last executing test programs: 27m17.902147036s ago: executing program 3 (id=4): syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x258, 0x268, 0x300, 0x0, 0x268, 0x368, 0x460, 0x460, 0x368, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x7fffffffffffffff, 0x9, 0x0, 0x8000000, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@unspec=@statistic={{0x38}, {0xfffe, 0x1, 0xc867, 0x800, 0x9, {0x6}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private2, @mcast1, [], [], 'ip6gretap0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffc, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27m15.798937803s ago: executing program 3 (id=7): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x17, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) 27m10.889584055s ago: executing program 3 (id=9): syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x258, 0x268, 0x300, 0x0, 0x268, 0x368, 0x460, 0x460, 0x368, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x7fffffffffffffff, 0x9, 0x0, 0x8000000, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@unspec=@statistic={{0x38}, {0xfffe, 0x1, 0xc867, 0x800, 0x9, {0x6}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private2, @mcast1, [], [], 'ip6gretap0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffc, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 27m10.887340005s ago: executing program 1 (id=2): syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x258, 0x268, 0x300, 0x0, 0x268, 0x368, 0x460, 0x460, 0x368, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x7fffffffffffffff, 0x9, 0x0, 0x8000000, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@unspec=@statistic={{0x38}, {0xfffe, 0x1, 0xc867, 0x800, 0x9, {0x6}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private2, @mcast1, [], [], 'ip6gretap0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffc, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27m10.883944485s ago: executing program 3 (id=11): syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x258, 0x268, 0x300, 0x0, 0x268, 0x368, 0x460, 0x460, 0x368, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x7fffffffffffffff, 0x9, 0x0, 0x8000000, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@unspec=@statistic={{0x38}, {0xfffe, 0x1, 0xc867, 0x800, 0x9, {0x6}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private2, @mcast1, [], [], 'ip6gretap0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffc, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 27m6.003279667s ago: executing program 1 (id=14): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x17, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) 27m5.810390059s ago: executing program 3 (id=15): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) 27m2.659325589s ago: executing program 1 (id=18): syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 26m49.788499652s ago: executing program 32 (id=15): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) 26m45.231248709s ago: executing program 33 (id=18): syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 20m45.018970218s ago: executing program 2 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) socket$inet(0x2, 0x3, 0x5) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') 20m42.413084571s ago: executing program 2 (id=475): socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r2, 0x0, 0xb, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000001c0)=0x1700) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) syz_open_procfs$namespace(r3, &(0x7f0000019240)='ns/user\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 20m41.234061526s ago: executing program 2 (id=476): socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r2, 0x0, 0xb, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000001c0)=0x1700) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) syz_open_procfs$namespace(r3, &(0x7f0000019240)='ns/user\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 20m39.31584753s ago: executing program 2 (id=478): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x17, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) 20m35.528676318s ago: executing program 2 (id=483): truncate(0x0, 0x7fff) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r4, 0x11) pwritev2(r0, 0x0, 0x0, 0x7830, 0xffffffff, 0x0) 20m34.446483002s ago: executing program 2 (id=484): r0 = epoll_create1(0x0) unshare(0x20000600) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 20m18.458789234s ago: executing program 34 (id=484): r0 = epoll_create1(0x0) unshare(0x20000600) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 16m18.082310796s ago: executing program 4 (id=892): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x17, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) 16m16.508292934s ago: executing program 4 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xc07, 0x200400) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xcab) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{0x0}], 0x1}, 0x1d52a}], 0x1, 0x2, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) shutdown(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000002180)=""/4101, 0x1005, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x17, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) 16m5.872215845s ago: executing program 4 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x2, 0x4, 0x1d1}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1be, &(0x7f0000000940)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000001cc0)=ANY=[], 0x27) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) 16m3.7140841s ago: executing program 4 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$inet(0x2, 0x3, 0x5) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SLAVE(r3, 0x703, 0x1c4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x8000) 15m48.377857015s ago: executing program 35 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$inet(0x2, 0x3, 0x5) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SLAVE(r3, 0x703, 0x1c4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x8000) 7m53.580542839s ago: executing program 7 (id=2291): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4'], 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1ff, 0x4, 0x6, 0x36b, 0x4}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000c5b8981cd60d923e9b83940000000000000000000000000095edfbfb67c4128ab3280e53d0ff6861408bbfb4e890"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffe, 0x400000}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 7m51.450934963s ago: executing program 7 (id=2295): fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 7m48.874266763s ago: executing program 7 (id=2305): fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 7m45.033377776s ago: executing program 7 (id=2315): fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 7m41.970220371s ago: executing program 7 (id=2328): socket$pppoe(0x18, 0x1, 0x0) fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 7m30.748678039s ago: executing program 7 (id=2347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) readv(0xffffffffffffffff, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 7m14.099007679s ago: executing program 36 (id=2347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) readv(0xffffffffffffffff, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 20.376318658s ago: executing program 8 (id=3356): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0xfb}, {}, @raw32}], 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x3}, 0x7ff}) close_range(r0, 0xffffffffffffffff, 0x0) 20.025139902s ago: executing program 8 (id=3357): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x2800000, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000140)=0x74eb) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x0) fchdir(r6) chown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, 0x0, 0x0) r8 = socket$kcm(0x2, 0x2, 0x73) ppoll(0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 18.012662955s ago: executing program 8 (id=3361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) readv(0xffffffffffffffff, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 16.66623157s ago: executing program 8 (id=3365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0302020100e79f00024a"], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80044) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 14.03605174s ago: executing program 8 (id=3370): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) socket(0x1d, 0x803, 0x400000) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13.240692919s ago: executing program 9 (id=3374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) write(r3, 0x0, 0x97) 11.085359624s ago: executing program 0 (id=3376): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) 10.402493542s ago: executing program 9 (id=3377): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0xfb}, {}, @raw32}], 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x3}, 0x7ff}) close_range(r0, 0xffffffffffffffff, 0x0) 10.204493414s ago: executing program 0 (id=3380): socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffc2}}, 0x20) 10.128660695s ago: executing program 9 (id=3381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0302020100e79f00024a"], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80044) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 8.655020091s ago: executing program 9 (id=3384): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c59b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x80, "be92f2e314c97364629f9ef7c6f7a53f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x40004) 8.364791455s ago: executing program 9 (id=3386): socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 8.310506956s ago: executing program 6 (id=3387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) write(r3, 0x0, 0x97) 8.095432098s ago: executing program 9 (id=3389): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x48, 0x0) r2 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r2, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) 7.215249158s ago: executing program 6 (id=3390): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) 7.214730828s ago: executing program 5 (id=3391): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0xfb}, {}, @raw32}], 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x3}, 0x7ff}) close_range(r0, 0xffffffffffffffff, 0x0) 7.080478429s ago: executing program 6 (id=3392): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {0x0}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553eff16", 0x4a}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f6828196b30e485f2213ad567c62cc1bb174800513c5f9c8df2d028d2545768e3883524e866353a61ccfc0de4d4afadc9c31c23565915074b6680d902c662f768443bbe764577569ba8cd8ff4b63dc9e0aa67139b4b8120da451c19db9b86e9f7647857d646893d7774ec70d5d6c3783b04ad92cf39e91a45833c96aa1006aa133f9e5e4cfeed9bb0893bb9ab", 0xe5}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000740)="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", 0xfe}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) 6.99721283s ago: executing program 6 (id=3393): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 6.981939491s ago: executing program 5 (id=3394): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x27, 0x0, 0x0, @void, @value}, 0x20) r4 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x0, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.002337132s ago: executing program 6 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0302020100e79f00024a"], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80044) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 5.035725753s ago: executing program 8 (id=3396): userfaultfd(0x80001) socket$packet(0x11, 0x2, 0x300) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706010100000000000000000000000005000100070000007926835efff460be34c2e847066b27afb51f00e4cc7e73a1f5085ffdc7075c"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) 4.943878984s ago: executing program 5 (id=3397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.390437232s ago: executing program 5 (id=3398): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/231, 0xe7) 3.390151841s ago: executing program 0 (id=3399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 3.376932392s ago: executing program 6 (id=3400): syz_usb_connect(0x1, 0x36, &(0x7f00000026c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 2.365547003s ago: executing program 0 (id=3401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, r2, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e94}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}}, 0x48894) 2.206342605s ago: executing program 5 (id=3402): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x2) 2.046280807s ago: executing program 0 (id=3403): r0 = socket(0x2, 0x1, 0xfffffffe) recvmsg$kcm(r0, &(0x7f0000002880)={&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000001880)=""/4096, 0x1000}, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @local, 0x11, 0x3, 'ovf\x00', 0x3f, 0x4, 0x7f}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x100, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xf, 0xe1b2, 0x1}}, 0x44) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000500)="2b56a110c948690ef16034a2b7141967a80eb55ebba44ff1e9aed24be6ed4f377dcbc0a0670d4e909919b54371c9196042b63302d813d29448337e00978f71141fd9ba663bf258ce9f58cfc9a1afe9c3f01ec3d0d3068be11d0d1e30900bc6ed4b2b41f4288b", &(0x7f0000000400)="e6fea1c2b85784874c6ee3db0cfd17e37f55de0d1eb3c5f7a91c7a04a33b0e5a8a25210954dc48d6a0020c6b50b11d4014ea7f1ee57953c57dde1a96e996da8a32433bbd574f12625f14e1b55d03b182b9a3d330e21298b33d8c77ceed979604fa34c0fbd1624741c8518ff0d874cebdd1d1a0672a3067fbd0f3faf432171ad52e8a4c7f90e6e843a582086e6b3b9a8cb9c64b8b47beddaa39f1ae300ab9b44981e4e5a98bfffd47"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) 387.121646ms ago: executing program 5 (id=3404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f00000002c0)}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553eff16", 0x4a}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f6828196b30e485f2213ad567c62cc1bb174800513c5f9c8df2d028d2545768e3883524e866353a61ccfc0de4d4afadc9c31c23565915074b6680d902c662f768443bbe764577569ba8cd8ff4b63dc9e0aa67139b4b8120da451c19db9b86e9f7647857d646893d7774ec70d5d6c3783b04ad92cf39e91a45833c96aa1006aa133f9e5e4cfeed9bb0893bb9ab", 0xe5}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000740)="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", 0xfe}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=3405): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e4a0d0302"], 0x4d) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r8}) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) creat(0x0, 0x4b) kernel console output (not intermixed with test programs): Device is in use and cannot be enslaved [ 951.371823][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1387'. [ 951.386656][T11283] device bridge_slave_1 left promiscuous mode [ 951.393140][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.604106][T11283] device bridge_slave_0 left promiscuous mode [ 951.610707][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.398546][T11303] team0 (unregistering): Port device team_slave_0 removed [ 955.450792][T11314] mmap: syz.0.1391 (11314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 955.467859][T11303] team0 (unregistering): Port device team_slave_1 removed [ 955.904843][ T126] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 956.794836][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 956.801905][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 956.845403][ T126] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 956.892418][ T126] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 956.933393][ T126] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.956730][ T126] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.971689][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.000407][ T126] usb 9-1: Product: syz [ 957.013759][ T126] usb 9-1: Manufacturer: syz [ 957.937359][ T126] usb 9-1: SerialNumber: syz [ 958.170023][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.178286][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.187007][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.194577][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.204743][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.212139][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.219566][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.227194][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.234565][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 958.263244][ T126] usb 9-1: 0:2 : does not exist [ 958.441771][ T126] usb 9-1: USB disconnect, device number 5 [ 958.766895][T10116] udevd[10116]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.251604][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 966.312334][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 972.965850][ T126] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 