pvrusb2: Device being rendered inoperable [ 166.004358][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 166.224545][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 166.236983][ T5826] usb 4-1: config 2 has an invalid interface number: 255 but max is 0 [ 167.195717][ T5826] usb 4-1: config 2 has no interface number 0 [ 167.202368][ T5826] usb 4-1: config 2 interface 255 altsetting 12 has an invalid endpoint descriptor of length 4, skipping [ 167.216217][ T5826] usb 4-1: config 2 interface 255 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.229826][ T5826] usb 4-1: config 2 interface 255 has no altsetting 0 [ 167.241328][ T5826] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=fb.30 [ 167.256606][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.265101][ T5826] usb 4-1: Product: syz [ 167.269426][ T5826] usb 4-1: Manufacturer: syz [ 167.274678][ T5826] usb 4-1: SerialNumber: syz [ 168.412308][ T5826] pl2303 4-1:2.255: required endpoints missing [ 168.433683][ T5826] usb 4-1: USB disconnect, device number 2 [ 171.774329][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.002011][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.364000][ T5875] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 172.393922][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.428193][ T5875] usb 6-1: config 0 descriptor?? [ 172.839840][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 173.767894][ T5875] usbhid 6-1:0.0: can't add hid device: -71 [ 173.773960][ T5875] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 173.786177][ T6750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.194'. [ 173.835745][ T5875] usb 6-1: USB disconnect, device number 2 [ 174.034164][ T6750] tipc: Started in network mode [ 174.043193][ T6750] tipc: Node identity ac1414bb, cluster identity 4711 [ 174.715595][ T6750] tipc: New replicast peer: 172.20.20.170 [ 174.721897][ T6750] tipc: Enabled bearer , priority 0 [ 175.001683][ T6772] overlayfs: failed to clone upperpath [ 175.140074][ T6779] ip6t_rpfilter: unknown options [ 175.940895][ T5875] tipc: Node number set to 2886997179 [ 176.470536][ T6784] lo speed is unknown, defaulting to 1000 [ 179.523197][ T30] audit: type=1326 audit(1742104588.942:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9d38d169 code=0x7ffc0000 [ 179.665913][ T30] audit: type=1326 audit(1742104588.952:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5e9d38d169 code=0x7ffc0000 [ 180.023511][ T30] audit: type=1326 audit(1742104588.952:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9d38d169 code=0x7ffc0000 [ 180.045661][ T30] audit: type=1326 audit(1742104588.952:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9d38d169 code=0x7ffc0000 [ 180.196739][ T6829] rdma_op ffff8880589041f0 conn xmit_rdma 0000000000000000 [ 181.750121][ T6837] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.042971][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.081700][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.090582][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.101255][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.110109][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.118781][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.513088][ T5944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.714909][ T6842] lo speed is unknown, defaulting to 1000 [ 183.805524][ T5944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.058805][ T5944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.194295][ T5837] Bluetooth: hci3: command tx timeout [ 184.266330][ T6860] Invalid source name [ 185.236526][ T5944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.492054][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 185.571589][ T6868] vlan2: entered promiscuous mode [ 185.638189][ T6862] cgroup: fork rejected by pids controller in /syz5 [ 185.648855][ T6868] bridge0: entered promiscuous mode [ 185.682350][ T6868] bridge0: left promiscuous mode [ 186.367357][ T5837] Bluetooth: hci3: command tx timeout [ 187.759175][ T5944] bond0 (unregistering): Released all slaves [ 187.789623][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 187.974254][ T5826] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 188.057883][ T6938] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.173025][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.186360][ T5826] usb 3-1: not running at top speed; connect to a high speed hub [ 188.230079][ T5826] usb 3-1: config 81 has an invalid interface number: 159 but max is 0 [ 188.252700][ T5826] usb 3-1: config 81 has no interface number 0 [ 188.279306][ T5826] usb 3-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 188.366544][ T5826] usb 3-1: config 81 interface 159 has no altsetting 0 [ 188.434862][ T5837] Bluetooth: hci3: command tx timeout [ 188.550374][ T5826] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 188.621832][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.666687][ T5826] usb 3-1: Product: syz [ 188.701621][ T5826] usb 3-1: Manufacturer: syz [ 188.792006][ T5826] usb 3-1: SerialNumber: syz [ 189.024494][ T6935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.039567][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.071295][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.099573][ T6842] bridge_slave_0: entered allmulticast mode [ 189.116571][ T6842] bridge_slave_0: entered promiscuous mode [ 189.180797][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.232510][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.250620][ T6842] bridge_slave_1: