last executing test programs: 6m3.880718999s ago: executing program 4 (id=519): socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 6m2.323759251s ago: executing program 4 (id=523): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) utimes(0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x6c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, 0x20) setns(0xffffffffffffffff, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffeffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x9, 0x8, 0x0, 0x1000000000000000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x957]}) socket$kcm(0x29, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x40, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x6044010}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 6m1.778262327s ago: executing program 4 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000006c0), &(0x7f0000000780)=0x36) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bd7381801238c09d0e7af45b6bd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001640)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400c094) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="01", 0x1}], 0x1, 0x0, 0x0, 0x20000840}], 0x1, 0x4000000) 5m58.810171703s ago: executing program 4 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m58.487547139s ago: executing program 4 (id=533): creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, 0x0, 0x0) 5m58.118400753s ago: executing program 4 (id=536): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m57.757645569s ago: executing program 32 (id=536): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m58.926291636s ago: executing program 0 (id=978): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xf84c, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m57.156465848s ago: executing program 0 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) r5 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000100)=""/202) sendfile(r3, r4, 0x0, 0x8000fb00) 2m54.965982367s ago: executing program 0 (id=985): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x22020400) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r1, 0xffffff7f00000000, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000001200)={0x0, 0x48574653}) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000000b00)=ANY=[@ANYBLOB="040e00082f04"], 0x7) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 2m49.158192344s ago: executing program 0 (id=994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) 2m46.641683093s ago: executing program 0 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x27aa, 0x837a, 0x18, &(0x7f00000002c0)={[0x4]}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f00000002c0)}) 2m44.354632983s ago: executing program 0 (id=1002): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x6}}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x9a39, 0x80001) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000005c0)=""/22) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 2m27.868814896s ago: executing program 33 (id=1002): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x6}}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x9a39, 0x80001) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000005c0)=""/22) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 13.410776823s ago: executing program 2 (id=1333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r6, &(0x7f00000bd000), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 13.315171626s ago: executing program 3 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) iopl(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = getpid() r4 = socket(0x10, 0x2, 0x0) sendto$inet6(r4, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x404800, 0x0) 11.116836162s ago: executing program 3 (id=1341): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.00811487s ago: executing program 2 (id=1342): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000003c0)={0x23, 0x3, 0x18, 0x4, 0x0, 0x8000, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x101, 'syz0\x00', 0x9}) syz_io_uring_submit(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 10.738210096s ago: executing program 3 (id=1344): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x8907, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYRES16=r1], 0x1000f) 9.986435479s ago: executing program 2 (id=1348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000140), 0x800) setsockopt$inet6_int(r3, 0x29, 0xce, &(0x7f0000000280)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(0x3) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 9.222715589s ago: executing program 1 (id=1349): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.219369003s ago: executing program 5 (id=1350): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x149a82, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000200)=ANY=[], 0xfffffdef) write$binfmt_script(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x80a3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 9.113110903s ago: executing program 3 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x49c781}) io_uring_enter(r4, 0x3516, 0x4, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}}, 0x0) 9.083053508s ago: executing program 6 (id=1352): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) msgget(0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x2005, 0x2000000}, 0x0) 8.910152012s ago: executing program 5 (id=1353): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), 0x0, 0xff27, 0x0) 7.792645457s ago: executing program 3 (id=1354): r0 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) getpeername$packet(r0, 0x0, 0x0) 7.090175074s ago: executing program 2 (id=1355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r1, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 7.06406089s ago: executing program 6 (id=1356): fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) memfd_secret(0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.06325521s ago: executing program 1 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x29, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x62825402}}, 0x7fff, 0x8001}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2a000200010078", 0x7) socket$nl_route(0x10, 0x3, 0x0) 6.934275487s ago: executing program 5 (id=1358): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x800}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x3a, 0x0, r0, 0x0, 0x0, 0x0, 0x4000040}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.65642392s ago: executing program 5 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x10) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) 6.631477963s ago: executing program 6 (id=1360): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(r0, &(0x7f0000000000)='net/protocols\x00') pread64(r4, &(0x7f00000001c0)=""/145, 0x91, 0xffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x800004, &(0x7f0000000380)={'trans=virtio,', {[{@cache_loose}, {@debug={'debug', 0x3d, 0xa}}, {@access_user}, {@cache_none}, {@access_any}, {@directio}, {@version_9p2000}], [{@uid_lt}, {@subj_user={'subj_user', 0x3d, 'workdir'}}, {@hash}, {@obj_type={'obj_type', 0x3d, ']\''}}, {@context={'context', 0x3d, 'user_u'}}]}}) 6.418366396s ago: executing program 3 (id=1361): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 5.844584339s ago: executing program 2 (id=1362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x8, 0x290}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x0, 0x4d, 0x0, 0x20000, 0x33d, 0x0, @void, @value}, 0x28) 5.592958902s ago: executing program 1 (id=1363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 3.609891208s ago: executing program 6 (id=1364): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x282000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3.609205626s ago: executing program 2 (id=1365): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) 2.183579289s ago: executing program 1 (id=1366): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.144371339s ago: executing program 6 (id=1367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.910700735s ago: executing program 1 (id=1368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 1.842249027s ago: executing program 5 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 499.407649ms ago: executing program 5 (id=1370): fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 44.409144ms ago: executing program 1 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x1000000000000}, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048800}, 0x8000) 0s ago: executing program 6 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x2, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) kernel console output (not intermixed with test programs): atadv_slave_0 [ 77.186361][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.215025][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.227854][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.234822][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.260923][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.274160][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.294434][ T5830] team0: Port device team_slave_1 added [ 77.318482][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.325594][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.351621][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.379980][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.412711][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.420039][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.446073][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.474529][ T5820] hsr_slave_0: entered promiscuous mode [ 77.483285][ T5820] hsr_slave_1: entered promiscuous mode [ 77.491472][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.498534][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.525842][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.538248][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.545243][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.571237][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.591708][ T5829] hsr_slave_0: entered promiscuous mode [ 77.598320][ T5829] hsr_slave_1: entered promiscuous mode [ 77.604220][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.612002][ T5829] Cannot create hsr debugfs directory [ 77.621227][ T5828] team0: Port device team_slave_0 added [ 77.629185][ T5828] team0: Port device team_slave_1 added [ 77.670575][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.677811][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.703843][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.742797][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.749946][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.776455][ T5824] Bluetooth: hci2: command tx timeout [ 77.776761][ T5824] Bluetooth: hci0: command tx timeout [ 77.781970][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.793879][ T5833] Bluetooth: hci1: command tx timeout [ 77.813000][ T5830] hsr_slave_0: entered promiscuous mode [ 77.819691][ T5830] hsr_slave_1: entered promiscuous mode [ 77.825968][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.833559][ T5830] Cannot create hsr debugfs directory [ 77.835857][ T5833] Bluetooth: hci3: command tx timeout [ 77.839287][ T5824] Bluetooth: hci4: command tx timeout [ 77.900841][ T5822] hsr_slave_0: entered promiscuous mode [ 77.907420][ T5822] hsr_slave_1: entered promiscuous mode [ 77.913298][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.921434][ T5822] Cannot create hsr debugfs directory [ 77.960478][ T5828] hsr_slave_0: entered promiscuous mode [ 77.966891][ T5828] hsr_slave_1: entered promiscuous mode [ 77.972847][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.980558][ T5828] Cannot create hsr debugfs directory [ 78.280458][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.300961][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.314625][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.332075][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.351852][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.378584][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.398670][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.409212][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.439632][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.449324][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.459250][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.474769][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.543465][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.554505][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.577330][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.588777][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.634549][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.655159][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.679352][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.690979][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.700677][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.743574][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.773200][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.780418][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.791615][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.798727][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.879252][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.913284][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.943264][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.984739][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.992060][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.018919][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.031046][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.044891][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.052019][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.068840][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.107949][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.115049][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.129955][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.137107][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.157925][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.178169][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.203113][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.210227][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.229483][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.249734][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.256843][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.274471][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.302989][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.310126][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.329439][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.336558][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.360014][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.503073][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.582863][ T5820] veth0_vlan: entered promiscuous mode [ 79.592965][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.609378][ T5820] veth1_vlan: entered promiscuous mode [ 79.711027][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.731745][ T5820] veth0_macvtap: entered promiscuous mode [ 79.761697][ T5829] veth0_vlan: entered promiscuous mode [ 79.791267][ T5820] veth1_macvtap: entered promiscuous mode [ 79.827332][ T5829] veth1_vlan: entered promiscuous mode [ 79.845544][ T5824] Bluetooth: hci2: command tx timeout [ 79.845567][ T5833] Bluetooth: hci1: command tx timeout [ 79.845602][ T5833] Bluetooth: hci0: command tx timeout [ 79.897954][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.916634][ T5833] Bluetooth: hci4: command tx timeout [ 79.916668][ T53] Bluetooth: hci3: command tx timeout [ 79.948148][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.957132][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.974931][ T5829] veth0_macvtap: entered promiscuous mode [ 80.004540][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.023626][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.034490][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.046499][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.055901][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.068966][ T5829] veth1_macvtap: entered promiscuous mode [ 80.130742][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.144122][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.157319][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.198938][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.213277][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.229356][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.241470][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.250635][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.259466][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.268514][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.292837][ T5828] veth0_vlan: entered promiscuous mode [ 80.302874][ T5822] veth0_vlan: entered promiscuous mode [ 80.325606][ T5828] veth1_vlan: entered promiscuous mode [ 80.356744][ T5822] veth1_vlan: entered promiscuous mode [ 80.375853][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.400047][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.446584][ T5822] veth0_macvtap: entered promiscuous mode [ 80.467311][ T5830] veth0_vlan: entered promiscuous mode [ 80.473972][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.486185][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.494356][ T5822] veth1_macvtap: entered promiscuous mode [ 80.524158][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.524719][ T5828] veth0_macvtap: entered promiscuous mode [ 80.538099][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.561742][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.580823][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.591013][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.601660][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.612925][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.623649][ T5830] veth1_vlan: entered promiscuous mode [ 80.635130][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.656346][ T5828] veth1_macvtap: entered promiscuous mode [ 80.673372][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.692560][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.703861][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.745277][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.763545][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.793117][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.797079][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.814778][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.826482][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.830440][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.838652][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.854550][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.865444][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.879387][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.890183][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.899784][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.908663][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.918304][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.936505][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.947939][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.958538][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.969084][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.979544][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.990100][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.000885][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.008795][ T5875] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.058401][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.071643][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.081636][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.090621][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.106667][ T5830] veth0_macvtap: entered promiscuous mode [ 81.117680][ T5830] veth1_macvtap: entered promiscuous mode [ 81.185438][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 81.207234][ T5875] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.219537][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.231070][ T5875] usb 2-1: config 0 has no interface number 0 [ 81.237735][ T5875] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.249194][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.259448][ T5875] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.269432][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.282776][ T5875] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 81.292103][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.302190][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.302336][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.313590][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.335976][ T5875] usb 2-1: config 0 descriptor?? [ 81.336287][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.354135][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.373122][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.388971][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.399696][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.415867][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.423879][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.444149][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.468721][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.485914][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.504288][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.514890][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.535390][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.552408][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.594863][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.622414][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.647168][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.672949][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.750660][ T5875] ft260 0003:0403:6030.0001: item fetching failed at offset 0/2 [ 81.768228][ T5875] ft260 0003:0403:6030.0001: failed to parse HID [ 81.774814][ T5875] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -22 [ 81.785001][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.793227][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.916527][ T53] Bluetooth: hci0: command tx timeout [ 81.916552][ T5833] Bluetooth: hci2: command tx timeout [ 81.922255][ T5824] Bluetooth: hci1: command tx timeout [ 81.959700][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.975552][ T5907] overlayfs: failed to resolve './file1': -2 [ 82.004325][ T53] Bluetooth: hci4: command tx timeout [ 82.011211][ T53] Bluetooth: hci3: command tx timeout [ 82.035486][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.089385][ T5874] usb 2-1: USB disconnect, device number 2 [ 82.142886][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.193755][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.297971][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.363664][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.418711][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.432684][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.441261][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.329839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.636954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.995357][ T53] Bluetooth: hci2: command tx timeout [ 84.005952][ T5824] Bluetooth: hci1: command tx timeout [ 84.011675][ T53] Bluetooth: hci0: command tx timeout [ 84.086207][ T53] Bluetooth: hci3: command tx timeout [ 84.091662][ T5824] Bluetooth: hci4: command tx timeout [ 84.110475][ T5936] process 'syz.3.4' launched '/dev/fd/3' with NULL argv: empty string added [ 84.763244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.763426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.806010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.851081][ T5947] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.074482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.437726][ T5944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.275761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.672341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.028714][ T8] cfg80211: failed to load regulatory.db [ 87.835361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.844474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.028601][ T29] audit: type=1326 audit(1740157013.188:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x0 [ 94.452837][ T6018] evm: overlay not supported [ 94.809108][ T6025] mmap: syz.2.33 (6025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.915490][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.832542][ T6059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 101.002975][ T6079] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.859969][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 101.875328][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 101.908759][ T6084] tipc: Started in network mode [ 101.914367][ T6084] tipc: Node identity 7, cluster identity 5 [ 101.945028][ T6084] tipc: Node number set to 7 [ 103.621950][ T6114] loop7: detected capacity change from 0 to 16384 [ 104.049895][ T6117] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 104.110140][ T6114] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.110195][ T6114] Buffer I/O error on dev loop7, logical block 1, async page read [ 104.113246][ T6117] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 104.114551][ T6114] Dev loop7: unable to read RDB block 8 [ 104.117018][ T6114] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.117046][ T6114] Buffer I/O error on dev loop7, logical block 3, async page read [ 104.117119][ T6114] loop7: unable to read partition table [ 104.117267][ T6114] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 104.617117][ T6114] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 104.617162][ T6114] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 104.617245][ T6114] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 104.617278][ T6114] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 104.617309][ T6114] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 104.617340][ T6114] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 104.617371][ T6114] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 104.617403][ T6114] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 107.129037][ T6137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.192807][ T6138] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.187146][ T5824] Bluetooth: hci2: command 0x0405 tx timeout [ 108.971502][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.014966][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.068743][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.102285][ T6161] capability: warning: `syz.2.73' uses 32-bit capabilities (legacy support in use) [ 109.370914][ T6156] nbd0: detected capacity change from 0 to 256 [ 109.444195][ T53] block nbd0: Receive control failed (result -104) [ 112.334607][ T29] audit: type=1326 audit(1740157034.508:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 112.925949][ T29] audit: type=1326 audit(1740157034.508:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 113.795329][ T29] audit: type=1326 audit(1740157034.538:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c67f29299 code=0x7ffc0000 [ 113.826814][ T29] audit: type=1326 audit(1740157034.538:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 114.648596][ T29] audit: type=1326 audit(1740157034.538:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c67f29299 code=0x7ffc0000 [ 114.878049][ T29] audit: type=1326 audit(1740157034.538:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 115.015522][ T29] audit: type=1326 audit(1740157034.558:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c67f29299 code=0x7ffc0000 [ 115.077372][ T29] audit: type=1326 audit(1740157034.558:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 115.176479][ T29] audit: type=1326 audit(1740157034.558:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c67f29299 code=0x7ffc0000 [ 115.223759][ T29] audit: type=1326 audit(1740157034.558:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6189 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 115.255274][ T942] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.635543][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 115.756633][ T942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.870336][ T942] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.011859][ T942] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 116.035461][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.053720][ T942] usb 4-1: Product: syz [ 116.063873][ T942] usb 4-1: Manufacturer: syz [ 116.077258][ T942] usb 4-1: SerialNumber: syz [ 116.096156][ T942] usb 4-1: config 0 descriptor?? [ 116.145296][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.305920][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 116.331818][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 116.344805][ T2151] usb 4-1: USB disconnect, device number 2 [ 116.351373][ T8] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 116.565223][ T8] usb 1-1: Product: syz [ 116.569430][ T8] usb 1-1: Manufacturer: syz [ 116.574055][ T8] usb 1-1: SerialNumber: syz [ 116.602600][ T8] usb 1-1: config 0 descriptor?? [ 117.572409][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 117.590930][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 118.272276][ T942] usb 1-1: USB disconnect, device number 2 [ 122.175434][ T942] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.089368][ T6280] netlink: 52 bytes leftover after parsing attributes in process `syz.0.109'. [ 123.100905][ T6280] netlink: 52 bytes leftover after parsing attributes in process `syz.0.109'. [ 123.102527][ T942] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.145431][ T942] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.217764][ T942] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.259190][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.291754][ T6272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.776064][ T942] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.393665][ T6301] openvswitch: netlink: IPv4 tunnel dst address is zero [ 125.285317][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.510565][ T5875] usb 2-1: USB disconnect, device number 3 [ 125.535260][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 126.391153][ T5908] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 126.442133][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.498353][ T5908] usb 4-1: Product: syz [ 126.502789][ T5908] usb 4-1: Manufacturer: syz [ 126.507582][ T5908] usb 4-1: SerialNumber: syz [ 126.530539][ T5908] usb 4-1: config 0 descriptor?? [ 126.544837][ T5908] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 126.800732][ T6308] block device autoloading is deprecated and will be removed. [ 127.272746][ T5875] usb 4-1: USB disconnect, device number 3 [ 128.476971][ T6317] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.736017][ T5875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.807829][ T6378] xt_NFQUEUE: number of total queues is 0 [ 133.050692][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.057310][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 133.068977][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106027][ T5875] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 133.137936][ T5875] usb 1-1: config 0 has no interface number 1 [ 133.246266][ T5875] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 133.315385][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.323408][ T5875] usb 1-1: Product: syz [ 133.356003][ T5875] usb 1-1: Manufacturer: syz [ 133.360650][ T5875] usb 1-1: SerialNumber: syz [ 133.413200][ T5875] usb 1-1: config 0 descriptor?? [ 133.531775][ T6383] syzkaller0: entered allmulticast mode [ 133.541736][ T5875] viperboard 1-1:0.61: version 0.00 found at bus 001 address 003 [ 133.584069][ T6383] syzkaller0 (unregistering): left allmulticast mode [ 133.606950][ T5875] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 133.643444][ T5875] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 133.655648][ T5908] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 133.686723][ T5875] viperboard 1-1:0.0: version 0.00 found at bus 001 address 003 [ 133.707316][ T5875] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 133.723658][ T5875] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 133.756871][ T5875] usb 1-1: USB disconnect, device number 3 [ 133.823694][ T5908] usb 4-1: device descriptor read/64, error -71 [ 134.095447][ T5908] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 134.386977][ T5908] usb 4-1: device descriptor read/64, error -71 [ 134.507350][ T5908] usb usb4-port1: attempt power cycle [ 134.870516][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.945551][ T5908] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 135.032174][ T5908] usb 4-1: device descriptor read/8, error -71 [ 135.157152][ T8] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 135.168809][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.193898][ T8] usb 1-1: config 0 has no interface number 0 [ 135.213758][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 135.261757][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.271706][ T8] usb 1-1: Product: syz [ 135.276407][ T8] usb 1-1: Manufacturer: syz [ 135.281111][ T8] usb 1-1: SerialNumber: syz [ 135.334146][ T8] usb 1-1: config 0 descriptor?? [ 135.477159][ T6415] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 135.515434][ T5908] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 135.560161][ T5908] usb 4-1: device descriptor read/8, error -71 [ 135.697530][ T5908] usb usb4-port1: unable to enumerate USB device [ 136.525624][ T8] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 136.532118][ T8] usb 1-1: No valid video chain found. [ 136.547048][ T8] usb 1-1: USB disconnect, device number 4 [ 136.726021][ T6432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.154'. [ 136.737611][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 136.748607][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 140.615945][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 30 seconds [ 145.893341][ T6499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 145.928776][ T6503] kvm: apic: phys broadcast and lowest prio [ 146.138162][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 146.644724][ T6530] dlm: no local IP address has been set [ 146.651373][ T6530] dlm: cannot start dlm midcomms -107 [ 152.493992][ T6580] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 156.274723][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 157.230751][ T6615] netlink: 'syz.2.206': attribute type 5 has an invalid length. [ 159.483398][ T6638] ISOFS: Unable to identify CD-ROM format. [ 159.675420][ T81] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.855283][ T81] usb 3-1: Using ep0 maxpacket: 16 [ 159.867003][ T81] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.897895][ T81] usb 3-1: config 0 has no interface number 0 [ 159.904083][ T81] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.952396][ T81] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.015404][ T81] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.024480][ T81] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 160.068767][ T81] usb 3-1: Product: syz [ 160.073261][ T81] usb 3-1: SerialNumber: syz [ 160.220141][ T81] usb 3-1: config 0 descriptor?? [ 160.275599][ T81] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 160.336350][ T81] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 160.614018][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 162.180878][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.189176][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.196353][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.203501][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.210711][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.217851][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.224990][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.232146][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.239442][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.246723][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.262081][ T8] usb 3-1: USB disconnect, device number 2 [ 162.267995][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 163.614584][ T8] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 164.021277][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.226'. [ 166.215530][ T6702] xt_cluster: node mask cannot exceed total number of nodes [ 167.564630][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.238'. [ 168.777507][ T6733] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.796894][ T6737] netlink: del zone limit has 8 unknown bytes [ 170.915746][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 60 seconds [ 171.437515][ T5824] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 171.457789][ T5824] Bluetooth: hci0: Injecting HCI hardware error event [ 171.468664][ T5824] Bluetooth: hci0: hardware error 0x00 [ 174.422237][ T5824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 175.035384][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 175.044579][ T5824] Bluetooth: hci3: Injecting HCI hardware error event [ 175.053167][ T5824] Bluetooth: hci3: hardware error 0x00 [ 176.073541][ T6816] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 176.471282][ T8] kernel write not supported for file /192/clear_refs (pid: 8 comm: kworker/0:0) [ 177.162456][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 177.406079][ T6826] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 178.906353][ T6849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.913914][ T6849] IPv6: NLM_F_CREATE should be set when creating new route [ 179.091692][ T6853] lo: entered allmulticast mode [ 179.750010][ T6853] tunl0: entered allmulticast mode [ 180.818338][ T6853] gre0: entered allmulticast mode [ 180.947154][ T6853] gretap0: entered allmulticast mode [ 181.269274][ T6853] erspan0: entered allmulticast mode [ 181.287528][ T6853] ip_vti0: entered allmulticast mode [ 182.061694][ T6853] ip6_vti0: entered allmulticast mode [ 182.117902][ T6853] sit0: entered allmulticast mode [ 182.171332][ T6853] ip6tnl0: entered allmulticast mode [ 182.181010][ T6853] ip6gre0: entered allmulticast mode [ 183.632082][ T6853] syz_tun: entered allmulticast mode [ 183.653863][ T6853] ip6gretap0: entered allmulticast mode [ 183.740796][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.749846][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.777276][ T6853] bridge0: entered allmulticast mode [ 183.789311][ T6853] vcan0: entered allmulticast mode [ 183.798233][ T6853] bond0: entered allmulticast mode [ 183.803479][ T6853] bond_slave_0: entered allmulticast mode [ 183.814533][ T6853] bond_slave_1: entered allmulticast mode [ 183.846277][ T6853] team0: entered allmulticast mode [ 183.851449][ T6853] team_slave_0: entered allmulticast mode [ 183.867505][ T6853] team_slave_1: entered allmulticast mode [ 184.219226][ T6853] dummy0: entered allmulticast mode [ 184.248482][ T6853] nlmon0: entered allmulticast mode [ 184.267092][ T6853] caif0: entered allmulticast mode [ 184.360349][ T6853] batadv0: entered allmulticast mode [ 184.465482][ T6853] vxcan0: entered allmulticast mode [ 184.476367][ T6853] vxcan1: entered allmulticast mode [ 184.486455][ T6853] veth0: entered allmulticast mode [ 184.523802][ T6853] veth1: entered allmulticast mode [ 184.574500][ T6853] wg0: entered allmulticast mode [ 184.602243][ T6853] wg1: entered allmulticast mode [ 184.624328][ T6853] wg2: entered allmulticast mode [ 184.633677][ T6853] veth0_to_bridge: entered allmulticast mode [ 184.644228][ T6853] veth1_to_bridge: entered allmulticast mode [ 184.656129][ T6853] veth0_to_bond: entered allmulticast mode [ 184.671664][ T6853] veth1_to_bond: entered allmulticast mode [ 184.681402][ T6853] veth0_to_team: entered allmulticast mode [ 184.692457][ T6853] veth1_to_team: entered allmulticast mode [ 184.703169][ T6853] veth0_to_batadv: entered allmulticast mode [ 184.722932][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.746542][ T6853] batadv_slave_0: entered allmulticast mode [ 184.767904][ T6853] veth1_to_batadv: entered allmulticast mode [ 184.793710][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.801846][ T6853] batadv_slave_1: entered allmulticast mode [ 184.817407][ T6853] xfrm0: entered allmulticast mode [ 184.824602][ T6853] veth0_to_hsr: entered allmulticast mode [ 184.838011][ T6853] hsr_slave_0: entered allmulticast mode [ 184.850886][ T6853] veth1_to_hsr: entered allmulticast mode [ 184.860210][ T6853] hsr_slave_1: entered allmulticast mode [ 184.872883][ T6853] hsr0: entered allmulticast mode [ 184.883808][ T6853] veth1_virt_wifi: entered allmulticast mode [ 184.901737][ T6853] veth0_virt_wifi: entered allmulticast mode [ 184.913986][ T6853] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 184.927589][ T6853] veth1_vlan: entered allmulticast mode [ 184.935879][ T6853] veth0_vlan: entered allmulticast mode [ 184.956317][ T6853] vlan0: entered allmulticast mode [ 184.961552][ T6853] vlan1: entered allmulticast mode [ 185.000527][ T6853] macvlan0: entered allmulticast mode [ 185.017415][ T6853] macvlan1: entered allmulticast mode [ 185.024617][ T6853] ipvlan0: entered allmulticast mode [ 185.032117][ T6853] ipvlan1: entered allmulticast mode [ 185.044308][ T6853] veth1_macvtap: entered allmulticast mode [ 185.053319][ T6853] veth0_macvtap: entered allmulticast mode [ 185.062001][ T6853] macvtap0: entered allmulticast mode [ 185.070206][ T6853] macsec0: entered allmulticast mode [ 185.079008][ T6853] geneve0: entered allmulticast mode [ 185.088030][ T6853] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.097322][ T6853] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.215457][ T6853] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.267574][ T6853] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.314688][ T6853] geneve1: entered allmulticast mode [ 185.388965][ T6853] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 185.454867][ T6853] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 185.567213][ T6853] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 185.695879][ T6853] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 185.735800][ T6853] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 185.761476][ T6853] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 185.770167][ T6853] syztnl2: entered allmulticast mode [ 185.779037][ T6853] syztnl1: entered allmulticast mode [ 188.541177][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 189.170536][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 189.170556][ T29] audit: type=1800 audit(1740157111.348:31): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.312" name="SYSV798dd818" dev="tmpfs" ino=0 res=0 errno=0 [ 189.180153][ T6950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.216844][ T6959] Zero length message leads to an empty skb [ 189.312276][ T6956] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 189.974181][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 190.027411][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 190.045726][ T6968] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.052547][ T6968] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.111164][ T6968] hsr_slave_0: left promiscuous mode [ 190.143180][ T6968] hsr_slave_1: left promiscuous mode [ 190.264377][ T6978] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 190.517622][ T6989] overlayfs: failed to get inode (-116) [ 190.523982][ T6989] overlayfs: failed to get inode (-116) [ 190.544980][ T6993] bridge: RTM_NEWNEIGH with invalid ether address [ 190.629416][ T6996] overlayfs: failed to get inode (-116) [ 190.635652][ T6996] overlayfs: failed to get inode (-116) [ 191.003135][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 191.045539][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 191.060588][ T7005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.072816][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 191.098136][ T7011] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 192.355389][ T5824] Bluetooth: hci1: command tx timeout [ 194.502240][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514218][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.772886][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 199.389655][ T7082] Cannot find set identified by id 632 to match [ 201.533164][ T7104] rdma_op ffff88807dd641f0 conn xmit_rdma 0000000000000000 [ 201.675365][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 201.681536][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 201.688780][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 202.172249][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 90 seconds [ 202.500500][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 202.539367][ T7109] bridge0: entered promiscuous mode [ 202.752889][ T7109] bridge0: left promiscuous mode [ 204.985296][ T81] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.275481][ T81] usb 1-1: Using ep0 maxpacket: 32 [ 206.334116][ T81] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 206.355264][ T81] usb 1-1: config 0 has no interface number 0 [ 206.361445][ T81] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 206.417248][ T81] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 206.442274][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.473920][ T81] usb 1-1: Product: syz [ 206.489413][ T7145] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 206.489545][ T81] usb 1-1: Manufacturer: syz [ 206.545274][ T81] usb 1-1: SerialNumber: syz [ 206.560563][ T81] usb 1-1: config 0 descriptor?? [ 206.606698][ T7121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.627276][ T7145] syz.4.367: attempt to access beyond end of device [ 206.627276][ T7145] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 206.738765][ T7145] exFAT-fs (nbd4): unable to read boot sector [ 206.747325][ T7145] exFAT-fs (nbd4): failed to read boot sector [ 206.753562][ T7145] exFAT-fs (nbd4): failed to recognize exfat type [ 206.904892][ T7121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.112455][ T81] net1080 1-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 02:cf:a0:e9:f1:b9 [ 209.042377][ T8] usb 1-1: USB disconnect, device number 5 [ 209.050426][ T8] net1080 1-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 210.223529][ T7175] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 210.988376][ T7179] Cache volume key already in use (9p,(null),) [ 212.913655][ T7211] syz.1.384 (7211): /proc/7204/oom_adj is deprecated, please use /proc/7204/oom_score_adj instead. [ 213.015304][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 213.316527][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.265843][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.286164][ T5904] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.315254][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.330937][ T5904] usb 3-1: SerialNumber: syz [ 215.374775][ T5904] usb 3-1: 0:2 : does not exist [ 215.935076][ T5904] usb 3-1: USB disconnect, device number 3 [ 216.084828][ T7234] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 216.170630][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.051881][ T7261] syz.3.396 uses obsolete (PF_INET,SOCK_PACKET) [ 220.588216][ T7284] netlink: 'syz.0.401': attribute type 39 has an invalid length. [ 221.813340][ T7297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.406'. [ 222.783786][ T29] audit: type=1326 audit(1740157144.948:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7308 comm="syz.3.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc60678d0a9 code=0x0 [ 223.928909][ T7316] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 223.956571][ T7316] CIFS: Unable to determine destination address [ 225.035303][ T5908] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 225.261059][ T5908] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 225.290580][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.301346][ T5908] usb 1-1: Product: syz [ 225.308583][ T5908] usb 1-1: Manufacturer: syz [ 225.313665][ T5908] usb 1-1: SerialNumber: syz [ 225.411153][ T7332] sd 0:0:1:0: device reset [ 225.841256][ T5908] usb 1-1: config 0 descriptor?? [ 225.861071][ T5908] ch341 1-1:0.0: ch341-uart converter detected [ 226.843955][ T942] Process accounting resumed [ 227.300884][ T5908] ch341-uart ttyUSB0: break control not supported, using simulated break [ 227.355847][ T5908] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 227.386485][ T5908] usb 1-1: USB disconnect, device number 6 [ 227.472880][ T5908] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 227.485033][ T5908] ch341 1-1:0.0: device disconnected [ 231.108783][ T29] audit: type=1326 audit(1740157153.288:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.3.434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc60678d0a9 code=0x0 [ 232.615243][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 120 seconds [ 232.747115][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 234.875554][ T5904] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.044628][ T5904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.800818][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.885282][ T5904] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.935825][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.439958][ T5904] usb 4-1: SerialNumber: syz [ 236.754402][ T5904] usb 4-1: 0:2 : does not exist [ 237.780567][ T5904] usb 4-1: USB disconnect, device number 8 [ 238.006370][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.625638][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 243.215251][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 243.276192][ T29] audit: type=1326 audit(1740157165.458:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7500 comm="syz.2.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x0 [ 243.303748][ T7499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.383346][ T7505] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 243.556328][ T7499] bond1: (slave macvlan2): Error -95 calling set_mac_address [ 243.650405][ T7517] syz.4.466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 243.701343][ T7517] xt_TCPMSS: Only works on TCP SYN packets [ 244.554998][ T7527] xt_hashlimit: max too large, truncated to 1048576 [ 244.578564][ T7527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.592779][ T7528] lo: entered promiscuous mode [ 246.113603][ T7525] lo: left promiscuous mode [ 246.212558][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 246.340982][ T7540] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 246.439780][ T7540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.483909][ T29] audit: type=1326 audit(1740157168.658:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7546 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5b58d0a9 code=0x7ffc0000 [ 246.635318][ T29] audit: type=1326 audit(1740157168.688:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7546 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6c5b58d0a9 code=0x7ffc0000 [ 246.889742][ T29] audit: type=1326 audit(1740157168.688:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7546 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5b58d0a9 code=0x7ffc0000 [ 247.826465][ T29] audit: type=1326 audit(1740157169.988:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7559 comm="syz.0.480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x0 [ 248.028332][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.482'. [ 248.037382][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'. [ 248.046728][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.482'. [ 248.056435][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.482'. [ 248.356587][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 251.492678][ T7607] ip6t_REJECT: ECHOREPLY is not supported [ 252.586243][ T7615] xt_NFQUEUE: number of total queues is 0 [ 254.426627][ T7623] [U] [ 254.429479][ T7623] [U] [ 254.432194][ T7623] [U] [ 254.434889][ T7623] [U] [ 254.437576][ T7623] [U] [ 254.440283][ T7623] [U] [ 254.442988][ T7623] [U] [ 254.445674][ T7623] [U] [ 254.448829][ T7623] [U] [ 254.451521][ T7623] [U] [ 254.454202][ T7623] [U] [ 254.486011][ T7621] [U] [ 256.080115][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.087657][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.101220][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 256.565947][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 256.632809][ T5908] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.655410][ T5908] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.666469][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.673104][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 256.693221][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.729870][ T5908] usb 3-1: config 0 descriptor?? [ 258.159086][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 258.233994][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.373075][ T5908] usb 3-1: USB disconnect, device number 4 [ 259.710618][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 259.739718][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 261.041736][ T29] audit: type=1326 audit(1740157183.218:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.0.517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfaaf8d0a9 code=0x0 [ 261.731874][ T7691] ipvlan2: entered promiscuous mode [ 261.819779][ T7691] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 261.917779][ T7691] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.706342][ T29] audit: type=1326 audit(1740157184.888:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 262.728016][ T29] audit: type=1326 audit(1740157184.888:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 262.749345][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.844337][ T29] audit: type=1326 audit(1740157184.938:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 262.865802][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.917836][ T29] audit: type=1326 audit(1740157184.938:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 262.968793][ T29] audit: type=1326 audit(1740157184.938:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 262.998561][ T29] audit: type=1326 audit(1740157184.978:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 263.020246][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 150 seconds [ 263.042304][ T29] audit: type=1326 audit(1740157184.978:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 263.063657][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.075577][ T29] audit: type=1326 audit(1740157184.978:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 263.096907][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.103892][ T29] audit: type=1326 audit(1740157184.978:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7705 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6f42d8d0a9 code=0x7ffc0000 [ 264.565402][ T5861] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.725337][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 265.283051][ T5861] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.299221][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.312201][ T5861] usb 4-1: Product: syz [ 265.455235][ T5861] usb 4-1: Manufacturer: syz [ 265.459896][ T5861] usb 4-1: SerialNumber: syz [ 265.865957][ T5861] usb 4-1: config 0 descriptor?? [ 265.900000][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 266.062382][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 266.062400][ T29] audit: type=1800 audit(1740157188.238:78): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.531" name="bus" dev="overlay" ino=649 res=0 errno=0 [ 266.131862][ T5861] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 266.599402][ T6073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.814649][ T6073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.047133][ T6073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.218979][ T6073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.656263][ T5861] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 268.017397][ T5861] usb 4-1: USB disconnect, device number 9 [ 268.020860][ T6073] bridge_slave_1: left allmulticast mode [ 268.068164][ T6073] bridge_slave_1: left promiscuous mode [ 268.075078][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.150306][ T6073] bridge_slave_0: left allmulticast mode [ 268.162180][ T6073] bridge_slave_0: left promiscuous mode [ 268.356739][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.367292][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.374898][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.383265][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.390955][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.115430][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.131656][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.392122][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.519616][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 270.639446][ T5874] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 270.890150][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.986198][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.054821][ T5874] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.104771][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.145193][ T5874] usb 4-1: SerialNumber: syz [ 271.195605][ T5833] Bluetooth: hci4: command tx timeout [ 271.376289][ T5874] usb 4-1: 0:2 : does not exist [ 271.381269][ T5874] usb 4-1: unit 5: unexpected type 0x0d [ 271.421483][ T5874] usb 4-1: USB disconnect, device number 10 [ 271.615386][ T942] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.638592][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.878098][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.931308][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.963499][ T6073] bond0 (unregistering): Released all slaves [ 271.979788][ T942] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 272.061827][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.251472][ T942] usb 2-1: config 0 descriptor?? [ 272.831608][ T7788] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.550'. [ 273.275833][ T5833] Bluetooth: hci4: command tx timeout [ 274.108982][ T942] ath6kl: Failed to submit usb control message: -71 [ 274.115822][ T942] ath6kl: unable to send the bmi data to the device: -71 [ 274.122871][ T942] ath6kl: Unable to send get target info: -71 [ 274.130084][ T942] ath6kl: Failed to init ath6kl core: -71 [ 274.130270][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 274.146408][ T942] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 274.171266][ T942] usb 2-1: USB disconnect, device number 4 [ 274.380923][ T7813] set match dimension is over the limit! [ 275.426210][ T5833] Bluetooth: hci4: command tx timeout [ 275.768523][ T7825] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 275.897801][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.905847][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.931099][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.969042][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.095015][ T6073] veth1_macvtap: left promiscuous mode [ 276.101735][ T6073] veth0_macvtap: left promiscuous mode [ 276.107856][ T6073] veth1_vlan: left promiscuous mode [ 276.113588][ T6073] veth0_vlan: left promiscuous mode [ 277.525656][ T5833] Bluetooth: hci4: command tx timeout [ 277.670490][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 277.991209][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 279.429756][ T7873] team0: No ports can be present during mode change [ 279.953588][ T7874] bridge_slave_0: left allmulticast mode [ 279.962578][ T7874] bridge_slave_0: left promiscuous mode [ 279.974592][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.999839][ T7874] bridge_slave_1: left allmulticast mode [ 280.009006][ T7874] bridge_slave_1: left promiscuous mode [ 280.015069][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.033862][ T7874] bond0: (slave bond_slave_0): Releasing backup interface [ 280.116399][ T7874] bond0: (slave bond_slave_1): Releasing backup interface [ 280.215987][ T7874] team0: Port device team_slave_0 removed [ 280.269973][ T7874] team0: Port device team_slave_1 removed [ 280.292565][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.300159][ T7874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.312557][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.320956][ T7874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.345926][ T7874] bond1: (slave macvlan2): Releasing backup interface [ 280.386255][ T7874] bond2: (slave ip6gretap1): Releasing backup interface [ 280.687502][ T7761] chnl_net:caif_netlink_parms(): no params data found [ 280.732775][ T7899] overlayfs: missing 'workdir' [ 281.752541][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.806114][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.823196][ T7761] bridge_slave_0: entered allmulticast mode [ 281.843967][ T7761] bridge_slave_0: entered promiscuous mode [ 282.852732][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.909825][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.970326][ T7761] bridge_slave_1: entered allmulticast mode [ 283.297087][ T7761] bridge_slave_1: entered promiscuous mode [ 283.914068][ T7923] ======================================================= [ 283.914068][ T7923] WARNING: The mand mount option has been deprecated and [ 283.914068][ T7923] and is ignored by this kernel. Remove the mand [ 283.914068][ T7923] option from the mount to silence this warning. [ 283.914068][ T7923] ======================================================= [ 283.949144][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.980507][ T7923] Mount JFS Failure: -22 [ 284.372479][ T7761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.420632][ T7761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.413095][ T7761] team0: Port device team_slave_0 added [ 285.512645][ T7761] team0: Port device team_slave_1 added [ 285.545604][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 285.570285][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 285.803415][ T7934] bridge0: entered promiscuous mode [ 285.845028][ T7934] erspan0: entered promiscuous mode [ 285.891486][ T7934] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 285.998821][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.205464][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.402125][ T7761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.114645][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.122191][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.148383][ T7761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.670242][ T7761] hsr_slave_0: entered promiscuous mode [ 289.705983][ T7761] hsr_slave_1: entered promiscuous mode [ 289.722416][ T7761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.746984][ T7761] Cannot create hsr debugfs directory [ 291.704592][ T7981] xt_bpf: check failed: parse error [ 292.039057][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 292.933043][ T7761] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.990330][ T7761] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.067957][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 180 seconds [ 293.122218][ T8005] input: syz0 as /devices/virtual/input/input8 [ 293.516298][ T7761] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.582896][ T7761] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.061109][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.103698][ T7761] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.145737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.152850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.192190][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.199438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.030294][ T7761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.147144][ T7761] veth0_vlan: entered promiscuous mode [ 297.180670][ T7761] veth1_vlan: entered promiscuous mode [ 297.266041][ T7761] veth0_macvtap: entered promiscuous mode [ 297.303587][ T7761] veth1_macvtap: entered promiscuous mode [ 297.485549][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.563166][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'. [ 298.060380][ T8072] block device autoloading is deprecated and will be removed. [ 298.070390][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.085209][ T8071] block device autoloading is deprecated and will be removed. [ 298.120287][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.192257][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.227188][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.282719][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.325239][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.395489][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.472116][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.510912][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.708372][ T7761] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.768492][ T7761] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.809864][ T29] audit: type=1800 audit(1740157221.958:79): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.612" name="file1" dev="overlay" ino=675 res=0 errno=0 [ 299.817103][ T7761] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.930230][ T7761] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.113906][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.902336][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.933961][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.000184][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.170492][ T8115] delete_channel: no stack [ 303.019896][ T8122] Cannot find set identified by id 632 to match [ 304.159636][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 304.174043][ T29] audit: type=1326 audit(1740157226.328:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 304.174171][ T29] audit: type=1326 audit(1740157226.328:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 304.174299][ T29] audit: type=1326 audit(1740157226.338:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 304.174420][ T29] audit: type=1326 audit(1740157226.338:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 304.174521][ T29] audit: type=1326 audit(1740157226.338:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 304.174678][ T29] audit: type=1326 audit(1740157226.338:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 304.882224][ T29] audit: type=1326 audit(1740157227.058:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882270][ T29] audit: type=1326 audit(1740157227.058:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882303][ T29] audit: type=1326 audit(1740157227.058:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882337][ T29] audit: type=1326 audit(1740157227.058:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882371][ T29] audit: type=1326 audit(1740157227.058:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882403][ T29] audit: type=1326 audit(1740157227.058:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882442][ T29] audit: type=1326 audit(1740157227.058:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882473][ T29] audit: type=1326 audit(1740157227.058:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882504][ T29] audit: type=1326 audit(1740157227.058:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 304.882535][ T29] audit: type=1326 audit(1740157227.058:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7fc00000 [ 305.686122][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 307.915260][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 307.915373][ T8153] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 307.915425][ T8153] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 308.424479][ T8153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.424506][ T8153] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 308.579938][ T8153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.579962][ T8153] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 310.071243][ T8187] xt_l2tp: v2 doesn't support IP mode [ 312.858066][ T8212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.592091][ T8226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'. [ 315.061030][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 315.265626][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 315.297922][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 315.361760][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 315.400329][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.448811][ T8] usb 1-1: config 0 descriptor?? [ 315.575339][ T5908] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 316.249800][ T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 316.357497][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.385153][ T5908] usb 2-1: config 0 has no interfaces? [ 316.390769][ T5908] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 316.425308][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.452917][ T5183] bcm5974 1-1:0.0: could not read from device [ 316.461569][ T5908] usb 2-1: config 0 descriptor?? [ 316.517654][ T8] bcm5974 1-1:0.0: could not read from device [ 317.408337][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.414812][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.478510][ T5861] usb 2-1: USB disconnect, device number 5 [ 317.485311][ T5183] bcm5974 1-1:0.0: could not read from device [ 318.065348][ T8] input: failed to attach handler mousedev to device input9, error: -5 [ 318.143177][ T8] usb 1-1: USB disconnect, device number 7 [ 318.150013][ T5183] bcm5974 1-1:0.0: could not read from device [ 318.820735][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 318.820749][ T29] audit: type=1326 audit(1740157240.978:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 318.940081][ T29] audit: type=1326 audit(1740157240.978:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 319.070382][ T29] audit: type=1326 audit(1740157240.978:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 319.201770][ T29] audit: type=1326 audit(1740157240.978:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 319.282223][ T29] audit: type=1326 audit(1740157240.978:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 319.311944][ T29] audit: type=1326 audit(1740157240.978:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 320.282260][ T29] audit: type=1326 audit(1740157240.978:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 320.305723][ T29] audit: type=1326 audit(1740157240.978:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 320.335351][ T29] audit: type=1326 audit(1740157240.978:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 320.475502][ T29] audit: type=1326 audit(1740157240.978:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c67f8d0a9 code=0x7ffc0000 [ 323.069770][ T8318] No such timeout policy "syz0" [ 323.116503][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 210 seconds [ 325.104090][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 325.104108][ T29] audit: type=1326 audit(1740157247.278:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8331 comm="syz.0.