973.175658][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 973.190992][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 973.220093][ T126] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 973.251046][ T126] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 973.286301][ T126] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.321481][ T126] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 973.382871][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.496642][ T126] usb 9-1: Product: syz [ 973.558801][ T126] usb 9-1: Manufacturer: syz [ 973.634008][ T126] usb 9-1: SerialNumber: syz [ 974.418783][ T126] usb 9-1: 0:2 : does not exist [ 974.470004][ T126] usb 9-1: USB disconnect, device number 6 [ 974.916070][T10116] udevd[10116]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.950397][ T34] Bluetooth: hci5: Frame reassembly failed (-84) [ 976.864849][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 976.864889][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 977.021682][T11589] lo speed is unknown, defaulting to 1000 [ 982.218058][T11646] lo speed is unknown, defaulting to 1000 [ 986.220623][T11702] lo speed is unknown, defaulting to 1000 [ 989.124811][T11745] lo speed is unknown, defaulting to 1000 [ 992.948796][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.955915][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.646285][T10622] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 994.690403][T11796] lo speed is unknown, defaulting to 1000 [ 995.586503][T10622] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 995.642097][T10622] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 995.684768][T10622] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.724454][T10622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.763661][T11790] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 997.641998][T10622] usb 8-1: USB disconnect, device number 6 [ 1000.105747][T11854] lo speed is unknown, defaulting to 1000 [ 1001.991149][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1002.093891][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.233617][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1002.258423][T11888] device bridge_slave_0 left promiscuous mode [ 1002.258588][T11888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.280445][T11888] device bridge_slave_1 left promiscuous mode [ 1002.280586][T11888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.338837][T11888] bond0: (slave bond_slave_0): Releasing backup interface [ 1002.364138][T11888] bond0: (slave bond_slave_1): Releasing backup interface [ 1002.430712][T11888] team0: Port device team_slave_0 removed [ 1002.494794][ T7191] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1002.508819][T11888] team0: Port device team_slave_1 removed [ 1002.570358][T11888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.604570][T11888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.694753][ T7191] usb 7-1: Using ep0 maxpacket: 32 [ 1002.769145][ T7191] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1002.810569][ T7191] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1003.243099][ T7191] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1003.421980][ T7191] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1003.600194][ T7191] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1003.658760][ T7191] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1003.709457][T11888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.720914][ T7191] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1003.873465][T11888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.889318][ T7191] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1003.904571][ T7191] usb 7-1: Product: syz [ 1003.911584][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1004.659330][ T7191] usb 7-1: Manufacturer: syz [ 1004.688261][ T7191] usb 7-1: SerialNumber: syz [ 1004.754534][ T7191] usb 7-1: config 0 descriptor?? [ 1004.792348][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1004.815404][ T7191] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1004.893646][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1004.919404][ T7191] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1005.080967][T11886] netlink: 'syz.5.1543': attribute type 10 has an invalid length. [ 1005.171305][T11931] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1555'. [ 1005.180507][T11931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1555'. [ 1005.862009][T11886] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1007.154855][T11943] lo speed is unknown, defaulting to 1000 [ 1007.383979][T10622] usb 7-1: USB disconnect, device number 10 [ 1007.444927][T10622] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1012.135490][T11984] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1571'. [ 1012.154761][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1571'. [ 1012.644885][T11984] tipc: MTU too low for tipc bearer [ 1014.542561][T12034] vivid-000: disconnect [ 1015.209728][T12025] vivid-000: reconnect [ 1016.436792][ T14] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1016.866134][ T14] usb 8-1: Using ep0 maxpacket: 32 [ 1016.889111][ T14] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1016.971427][ T14] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.007354][ T14] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1017.039465][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.051439][ T14] usb 8-1: Product: syz [ 1017.056694][ T14] usb 8-1: Manufacturer: syz [ 1017.061548][ T14] usb 8-1: SerialNumber: syz [ 1017.307247][ T14] usb 8-1: Cannot retrieve CPort count: 0 [ 1017.319395][ T14] usb 8-1: Cannot retrieve CPort count: -5 [ 1017.343125][ T14] es2_ap_driver: probe of 8-1:7.0 failed with error -5 [ 1017.535881][ T26] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1017.657202][T10622] usb 8-1: USB disconnect, device number 7 [ 1017.769519][ T26] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1017.886630][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.937539][ T26] usb 7-1: Product: syz [ 1017.957805][ T26] usb 7-1: Manufacturer: syz [ 1017.962475][ T26] usb 7-1: SerialNumber: syz [ 1018.037855][ T26] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1018.207471][ T26] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1019.655575][ T26] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1019.663600][ T26] ath9k_htc: Failed to initialize the device [ 1019.674742][ T7191] usb 7-1: USB disconnect, device number 11 [ 1019.683390][ T7191] usb 7-1: ath9k_htc: USB layer deinitialized [ 1021.717758][T12136] vivid-000: disconnect [ 1022.479416][T12132] vivid-000: reconnect [ 1022.833577][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 1022.945304][T12145] 8021q: VLANs not supported on vcan0 [ 1027.993391][T12216] vivid-000: disconnect [ 1028.697033][T12211] vivid-000: reconnect [ 1033.015449][T12265] lo speed is unknown, defaulting to 1000 [ 1035.081765][T12293] syz.6.1648 (12293): drop_caches: 2 [ 1035.093000][T12293] syz.6.1648 (12293): drop_caches: 2 [ 1038.194849][T12342] syz.7.1663 (12342): drop_caches: 2 [ 1038.228838][T12342] syz.7.1663 (12342): drop_caches: 2 [ 1038.886663][T12341] syz.0.1662 uses obsolete (PF_INET,SOCK_PACKET) [ 1040.187772][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1670'. [ 1040.564653][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1669'. [ 1040.644026][T12382] loop6: detected capacity change from 0 to 512 [ 1040.655373][T12382] EXT4-fs: Ignoring removed bh option [ 1040.685657][T12382] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1041.647415][T12382] EXT4-fs (loop6): 1 truncate cleaned up [ 1041.653172][T12382] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1041.764682][ T7191] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1041.815880][ T7348] EXT4-fs (loop6): unmounting filesystem. [ 1042.184729][ T7191] usb 8-1: Using ep0 maxpacket: 16 [ 1042.192046][ T7191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.747217][ T7191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.845157][ T7191] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1042.855561][ T7191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.888736][ T7191] usb 8-1: config 0 descriptor?? [ 1043.924008][ T7191] usbhid 8-1:0.0: can't add hid device: -71 [ 1044.102718][ T7191] usbhid: probe of 8-1:0.0 failed with error -71 [ 1044.113919][ T7191] usb 8-1: USB disconnect, device number 8 [ 1044.546402][T12442] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1050.867445][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1714'. [ 1050.972423][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'. [ 1051.000627][T12537] device vlan2 entered promiscuous mode [ 1051.054883][T12537] device bridge0 entered promiscuous mode [ 1051.945034][ T951] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1052.136032][ T951] usb 8-1: Using ep0 maxpacket: 8 [ 1052.978944][ T951] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.007677][ T951] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1053.066880][ T951] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1053.137679][ T951] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1053.199556][ T951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1053.227649][ T951] usb 8-1: Product: syz [ 1053.274088][ T951] usb 8-1: Manufacturer: syz [ 1053.330583][ T951] usb 8-1: SerialNumber: syz [ 1053.856233][ T951] usb 8-1: config 0 descriptor?? [ 1053.878809][ T951] radio-si470x 8-1:0.0: could not find interrupt in endpoint [ 1054.010185][ T951] radio-si470x: probe of 8-1:0.0 failed with error -5 [ 1054.040049][ T951] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1054.419829][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.532163][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1725'. [ 1054.915109][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.964999][ T7] usb 8-1: USB disconnect, device number 9 [ 1058.807944][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.817786][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.827032][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.836202][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.846025][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.855230][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.864383][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.873735][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.906633][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1058.915957][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 1064.593790][T12699] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1065.097576][T12713] vivid-000: disconnect [ 1065.884265][T12710] vivid-000: reconnect [ 1066.187604][T12697] ipt_CLUSTERIP: Please specify destination IP [ 1068.357327][T12741] __nla_validate_parse: 43 callbacks suppressed [ 1068.357345][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1765'. [ 1068.967241][T12752] ax25_connect(): syz.8.1768 uses autobind, please contact jreuter@yaina.de [ 1069.018169][T12752] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1069.532577][T12763] vivid-000: disconnect [ 1069.677447][T12762] vivid-000: reconnect [ 1071.946599][T12787] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1073.292320][T12794] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1073.336282][T12794] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1073.385483][T12794] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1073.403856][T12794] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1073.734976][T12802] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1778'. [ 1074.126728][T12812] lo speed is unknown, defaulting to 1000 [ 1074.314486][T12811] ax25_connect(): syz.8.1782 uses autobind, please contact jreuter@yaina.de [ 1074.493657][T12815] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1074.875853][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1784'. [ 1081.564805][T12865] ax25_connect(): syz.8.1796 uses autobind, please contact jreuter@yaina.de [ 1081.592890][T12864] lo speed is unknown, defaulting to 1000 [ 1081.706442][T12868] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1082.394970][ T951] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1082.606634][ T951] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.639696][ T951] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.674217][ T951] usb 9-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1082.700731][ T951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.735643][ T951] usb 9-1: config 0 descriptor?? [ 1082.794386][ T951] usbhid 9-1:0.0: can't add hid device: -22 [ 1082.821130][ T951] usbhid: probe of 9-1:0.0 failed with error -22 [ 1082.999055][ T4375] usb 9-1: USB disconnect, device number 7 [ 1083.592174][T12904] overlayfs: failed to clone upperpath [ 1086.149541][T12919] lo speed is unknown, defaulting to 1000 [ 1087.387530][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1812'. [ 1088.716977][T12945] overlayfs: failed to clone upperpath [ 1090.189223][T12960] lo speed is unknown, defaulting to 1000 [ 1094.994402][T13019] lo speed is unknown, defaulting to 1000 [ 1096.391215][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1837'. [ 1098.592501][ T4341] Bluetooth: hci5: Frame reassembly failed (-84) [ 1099.511613][T13069] lo speed is unknown, defaulting to 1000 [ 1100.103125][T13061] syz.8.1845 (13061): drop_caches: 2 [ 1100.178758][T13061] syz.8.1845 (13061): drop_caches: 2 [ 1100.624788][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 1100.625302][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1100.942759][T13090] capability: warning: `syz.8.1852' uses deprecated v2 capabilities in a way that may be insecure [ 1102.022749][T13113] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1102.959999][T13117] lo speed is unknown, defaulting to 1000 [ 1103.617533][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1866'. [ 1104.583786][T13121] syz.8.1862 (13121): drop_caches: 2 [ 1104.659069][T13121] syz.8.1862 (13121): drop_caches: 2 [ 1106.913441][T13174] lo speed is unknown, defaulting to 1000 [ 1108.775777][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1878'. [ 1109.469982][ T126] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1109.666767][ T126] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1109.686914][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.744478][ T126] usb 7-1: config 0 descriptor?? [ 1110.134332][ T126] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1110.146549][ T126] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1110.177903][ T126] [drm:udl_init] *ERROR* Selecting channel failed [ 1111.250808][ T126] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 1111.289845][ T126] [drm] Initialized udl on minor 2 [ 1112.256950][ T126] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1112.334434][T13238] lo speed is unknown, defaulting to 1000 [ 1112.440717][ T126] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1112.519760][ T126] usb 7-1: USB disconnect, device number 12 [ 1113.551601][T13262] tmpfs: Unknown parameter 'usrquota' [ 1115.827359][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.833738][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.616506][T13380] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1125.525396][T13405] vivid-000: disconnect [ 1126.241893][T13398] vivid-000: reconnect [ 1128.636504][T13441] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1128.934277][T13448] netlink: 'syz.8.1932': attribute type 1 has an invalid length. [ 1129.165443][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1933'. [ 1129.226253][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 1129.284445][T13452] device vlan2 entered promiscuous mode [ 1129.308575][T13452] device bond0 entered promiscuous mode [ 1129.325847][T13452] device bond_slave_0 entered promiscuous mode [ 1129.344266][T13452] device bond_slave_1 entered promiscuous mode [ 1129.602122][T13461] lo speed is unknown, defaulting to 1000 [ 1130.587577][T13470] vivid-000: disconnect [ 1131.773429][T13468] vivid-000: reconnect [ 1138.162444][T13571] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1138.170530][T13571] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1138.179249][T13571] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1138.187445][T13571] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1139.246237][T13591] lo speed is unknown, defaulting to 1000 [ 1140.288378][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1140.387881][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1140.421274][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1140.770640][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1140.780123][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1140.827647][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1140.897972][T13605] 9pnet_fd: Insufficient options for proto=fd [ 1145.151879][T13656] lo speed is unknown, defaulting to 1000 [ 1148.998448][T13707] lo speed is unknown, defaulting to 1000 [ 