entered allmulticast mode [ 189.327298][ T6842] bridge_slave_1: entered promiscuous mode [ 189.420736][ T6950] Zero length message leads to an empty skb [ 189.450595][ T5826] kobil_sct 3-1:81.159: KOBIL USB smart card terminal converter detected [ 189.628649][ T5826] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 189.777631][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.807956][ T5826] usb 3-1: USB disconnect, device number 2 [ 189.837826][ T5826] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 189.850038][ T5944] hsr_slave_0: left promiscuous mode [ 190.116419][ T5826] kobil_sct 3-1:81.159: device disconnected [ 190.297011][ T5944] hsr_slave_1: left promiscuous mode [ 190.531842][ T5837] Bluetooth: hci3: command tx timeout [ 190.601563][ T5944] veth1_macvtap: left promiscuous mode [ 190.618601][ T5944] veth0_macvtap: left promiscuous mode [ 190.631645][ T5944] veth1_vlan: left promiscuous mode [ 190.648867][ T6973] netlink: 'syz.5.234': attribute type 4 has an invalid length. [ 190.669870][ T5944] veth0_vlan: left promiscuous mode [ 194.597410][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.603888][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.091718][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.453966][ T6842] team0: Port device team_slave_0 added [ 196.532183][ T6842] team0: Port device team_slave_1 added [ 197.634357][ T7042] xt_hashlimit: max too large, truncated to 1048576 [ 198.481720][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.505547][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.604972][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.228557][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.253958][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.299016][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.421309][ T7047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.444746][ T7047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.561092][ T6842] hsr_slave_0: entered promiscuous mode [ 199.584734][ T6842] hsr_slave_1: entered promiscuous mode [ 199.591082][ T6842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.634679][ T7047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.658621][ T6842] Cannot create hsr debugfs directory [ 199.693631][ T7047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.764701][ T7047] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.015486][ T7047] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.086482][ T7047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.129070][ T7047] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.144844][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 201.206214][ T7047] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.253572][ T7047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.266836][ T7047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.302094][ T7047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.315112][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.361749][ T6842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.404924][ T7047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.428557][ T7047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.641628][ T6842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.715457][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.616327][ T6842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.636387][ T6842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.656866][ T7047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.809306][ T7090] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.819129][ T7090] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.828695][ T7090] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.837875][ T7090] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.858959][ T7090] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 202.992938][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.004522][ T2151] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.057754][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.154582][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.243148][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.251687][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.324492][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.340841][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.348157][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.386448][ T2151] usb 4-1: Using ep0 maxpacket: 32 [ 203.400754][ T2151] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.431574][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.451986][ T2151] usb 4-1: config 0 has no interfaces? [ 203.457929][ T2151] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 203.467286][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.475865][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.194487][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.284668][ T2151] usb 4-1: config 0 descriptor?? [ 204.326820][ T6842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.103473][ T30] audit: type=1326 audit(1742104614.522:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.196190][ T30] audit: type=1326 audit(1742104614.522:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.196581][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.238758][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.383031][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.401356][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.404203][ T30] audit: type=1326 audit(1742104614.522:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.463485][ T30] audit: type=1326 audit(1742104614.522:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.481031][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.494683][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.554339][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.576102][ T30] audit: type=1326 audit(1742104614.562:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.605383][ T30] audit: type=1326 audit(1742104614.562:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.649911][ T30] audit: type=1326 audit(1742104614.582:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.693226][ T30] audit: type=1326 audit(1742104614.582:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.743940][ T30] audit: type=1326 audit(1742104614.582:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.805941][ T30] audit: type=1326 audit(1742104614.582:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 205.812055][ T7137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.051506][ T6842] veth0_vlan: entered promiscuous mode [ 206.250606][ T6842] veth1_vlan: entered promiscuous mode [ 206.274782][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.786396][ T6842] veth0_macvtap: entered promiscuous mode [ 206.828558][ T6842] veth1_macvtap: entered promiscuous mode [ 206.835824][ T26] usb 4-1: USB disconnect, device number 3 [ 206.928346][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.984214][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.013977][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.055735][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.097842][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.130390][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.170781][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.201985][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.259098][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.355132][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.441697][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.504646][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.589235][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.645778][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.898132][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.158513][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.184149][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.235068][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.294093][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.364318][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.395709][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.440266][ T6842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.456284][ T6842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.473048][ T6842] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.519838][ T6842] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.617571][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.646986][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.745611][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.952555][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.688787][ T7218] ip6gretap1: entered allmulticast mode [ 214.985730][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 221.192080][ T7295] lo speed is unknown, defaulting to 1000 [ 224.786482][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 224.786503][ T30] audit: type=1326 audit(1742104634.212:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 224.960503][ T30] audit: type=1326 audit(1742104634.212:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.083487][ T30] audit: type=1326 audit(1742104634.212:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.144739][ T30] audit: type=1326 audit(1742104634.212:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.233238][ T30] audit: type=1326 audit(1742104634.212:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.273614][ T30] audit: type=1326 audit(1742104634.212:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.306005][ T30] audit: type=1326 audit(1742104634.212:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.338547][ T30] audit: type=1326 audit(1742104634.212:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.367561][ T30] audit: type=1326 audit(1742104634.212:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 225.396980][ T30] audit: type=1326 audit(1742104634.212:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d78d169 code=0x7ffc0000 [ 227.981155][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 233.014147][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 233.804627][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 233.822801][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 233.882309][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 234.194969][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.198830][ T9] usb 6-1: config 0 descriptor?? [ 235.224269][ T9] usb 6-1: can't set config #0, error -71 [ 236.204961][ T9] usb 6-1: USB disconnect, device number 3 [ 237.446498][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 237.446519][ T30] audit: type=1326 audit(1742104646.872:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.5.329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f750c18d169 code=0x0 [ 237.782201][ T7425] lo speed is unknown, defaulting to 1000 [ 243.674163][ T7477] team0: Port device virt_wifi0 added [ 