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x0 [ 326.309302][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 326.338124][ T8366] sctp: [Deprecated]: syz.3.670 (pid 8366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.338124][ T8366] Use struct sctp_sack_info instead [ 331.381272][ T8425] capability: warning: `syz.0.682' uses deprecated v2 capabilities in a way that may be insecure [ 334.313623][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.5.686'. [ 334.371609][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.686'. [ 334.388648][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.5.686'. [ 334.447755][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.5.686'. [ 337.697198][ T8499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.699'. [ 337.706446][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 339.036104][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.703'. [ 339.077010][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 339.272387][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 339.283641][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.706'. [ 340.315382][ T8540] uprobe: syz.2.710:8540 failed to unregister, leaking uprobe [ 345.530839][ T8610] sctp: [Deprecated]: syz.2.725 (pid 8610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.530839][ T8610] Use struct sctp_sack_info instead [ 345.706373][ T8621] __nla_validate_parse: 1 callbacks suppressed [ 345.706391][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'. [ 346.893743][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 347.189036][ T8661] netlink: 372 bytes leftover after parsing attributes in process `syz.2.735'. [ 350.130537][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 351.426816][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 351.689977][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 351.706365][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 351.743403][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.767877][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.784138][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.823238][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.483279][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 352.525310][ T8] usbtmc 1-1:16.0: can't read capabilities [ 353.206632][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 240 seconds [ 354.049412][ T5908] usb 1-1: USB disconnect, device number 8 [ 360.429920][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 360.567281][ T8796] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.588168][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 360.597047][ T8797] netlink: 332 bytes leftover after parsing attributes in process `syz.1.764'. [ 360.623256][ T8] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 360.646066][ T8] usb 1-1: config 0 has no interface number 0 [ 360.654465][ T8] usb 1-1: config 0 interface 184 has no altsetting 0 [ 360.674025][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 360.702342][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.726915][ T8] usb 1-1: Product: syz [ 361.105708][ T8] usb 1-1: Manufacturer: syz [ 361.118447][ T8] usb 1-1: SerialNumber: syz [ 361.132435][ T8] usb 1-1: config 0 descriptor?? [ 361.171451][ T8] smsc75xx v1.0.0 [ 363.407266][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 363.587890][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.677698][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 363.840510][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 363.887020][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 363.916444][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 365.099735][ T8] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 365.111800][ T8] usb 1-1: USB disconnect, device number 9 [ 367.253878][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 368.386381][ T8859] netlink: 'syz.5.785': attribute type 4 has an invalid length. [ 372.052562][ T8898] ipvlan2: entered promiscuous mode [ 372.101949][ T8898] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 372.485310][ T8898] team0: Device ipvlan2 is already an upper device of the team interface [ 372.793302][ C1] hrtimer: interrupt took 39746 ns [ 372.865469][ T8900] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 373.065185][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 373.173094][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 373.248373][ T8] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 373.276788][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.295150][ T8] usb 6-1: Product: syz [ 373.303971][ T8] usb 6-1: Manufacturer: syz [ 373.321598][ T8] usb 6-1: SerialNumber: syz [ 373.363506][ T8] usb 6-1: config 0 descriptor?? [ 373.923388][ T8] usb 6-1: Firmware version (0.0) predates our first public release. [ 373.931601][ T8] usb 6-1: Please update to version 0.2 or newer [ 373.945768][ T8] usb 6-1: Firmware: build [ 374.028761][ T8941] No such timeout policy "syz1" [ 375.021282][ T8947] ip6gretap0: entered promiscuous mode [ 375.027328][ T8947] vlan2: entered promiscuous mode [ 375.088321][ T8947] ip6gretap0: left promiscuous mode [ 375.121272][ T8] usb 6-1: USB disconnect, device number 2 [ 377.481397][ T8967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.811'. [ 377.518322][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 378.966275][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.972599][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.284459][ T8975] overlayfs: failed to clone upperpath [ 379.370538][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 379.407012][ T8978] netlink: 188 bytes leftover after parsing attributes in process `syz.3.815'. [ 379.416121][ T8978] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 379.922176][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 379.943258][ T8989] xt_connbytes: Forcing CT accounting to be enabled [ 382.780983][ T9020] netlink: 48 bytes leftover after parsing attributes in process `syz.5.826'. [ 383.285788][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 270 seconds [ 386.384734][ T9045] overlayfs: failed to clone upperpath [ 386.883307][ T9056] syz.3.836: attempt to access beyond end of device [ 386.883307][ T9056] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 386.896698][ T9056] efs: cannot read volume header [ 387.556543][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 387.650506][ T9052] bridge0: port 3(vlan0) entered blocking state [ 387.664285][ T9052] bridge0: port 3(vlan0) entered disabled state [ 387.715493][ T9052] vlan0: entered allmulticast mode [ 388.091866][ T9052] vlan0: left allmulticast mode [ 390.268634][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 390.735679][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 390.922359][ T5874] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 390.936482][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.956693][ T5874] usb 6-1: Product: syz [ 390.962392][ T5874] usb 6-1: Manufacturer: syz [ 390.977499][ T5874] usb 6-1: SerialNumber: syz [ 390.998350][ T5874] usb 6-1: config 0 descriptor?? [ 391.025533][ T5874] usb 6-1: interface 1 not found [ 391.363610][ T9106] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 391.371581][ T9107] netlink: 14 bytes leftover after parsing attributes in process `syz.1.849'. [ 391.381954][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 391.403160][ T9106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.445267][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 391.461593][ T9106] veth5: entered promiscuous mode [ 391.488058][ T9106] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 392.095140][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 392.245179][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 392.256384][ T5904] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 392.281334][ T5904] usb 2-1: config 0 has no interface number 0 [ 392.299233][ T5904] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 392.322649][ T5904] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 392.350757][ T5904] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 392.360423][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.378730][ T5904] usb 2-1: Product: syz [ 392.387774][ T5904] usb 2-1: Manufacturer: syz [ 392.398093][ T5904] usb 2-1: SerialNumber: syz [ 392.433825][ T5904] usb 2-1: config 0 descriptor?? [ 392.447641][ T9121] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 392.462377][ T5904] smsc95xx v2.0.0 [ 393.537064][ T9121] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 394.433232][ T81] usb 6-1: USB disconnect, device number 3 [ 394.513287][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 394.525741][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.657972][ T29] audit: type=1326 audit(1740157316.828:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.166130][ T29] audit: type=1326 audit(1740157316.828:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.237060][ T29] audit: type=1326 audit(1740157317.228:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.268203][ T29] audit: type=1326 audit(1740157317.318:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.328137][ T29] audit: type=1326 audit(1740157317.318:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.358987][ T29] audit: type=1326 audit(1740157317.328:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.433630][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 395.441313][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 395.469710][ T29] audit: type=1326 audit(1740157317.328:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.492223][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 395.501311][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 395.510305][ T29] audit: type=1326 audit(1740157317.328:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9141 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcfaaf8d0a9 code=0x7ffc0000 [ 395.543722][ T9140] ceph: No mds server is up or the cluster is laggy [ 395.909978][ T29] audit: type=1804 audit(1740157318.088:231): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.862" name="/newroot/157/file1" dev="fuse" ino=1 res=1 errno=0 [ 396.070364][ T29] audit: type=1800 audit(1740157318.088:232): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.862" name="/" dev="fuse" ino=1 res=0 errno=0 [ 397.019449][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 397.030949][ T5904] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 397.053087][ T5904] usb 2-1: USB disconnect, device number 6 [ 400.209928][ T9184] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 400.743627][ T9184] netlink: 224 bytes leftover after parsing attributes in process `syz.1.871'. [ 402.782113][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 402.791556][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 402.825083][ T9205] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 402.845589][ T9205] netlink: 10 bytes leftover after parsing attributes in process `syz.3.878'. [ 405.738719][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 405.944306][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 406.101951][ T9232] hsr0: entered promiscuous mode [ 408.525255][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 410.328881][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.897'. [ 410.639190][ T9278] netlink: 108 bytes leftover after parsing attributes in process `syz.2.900'. [ 410.648267][ T9278] netlink: 108 bytes leftover after parsing attributes in process `syz.2.900'. [ 410.657367][ T9278] netlink: 108 bytes leftover after parsing attributes in process `syz.2.900'. [ 410.780271][ T5861] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 412.268214][ T5861] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.304684][ T5861] usb 4-1: not running at top speed; connect to a high speed hub [ 412.384365][ T5861] usb 4-1: config 127 has an invalid interface number: 224 but max is 0 [ 412.441462][ T5861] usb 4-1: config 127 has no interface number 0 [ 413.407690][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 300 seconds [ 413.408093][ T5861] usb 4-1: config 127 interface 224 has no altsetting 0 [ 413.725829][ T5861] usb 4-1: string descriptor 0 read error: -71 [ 413.753173][ T5861] usb 4-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=d9.1b [ 414.250050][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.427117][ T5861] usb 4-1: can't set config #127, error -71 [ 414.434581][ T5861] usb 4-1: USB disconnect, device number 11 [ 424.195177][ T9369] netlink: 104 bytes leftover after parsing attributes in process `syz.2.926'. [ 429.828851][ T9403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.879580][ T9403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.059225][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.352311][ T9431] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 1, id = 0 [ 433.420048][ T9434] netlink: 11 bytes leftover after parsing attributes in process `syz.2.943'. [ 433.675286][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 435.440548][ T9456] random: crng reseeded on system resumption [ 436.045447][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 436.054297][ T9463] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 438.218477][ T9480] netlink: 32 bytes leftover after parsing attributes in process `syz.5.957'. [ 438.812323][ T9484] netlink: 108 bytes leftover after parsing attributes in process `syz.2.960'. [ 438.821373][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.960'. [ 440.240823][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.392794][ T9501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.395265][ T5904] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 443.676020][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 330 seconds [ 444.733914][ T9529] pim6reg: entered allmulticast mode [ 444.745240][ T9529] pim6reg: left allmulticast mode [ 446.493123][ T9542] kernel read not supported for file / ԢW)S- (pid: 9542 comm: syz.2.977) [ 446.687067][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 446.687106][ T29] audit: type=1800 audit(1740157368.858:236): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.977" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=21383 res=0 errno=0 [ 449.714590][ T9555] fuse: Bad value for 'fd' [ 456.214162][ T9611] ip6gretap0: entered promiscuous mode [ 457.196189][ T9611] batadv_slave_0: entered promiscuous mode [ 458.140919][ T9611] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 458.252784][ T9611] Cannot create hsr debugfs directory [ 460.313045][ T12] bond0: (slave bond_slave_0): interface is now down [ 460.320470][ T12] bond0: (slave bond_slave_1): interface is now down [ 460.384457][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.403656][ T12] bond0: now running without any active interface! [ 460.434837][ T9634] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 461.744640][ T9627] bridge_slave_0: left allmulticast mode [ 461.864676][ T9627] bridge_slave_0: left promiscuous mode [ 461.884358][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.326310][ T9627] bridge_slave_1: left allmulticast mode [ 462.332002][ T9627] bridge_slave_1: left promiscuous mode [ 462.402188][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.734592][ T9627] bond0: (slave bond_slave_0): Releasing backup interface [ 463.385482][ T9627] bond0: (slave bond_slave_1): Releasing backup interface [ 463.913207][ T9627] team0: Port device team_slave_0 removed [ 463.940184][ T9627] team0: Port device team_slave_1 removed [ 464.085314][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.743779][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.785131][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.725267][ T9673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 468.950112][ T9695] random: crng reseeded on system resumption [ 469.018944][ T29] audit: type=1326 audit(1740157391.198:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 469.152190][ T29] audit: type=1326 audit(1740157391.218:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 469.281635][ T29] audit: type=1326 audit(1740157391.258:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 469.435234][ T29] audit: type=1326 audit(1740157391.258:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 469.475074][ T29] audit: type=1326 audit(1740157391.258:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 469.555078][ T29] audit: type=1326 audit(1740157391.258:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 470.107877][ T29] audit: type=1326 audit(1740157391.258:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 470.139871][ T29] audit: type=1326 audit(1740157391.258:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 470.168959][ T29] audit: type=1326 audit(1740157391.258:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 470.206009][ T29] audit: type=1326 audit(1740157391.258:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 470.692081][ T9717] vlan2: entered promiscuous mode [ 472.270896][ T9737] xt_socket: unknown flags 0x4 [ 474.768558][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 360 seconds [ 474.978967][ T9739] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 475.010648][ T9739] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 477.197052][ T9770] openvswitch: netlink: IPv4 tun info is not correct [ 477.865942][ T9772] x_tables: duplicate underflow at hook 1 [ 480.767858][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.786365][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.797321][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.812106][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.827874][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 480.842092][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.871447][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 480.910960][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.923497][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.933032][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.946063][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.957635][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 480.966418][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.492954][ T5824] Bluetooth: hci5: command tx timeout [ 484.739915][ T9793] chnl_net:caif_netlink_parms(): no params data found [ 485.515233][ T5824] Bluetooth: hci5: command tx timeout [ 487.079306][ T9850] SET target dimension over the limit! [ 487.805267][ T5824] Bluetooth: hci5: command tx timeout [ 487.941075][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.630197][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.753307][ T9793] bridge_slave_0: entered allmulticast mode [ 489.162937][ T9793] bridge_slave_0: entered promiscuous mode [ 489.406151][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.435337][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.442553][ T9793] bridge_slave_1: entered allmulticast mode [ 489.479657][ T9793] bridge_slave_1: entered promiscuous mode [ 489.674823][ T9873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1064'. [ 489.860971][ T53] Bluetooth: hci5: command tx timeout [ 490.028599][ T9874] Bluetooth: MGMT ver 1.23 [ 490.961383][ T9793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.016597][ T9793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.955641][ T9793] team0: Port device team_slave_0 added [ 492.077770][ T9793] team0: Port device team_slave_1 added [ 492.172406][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.204869][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.230843][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.305182][ T9793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.357354][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.401738][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.642611][ T9793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.007384][ T9793] hsr_slave_0: entered promiscuous mode [ 493.019638][ T9793] hsr_slave_1: entered promiscuous mode [ 493.029736][ T9793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.038929][ T9793] Cannot create hsr debugfs directory [ 494.419062][ T9793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 495.300722][ T9793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 495.337438][ T9793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 495.355253][ T9793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 495.985724][ T9933] netlink: 'syz.1.1079': attribute type 10 has an invalid length. [ 496.086929][ T9933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.174671][ T9933] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 496.386886][ T9793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.495935][ T9793] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.604966][ T9933] syz.1.1079 (9933) used greatest stack depth: 18352 bytes left [ 496.622568][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.629719][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.801853][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.809064][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.220794][ T9793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.232700][ T9793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.599516][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 498.751379][ T9793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.682284][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.144895][ T9793] veth0_vlan: entered promiscuous mode [ 502.345284][ T9793] veth1_vlan: entered promiscuous mode [ 502.431687][ T9793] veth0_macvtap: entered promiscuous mode [ 502.451410][ T9793] veth1_macvtap: entered promiscuous mode [ 502.477402][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.492786][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.522065][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.543226][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.614289][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.637061][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.673103][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.705122][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.727420][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.739602][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.749878][ T9793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.759061][ T9793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.768457][ T9793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.777695][ T9793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.144746][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 390 seconds [ 505.256336][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.366748][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.947570][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.126902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.127810][T10035] syz_tun: entered allmulticast mode [ 512.409872][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1122'. [ 512.445081][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1122'. [ 512.482902][T10091] dummy0: entered promiscuous mode [ 512.490891][T10091] bond0: entered promiscuous mode [ 512.533176][T10091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.609637][T10091] Cannot create hsr debugfs directory [ 512.630167][T10091] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 517.223601][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1135'. [ 524.275400][ T5904] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 525.417937][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.448697][ T5904] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.762686][ T5904] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 525.771951][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.251274][ T5904] usb 6-1: config 0 descriptor?? [ 526.411673][ T5904] usb 6-1: can't set config #0, error -71 [ 526.525175][ T5904] usb 6-1: USB disconnect, device number 4 [ 528.578016][T10214] loop6: detected capacity change from 0 to 64 [ 530.803825][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 531.123996][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.133229][ C0] buffer_io_error: 9 callbacks suppressed [ 531.133243][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 531.150231][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.159450][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 531.507631][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 531.539306][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.548467][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.557014][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.566164][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.577252][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.586448][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.596331][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.605519][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.613688][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.622860][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.644018][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 420 seconds [ 541.773586][T10315] ipt_rpfilter: unknown options [ 544.611821][T10332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.974735][T10332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.285651][T10332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.429533][T10332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.590502][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 547.113078][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 547.527593][T10371] netlink: 'syz.6.1195': attribute type 10 has an invalid length. [ 547.562349][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.569961][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.026352][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.033576][T10371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.041898][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.049129][T10371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.518984][T10371] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 548.707443][T10332] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.790148][T10332] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.821263][T10332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.046234][T10383] tipc: Started in network mode [ 550.051163][T10383] tipc: Node identity 6, cluster identity 4711 [ 550.113253][T10383] tipc: Node number set to 6 [ 550.124856][T10332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.858488][T10424] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.866747][T10424] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 554.875606][T10424] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.884193][T10424] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 556.810948][T10430] team_slave_0: entered promiscuous mode [ 556.817179][T10430] team_slave_1: entered promiscuous mode [ 556.863405][T10430] vlan0: entered promiscuous mode [ 556.975147][T10430] team0: entered promiscuous mode [ 557.025885][T10430] team0: left promiscuous mode [ 557.055618][T10430] team_slave_0: left promiscuous mode [ 557.061126][T10430] team_slave_1: left promiscuous mode [ 557.426282][T10438] netlink: 'syz.5.1213': attribute type 10 has an invalid length. [ 558.752488][T10438] veth1_vlan: entered allmulticast mode [ 559.034237][T10438] team0: Device veth1_vlan failed to register rx_handler [ 562.387219][T10457] kvm: kvm [10456]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 563.255348][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.139721][T10497] delete_channel: no stack [ 566.343915][ T81] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 566.501029][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 450 seconds [ 567.577375][ T81] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.685112][ T81] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.748178][ T81] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 567.804057][ T81] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.091635][ T81] usb 7-1: config 0 descriptor?? [ 569.305662][ T81] usbhid 7-1:0.0: can't add hid device: -71 [ 569.311690][ T81] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 569.328601][ T81] usb 7-1: USB disconnect, device number 2 [ 569.406692][T10537] trusted_key: syz.1.1241 sent an empty control message without MSG_MORE. [ 570.170415][T10543] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 570.178166][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.674881][T10564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 572.796899][T10564] program syz.5.1251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.955782][ C1] sd 0:0:1:0: [sda] tag#4622 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=1s [ 573.966224][ C1] sd 0:0:1:0: [sda] tag#4622 CDB: Read(6) 08 00 00 00 00 00 [ 576.092909][T10586] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 576.603532][T10589] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.956584][T10590] pim6reg: entered allmulticast mode [ 577.169057][T10580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.779226][T10646] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 583.858069][T10646] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 583.885343][T10646] team0: Failed to send options change via netlink (err -105) [ 583.949108][T10646] team0: Port device dummy0 added [ 587.287570][T10691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.044650][T10723] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 592.080035][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 595.307209][ T5198] udevd[5198]: worker [5821] /devices/virtual/block/nbd0 timeout; kill it [ 595.357781][ T5198] udevd[5198]: seq 10912 '/devices/virtual/block/nbd0' killed [ 597.066512][ T41] block nbd0: Possible stuck request ffff888025fd5080: control (read@0,4096B). Runtime 480 seconds [ 597.338192][T10765] macvlan1: entered promiscuous mode [ 597.357108][T10765] macvlan1: entered allmulticast mode [ 604.339961][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 606.619246][T10809] Bluetooth: hci5: command 0x0406 tx timeout [ 608.415053][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 608.415072][ T29] audit: type=1326 audit(1740157530.568:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 608.772289][ T29] audit: type=1326 audit(1740157530.568:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 609.803101][T10838] gre1: entered promiscuous mode [ 609.814488][ T29] audit: type=1326 audit(1740157530.568:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 609.837877][ T29] audit: type=1326 audit(1740157530.568:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 609.879953][ T29] audit: type=1326 audit(1740157530.568:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 609.910239][T10848] libceph: resolve '. [ 609.910239][T10848] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 609.910239][T10848] ' (ret=-3): failed [ 610.176160][ T29] audit: type=1326 audit(1740157530.568:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 610.202104][ T29] audit: type=1326 audit(1740157530.568:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 610.231087][ T29] audit: type=1326 audit(1740157530.568:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 610.260541][ T29] audit: type=1326 audit(1740157530.568:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 610.286729][ T29] audit: type=1326 audit(1740157530.638:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.5.