1149.721655][T13723] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1149.731349][T13723] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1149.739914][T13723] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1149.747757][T13723] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1152.780865][T13749] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1997'. [ 1153.458163][T13761] lo speed is unknown, defaulting to 1000 [ 1159.059902][T13807] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2012'. [ 1159.162760][T13812] lo speed is unknown, defaulting to 1000 [ 1162.490388][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2027'. [ 1162.508472][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 1162.898516][T13864] device vlan3 entered promiscuous mode [ 1162.904400][T13864] device bond0 entered promiscuous mode [ 1162.911278][T13864] device wlan1 entered promiscuous mode [ 1163.504425][T13874] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1163.512556][T13874] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1163.521082][T13874] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1163.529019][T13874] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1165.058887][T13905] netlink: 'syz.8.2036': attribute type 2 has an invalid length. [ 1165.119218][T13905] netlink: 'syz.8.2036': attribute type 1 has an invalid length. [ 1165.510206][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2039'. [ 1165.653315][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2039'. [ 1168.200264][T13919] 8021q: VLANs not supported on caif0 [ 1169.855811][ T4296] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1169.963808][T13966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1169.994197][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1170.054819][ T4296] usb 7-1: Using ep0 maxpacket: 8 [ 1170.062325][ T4296] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.105694][ T4296] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1170.146505][ T4296] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1170.167148][ T4296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.185409][ T4296] usb 7-1: Product: syz [ 1170.198012][ T4296] usb 7-1: Manufacturer: syz [ 1170.207521][ T4296] usb 7-1: SerialNumber: syz [ 1170.684249][ T4296] usb 7-1: cannot find UAC_HEADER [ 1170.710156][ T4296] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1173.219930][ T9170] usb 7-1: USB disconnect, device number 13 [ 1173.277837][T13932] udevd[13932]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1177.156676][T14013] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2064'. [ 1177.206824][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2064'. [ 1177.234187][T14013] 8021q: VLANs not supported on caif0 [ 1177.270715][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.277832][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.525416][T14038] fuse: Bad value for 'fd' [ 1179.285412][T14049] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1179.293371][T14049] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1179.302460][T14049] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1179.310418][T14049] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1181.718477][T14089] fuse: Bad value for 'fd' [ 1183.451404][T14124] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1183.459361][T14124] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1183.468602][T14124] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1183.476685][T14124] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1185.474775][ T4296] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1185.694669][ T4296] usb 9-1: device descriptor read/64, error -71 [ 1185.994686][ T4296] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1186.195699][ T4296] usb 9-1: device descriptor read/64, error -71 [ 1186.336071][ T4296] usb usb9-port1: attempt power cycle [ 1186.864886][ T4296] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1186.948268][ T4296] usb 9-1: device descriptor read/8, error -71 [ 1187.082914][T14152] fuse: Bad value for 'fd' [ 1190.810383][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 1192.697161][ T4654] kworker/dying (4654) used greatest stack depth: 20352 bytes left [ 1193.618515][T14240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1193.626300][T14240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1194.034818][ T4296] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1194.226337][T14267] netlink: 'syz.5.2127': attribute type 10 has an invalid length. [ 1194.244654][ T4296] usb 9-1: Using ep0 maxpacket: 16 [ 1194.267139][ T4296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1194.305991][T14267] device veth0_macvtap left promiscuous mode [ 1194.316565][ T4296] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1194.354166][ T4296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.398248][ T4296] usb 9-1: Product: syz [ 1194.402551][ T4296] usb 9-1: Manufacturer: syz [ 1194.411361][ T4296] usb 9-1: SerialNumber: syz [ 1194.454034][ T4296] usb 9-1: config 0 descriptor?? [ 1194.511343][ T4296] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1194.533363][ T4296] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1194.754275][T14267] batman_adv: batadv0: Adding interface: macvtap0 [ 1194.764715][T14267] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.790170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.559696][T14267] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1196.570185][ T4296] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1197.665500][ T4296] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1197.684670][ T4296] em28xx 9-1:0.0: board has no eeprom [ 1197.891444][ T4296] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1197.899865][ T4296] em28xx 9-1:0.0: dvb set to bulk mode. [ 1197.908970][ T4296] usb 9-1: USB disconnect, device number 12 [ 1197.915643][ T4296] em28xx 9-1:0.0: Disconnecting em28xx [ 1197.921715][ T26] em28xx 9-1:0.0: Binding DVB extension [ 1198.744353][ T26] em28xx 9-1:0.0: Registering input extension [ 1198.787773][ T4296] em28xx 9-1:0.0: Closing input extension [ 1198.887915][ T4296] em28xx 9-1:0.0: Freeing device [ 1199.190929][ T951] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1199.447997][ T951] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1200.634087][T14344] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2150'. [ 1200.672648][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2150'. [ 1203.999575][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 1207.501688][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2173'. [ 1209.341819][T14489] SET target dimension over the limit! [ 1210.200842][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2181'. [ 1211.085056][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2186'. [ 1215.572588][T14560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1215.757053][T14560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1216.448829][T14560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.733158][T14589] 9pnet_fd: Insufficient options for proto=fd [ 1223.071940][T14617] raw_sendmsg: syz.8.2209 forgot to set AF_INET. Fix it! [ 1224.078219][T14634] vivid-000: disconnect [ 1224.160483][T14633] vivid-000: reconnect [ 1224.706200][ T4301] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1225.780584][ T4301] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1226.044027][ T4301] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1226.075551][ T4301] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1226.124638][ T4301] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.214640][T14644] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1226.566566][ T4301] usb 8-1: USB disconnect, device number 10 [ 1226.689758][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1226.698405][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1226.706032][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1227.472198][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1227.480921][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1227.488636][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1227.895728][T14682] syz.6.2224 (14682): drop_caches: 2 [ 1227.905247][T14682] syz.6.2224 (14682): drop_caches: 2 [ 1231.585272][T14721] lo speed is unknown, defaulting to 1000 [ 1233.820511][T14783] 9pnet_fd: Insufficient options for proto=fd [ 1234.595174][T14791] lo speed is unknown, defaulting to 1000 [ 1235.477837][T14808] fuse: Bad value for 'group_id' [ 1235.489516][T14806] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2257'. [ 1236.136771][T14830] 9pnet_fd: Insufficient options for proto=fd [ 1236.502955][T14838] lo speed is unknown, defaulting to 1000 [ 1238.786476][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.809991][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.045265][T14854] fuse: Bad value for 'group_id' [ 1244.030980][T14912] fuse: Bad value for 'group_id' [ 1254.630077][T15032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1254.638919][T15032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1254.646445][T15032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1254.659128][T15032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1254.667958][T15032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1254.675647][T15032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1255.762005][T15046] syz.6.2324 (15046): drop_caches: 2 [ 1255.768534][T15046] syz.6.2324 (15046): drop_caches: 2 [ 1273.803482][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.508095][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.615208][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1275.626297][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1275.635271][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1275.645182][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1275.653049][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1275.660808][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1276.393778][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.453782][T15174] lo speed is unknown, defaulting to 1000 [ 1276.471776][ T7191] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1276.660265][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.816506][ T7191] usb 9-1: Using ep0 maxpacket: 16 [ 1276.843276][ T7191] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.802520][ T7191] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1278.803176][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 1278.918009][ T7191] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1278.968756][ T7191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.025357][ T7191] usb 9-1: config 0 descriptor?? [ 1279.912140][ T7191] usb 9-1: can't set config #0, error -71 [ 1279.932178][ T7191] usb 9-1: USB disconnect, device number 13 [ 1280.878847][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 1281.149460][T15219] lo speed is unknown, defaulting to 1000 [ 1281.794953][T15219] netlink: 'syz.5.2364': attribute type 27 has an invalid length. [ 1282.004614][T15221] block device autoloading is deprecated and will be removed. [ 1282.062180][T15174] chnl_net:caif_netlink_parms(): no params data found [ 1283.775682][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 1285.825500][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 1287.116537][T15260] 9pnet_fd: Insufficient options for proto=fd [ 1287.171862][T15174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.189667][T15174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.213280][T15174] device bridge_slave_0 entered promiscuous mode [ 1287.244271][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.264725][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.274260][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.298046][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.308048][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1287.316286][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1287.548251][T15174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.566874][T15174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.616076][T15174] device bridge_slave_1 entered promiscuous mode [ 1287.877537][T15261] lo speed is unknown, defaulting to 1000 [ 1287.899584][T15174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.958094][T15268] Cannot find add_set index 1026 as target [ 1287.973751][T15174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.774686][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 1292.548825][T15283] fuse: Unknown parameter 'grou00000000000000000000' [ 1292.586390][T15174] team0: Port device team_slave_0 added [ 1292.674314][T15174] team0: Port device team_slave_1 added [ 1292.841756][T15174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.857739][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.952454][T15174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.058579][T15174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.076411][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.128040][T15174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.159885][T15292] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.169382][T15292] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.178226][T15292] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.187078][T15292] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.225212][T15295] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1293.233171][T15295] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1293.245037][T15295] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1293.252959][T15295] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1293.778343][T15292] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.787664][T15292] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.796733][T15292] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.805937][T15292] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.826548][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 1294.150988][T15303] 9pnet_fd: Insufficient options for proto=fd [ 1294.271346][T15174] device hsr_slave_0 entered promiscuous mode [ 1294.288442][T15174] device hsr_slave_1 entered promiscuous mode [ 1294.312194][T15174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.332829][T15174] Cannot create hsr debugfs directory [ 1294.403626][ T34] device hsr_slave_0 left promiscuous mode [ 1294.433121][ T34] device hsr_slave_1 left promiscuous mode [ 1294.445644][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.463360][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.479333][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.487505][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.498116][ T34] device bridge_slave_1 left promiscuous mode [ 1294.513576][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.679681][ T34] device bridge_slave_0 left promiscuous mode [ 1294.686895][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.649115][ T34] device veth1_macvtap left promiscuous mode [ 1295.655576][ T34] device veth0_macvtap left promiscuous mode [ 1295.661742][ T34] device veth1_vlan left promiscuous mode [ 1295.675551][ T34] device veth0_vlan left promiscuous mode [ 1295.883507][T15315] fuse: Unknown parameter 'grou00000000000000000000' [ 1295.914921][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 1296.442027][ T4296] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1296.626346][ T4296] usb 9-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1296.641173][ T4296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.668724][ T4296] usb 9-1: config 0 descriptor?? [ 1296.683378][ T4296] go7007: probe of 9-1:0.0 failed with error -12 [ 1296.835347][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.844128][ T34] device bond_slave_1 left promiscuous mode [ 1296.888556][ T4296] usb 9-1: USB disconnect, device number 14 [ 1296.943565][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.952930][ T34] device bond_slave_0 left promiscuous mode [ 1297.422913][ T34] bond0 (unregistering): Released all slaves [ 1297.538717][T15261] chnl_net:caif_netlink_parms(): no params data found [ 1298.082690][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 1298.103150][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.112522][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.121398][T15261] device bridge_slave_0 entered promiscuous mode [ 1299.045066][ T4439] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1299.169902][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.184848][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.193597][T15261] device bridge_slave_1 entered promiscuous mode [ 1299.239897][ T4439] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1299.249498][ T4439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.267395][ T4439] usb 7-1: Product: syz [ 1299.271626][ T4439] usb 7-1: Manufacturer: syz [ 1299.276803][ T4439] usb 7-1: SerialNumber: syz [ 1299.287480][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.309975][ T4439] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1299.379747][ T4439] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1299.391301][T15346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2395'. [ 1299.413839][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 1299.439072][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.810519][ T9170] usb 7-1: USB disconnect, device number 14 [ 1299.849799][T15261] team0: Port device team_slave_0 added [ 1300.151171][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.161735][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.318510][T15261] team0: Port device team_slave_1 added [ 1300.464489][ T4439] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1300.473813][ T4439] ath9k_htc: Failed to initialize the device [ 1300.504949][ T9170] usb 7-1: ath9k_htc: USB layer deinitialized [ 1300.791890][T15355] ======================================================= [ 1300.791890][T15355] WARNING: The mand mount option has been deprecated and [ 1300.791890][T15355] and is ignored by this kernel. Remove the mand [ 1300.791890][T15355] option from the mount to silence this warning. [ 1300.791890][T15355] ======================================================= [ 1300.861188][T15356] dlm: no local IP address has been set [ 1300.867447][T15356] dlm: cannot start dlm midcomms -107 [ 1302.049778][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.068545][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.232057][T15358] fuse: Unknown parameter 'grou00000000000000000000' [ 1302.257450][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.437600][T15355] orangefs_mount: mount request failed with -4 [ 1302.438257][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.479016][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.553478][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.721958][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2404'. [ 1302.744645][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2404'. [ 1302.754205][T15368] 8021q: VLANs not supported on nlmon0 [ 1302.777499][T15174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1302.966106][T15174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1303.010607][T15174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1303.073597][T15261] device hsr_slave_0 entered promiscuous mode [ 1303.091298][T15261] device hsr_slave_1 entered promiscuous mode [ 1303.338904][T15174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1304.694799][T15174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.935715][T15393] fuse: Unknown parameter 'group_i00000000000000000000' [ 1306.954820][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1306.963097][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1306.998257][T15174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.146627][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1307.165490][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1307.184363][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.191587][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.281710][T15261] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1307.314541][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1307.329171][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1307.350095][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1307.373876][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.381136][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.400918][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1307.410536][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1307.420488][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1307.440674][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1307.452935][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2414'. [ 1307.474749][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2414'. [ 1307.494818][T15401] 8021q: VLANs not supported on nlmon0 [ 1307.501836][T15261] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1307.580045][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1307.615744][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1307.644124][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1307.673516][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1307.700690][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1307.725357][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1307.761890][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1307.894813][T15261] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1307.926827][T15174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1307.959742][T15261] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1312.041151][T15261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.132179][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1312.153893][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1312.331341][T15261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.372123][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1312.437378][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1312.466449][T15430] fuse: Unknown parameter 'group_i00000000000000000000' [ 1313.185517][ T34] bond0: (slave wlan1): Releasing backup interface [ 1313.225806][T15174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.253039][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1313.279626][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1313.296097][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.303314][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.334994][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1313.419824][T15261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1313.476593][T15261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1313.502376][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1313.534859][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1313.543898][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.551152][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.575974][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1313.591231][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1313.609869][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1313.638466][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1313.650949][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1313.680354][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1313.694239][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1313.710564][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1313.722021][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1313.731873][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1313.742349][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1313.750724][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1313.759314][T15440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2424'. [ 1313.768560][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'. [ 1314.494163][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1314.515669][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1314.545239][ T34] device hsr_slave_0 left promiscuous mode [ 1314.630466][ T34] device hsr_slave_1 left promiscuous mode [ 1314.959195][T15458] Cannot find del_set index 4 as target [ 1318.992546][T15471] fuse: Unknown parameter 'group_i00000000000000000000' [ 1319.802356][T15476] Cannot find add_set index 1026 as target [ 1323.657045][T15500] fuse: Unknown parameter 'group_id00000000000000000000' [ 1324.014552][T15505] Cannot find add_set index 1026 as target [ 1327.214332][ T34] bond0 (unregistering): Released all slaves [ 1327.333521][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2435'. [ 1327.355236][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2435'. [ 1327.411488][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1327.428803][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1327.475284][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1327.492179][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1327.545859][T15174] device veth0_vlan entered promiscuous mode [ 1327.630969][T15174] device veth1_vlan entered promiscuous mode [ 1327.788893][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1327.828366][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1327.873789][T15174] device veth0_macvtap entered promiscuous mode [ 1327.960468][T15174] device veth1_macvtap entered promiscuous mode [ 1328.022301][T15534] fuse: Unknown parameter 'group_id00000000000000000000' [ 1328.033604][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.053065][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.093097][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.165610][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.230062][T15174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.260301][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1328.287746][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1328.359218][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1328.375808][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1328.383423][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1328.400056][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1328.459500][T15261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.479119][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.497046][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.565546][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.592355][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.689413][T15174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.710928][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1329.460818][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1329.599255][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1329.625801][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1329.634748][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1329.692536][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1330.199907][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1330.218893][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1331.428988][T15576] fuse: Unknown parameter 'group_id00000000000000000000' [ 1331.552169][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1331.578056][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1331.743051][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1331.753756][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1331.783222][T15585] dlm: no local IP address has been set [ 1331.789183][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1331.797234][T15585] dlm: cannot start dlm midcomms -107 [ 1331.819305][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1331.828891][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1331.836351][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1331.892227][T15261] device veth0_vlan entered promiscuous mode [ 1331.948766][T15261] device veth1_vlan entered promiscuous mode [ 1332.108258][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1332.126864][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1332.542676][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1332.726930][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1333.027588][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1333.084887][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1333.110200][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1333.138022][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1333.168899][T15261] device veth0_macvtap entered promiscuous mode [ 1333.399163][T15261] device veth1_macvtap entered promiscuous mode [ 1333.665582][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.696408][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.744329][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.820377][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.861808][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.904844][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 1333.923818][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.942100][T15261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.992368][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1334.005551][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1334.027419][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1334.049857][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.586609][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.614857][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.659487][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.695734][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.713762][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.728069][T15261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.748217][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1334.760396][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1334.809228][T15261] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.845206][T15261] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.882549][T15261] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.934645][T15261] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.022952][T15583] chnl_net:caif_netlink_parms(): no params data found [ 1336.024620][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 1336.119249][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.205724][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.222429][ T5037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.232187][ T5037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.249082][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1336.383341][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2468'. [ 1336.392446][T15639] netlink: 'syz.5.2468': attribute type 5 has an invalid length. [ 1336.400268][T15639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2468'. [ 1336.438183][T15639] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1336.447000][T15639] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1336.455736][T15639] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1336.464499][T15639] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1336.473646][T15639] device geneve2 entered promiscuous mode [ 1337.258771][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1337.328277][T15583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.347669][T15583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.365806][T15583] device bridge_slave_0 entered promiscuous mode [ 1337.505149][T15583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.519094][T15583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.546889][T15651] fuse: Bad value for 'user_id' [ 1337.565801][T15583] device bridge_slave_1 entered promiscuous mode [ 1337.911251][T15583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.058037][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 1339.099929][T15583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.097474][T15583] team0: Port device team_slave_0 added [ 1340.227256][T15583] team0: Port device team_slave_1 added [ 1341.105763][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 1341.113564][T15583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.150070][T15583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.270385][T15583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.321871][T15673] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1341.350065][T15673] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1341.405352][T15583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.412373][T15583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.477645][T15673] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1341.498369][T15673] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1341.522612][T15583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.295795][T15583] device hsr_slave_0 entered promiscuous mode [ 1342.311522][T15583] device hsr_slave_1 entered promiscuous mode [ 1342.329648][T15583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.340465][T15583] Cannot create hsr debugfs directory [ 1342.361074][ T4312] device hsr_slave_0 left promiscuous mode [ 1342.419742][ T4312] device hsr_slave_1 left promiscuous mode [ 1342.439603][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.472134][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.509308][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.542762][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.549296][T15707] fuse: Bad value for 'user_id' [ 1342.570486][ T4312] device bridge_slave_1 left promiscuous mode [ 1342.599997][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.630957][ T4312] device bridge_slave_0 left promiscuous mode [ 1342.674710][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.767656][ T4312] device veth1_macvtap left promiscuous mode [ 1342.773779][ T4312] device veth0_macvtap left promiscuous mode [ 1342.831351][ T4312] device veth1_vlan left promiscuous mode [ 1342.841503][ T4312] device veth0_vlan left promiscuous mode [ 1347.745901][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 1347.977329][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 