243.793725][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.346'. [ 243.804313][ T7488] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.991948][ T7511] netlink: 550 bytes leftover after parsing attributes in process `syz.6.351'. [ 246.543823][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.948044][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 249.394702][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 249.412565][ T5878] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 249.431389][ T5878] usb 4-1: config 0 has no interface number 0 [ 249.437755][ T5878] usb 4-1: config 0 interface 12 has no altsetting 0 [ 249.479141][ T5878] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 249.519420][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.579025][ T5878] usb 4-1: Product: syz [ 249.583363][ T5878] usb 4-1: Manufacturer: syz [ 249.601382][ T5878] usb 4-1: SerialNumber: syz [ 249.789524][ T5878] usb 4-1: config 0 descriptor?? [ 250.799999][ T30] audit: type=1326 audit(1742104659.882:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.6.368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04b838d169 code=0x0 [ 252.318713][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 253.024422][ T5878] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 253.054212][ T5878] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 253.092072][ T5878] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 253.146583][ T5878] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 253.785693][ T5878] usb 4-1: USB disconnect, device number 4 [ 256.192999][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.200113][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.585834][ T7638] lo speed is unknown, defaulting to 1000 [ 264.973296][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 265.595650][ T7720] capability: warning: `syz.4.398' uses 32-bit capabilities (legacy support in use) [ 268.331835][ T7721] syz.2.397 (7721): drop_caches: 2 [ 270.069777][ T7762] overlayfs: failed to clone upperpath [ 270.086672][ T7761] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 271.162376][ T7768] Bluetooth: MGMT ver 1.23 [ 273.682478][ T7764] netlink: 'syz.3.409': attribute type 11 has an invalid length. [ 276.080068][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.421'. [ 280.826460][ T7854] libceph: resolve '. [ 280.826460][ T7854] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 280.826460][ T7854] ' (ret=-3): failed [ 282.983520][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 286.062290][ T7910] syz_tun: entered promiscuous mode [ 286.886286][ T7910] vlan2: entered promiscuous mode [ 288.262369][ T7932] SET target dimension over the limit! [ 294.014700][ T7977] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 294.027017][ T7977] batman_adv: batadv0: Adding interface: ip6gretap1 [ 294.033655][ T7977] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.060099][ T7977] batman_adv: batadv0: Interface activated: ip6gretap1 [ 294.835000][ T7979] Cannot find del_set index 0 as target [ 295.923004][ T7982] Cannot find del_set index 286 as target [ 304.244319][ T8075] overlayfs: failed to clone upperpath [ 304.884383][ T8096] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 304.884383][ T8096] The task syz.3.480 (8096) triggered the difference, watch for misbehavior. [ 309.043126][ T8128] sctp: [Deprecated]: syz.6.488 (pid 8128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.043126][ T8128] Use struct sctp_sack_info instead [ 310.368650][ T8148] capability: warning: `syz.6.492' uses deprecated v2 capabilities in a way that may be insecure [ 310.388555][ T8149] bridge_slave_0: left allmulticast mode [ 310.442331][ T8149] bridge_slave_0: left promiscuous mode [ 311.730008][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.849286][ T8149] bridge_slave_1: left allmulticast mode [ 311.894415][ T8149] bridge_slave_1: left promiscuous mode [ 311.901671][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.168861][ T8149] bond0: (slave bond_slave_0): Releasing backup interface [ 313.107878][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 313.229165][ T8149] bond0: (slave bond_slave_1): Releasing backup interface [ 313.919685][ T8149] team0: Port device team_slave_0 removed [ 314.015338][ T8149] team0: Port device team_slave_1 removed [ 314.055898][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.122259][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.158060][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.196874][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.999330][ T5826] lo speed is unknown, defaulting to 1000 [ 315.030639][ T8155] team0: Mode changed to "loadbalance" [ 315.089171][ T8161] vlan0: entered promiscuous mode [ 316.050095][ T8161] team0: Port device vlan0 added [ 317.116954][ T5878] IPVS: starting estimator thread 0... [ 317.551630][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.082296][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.182370][ T8204] IPVS: using max 20 ests per chain, 48000 per kthread [ 319.388390][ T8167] team0 (unregistering): Port device vlan0 removed [ 319.526994][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 319.567795][ T8221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.667575][ T8221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.104738][ T8270] tipc: Started in network mode [ 324.114289][ T8270] tipc: Node identity 4, cluster identity 4711 [ 324.239392][ T8270] tipc: Node number set to 4 [ 331.059592][ T8334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.544339][ T8382] netlink: 40 bytes leftover after parsing attributes in process `syz.5.547'. [ 336.490461][ T8406] bridge_slave_0: left allmulticast mode [ 336.498259][ T8406] bridge_slave_0: left promiscuous mode [ 336.505993][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.352198][ T8406] bridge_slave_1: left allmulticast mode [ 337.371751][ T8406] bridge_slave_1: left promiscuous mode [ 337.377790][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.767643][ T5837] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 338.767717][ T5837] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 338.792512][ T5837] Bluetooth: hci2: Unknown advertising packet type: 0x31 [ 338.800062][ T5837] Bluetooth: hci2: Malformed LE Event: 0x0d [ 338.814664][ T8406] bond0: (slave bond_slave_0): Releasing backup interface [ 338.892621][ T8406] bond0: (slave bond_slave_1): Releasing backup interface [ 339.023190][ T8406] team0: Port device team_slave_0 removed [ 339.032519][ T8428] netlink: 'syz.4.555': attribute type 10 has an invalid length. [ 339.052318][ T8406] team0: Port device team_slave_1 removed [ 339.065750][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.090718][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.091861][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 339.121458][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.129689][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.768505][ T8412] team0: Mode changed to "loadbalance" [ 340.309131][ T8441] openvswitch: netlink: Actions may not be safe on all matching packets [ 340.977709][ T8445] netlink: 'syz.4.559': attribute type 11 has an invalid length. [ 356.565136][ T8569] x_tables: duplicate underflow at hook 1 [ 357.002847][ T30] audit: type=1326 audit(1742104766.412:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 357.556978][ T30] audit: type=1326 audit(1742104766.472:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 357.760242][ T30] audit: type=1326 audit(1742104766.472:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 357.836518][ T30] audit: type=1326 audit(1742104766.472:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 357.864199][ T30] audit: type=1326 audit(1742104766.482:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 357.885970][ T30] audit: type=1326 audit(1742104766.502:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 357.925621][ T30] audit: type=1326 audit(1742104766.502:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 358.512774][ T30] audit: type=1326 audit(1742104766.502:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 358.993218][ T30] audit: type=1326 audit(1742104766.532:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 359.056382][ T30] audit: type=1326 audit(1742104766.532:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.6.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b838d169 code=0x7ffc0000 [ 359.919535][ T8592] batman_adv: batadv0: Adding interface: dummy0 [ 359.925915][ T8592] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.952444][ T8592] batman_adv: batadv0: Interface activated: dummy0 [ 361.078160][ T8610] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 361.299381][ T8610] kvm: pic: non byte read [ 362.154542][ T8610] kvm: pic: level sensitive irq not supported [ 362.154653][ T8610] kvm: pic: non byte read [ 362.860981][ T8635] random: crng reseeded on system resumption [ 364.912857][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 364.946425][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 365.846108][ T8669] geneve2: entered promiscuous mode [ 365.851763][ T8669] geneve2: entered allmulticast mode [ 367.105705][ T8682] xt_CONNSECMARK: invalid mode: 0 [ 368.465983][ T8698] netlink: 'syz.6.619': attribute type 10 has an invalid length. [ 368.474570][ T8698] veth1_vlan: entered allmulticast mode [ 368.485162][ T8698] team0: Device veth1_vlan failed to register rx_handler [ 370.051079][ T8716] netlink: 140 bytes leftover after parsing attributes in process `syz.6.623'. [ 375.844694][ T8749] ======================================================= [ 375.844694][ T8749] WARNING: The mand mount option has been deprecated and [ 375.844694][ T8749] and is ignored by this kernel. Remove the mand [ 375.844694][ T8749] option from the mount to silence this warning. [ 375.844694][ T8749] ======================================================= [ 375.946154][ T8752] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 378.917475][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924407][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.775732][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.647'. [ 384.576088][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.651'. [ 384.766416][ T8825] batadv0: entered promiscuous mode [ 384.807376][ T8825] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.832804][ T8825] batadv0: left promiscuous mode [ 386.934874][ T8840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.794767][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.129540][ T8887] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 395.940289][ T8922] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 397.020904][ T8934] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 397.029324][ T8934] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 397.039121][ T8934] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 397.047366][ T8934] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 397.826146][ T8922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.077455][ T8947] ax25_connect(): syz.3.679 uses autobind, please contact jreuter@yaina.de [ 401.229786][ T6060] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] PREEMPT SMP KASAN PTI [ 401.242434][ T6060] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 401.250986][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: kworker/u8:17 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 401.263602][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 401.275779][ T6060] Workqueue: events_unbound netfs_write_collection_worker [ 401.284977][ T6060] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 401.291996][ T6060] Code: 20 00 74 08 4c 89 ef e8 64 76 3a fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 2d [ 401.315126][ T6060] RSP: 0018:ffffc9000481f630 EFLAGS: 00010203 [ 401.321791][ T6060] RAX: 0000000000000023 RBX: ffffc9000481f7c0 RCX: ffff888026730000 [ 401.330972][ T6060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.339754][ T6060] RBP: 000000000000011e R08: ffffffff84ec1ac5 R09: ffffffff84ec1954 [ 401.347935][ T6060] R10: 0000000000000004 R11: ffff888026730000 R12: dffffc0000000000 [ 401.357762][ T6060] R13: 0000000000000000 R14: 0000000000000001 R15: 000000000000001e [ 401.368142][ T6060] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 401.379024][ T6060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.386875][ T6060] CR2: 000040000000e000 CR3: 000000006b998000 CR4: 00000000003526f0 [ 401.395153][ T6060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.403701][ T6060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.411839][ T6060] Call Trace: [ 401.415187][ T6060] [ 401.418539][ T6060] ? __die_body+0x5f/0xb0 [ 401.423521][ T6060] ? die_addr+0xb0/0xe0 [ 401.427891][ T6060] ? exc_general_protection+0x3dd/0x5d0 [ 401.434430][ T6060] ? asm_exc_general_protection+0x26/0x30 [ 401.441845][ T6060] ? iov_iter_revert+0x104/0x590 [ 401.446991][ T6060] ? iov_iter_revert+0x275/0x590 [ 401.452048][ T6060] ? iov_iter_revert+0x2da/0x590 [ 401.457014][ T6060] netfs_retry_writes+0x17db/0x19b0 [ 401.462441][ T6060] ? __pfx_validate_chain+0x10/0x10 [ 401.467785][ T6060] ? __pfx_netfs_retry_writes+0x10/0x10 [ 401.473472][ T6060] ? register_lock_class+0x102/0x980 [ 401.478790][ T6060] ? __schedule+0x18c4/0x4c40 [ 401.483817][ T6060] ? __pfx_register_lock_class+0x10/0x10 [ 401.490211][ T6060] netfs_write_collection_worker+0x2f90/0x3bb0 [ 401.496583][ T6060] ? process_scheduled_works+0x9c6/0x18e0 [ 401.502951][ T6060] process_scheduled_works+0xabe/0x18e0 [ 401.508552][ T6060] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.514833][ T6060] ? assign_work+0x364/0x3d0 [ 401.519724][ T6060] worker_thread+0x870/0xd30 [ 401.524347][ T6060] ? __kthread_parkme+0x169/0x1d0 [ 401.529914][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 401.535520][ T6060] kthread+0x7a9/0x920 [ 401.539781][ T6060] ? __pfx_kthread+0x10/0x10 [ 401.544575][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 401.549815][ T6060] ? __pfx_kthread+0x10/0x10 [ 401.554544][ T6060] ? __pfx_kthread+0x10/0x10 [ 401.559176][ T6060] ? __pfx_kthread+0x10/0x10 [ 401.564269][ T6060] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.569504][ T6060] ? lockdep_hardirqs_on+0x99/0x150 [ 401.575974][ T6060] ? __pfx_kthread+0x10/0x10 [ 401.580719][ T6060] ret_from_fork+0x4b/0x80 [ 401.586046][ T6060] ? __pfx_kthread+0x10/0x10 [ 401.590968][ T6060] ret_from_fork_asm+0x1a/0x30 [ 401.595958][ T6060] [ 401.599626][ T6060] Modules linked in: [ 401.604757][ T6060] ---[ end trace 0000000000000000 ]--- [ 401.840607][ T8951] lo speed is unknown, defaulting to 1000 [ 401.854486][ T8951] lo speed is unknown, defaulting to 1000 [ 401.874329][ T8951] lo speed is unknown, defaulting to 1000 [ 401.882739][ T8951] iwpm_register_pid: Unable to send a nlmsg (client = 2) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 401.893777][ T8952] netlink: 'syz.6.683': attribute type 16 has an invalid length. [ 401.907260][ T8951] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 401.915973][ T8952] netlink: 'syz.6.683': attribute type 17 has an invalid length. [ 401.915999][ T8952] netlink: 'syz.6.683': attribute type 27 has an invalid length. [ 402.155448][ T8951] lo speed is unknown, defaulting to 1000 [ 402.162043][ T8951] lo speed is unknown, defaulting to 1000 [ 402.577208][ T6060] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 402.582876][ T6060] Code: 20 00 74 08 4c 89 ef e8 64 76 3a fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 2d [ 402.604022][ T6060] RSP: 0018:ffffc9000481f630 EFLAGS: 00010203 [ 402.610171][ T6060] RAX: 0000000000000023 RBX: ffffc9000481f7c0 RCX: ffff888026730000 [ 402.618345][ T6060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.626605][ T6060] RBP: 000000000000011e R08: ffffffff84ec1ac5 R09: ffffffff84ec1954 [ 402.763306][ T6060] R10: 0000000000000004 R11: ffff888026730000 R12: dffffc0000000000 [ 402.773703][ T8951] lo speed is unknown, defaulting to 1000 [ 402.783577][ T6060] R13: 0000000000000000 R14: 0000000000000001 R15: 000000000000001e [ 402.802406][ T6060] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 402.826311][ T6060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.835060][ T6060] CR2: 00007fff576a8014 CR3: 0000000035ba0000 CR4: 00000000003526f0 [ 402.846047][ T6060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 402.854690][ T6060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 402.866173][ T6060] Kernel panic - not syncing: Fatal exception [ 402.873694][ T6060] Kernel Offset: disabled [ 402.878753][ T6060] Rebooting in 86400 seconds..