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc418d0a9 code=0x7ffc0000 [ 611.184269][T10862] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.185571][ T5908] IPVS: starting estimator thread 0... [ 611.285128][T10867] IPVS: using max 23 ests per chain, 55200 per kthread [ 613.685346][T10897] netlink: 'syz.1.1340': attribute type 4 has an invalid length. [ 614.664928][T10915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.005529][T10928] cgroup: fork rejected by pids controller in /syz3 [ 617.915683][ T5828] syz_tun (unregistering): left allmulticast mode [ 617.927721][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 619.267039][T11032] 9pnet_virtio: no channels available for device syz [ 624.556776][ T30] INFO: task syz.0.1002:9646 blocked for more than 143 seconds. [ 624.572713][ T30] Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 624.585367][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 624.647835][T10809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.649448][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.665764][T10809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.675358][T10809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.688719][T10809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.704852][T10809] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 624.709465][ T30] task:syz.0.1002 state:D stack:27288 pid:9646 tgid:9632 ppid:5829 task_flags:0x400140 flags:0x00000004 [ 624.724381][T10809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.735274][ T30] Call Trace: [ 624.738602][ T30] [ 624.765057][ T30] __schedule+0x18bc/0x4c40 [ 624.769631][ T30] ? __pfx___schedule+0x10/0x10 [ 624.774520][ T30] ? __pfx_lock_release+0x10/0x10 [ 624.799648][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 624.805927][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 624.814013][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.821475][ T30] ? schedule+0x90/0x320 [ 624.859845][ T30] schedule+0x14b/0x320 [ 624.864050][ T30] schedule_preempt_disabled+0x13/0x30 [ 624.883120][ T30] __mutex_lock+0x817/0x1010 [ 624.891510][ T30] ? __mutex_lock+0x602/0x1010 [ 624.913996][ T30] ? bdev_open+0xf0/0xc50 [ 624.918743][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 624.982097][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1372'. [ 625.354893][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 625.360666][ T30] ? alloc_file_pseudo_noaccount+0x2b2/0x3a0 [ 625.366871][ T30] ? disk_block_events+0xa9/0x120 [ 625.371941][ T30] ? bdev_open+0xc5/0xc50 [ 625.376373][ T30] bdev_open+0xf0/0xc50 [ 625.380559][ T30] ? iput+0x3be/0xa50 [ 625.384573][ T30] bdev_file_open_by_dev+0x1b0/0x220 [ 625.390026][ T30] setup_bdev_super+0x5d/0x5d0 [ 625.394826][ T30] get_tree_bdev_flags+0x3da/0x5c0 [ 625.400173][ T30] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 625.405996][ T30] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 625.411404][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 625.417087][ T30] ? cap_capable+0x139/0x450 [ 625.421723][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 625.427678][ T30] vfs_get_tree+0x90/0x2b0 [ 625.432123][ T30] do_new_mount+0x2be/0xb40 [ 625.437492][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 625.442572][ T30] __se_sys_mount+0x2d6/0x3c0 [ 625.447435][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 625.452663][ T30] ? do_syscall_64+0x100/0x230 [ 625.457522][ T30] ? __x64_sys_mount+0x20/0xc0 [ 625.462310][ T30] do_syscall_64+0xf3/0x230 [ 625.466985][ T30] ? clear_bhb_loop+0x35/0x90 [ 625.471697][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.477647][ T30] RIP: 0033:0x7fcfaaf8d0a9 [ 625.482091][ T30] RSP: 002b:00007fcfabe0d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 625.490685][ T30] RAX: ffffffffffffffda RBX: 00007fcfab1a6160 RCX: 00007fcfaaf8d0a9 [ 625.512163][ T30] RDX: 0000400000000080 RSI: 00004000000000c0 RDI: 0000400000000040 [ 625.520509][ T30] RBP: 00007fcfab00e2a0 R08: 0000400000000140 R09: 0000000000000000 [ 625.528634][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.536954][ T30] R13: 0000000000000000 R14: 00007fcfab1a6160 R15: 00007fffd86d5658 [ 625.546338][ T30] [ 625.565541][ T30] [ 625.565541][ T30] Showing all locks held in the system: [ 625.573303][ T30] 1 lock held by khungtaskd/30: [ 625.578821][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 625.588923][T11060] chnl_net:caif_netlink_parms(): no params data found [ 625.737296][ T30] 2 locks held by kworker/u8:7/2922: [ 625.743352][ T30] 2 locks held by getty/5582: [ 625.748383][ T30] #0: ffff88814e4380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 625.758566][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 625.769157][ T30] 1 lock held by udevd/5821: [ 625.773773][ T30] #0: ffff8881433df4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 625.783480][ T30] 1 lock held by syz-executor/5822: [ 625.789047][ T30] 2 locks held by kworker/u9:5/5833: [ 625.794360][ T30] #0: ffff888025f8e148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 625.815429][ T30] #1: ffffc9000426fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 625.845749][ T30] 3 locks held by kworker/1:4/5874: [ 625.850987][ T30] 2 locks held by syz.0.1002/9646: [ 625.873894][ T30] #0: ffff88807d8cc0e0 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 625.900171][ T30] #1: ffff8881433df4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 625.923642][ T30] 3 locks held by kworker/1:0/10618: [ 625.945001][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 625.975028][ T30] #1: ffffc9000e11fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 626.015039][ T30] #2: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820 [ 626.042199][ T30] 2 locks held by syz-executor/11060: [ 626.054369][ T30] #0: ffffffff8f663ca0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 626.064614][ T30] #1: ffffffff8fec2b08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc55/0x1d30 [ 626.074143][ T30] 1 lock held by syz.5.1370/11062: [ 626.079949][ T30] #0: ffffffff8fec2b08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 626.089292][ T30] 1 lock held by syz.1.1371/11070: [ 626.094426][ T30] #0: ffffffff8fec2b08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 626.103892][ T30] 3 locks held by syz.6.1372/11068: [ 626.109541][ T30] #0: ffff8880299e8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 626.119858][ T30] #1: ffff8880299e8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 626.135066][ T30] #2: ffff888058591338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 626.144457][ T30] 2 locks held by dhcpcd/11074: [ 626.149794][ T30] #0: ffff8880595c0e08 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 626.160791][ T30] #1: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 626.172119][ T30] [ 626.174483][ T30] ============================================= [ 626.174483][ T30] [ 626.196663][ T30] NMI backtrace for cpu 0 [ 626.196680][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 626.196699][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 626.196710][ T30] Call Trace: [ 626.196716][ T30] [ 626.196723][ T30] dump_stack_lvl+0x241/0x360 [ 626.196747][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.196765][ T30] ? __pfx__printk+0x10/0x10 [ 626.196803][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 626.196827][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 626.196844][ T30] ? _printk+0xd5/0x120 [ 626.196870][ T30] ? __pfx__printk+0x10/0x10 [ 626.196896][ T30] ? __wake_up_klogd+0xcc/0x110 [ 626.196919][ T30] ? __pfx__printk+0x10/0x10 [ 626.196947][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 626.196972][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 626.196996][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 626.197018][ T30] watchdog+0x1058/0x10a0 [ 626.197044][ T30] ? watchdog+0x1ea/0x10a0 [ 626.197074][ T30] ? __pfx_watchdog+0x10/0x10 [ 626.197099][ T30] kthread+0x7a9/0x920 [ 626.197124][ T30] ? __pfx_kthread+0x10/0x10 [ 626.197150][ T30] ? __pfx_watchdog+0x10/0x10 [ 626.197175][ T30] ? __pfx_kthread+0x10/0x10 [ 626.197199][ T30] ? __pfx_kthread+0x10/0x10 [ 626.197227][ T30] ? __pfx_kthread+0x10/0x10 [ 626.197250][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.197270][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 626.197291][ T30] ? __pfx_kthread+0x10/0x10 [ 626.197317][ T30] ret_from_fork+0x4b/0x80 [ 626.197339][ T30] ? __pfx_kthread+0x10/0x10 [ 626.197365][ T30] ret_from_fork_asm+0x1a/0x30 [ 626.197397][ T30] [ 626.197404][ T30] Sending NMI from CPU 0 to CPUs 1: [ 626.368453][ C1] NMI backtrace for cpu 1 [ 626.368468][ C1] CPU: 1 UID: 0 PID: 2922 Comm: kworker/u8:7 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 626.368488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 626.368499][ C1] Workqueue: 0x0 (events_unbound) [ 626.368524][ C1] RIP: 0010:pwq_dec_nr_in_flight+0x1d7/0xd60 [ 626.368549][ C1] Code: 85 ed 0f 84 e4 00 00 00 4c 89 6c 24 18 48 8d 7d 04 48 89 7c 24 48 be 04 00 00 00 e8 63 1d 9c 00 bb ff ff ff ff f0 0f c1 5d 04 cb 48 89 e8 48 c1 e8 03 48 89 44 24 30 42 0f b6 04 20 84 c0 0f [ 626.368564][ C1] RSP: 0018:ffffc9000bed7a80 EFLAGS: 00000013 [ 626.368578][ C1] RAX: 0000000000000001 RBX: 0000000000000003 RCX: ffffffff818a524d [ 626.368590][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888140403084 [ 626.368600][ C1] RBP: ffff888140403080 R08: ffff888140403087 R09: 1ffff11028080610 [ 626.368613][ C1] R10: dffffc0000000000 R11: ffffed1028080611 R12: dffffc0000000000 [ 626.368626][ C1] R13: ffff88801b0a0000 R14: 0000000000000000 R15: ffff88801b096000 [ 626.368639][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 626.368652][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.368664][ C1] CR2: 000056358c644600 CR3: 0000000033c10000 CR4: 00000000003526f0 [ 626.368679][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.368690][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 626.368700][ C1] Call Trace: [ 626.368706][ C1] [ 626.368713][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 626.368732][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 626.368758][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 626.368774][ C1] ? nmi_handle+0x2a/0x5a0 [ 626.368807][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 626.368827][ C1] ? nmi_handle+0x14f/0x5a0 [ 626.368852][ C1] ? nmi_handle+0x2a/0x5a0 [ 626.368876][ C1] ? pwq_dec_nr_in_flight+0x1d7/0xd60 [ 626.368896][ C1] ? default_do_nmi+0x63/0x160 [ 626.368923][ C1] ? exc_nmi+0x123/0x1f0 [ 626.368949][ C1] ? end_repeat_nmi+0xf/0x53 [ 626.368978][ C1] ? pwq_dec_nr_in_flight+0x1cd/0xd60 [ 626.368998][ C1] ? pwq_dec_nr_in_flight+0x1d7/0xd60 [ 626.369018][ C1] ? pwq_dec_nr_in_flight+0x1d7/0xd60 [ 626.369039][ C1] ? pwq_dec_nr_in_flight+0x1d7/0xd60 [ 626.369059][ C1] [ 626.369064][ C1] [ 626.369070][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 626.369095][ C1] process_scheduled_works+0xfa7/0x18e0 [ 626.369129][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.369162][ C1] ? assign_work+0x364/0x3d0 [ 626.369184][ C1] worker_thread+0x870/0xd30 [ 626.369209][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 626.369231][ C1] ? __kthread_parkme+0x169/0x1d0 [ 626.369255][ C1] ? __pfx_worker_thread+0x10/0x10 [ 626.369277][ C1] kthread+0x7a9/0x920 [ 626.369300][ C1] ? __pfx_kthread+0x10/0x10 [ 626.369326][ C1] ? __pfx_worker_thread+0x10/0x10 [ 626.369347][ C1] ? __pfx_kthread+0x10/0x10 [ 626.369370][ C1] ? __pfx_kthread+0x10/0x10 [ 626.369396][ C1] ? __pfx_kthread+0x10/0x10 [ 626.369431][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.369448][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 626.369479][ C1] ? __pfx_kthread+0x10/0x10 [ 626.369501][ C1] ret_from_fork+0x4b/0x80 [ 626.369529][ C1] ? __pfx_kthread+0x10/0x10 [ 626.369550][ C1] ret_from_fork_asm+0x1a/0x30 [ 626.369574][ C1] [ 626.372794][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 626.372810][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 626.372833][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 626.372845][ T30] Call Trace: [ 626.372853][ T30] [ 626.372862][ T30] dump_stack_lvl+0x241/0x360 [ 626.372890][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.372910][ T30] ? __pfx__printk+0x10/0x10 [ 626.372939][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.372975][ T30] ? vscnprintf+0x5d/0x90 [ 626.372998][ T30] panic+0x349/0x880 [ 626.373028][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 626.373052][ T30] ? __pfx_panic+0x10/0x10 [ 626.373078][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 626.373101][ T30] ? __irq_work_queue_local+0x137/0x410 [ 626.373131][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 626.373157][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 626.373177][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 626.373201][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 626.373225][ T30] watchdog+0x1097/0x10a0 [ 626.373254][ T30] ? watchdog+0x1ea/0x10a0 [ 626.373286][ T30] ? __pfx_watchdog+0x10/0x10 [ 626.373316][ T30] kthread+0x7a9/0x920 [ 626.373345][ T30] ? __pfx_kthread+0x10/0x10 [ 626.373376][ T30] ? __pfx_watchdog+0x10/0x10 [ 626.373409][ T30] ? __pfx_kthread+0x10/0x10 [ 626.373435][ T30] ? __pfx_kthread+0x10/0x10 [ 626.373467][ T30] ? __pfx_kthread+0x10/0x10 [ 626.373493][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.373522][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 626.373546][ T30] ? __pfx_kthread+0x10/0x10 [ 626.373575][ T30] ret_from_fork+0x4b/0x80 [ 626.373600][ T30] ? __pfx_kthread+0x10/0x10 [ 626.373629][ T30] ret_from_fork_asm+0x1a/0x30 [ 626.373664][ T30] [ 626.878296][ T30] Kernel Offset: disabled [ 626.882623][ T30] Rebooting in 86400 seconds..