1349.479089][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.600358][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.919825][T15785] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1352.929936][T15785] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1352.942602][T15785] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1352.950742][T15785] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1353.492524][ T4312] bond0 (unregistering): Released all slaves [ 1356.178723][T15814] fuse: Unknown parameter 'grou00000000000000000000' [ 1360.581120][T15583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1360.591571][T15583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1360.608467][T15583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1360.641722][T15583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1360.776419][T15583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.797889][T15583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.842874][T15583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1360.853820][T15583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.872916][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1360.902529][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1360.912877][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1360.923140][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1360.988957][T15850] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1360.996932][T15850] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1361.006191][T15850] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1361.014096][T15850] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1361.166558][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.173790][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.518550][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1361.570069][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1361.595728][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.603954][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.636055][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.643239][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.535307][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1362.553445][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1362.566022][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1362.575416][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1362.585380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1362.594745][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1362.603541][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1362.618040][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1362.632418][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1362.641288][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1362.803308][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1362.806962][T15862] fuse: Unknown parameter 'group_i00000000000000000000' [ 1362.866790][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1363.129040][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1363.546496][T15877] SET target dimension over the limit! [ 1365.663710][T15583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.689701][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1365.699028][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1365.758237][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1365.770289][T15903] fuse: Bad value for 'fd' [ 1365.790696][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1365.845287][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1365.890100][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1367.135428][T15914] ubi31: attaching mtd0 [ 1367.176526][T15914] ubi31: scanning is finished [ 1367.193313][T15914] ubi31: empty MTD device detected [ 1367.503325][T15914] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1368.846590][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1368.854754][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1368.887250][T15583] device veth0_vlan entered promiscuous mode [ 1368.939443][T15583] device veth1_vlan entered promiscuous mode [ 1369.542985][T15930] Cannot find add_set index 0 as target [ 1369.668924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1369.834887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1369.966471][T15583] device veth0_macvtap entered promiscuous mode [ 1370.182964][T15583] device veth1_macvtap entered promiscuous mode [ 1371.112869][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.154492][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.212258][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.229797][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.260339][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.279335][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.411081][T15583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.422861][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.448837][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.466027][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.481593][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.711849][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.722625][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.736021][T15583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.904058][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1371.958219][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1372.052148][T15946] orangefs_mount: mount request failed with -4 [ 1372.615403][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1372.624409][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1372.643146][T15583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.684715][T15583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.693736][T15583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.702675][T15583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.964977][T15961] fuse: Bad value for 'fd' [ 1373.055030][ T8831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.095121][ T8831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.145513][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1373.176900][ T8831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.207903][ T8831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.360697][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1373.472041][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.483424][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.493479][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.501428][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.509099][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.516826][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.524877][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.533035][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.540684][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.548285][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.555909][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.563469][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.571147][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.579251][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.586840][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.594463][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.602026][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.609610][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.617225][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.624822][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.632347][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.640039][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.647576][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.655231][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.662820][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.671549][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.679624][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.687227][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.694786][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.702343][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.710001][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.717663][ T951] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 1373.880493][T15978] syz.0.2348 (15978): drop_caches: 2 [ 1373.926138][T15978] syz.0.2348 (15978): drop_caches: 2 [ 1374.102903][ T951] hid-generic 0001:0000:0000.0006: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 1377.235615][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1377.244035][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1379.800791][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1380.016563][T16002] orangefs_mount: mount request failed with -4 [ 1381.264266][T16014] fuse: Bad value for 'fd' [ 1381.421848][T16020] syz.9.2563 (16020): drop_caches: 2 [ 1381.428532][T16020] syz.9.2563 (16020): drop_caches: 2 [ 1382.371690][T16031] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1382.379737][T16031] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1382.389621][T16031] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1382.397833][T16031] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1383.984682][T16043] SET target dimension over the limit! [ 1384.836477][T16050] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2572'. [ 1386.880066][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1386.952023][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1387.024243][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1389.167642][T16061] orangefs_mount: mount request failed with -4 [ 1389.444768][T16081] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1389.453385][T16081] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1389.462147][T16081] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1389.470079][T16081] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1390.930058][T16104] dlm: no local IP address has been set [ 1390.935908][T16104] dlm: cannot start dlm midcomms -107 [ 1392.930949][T16103] orangefs_mount: mount request failed with -4 [ 1392.939048][T16098] input: syz1 as /devices/virtual/input/input17 [ 1394.493991][T16123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1394.502953][T16123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1394.510487][T16123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1394.523398][T16123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1394.532057][T16123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1394.539682][T16123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1396.591764][T16132] orangefs_mount: mount request failed with -4 [ 1396.974548][ T126] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1398.134537][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 1399.546781][ T126] usb 7-1: device descriptor read/all, error -71 [ 1400.374741][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2606'. [ 1400.484862][ T27] kauditd_printk_skb: 120 callbacks suppressed [ 1400.484876][ T27] audit: type=1326 audit(1746075987.220:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1400.569067][ T27] audit: type=1326 audit(1746075987.220:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1400.591408][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.824451][ T126] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1401.135990][ T27] audit: type=1326 audit(1746075987.240:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e99b8d2d0 code=0x7ffc0000 [ 1401.158419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.166084][ T27] audit: type=1326 audit(1746075987.250:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1401.195878][ T27] audit: type=1326 audit(1746075987.250:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1401.261235][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 1401.262227][ T27] audit: type=1326 audit(1746075987.270:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1401.292996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.307393][ T126] usb 7-1: config 0 has an invalid interface number: 154 but max is 0 [ 1401.354609][ T126] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.481846][ T126] usb 7-1: config 0 has no interface number 0 [ 1401.516070][ T27] audit: type=1326 audit(1746075987.270:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e99b8e9a3 code=0x7ffc0000 [ 1401.547515][ T126] usb 7-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 1401.639423][T16202] dlm: no local IP address has been set [ 1401.645149][T16202] dlm: cannot start dlm midcomms -107 [ 1402.797365][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.977734][ T126] usb 7-1: config 0 descriptor?? [ 1403.008742][ T27] audit: type=1326 audit(1746075987.270:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e99b8e9a3 code=0x7ffc0000 [ 1403.113127][ T126] qmi_wwan 7-1:0.154: bogus CDC Union: master=0, slave=0 [ 1403.195600][ T126] qmi_wwan: probe of 7-1:0.154 failed with error -22 [ 1403.278952][ T27] audit: type=1326 audit(1746075987.270:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1403.369076][ T126] usb 7-1: USB disconnect, device number 16 [ 1403.646900][ T27] audit: type=1326 audit(1746075987.270:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99b8e969 code=0x7ffc0000 [ 1404.423651][T16201] orangefs_mount: mount request failed with -4 [ 1404.504284][T16213] bridge0: port 3(vxlan0) entered blocking state [ 1404.511445][T16213] bridge0: port 3(vxlan0) entered disabled state [ 1404.524066][T16213] device vxlan0 entered promiscuous mode [ 1409.799420][T16261] SET target dimension over the limit! [ 1409.864689][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 1411.488648][T16276] dlm: no local IP address has been set [ 1411.494389][T16276] dlm: cannot start dlm midcomms -107 [ 1412.519588][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2626'. [ 1412.528586][T16275] netlink: 'syz.5.2626': attribute type 5 has an invalid length. [ 1412.536366][T16275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2626'. [ 1412.550231][T16273] orangefs_mount: mount request failed with -4 [ 1417.198862][T16324] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2635'. [ 1417.906592][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1417.916327][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1417.923774][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1417.936879][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1417.945473][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1417.953314][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1418.123786][T16332] dlm: no local IP address has been set [ 1418.129563][T16332] dlm: cannot start dlm midcomms -107 [ 1418.314430][ T9170] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1419.297336][T16331] orangefs_mount: mount request failed with -4 [ 1419.426320][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2642'. [ 1419.514401][ T9170] usb 10-1: Using ep0 maxpacket: 16 [ 1420.700128][T16345] SET target dimension over the limit! [ 1421.405812][ T9170] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1421.430339][ T9170] usb 10-1: can't read configurations, error -71 [ 1423.045046][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.051458][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.278544][T16348] netlink: 'syz.0.2644': attribute type 10 has an invalid length. [ 1425.356379][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1425.365629][T16373] netlink: 'syz.5.2648': attribute type 5 has an invalid length. [ 1425.373350][T16373] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1426.129522][T16385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1426.154593][T16385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1426.163844][T16385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.538783][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2654'. [ 1428.514090][T16400] dlm: no local IP address has been set [ 1428.519836][T16400] dlm: cannot start dlm midcomms -107 [ 1429.717295][T16399] orangefs_mount: mount request failed with -4 [ 1430.572060][T16412] program syz.9.2657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1430.619897][ T9170] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1430.861581][ T9170] usb 9-1: Using ep0 maxpacket: 16 [ 1430.951576][ T9170] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.980708][ T9170] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1431.164687][ T9170] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1431.204255][ T9170] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.226300][ T9170] usb 9-1: config 0 descriptor?? [ 1431.257705][ T9170] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1431.444011][T16424] vivid-000: disconnect [ 1432.244912][T16421] vivid-000: reconnect [ 1432.922159][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'. [ 1434.016437][ T951] usb 9-1: USB disconnect, device number 15 [ 1434.901456][T16466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1435.246140][T16477] vivid-000: disconnect [ 1436.004428][T16473] vivid-000: reconnect [ 1436.900005][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2679'. [ 1439.719370][T16525] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2686'. [ 1439.980290][T16531] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1439.988356][T16531] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1439.997514][T16531] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1440.005458][T16531] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1440.913514][T16535] vivid-000: disconnect [ 1441.645767][T16533] vivid-000: reconnect [ 1443.583849][T16565] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1444.070047][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2700'. [ 1448.962175][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.971292][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.107372][T16629] device vxlan0 left promiscuous mode [ 1449.133968][T16629] bridge0: port 3(vxlan0) entered disabled state [ 1449.725482][T16629] device bridge_slave_1 left promiscuous mode [ 1449.737145][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.819617][T16640] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2713'. [ 1449.834860][T16629] device bridge_slave_0 left promiscuous mode [ 1450.102563][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.208021][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2715'. [ 1451.230549][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2715'. [ 1451.284682][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2715'. [ 1452.781477][T16673] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1452.789680][T16673] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1452.799065][T16673] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1452.807085][T16673] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1453.315939][T16678] overlayfs: failed to resolve './file1': -2 [ 1453.400084][T16687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1456.399268][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1457.824548][T16724] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.835420][T16724] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1457.846300][T16724] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.854879][T16724] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1464.354057][T16783] SET target dimension over the limit! [ 1480.375414][T16937] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1480.382446][T16937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1480.458692][T16937] vhci_hcd vhci_hcd.0: Device attached [ 1480.624664][ T7191] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1480.754563][ T4439] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1481.284426][ T7191] usb 7-1: Using ep0 maxpacket: 16 [ 1481.295290][ T7191] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1481.349956][ T7191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.387763][ T7191] usb 7-1: Product: syz [ 1481.421572][ T7191] usb 7-1: Manufacturer: syz [ 1481.464069][ T7191] usb 7-1: SerialNumber: syz [ 1481.513482][ T7191] usb 7-1: config 0 descriptor?? [ 1481.585793][ T7191] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1481.621541][ T7191] usb 7-1: Detected FT232H [ 1481.730710][ T7191] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1481.739439][T16938] usb 45-1: recv xbuf, 0 [ 1481.747783][ T7191] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1481.759002][ T4311] vhci_hcd: stop threads [ 1481.769146][ T4311] vhci_hcd: release socket [ 1481.781659][ T7191] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1481.785767][ T4311] vhci_hcd: disconnect device [ 1481.922465][ T7191] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1481.952373][ T7191] usb 7-1: USB disconnect, device number 17 [ 1481.971350][ T7191] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1482.235588][ T7191] ftdi_sio 7-1:0.0: device disconnected [ 1484.695162][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.702411][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.734189][T17010] SET target dimension over the limit! [ 1489.070215][T17032] device syzkaller0 entered promiscuous mode [ 1493.437562][T17046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1493.488251][T17046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1493.542392][T17046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1493.824591][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2813'. [ 1494.613729][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2813'. [ 1495.145932][T17086] SET target dimension over the limit! [ 1495.156737][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1496.274480][T17103] device syzkaller0 entered promiscuous mode [ 1499.391573][T17128] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2828'. [ 1501.810535][T17158] SET target dimension over the limit! [ 1502.543256][T17115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1502.552148][T17115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1502.559746][T17115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1504.916989][T17183] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2839'. [ 1508.661854][T17209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1508.685406][T17209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1508.695030][T17209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1510.025295][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2848'. [ 1515.058365][T17273] delete_channel: no stack [ 1518.019740][T17300] dlm: no local IP address has been set [ 1518.025627][T17300] dlm: cannot start dlm midcomms -107 [ 1518.186988][T17303] orangefs_mount: mount request failed with -4 [ 1520.229066][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2874'. [ 1521.777993][T17351] dlm: no local IP address has been set [ 1521.783691][T17351] dlm: cannot start dlm midcomms -107 [ 1521.825970][T17352] SET target dimension over the limit! [ 1523.395915][T17378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1525.056757][T17407] SET target dimension over the limit! [ 1526.426465][T17426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1526.490397][T17426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1526.684492][T17426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1528.734372][ T9170] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1528.781961][T17473] SET target dimension over the limit! [ 1529.064965][ T9170] usb 1-1: Using ep0 maxpacket: 32 [ 1529.326012][T17478] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1529.341060][T17478] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1529.428463][T17478] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1529.444314][T17478] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1529.614150][ T9170] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1529.673180][ T9170] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1529.713423][ T9170] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1529.744069][ T9170] usb 1-1: Product: syz [ 1529.776189][ T9170] usb 1-1: Manufacturer: syz [ 1529.780860][ T9170] usb 1-1: SerialNumber: syz [ 1529.831083][ T9170] usb 1-1: config 0 descriptor?? [ 1529.857488][T17458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1529.895202][ T9170] hub 1-1:0.0: bad descriptor, ignoring hub [ 1529.921848][ T9170] hub: probe of 1-1:0.0 failed with error -5 [ 1530.216270][ T9170] usb 1-1: USB disconnect, device number 4 [ 1538.245648][T17559] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1539.643309][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2937'. [ 1543.310418][T17599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1544.059817][T17610] fuse: Bad value for 'fd' [ 1544.064819][ T26] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1544.269878][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 1544.291903][ T26] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.081020][ T26] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1545.124438][ T26] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1545.133939][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.171084][ T26] usb 7-1: config 0 descriptor?? [ 1545.781474][ T26] usb 7-1: can't set config #0, error -71 [ 1545.803153][ T26] usb 7-1: USB disconnect, device number 18 [ 1545.914627][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.921029][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.942551][T17632] delete_channel: no stack [ 1548.178638][T17650] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2960'. [ 1549.258031][T17646] orangefs_mount: mount request failed with -4 [ 1551.340819][T17682] device syzkaller0 entered promiscuous mode [ 1552.323005][T17694] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2973'. [ 1555.518195][T17710] dlm: no local IP address has been set [ 1555.523864][T17710] dlm: cannot start dlm midcomms -107 [ 1555.821143][T17709] orangefs_mount: mount request failed with -4 [ 1556.764446][T17727] fuse: Unknown parameter '0x0000000000000003' [ 1557.566009][T17739] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2987'. [ 1557.861063][T17747] vivid-000: disconnect [ 1558.644465][T17745] vivid-000: reconnect [ 1559.151750][T17760] device syzkaller0 entered promiscuous mode [ 1561.013734][T17776] fuse: Unknown parameter '0x0000000000000003' [ 1562.283742][T17789] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3000'. [ 1562.752672][T17801] vivid-000: disconnect [ 1563.543579][T17797] vivid-000: reconnect [ 1565.979292][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 1565.990716][T17772] netlink: 'syz.0.2996': attribute type 5 has an invalid length. [ 1565.998742][T17772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2996'. [ 1566.015317][T17772] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1566.023954][T17772] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1566.032599][T17772] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1566.041262][T17772] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1566.049951][T17772] device geneve2 entered promiscuous mode [ 1566.605664][T17816] fuse: Unknown parameter '0x0000000000000003' [ 1566.824988][T17824] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3012'. [ 1568.519120][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3019'. [ 1568.528212][T17853] netlink: 'syz.8.3019': attribute type 5 has an invalid length. [ 1568.536111][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3019'. [ 1568.549826][T17853] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1568.558642][T17853] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1568.567444][T17853] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1568.576281][T17853] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1568.585323][T17853] device geneve2 entered promiscuous mode [ 1569.787779][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3020'. [ 1569.931526][T17864] fuse: Unknown parameter '0x0000000000000003' [ 1570.127864][T17869] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3025'. [ 1571.331007][T17889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.760585][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3037'. [ 1572.769733][T17936] netlink: 'syz.9.3037': attribute type 5 has an invalid length. [ 1572.777707][T17936] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3037'. [ 1572.842470][T17936] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1572.852237][T17936] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1572.861303][T17936] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1572.870234][T17936] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1572.879641][T17936] device geneve2 entered promiscuous mode [ 1574.882904][T17950] syz.6.3042 (17950): drop_caches: 2 [ 1574.917809][T17950] syz.6.3042 (17950): drop_caches: 2 [ 1576.551481][T17991] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3055'. [ 1578.551378][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3060'. [ 1578.560459][T18017] netlink: 'syz.6.3060': attribute type 5 has an invalid length. [ 1578.568308][T18017] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3060'. [ 1578.597279][T18017] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1578.606138][T18017] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1578.614946][T18017] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1578.623661][T18017] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1578.632898][T18017] device geneve2 entered promiscuous mode [ 1580.537360][T18033] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1581.042773][T18045] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1582.827779][T18068] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3078'. [ 1584.124230][T18081] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3081'. [ 1585.072374][T18089] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1585.080808][T18089] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1585.089860][T18089] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1585.098231][T18089] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1586.521418][T18099] Can't find ip_set type ha [ 1588.458107][T18128] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1588.731790][T18141] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3094'. [ 1589.284680][T18143] dlm: no local IP address has been set [ 1589.290394][T18143] dlm: cannot start dlm midcomms -107 [ 1590.286652][T18142] orangefs_mount: mount request failed with -4 [ 1592.036105][T18172] device syzkaller0 entered promiscuous mode [ 1596.207964][T18200] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3112'. [ 1607.870717][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.877505][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.086123][ T951] kernel write not supported for file /cpu/0/msr (pid: 951 comm: kworker/0:2) [ 1612.734841][T18356] dlm: no local IP address has been set [ 1612.740527][T18356] dlm: cannot start dlm midcomms -107 [ 1613.971526][T18355] orangefs_mount: mount request failed with -4 [ 1632.935095][T18546] SET target dimension over the limit! [ 1634.398720][T18564] Invalid option length (1048180) for dns_resolver key [ 1634.566633][T18571] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3196'. [ 1638.185235][ T4295] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1638.406548][T18611] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3204'. [ 1638.524254][ T4295] usb 7-1: Using ep0 maxpacket: 16 [ 1638.531163][ T4295] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.597917][ T4295] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1638.762989][ T4295] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1638.854444][ T4295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.954047][ T4295] usb 7-1: config 0 descriptor?? [ 1639.376472][ T4295] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1640.214295][T18632] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3210'. [ 1642.502667][ T4439] usb 7-1: USB disconnect, device number 19 [ 1643.401292][T18646] Can't find ip_set type hash:ip,ma [ 1646.529340][T18683] dlm: no local IP address has been set [ 1646.535542][T18683] dlm: cannot start dlm midcomms -107 [ 1646.959432][T18681] orangefs_mount: mount request failed with -4 [ 1648.614434][ T951] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1648.904301][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 1648.972803][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.032867][ T951] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1649.077431][ T951] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1649.113404][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.148338][ T951] usb 1-1: config 0 descriptor?? [ 1649.185224][ T951] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1650.832958][ T951] usb 1-1: USB disconnect, device number 5 [ 1652.632200][T18742] Can't find ip_set type hash:ip,mar [ 1654.671574][T18755] delete_channel: no stack [ 1657.612916][T18795] Can't find ip_set type hash:ip,mar [ 1657.874991][ T4439] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1658.865872][T18801] delete_channel: no stack [ 1661.823798][T18843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1662.474502][T18843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1662.483337][T18843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1662.494002][T18843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1662.503322][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1662.511128][T18843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1663.008713][T17047] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.040021][T17047] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1663.494930][T17047] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.540972][T17047] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1664.027095][T17047] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.064767][T17047] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1664.218115][T17047] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.253868][T17047] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1664.304515][ T126] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1664.416989][T18840] chnl_net:caif_netlink_parms(): no params data found [ 1664.624504][T18843] Bluetooth: hci4: command 0x0409 tx timeout [ 1664.718283][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 1664.976508][T18840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.628155][ T126] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.638600][ T126] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1665.652088][ T126] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1665.661657][ T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.664368][T18840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.678166][ T126] usb 9-1: config 0 descriptor?? [ 1665.691451][ T126] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1665.707117][T18840] device bridge_slave_0 entered promiscuous mode [ 1665.735986][T18840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.743360][T18840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.752270][T18840] device bridge_slave_1 entered promiscuous mode [ 1665.784495][T18840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.796753][T18840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.835189][T18840] team0: Port device team_slave_0 added [ 1665.845594][T18840] team0: Port device team_slave_1 added [ 1665.874732][T18840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.881816][T18840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.924053][T18840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.126490][T18840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.136718][T18840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.294228][T18840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.887051][T18843] Bluetooth: hci4: command 0x041b tx timeout [ 1666.887781][T18888] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3283'. [ 1666.976132][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3283'. [ 1667.103423][T18840] device hsr_slave_0 entered promiscuous mode [ 1667.115727][T18840] device hsr_slave_1 entered promiscuous mode [ 1667.128208][T18840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1667.136681][T18840] Cannot create hsr debugfs directory [ 1667.211036][ T951] usb 9-1: USB disconnect, device number 16 [ 1668.009894][ T951] libceph: connect (1)[c::]:6789 error -101 [ 1668.024914][ T951] libceph: mon0 (1)[c::]:6789 connect error [ 1668.336602][ T951] libceph: connect (1)[c::]:6789 error -101 [ 1668.699070][T18907] ceph: No mds server is up or the cluster is laggy [ 1668.789673][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.797461][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.928330][ T951] libceph: mon0 (1)[c::]:6789 connect error [ 1668.964220][T18843] Bluetooth: hci4: command 0x040f tx timeout [ 1671.024655][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 1672.150703][T18951] SET target dimension over the limit! [ 1675.767536][T18986] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3304'. [ 1677.038469][T17047] bond0: (slave wlan1): Releasing backup interface [ 1677.096739][T19005] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3310'. [ 1677.106410][T17047] device wlan1 left promiscuous mode [ 1677.653424][T18840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1677.678990][T18840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1678.374133][T15392] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1678.407869][T18840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1678.744229][T18840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1678.772704][T15392] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.796111][T15392] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1679.059878][T15392] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.071543][T15392] usb 9-1: Product: syz [ 1679.077800][T15392] usb 9-1: Manufacturer: syz [ 1679.133498][T15392] usb 9-1: SerialNumber: syz [ 1679.149741][T17047] device hsr_slave_0 left promiscuous mode [ 1679.168178][T15392] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1679.183215][T17047] device hsr_slave_1 left promiscuous mode [ 1679.191858][T17047] batman_adv: batadv0: Removing interface: macvtap0 [ 1679.224887][T17047] device veth1_macvtap left promiscuous mode [ 1679.231142][T17047] device veth1_vlan left promiscuous mode [ 1679.237212][T17047] device veth0_vlan left promiscuous mode [ 1679.387824][T15392] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1679.410918][T15392] usb 9-1: USB disconnect, device number 17 [ 1680.121168][T19035] syz.8.3319 (19035): drop_caches: 2 [ 1680.132168][T19035] syz.8.3319 (19035): drop_caches: 2 [ 1684.121890][T17047] bond0 (unregistering): Released all slaves [ 1684.709600][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1684.734745][T19027] netlink: 'syz.0.3315': attribute type 5 has an invalid length. [ 1684.742541][T19027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1685.047252][T19061] No such timeout policy "syz1" [ 1685.360145][T18840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.497063][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1685.514937][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1685.627268][T18840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.702561][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1685.723247][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1685.787701][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.795015][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.837575][T18840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1685.926528][T18840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1687.100961][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1687.113339][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1687.126774][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1687.162954][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.170163][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.284575][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1687.328438][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1687.359104][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1687.371059][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1687.380517][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1687.389971][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1687.398965][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1687.410652][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1687.422853][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1687.435050][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1687.443855][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1687.452207][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1690.488920][T16033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1690.496558][T16033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1690.523518][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1690.555071][T19118] netlink: 'syz.0.3340': attribute type 5 has an invalid length. [ 1690.562844][T19118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1690.591109][T18840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.896821][T19143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1692.922032][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1692.957629][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1692.966871][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 1692.966885][ T27] audit: type=1326 audit(1746076279.690:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1692.995557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1693.213294][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1693.264200][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1693.676201][ T27] audit: type=1326 audit(1746076279.690:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1693.967767][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1694.004961][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1694.129478][T18840] device veth0_vlan entered promiscuous mode [ 1694.149448][ T27] audit: type=1326 audit(1746076279.690:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46c978d2d0 code=0x7ffc0000 [ 1694.176483][T18840] device veth1_vlan entered promiscuous mode [ 1694.264583][ T27] audit: type=1326 audit(1746076279.690:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46c978d2d0 code=0x7ffc0000 [ 1694.822999][ T27] audit: type=1326 audit(1746076279.690:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1694.845430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.909610][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1694.936895][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1694.943813][ T27] audit: type=1326 audit(1746076279.690:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1694.996942][T18840] device veth0_macvtap entered promiscuous mode [ 1695.019108][ T27] audit: type=1326 audit(1746076279.690:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1695.030623][T18840] device veth1_macvtap entered promiscuous mode [ 1695.090660][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1695.109000][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1695.124498][ T27] audit: type=1326 audit(1746076279.710:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1695.142864][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.146862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.170103][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.191872][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.203062][ T27] audit: type=1326 audit(1746076279.710:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1695.208535][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.225477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.262464][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.293708][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.328961][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.355302][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.435977][T18840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.448125][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.458860][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.470685][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.483236][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.493670][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.510237][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.546886][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.606895][ T27] audit: type=1326 audit(1746076279.740:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f46c978e969 code=0x7ffc0000 [ 1695.757849][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.234306][ T4375] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1696.271205][T18840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.305242][T19163] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1696.325575][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1696.336680][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1696.355751][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1696.386296][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1696.534258][T18840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.543784][T18840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.545123][ T4375] usb 7-1: Using ep0 maxpacket: 8 [ 1696.553798][T18840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.567631][T18840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.586163][ T4375] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1696.637282][ T4375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.718088][ T4375] usb 7-1: Product: syz [ 1696.722847][ T4375] usb 7-1: Manufacturer: syz [ 1696.727744][ T4375] usb 7-1: SerialNumber: syz [ 1696.838655][ T4375] usb 7-1: config 0 descriptor?? [ 1696.965220][ T4375] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1697.042853][ T4375] usb 7-1: setting power ON [ 1697.197588][ T4375] dvb-usb: bulk message failed: -22 (2/0) [ 1697.208761][ T4375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1697.253597][ T4375] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1697.272433][ T4375] usb 7-1: media controller created [ 1697.345180][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1697.393653][ T4375] usb 7-1: selecting invalid altsetting 6 [ 1697.402772][ T4375] usb 7-1: digital interface selection failed (-22) [ 1697.410443][ T4375] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1697.433462][ T4375] usb 7-1: setting power OFF [ 1697.441948][ T4375] dvb-usb: bulk message failed: -22 (2/0) [ 1697.448706][ T4375] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1697.459385][ T4375] (NULL device *): no alternate interface [ 1697.493038][ T4375] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1697.542139][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 1697.653341][T15999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.693282][T15999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.747569][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1697.767795][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.804260][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.849371][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1698.712588][T19187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1698.899590][ T4296] usb 7-1: USB disconnect, device number 20 [ 1698.953194][T19217] dlm: no local IP address has been set [ 1698.959310][T19217] dlm: cannot start dlm midcomms -107 [ 1699.855515][T19216] orangefs_mount: mount request failed with -4 [ 1701.801265][T19239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1702.228709][T19239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1702.236382][T19239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1702.360608][T19246] netlink: 2052 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1702.384698][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1702.533020][T19252] dlm: no local IP address has been set [ 1702.538853][T19252] dlm: cannot start dlm midcomms -107 [ 1703.936751][T19251] orangefs_mount: mount request failed with -4 [ 1705.119494][T19273] dlm: no local IP address has been set [ 1705.125352][T19273] dlm: cannot start dlm midcomms -107 [ 1706.439826][T19271] orangefs_mount: mount request failed with -4 [ 1706.455575][T19267] udevd[19267]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1708.469397][T19313] dlm: no local IP address has been set [ 1708.475394][T19313] dlm: cannot start dlm midcomms -107 [ 1709.028058][T19312] orangefs_mount: mount request failed with -4 [ 1709.079510][T19309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1709.088536][T19309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1709.096175][T19309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1711.864765][T19333] delete_channel: no stack [ 1713.036535][T19353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1713.057981][T19353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1713.087045][T19353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1715.854273][ T8916] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1716.062510][ T8916] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1716.376280][ T8916] usb 7-1: config 179 has no interface number 0 [ 1716.405534][ T8916] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1716.468572][ T8916] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1717.364149][ T8916] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1717.395084][ T8916] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1717.414478][ T8916] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1717.444294][ T8916] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1717.464024][ T8916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.508073][T19373] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1717.517367][T19373] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1717.917433][ T9170] usb 7-1: USB disconnect, device number 21 [ 1717.917529][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1717.931845][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1717.941462][ C1] ================================================================== [ 1717.949554][ C1] BUG: KASAN: use-after-free in register_lock_class+0x7ce/0x860 [ 1717.957196][ C1] Read of size 1 at addr ffff88804cde8891 by task syz-executor/15583 [ 1717.965257][ C1] [ 1717.967589][ C1] CPU: 1 PID: 15583 Comm: syz-executor Not tainted 6.1.135-syzkaller #0 [ 1717.975916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1717.985983][ C1] Call Trace: [ 1717.989259][ C1] [ 1717.992109][ C1] dump_stack_lvl+0x168/0x22e [ 1717.996805][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1718.001830][ C1] ? show_regs_print_info+0x12/0x12 [ 1718.007037][ C1] ? load_image+0x3b0/0x3b0 [ 1718.011536][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1718.016916][ C1] ? __virt_addr_valid+0x188/0x540 [ 1718.022027][ C1] ? __virt_addr_valid+0x465/0x540 [ 1718.027145][ C1] ? register_lock_class+0x7ce/0x860 [ 1718.032433][ C1] print_report+0xa8/0x220 [ 1718.036857][ C1] kasan_report+0x10b/0x140 [ 1718.041372][ C1] ? register_lock_class+0x7ce/0x860 [ 1718.046660][ C1] register_lock_class+0x7ce/0x860 [ 1718.051787][ C1] ? is_dynamic_key+0x260/0x260 [ 1718.056639][ C1] ? __up_console_sem+0x12e/0x190 [ 1718.061680][ C1] ? console_lock+0x1c0/0x1c0 [ 1718.066365][ C1] __lock_acquire+0x160/0x7c50 [ 1718.071148][ C1] ? prb_read_valid+0x39/0x60 [ 1718.075828][ C1] ? mark_lock+0x94/0x320 [ 1718.080164][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1718.085194][ C1] ? __wake_up_klogd+0xd9/0x100 [ 1718.090052][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1718.095077][ C1] ? verify_lock_unused+0x140/0x140 [ 1718.100287][ C1] lock_acquire+0x1b4/0x490 [ 1718.104792][ C1] ? __wake_up+0xf4/0x190 [ 1718.109128][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1718.114519][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1718.119832][ C1] ? __wake_up+0xf4/0x190 [ 1718.124181][ C1] ? _raw_spin_lock+0x40/0x40 [ 1718.128882][ C1] ? kcov_remote_stop+0x6f/0x6e0 [ 1718.133815][ C1] __wake_up+0xf4/0x190 [ 1718.137981][ C1] ? __wake_up_bit+0x1e0/0x1e0 [ 1718.142749][ C1] __usb_hcd_giveback_urb+0x396/0x520 [ 1718.148120][ C1] dummy_timer+0x888/0x31b0 [ 1718.152633][ C1] ? mark_lock+0x94/0x320 [ 1718.156968][ C1] ? lock_chain_count+0x20/0x20 [ 1718.161817][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1718.167198][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1718.173092][ C1] ? dummy_free_streams+0x530/0x530 [ 1718.178295][ C1] __hrtimer_run_queues+0x522/0xc80 [ 1718.183489][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1718.189471][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1718.195452][ C1] ? dummy_free_streams+0x530/0x530 [ 1718.200671][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1718.205783][ C1] hrtimer_run_softirq+0x176/0x240 [ 1718.210895][ C1] handle_softirqs+0x2a1/0x920 [ 1718.215666][ C1] ? do_softirq+0x13b/0x200 [ 1718.220173][ C1] ? do_softirq+0x200/0x200 [ 1718.224705][ C1] do_softirq+0x13b/0x200 [ 1718.229037][ C1] [ 1718.231960][ C1] [ 1718.234884][ C1] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 1718.240260][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 1718.246242][ C1] ? do_ipv6_setsockopt+0x37c/0x3b20 [ 1718.251528][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1718.256841][ C1] ? do_ipv6_setsockopt+0x37c/0x3b20 [ 1718.262149][ C1] __local_bh_enable_ip+0x174/0x1b0 [ 1718.267375][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1718.272228][ C1] ? do_ipv6_setsockopt+0x37c/0x3b20 [ 1718.277515][ C1] do_ipv6_setsockopt+0x37c/0x3b20 [ 1718.282629][ C1] ? sk_dst_reset+0xa0/0xa0 [ 1718.287127][ C1] ? mark_lock+0x94/0x320 [ 1718.291460][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1718.296486][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1718.302121][ C1] ? __lock_acquire+0x12e5/0x7c50 [ 1718.307148][ C1] ? verify_lock_unused+0x140/0x140 [ 1718.312372][ C1] ? wp_page_reuse+0x374/0x670 [ 1718.317154][ C1] ? aa_label_sk_perm+0x3e7/0x500 [ 1718.322187][ C1] ? lruvec_init+0x240/0x240 [ 1718.326785][ C1] ? aa_sk_perm+0x920/0x920 [ 1718.331291][ C1] ? wp_page_reuse+0x374/0x670 [ 1718.336055][ C1] ? __might_sleep+0xd0/0xd0 [ 1718.340654][ C1] ? handle_mm_fault+0x1367/0x3e70 [ 1718.345763][ C1] ? aa_sk_perm+0x7e5/0x920 [ 1718.350293][ C1] ? aa_af_perm+0x2b0/0x2b0 [ 1718.354796][ C1] ? do_user_addr_fault+0x77d/0xb10 [ 1718.359994][ C1] ? aa_sock_opt_perm+0x74/0x100 [ 1718.364933][ C1] ipv6_setsockopt+0x55/0x190 [ 1718.369613][ C1] ? sock_common_recvmsg+0x1a0/0x1a0 [ 1718.374909][ C1] __sys_setsockopt+0x3d6/0x660 [ 1718.379779][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 1718.384543][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1718.390524][ C1] ? lock_chain_count+0x20/0x20 [ 1718.395379][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 1718.400404][ C1] do_syscall_64+0x4c/0xa0 [ 1718.404821][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1718.409520][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1718.414191][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.420086][ C1] RIP: 0033:0x7f0e99b9085a [ 1718.424513][ C1] Code: ff ff ff c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 1718.444128][ C1] RSP: 002b:00007ffec4dd9578 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1718.452676][ C1] RAX: ffffffffffffffda RBX: 00007ffec4dd9600 RCX: 00007f0e99b9085a [ 1718.460647][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1718.468647][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 1718.476650][ C1] R10: 00007f0e99d7ece0 R11: 0000000000000206 R12: 00007f0e99d7ec80 [ 1718.484628][ C1] R13: 00007ffec4dd959c R14: 0000000000000000 R15: 00007f0e99d80e40 [ 1718.492604][ C1] [ 1718.495618][ C1] [ 1718.497934][ C1] Allocated by task 8916: [ 1718.502248][ C1] kasan_set_track+0x4b/0x70 [ 1718.506849][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1718.511438][ C1] xpad_probe+0x41d/0x1d30 [ 1718.515849][ C1] usb_probe_interface+0x5a0/0xaf0 [ 1718.520960][ C1] really_probe+0x2aa/0xc70 [ 1718.525455][ C1] __driver_probe_device+0x18c/0x330 [ 1718.530741][ C1] driver_probe_device+0x4f/0x420 [ 1718.535788][ C1] __device_attach_driver+0x2c6/0x510 [ 1718.541153][ C1] bus_for_each_drv+0x175/0x200 [ 1718.546004][ C1] __device_attach+0x29b/0x460 [ 1718.550789][ C1] bus_probe_device+0xbc/0x1e0 [ 1718.555642][ C1] device_add+0xa00/0xfb0 [ 1718.559968][ C1] usb_set_configuration+0x1991/0x1fd0 [ 1718.565515][ C1] usb_generic_driver_probe+0x89/0x150 [ 1718.570971][ C1] usb_probe_device+0x139/0x270 [ 1718.575818][ C1] really_probe+0x2aa/0xc70 [ 1718.580316][ C1] __driver_probe_device+0x18c/0x330 [ 1718.585606][ C1] driver_probe_device+0x4f/0x420 [ 1718.590621][ C1] __device_attach_driver+0x2c6/0x510 [ 1718.595986][ C1] bus_for_each_drv+0x175/0x200 [ 1718.600839][ C1] __device_attach+0x29b/0x460 [ 1718.605605][ C1] bus_probe_device+0xbc/0x1e0 [ 1718.610365][ C1] device_add+0xa00/0xfb0 [ 1718.614690][ C1] usb_new_device+0xd4d/0x1620 [ 1718.619455][ C1] hub_event+0x2b02/0x5210 [ 1718.623875][ C1] process_one_work+0x898/0x1160 [ 1718.628818][ C1] worker_thread+0xaa2/0x1250 [ 1718.633533][ C1] kthread+0x29d/0x330 [ 1718.637611][ C1] ret_from_fork+0x1f/0x30 [ 1718.642028][ C1] [ 1718.644385][ C1] Freed by task 9170: [ 1718.648442][ C1] kasan_set_track+0x4b/0x70 [ 1718.653032][ C1] kasan_save_free_info+0x2d/0x50 [ 1718.658059][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1718.663187][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 1718.668660][ C1] __kmem_cache_free+0xb6/0x1f0 [ 1718.673512][ C1] xpad_disconnect+0x34c/0x470 [ 1718.678279][ C1] usb_unbind_interface+0x1ee/0x860 [ 1718.683475][ C1] device_release_driver_internal+0x522/0x850 [ 1718.689546][ C1] bus_remove_device+0x2e2/0x400 [ 1718.694488][ C1] device_del+0x628/0xa70 [ 1718.698816][ C1] usb_disable_device+0x3e2/0x890 [ 1718.703876][ C1] usb_disconnect+0x348/0x8a0 [ 1718.708564][ C1] hub_event+0x1d20/0x5210 [ 1718.713063][ C1] process_one_work+0x898/0x1160 [ 1718.718014][ C1] worker_thread+0xaa2/0x1250 [ 1718.722683][ C1] kthread+0x29d/0x330 [ 1718.726761][ C1] ret_from_fork+0x1f/0x30 [ 1718.731177][ C1] [ 1718.733490][ C1] Last potentially related work creation: [ 1718.739195][ C1] kasan_save_stack+0x3a/0x60 [ 1718.743873][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1718.749241][ C1] kvfree_call_rcu+0x108/0x870 [ 1718.754004][ C1] neigh_flush_dev+0x177/0xa80 [ 1718.758762][ C1] __neigh_ifdown+0x39/0x3f0 [ 1718.763348][ C1] neigh_ifdown+0x1b/0x30 [ 1718.767674][ C1] rt6_disable_ip+0x78e/0x7f0 [ 1718.772350][ C1] addrconf_ifdown+0x162/0x1a10 [ 1718.777193][ C1] addrconf_notify+0x405/0xf40 [ 1718.781950][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1718.787321][ C1] dev_close_many+0x28d/0x400 [ 1718.792000][ C1] unregister_netdevice_many+0x471/0x1840 [ 1718.797719][ C1] default_device_exit_batch+0x9c3/0xa50 [ 1718.803350][ C1] cleanup_net+0x77b/0xb80 [ 1718.807767][ C1] process_one_work+0x898/0x1160 [ 1718.812705][ C1] worker_thread+0xaa2/0x1250 [ 1718.817388][ C1] kthread+0x29d/0x330 [ 1718.821487][ C1] ret_from_fork+0x1f/0x30 [ 1718.825908][ C1] [ 1718.828226][ C1] The buggy address belongs to the object at ffff88804cde8800 [ 1718.828226][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1718.842275][ C1] The buggy address is located 145 bytes inside of [ 1718.842275][ C1] 1024-byte region [ffff88804cde8800, ffff88804cde8c00) [ 1718.855632][ C1] [ 1718.857948][ C1] The buggy address belongs to the physical page: [ 1718.864371][ C1] page:ffffea0001337a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4cde8 [ 1718.874535][ C1] head:ffffea0001337a00 order:3 compound_mapcount:0 compound_pincount:0 [ 1718.882852][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1718.890840][ C1] raw: 00fff00000010200 ffffea0001fc2000 dead000000000003 ffff888017441dc0 [ 1718.899434][ C1] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1718.908006][ C1] page dumped because: kasan: bad access detected [ 1718.914418][ C1] page_owner tracks the page as allocated [ 1718.920122][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4300, tgid 4300 (kworker/u4:5), ts 401655674520, free_ts 400909859699 [ 1718.940953][ C1] post_alloc_hook+0x173/0x1a0 [ 1718.945724][ C1] get_page_from_freelist+0x1a26/0x1ac0 [ 1718.951273][ C1] __alloc_pages+0x1df/0x4e0 [ 1718.955864][ C1] alloc_slab_page+0x5d/0x160 [ 1718.960540][ C1] new_slab+0x87/0x2c0 [ 1718.964605][ C1] ___slab_alloc+0xbc6/0x1220 [ 1718.969275][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 1718.974734][ C1] __kmalloc+0xa0/0x240 [ 1718.978884][ C1] ieee802_11_parse_elems_full+0xb2/0x1230 [ 1718.984697][ C1] ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 1718.990789][ C1] ieee80211_iface_work+0x726/0xc80 [ 1718.996009][ C1] process_one_work+0x898/0x1160 [ 1719.000944][ C1] worker_thread+0xaa2/0x1250 [ 1719.005631][ C1] kthread+0x29d/0x330 [ 1719.009731][ C1] ret_from_fork+0x1f/0x30 [ 1719.014153][ C1] page last free stack trace: [ 1719.018815][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 1719.024281][ C1] free_unref_page+0x2e/0x3f0 [ 1719.028973][ C1] __unfreeze_partials+0x1a5/0x200 [ 1719.034087][ C1] put_cpu_partial+0x17c/0x250 [ 1719.038858][ C1] qlist_free_all+0x76/0xe0 [ 1719.043354][ C1] kasan_quarantine_reduce+0x144/0x160 [ 1719.048837][ C1] __kasan_slab_alloc+0x1e/0x80 [ 1719.053694][ C1] slab_post_alloc_hook+0x4b/0x480 [ 1719.058802][ C1] kmem_cache_alloc+0x123/0x2f0 [ 1719.063666][ C1] security_inode_alloc+0x30/0x110 [ 1719.068778][ C1] inode_init_always+0x8f8/0xc90 [ 1719.073721][ C1] new_inode_pseudo+0x91/0x1c0 [ 1719.078485][ C1] __sock_create+0x129/0x940 [ 1719.083073][ C1] __sys_socketpair+0x1bd/0x540 [ 1719.087924][ C1] __x64_sys_socketpair+0x97/0xb0 [ 1719.092947][ C1] do_syscall_64+0x4c/0xa0 [ 1719.097366][ C1] [ 1719.099681][ C1] Memory state around the buggy address: [ 1719.105307][ C1] ffff88804cde8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1719.113359][ C1] ffff88804cde8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.121410][ C1] >ffff88804cde8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.129460][ C1] ^ [ 1719.134046][ C1] ffff88804cde8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.142106][ C1] ffff88804cde8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.150199][ C1] ================================================================== [ 1719.158268][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1719.165454][ C1] CPU: 1 PID: 15583 Comm: syz-executor Not tainted 6.1.135-syzkaller #0 [ 1719.173770][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1719.183822][ C1] Call Trace: [ 1719.187188][ C1] [ 1719.190032][ C1] dump_stack_lvl+0x168/0x22e [ 1719.194710][ C1] ? memcpy+0x3c/0x60 [ 1719.198775][ C1] ? show_regs_print_info+0x12/0x12 [ 1719.203968][ C1] ? load_image+0x3b0/0x3b0 [ 1719.208471][ C1] panic+0x2c9/0x710 [ 1719.212367][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1719.217396][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1719.221901][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1719.227795][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1719.232647][ C1] check_panic_on_warn+0x80/0xa0 [ 1719.237605][ C1] ? register_lock_class+0x7ce/0x860 [ 1719.242915][ C1] end_report+0x66/0x110 [ 1719.247163][ C1] kasan_report+0x118/0x140 [ 1719.251669][ C1] ? register_lock_class+0x7ce/0x860 [ 1719.256958][ C1] register_lock_class+0x7ce/0x860 [ 1719.262077][ C1] ? is_dynamic_key+0x260/0x260 [ 1719.266931][ C1] ? __up_console_sem+0x12e/0x190 [ 1719.271957][ C1] ? console_lock+0x1c0/0x1c0 [ 1719.276654][ C1] __lock_acquire+0x160/0x7c50 [ 1719.281423][ C1] ? prb_read_valid+0x39/0x60 [ 1719.286107][ C1] ? mark_lock+0x94/0x320 [ 1719.290440][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1719.295468][ C1] ? __wake_up_klogd+0xd9/0x100 [ 1719.300322][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1719.305382][ C1] ? verify_lock_unused+0x140/0x140 [ 1719.310603][ C1] lock_acquire+0x1b4/0x490 [ 1719.315106][ C1] ? __wake_up+0xf4/0x190 [ 1719.319435][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1719.324810][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1719.330025][ C1] ? __wake_up+0xf4/0x190 [ 1719.334365][ C1] ? _raw_spin_lock+0x40/0x40 [ 1719.339049][ C1] ? kcov_remote_stop+0x6f/0x6e0 [ 1719.343985][ C1] __wake_up+0xf4/0x190 [ 1719.348150][ C1] ? __wake_up_bit+0x1e0/0x1e0 [ 1719.352922][ C1] __usb_hcd_giveback_urb+0x396/0x520 [ 1719.358295][ C1] dummy_timer+0x888/0x31b0 [ 1719.362818][ C1] ? mark_lock+0x94/0x320 [ 1719.367165][ C1] ? lock_chain_count+0x20/0x20 [ 1719.372025][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1719.377533][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1719.383443][ C1] ? dummy_free_streams+0x530/0x530 [ 1719.388648][ C1] __hrtimer_run_queues+0x522/0xc80 [ 1719.393848][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1719.399827][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1719.405809][ C1] ? dummy_free_streams+0x530/0x530 [ 1719.411008][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1719.416121][ C1] hrtimer_run_softirq+0x176/0x240 [ 1719.421229][ C1] handle_softirqs+0x2a1/0x920 [ 1719.425997][ C1] ? do_softirq+0x13b/0x200 [ 1719.430506][ C1] ? do_softirq+0x200/0x200 [ 1719.435011][ C1] do_softirq+0x13b/0x200 [ 1719.439359][ C1] [ 1719.442281][ C1] [ 1719.445205][ C1] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 1719.450575][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 1719.456559][ C1] ? do_ipv6_setsockopt+0x37c/0x3b20 [ 1719.461861][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1719.467148][ C1] ? do_ipv6_setsockopt+0x37c/0x3b20 [ 1719.472433][ C1] __local_bh_enable_ip+0x174/0x1b0 [ 1719.477639][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1719.482492][ C1] ? do_ipv6_setsockopt+0x37c/0x3b20 [ 1719.487782][ C1] do_ipv6_setsockopt+0x37c/0x3b20 [ 1719.492933][ C1] ? sk_dst_reset+0xa0/0xa0 [ 1719.497431][ C1] ? mark_lock+0x94/0x320 [ 1719.501781][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1719.506808][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1719.512444][ C1] ? __lock_acquire+0x12e5/0x7c50 [ 1719.517470][ C1] ? verify_lock_unused+0x140/0x140 [ 1719.522676][ C1] ? wp_page_reuse+0x374/0x670 [ 1719.527435][ C1] ? aa_label_sk_perm+0x3e7/0x500 [ 1719.532461][ C1] ? lruvec_init+0x240/0x240 [ 1719.537052][ C1] ? aa_sk_perm+0x920/0x920 [ 1719.541555][ C1] ? wp_page_reuse+0x374/0x670 [ 1719.546316][ C1] ? __might_sleep+0xd0/0xd0 [ 1719.550911][ C1] ? handle_mm_fault+0x1367/0x3e70 [ 1719.556050][ C1] ? aa_sk_perm+0x7e5/0x920 [ 1719.560568][ C1] ? aa_af_perm+0x2b0/0x2b0 [ 1719.565069][ C1] ? do_user_addr_fault+0x77d/0xb10 [ 1719.570266][ C1] ? aa_sock_opt_perm+0x74/0x100 [ 1719.575199][ C1] ipv6_setsockopt+0x55/0x190 [ 1719.579876][ C1] ? sock_common_recvmsg+0x1a0/0x1a0 [ 1719.585178][ C1] __sys_setsockopt+0x3d6/0x660 [ 1719.590064][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 1719.594836][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1719.600820][ C1] ? lock_chain_count+0x20/0x20 [ 1719.605674][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 1719.610704][ C1] do_syscall_64+0x4c/0xa0 [ 1719.615118][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1719.619787][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1719.624458][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1719.630352][ C1] RIP: 0033:0x7f0e99b9085a [ 1719.634768][ C1] Code: ff ff ff c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 1719.654375][ C1] RSP: 002b:00007ffec4dd9578 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1719.662788][ C1] RAX: ffffffffffffffda RBX: 00007ffec4dd9600 RCX: 00007f0e99b9085a [ 1719.670754][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1719.678728][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 1719.686697][ C1] R10: 00007f0e99d7ece0 R11: 0000000000000206 R12: 00007f0e99d7ec80 [ 1719.694669][ C1] R13: 00007ffec4dd959c R14: 0000000000000000 R15: 00007f0e99d80e40 [ 1719.702646][ C1] [ 1719.705930][ C1] Kernel Offset: disabled [ 1719.710254][ C1] Rebooting in 86400 seconds..