last executing test programs: 20.098015866s ago: executing program 0 (id=6655): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='mm_lru_insertion\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 19.068861654s ago: executing program 0 (id=6658): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 19.048317835s ago: executing program 0 (id=6659): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x13, &(0x7f00000000c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x100, @multicast2}}, 0xfd72) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, 0xffffffffffffffff, 0xe58cb000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'lblcr\x00', 0x1}, 0x2c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') pidfd_send_signal(0xffffffffffffffff, 0x22, &(0x7f0000000280)={0x25, 0x10001, 0xffffff51}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x4e21, @remote}], 0x10) 17.715217837s ago: executing program 0 (id=6660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@treelog}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/81, 0x51}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r5, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) read(r5, &(0x7f0000001b00)=""/194, 0xc2) 16.812299194s ago: executing program 0 (id=6663): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(r3) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 13.791892168s ago: executing program 0 (id=6669): open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) unshare(0x44000680) 10.746280914s ago: executing program 1 (id=6681): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 10.56792449s ago: executing program 1 (id=6682): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x42, 0x0) io_submit(r0, 0x200000000000010b, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 8.953930966s ago: executing program 1 (id=6684): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x13, &(0x7f00000000c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x100, @multicast2}}, 0xfd72) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, 0xffffffffffffffff, 0xe58cb000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'lblcr\x00', 0x1}, 0x2c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') pidfd_send_signal(0xffffffffffffffff, 0x22, &(0x7f0000000280)={0x25, 0x10001, 0xffffff51}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x4e21, @remote}], 0x10) 8.022526804s ago: executing program 1 (id=6686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pause() 7.657703995s ago: executing program 2 (id=6690): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@delneigh={0x30, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x4}}]}, 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.261916868s ago: executing program 2 (id=6691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)="0b102acdc64d8e703c55a47e57f3f8ee60", &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB='\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 7.101893592s ago: executing program 1 (id=6693): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3, &(0x7f0000000440)=0x802) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) 5.744164656s ago: executing program 2 (id=6695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340)="ca", &(0x7f0000000080)=@tcp6}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c005654bbe6b25a7f095feca12f4d320d2320934429f907f3e43d4dcb0bb85d98a0be45e504ba38bb333ce2b1489a6d6d69ee0598ab23d092193535047aab60cbbefe5ba6d1602ffc20bdcc51dcc3bc86c191ac42bdb5dcc1ca06817d3d1b687814ba994fd5bd5c02938cdf61e7680d"], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r5, &(0x7f00000021c0)={0x18, 0x0, r6, {0x7}}, 0x18) read$FUSE(r5, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f000000ce00)={0x2020}, 0x2020) 4.666092317s ago: executing program 2 (id=6697): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.062852128s ago: executing program 1 (id=6699): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000003c40)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24010001}, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) truncate(0x0, 0xf000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}}, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 3.503108675s ago: executing program 2 (id=6701): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 3.282957334s ago: executing program 2 (id=6702): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) setresuid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1010060, &(0x7f0000000840)=ANY=[@ANYRES64=r0], 0x1, 0x363, &(0x7f0000000880)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x11) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 3.236208147s ago: executing program 3 (id=6703): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a170060000000"]) 3.094191789s ago: executing program 4 (id=6704): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCMSET(r0, 0x5418, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000100002800c000180080001000300000004000180"], 0x28}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x20000806}, 0x8005) 3.093539259s ago: executing program 3 (id=6705): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.046196333s ago: executing program 3 (id=6706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 3.034674544s ago: executing program 4 (id=6707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) 2.873919408s ago: executing program 3 (id=6708): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) dup2(0xffffffffffffffff, r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0xfcb8) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0, @ANYBLOB="05"], 0x1c}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000006140)={0x2020}, 0x2020) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x2) 2.873295948s ago: executing program 4 (id=6709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000700000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, 0x0}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r2, 0x0) 2.636101417s ago: executing program 4 (id=6710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 2.305040226s ago: executing program 4 (id=6711): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = getpid() rt_tgsigqueueinfo(r6, 0x0, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)={0x18, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x3c, 0x0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, 0x0, 0x4080) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_client}, {@cache_loose}], [{@uid_gt}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) close(r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000340)=""/118, 0x76, 0x0, &(0x7f00000003c0)=""/68, 0x44}}, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x88}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000006800010000000000000000000000000000000000060003000000000014000200020000000000000000000000ff"], 0x34}}, 0x0) 834.017509ms ago: executing program 3 (id=6712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3caa3c95662281a) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r6, 0x8004745a, 0x2000000c) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x5) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="2bad79bf6b637075202d7069647320"], 0xb) r9 = dup3(r5, r4, 0x0) connect$unix(r9, &(0x7f0000000100)=@abs={0x1}, 0x6e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000002480)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) 660.972194ms ago: executing program 4 (id=6713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x13, &(0x7f00000000c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x100, @multicast2}}, 0xfd72) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, 0xffffffffffffffff, 0xe58cb000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'lblcr\x00', 0x1}, 0x2c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') pidfd_send_signal(0xffffffffffffffff, 0x22, &(0x7f0000000280)={0x25, 0x10001, 0xffffff51}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x4e21, @remote}], 0x10) 0s ago: executing program 3 (id=6714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@treelog}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/81, 0x51}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r6, 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) read(r6, &(0x7f0000001b00)=""/194, 0xc2) kernel console output (not intermixed with test programs): 2217.529114][T25243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2217.555351][T25243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2217.583200][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2217.595509][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2217.620046][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2217.630672][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2217.677316][T25243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.686916][T25243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.696559][T25243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.705508][T25243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.831543][T14443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2217.847551][T14443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2217.891748][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2217.944242][T14443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2218.003426][T14443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2218.047298][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2218.095628][T25316] chnl_net:caif_netlink_parms(): no params data found [ 2218.275860][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5708'. [ 2218.296794][T25316] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.305913][T25316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.318568][T25316] device bridge_slave_0 entered promiscuous mode [ 2218.338569][T25316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.369407][T25316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.388281][ T8466] Bluetooth: hci7: command 0x0409 tx timeout [ 2218.520422][T25316] device bridge_slave_1 entered promiscuous mode [ 2219.433109][T25316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2219.476411][T25316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2219.581718][T25316] team0: Port device team_slave_0 added [ 2219.622268][T25316] team0: Port device team_slave_1 added [ 2219.964176][T25316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2219.997892][T25316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2220.488962][ T8313] Bluetooth: hci7: command 0x041b tx timeout [ 2220.697931][T25316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2220.873402][T25316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2220.897046][T25316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.790169][T25316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.831456][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.837806][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.897488][T25316] device hsr_slave_0 entered promiscuous mode [ 2221.905916][T25316] device hsr_slave_1 entered promiscuous mode [ 2221.938335][T25316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2221.946414][T25316] Cannot create hsr debugfs directory [ 2222.547961][ T3616] Bluetooth: hci7: command 0x040f tx timeout [ 2223.113731][T25316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.389704][T25387] fuse: Unknown parameter 'grou00000000000000000000' [ 2225.087772][T12710] Bluetooth: hci7: command 0x0419 tx timeout [ 2225.154305][T25316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.100203][T25316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.357512][T25316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.912569][T25316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2228.451440][T25316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2228.598590][T25316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2229.446246][T18359] Bluetooth: hci8: command 0x0409 tx timeout [ 2229.549586][T25316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2229.637930][ T3701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.705035][T18359] Bluetooth: hci0: command 0x0406 tx timeout [ 2229.711728][T18359] Bluetooth: hci4: command 0x0406 tx timeout [ 2230.106828][T25316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2230.350375][ T3701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.411120][T25401] chnl_net:caif_netlink_parms(): no params data found [ 2230.539008][ T3701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.599044][T25316] 8021q: adding VLAN 0 to HW filter on device team0 [ 2230.651348][ T3701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.718211][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2230.727483][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2230.806701][T25401] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.821177][T25401] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.832789][T25401] device bridge_slave_0 entered promiscuous mode [ 2230.858135][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2230.870593][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2230.881518][T14574] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.889437][T14574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2230.900346][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2230.911386][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2230.922764][T14574] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.929987][T14574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2230.944449][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2230.956968][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2230.970969][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2230.995417][T25401] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.021096][T25401] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.040841][T25401] device bridge_slave_1 entered promiscuous mode [ 2231.066888][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2231.095684][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2231.186944][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2231.205534][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2231.223970][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2231.269597][T25401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.313198][T25401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2231.430295][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2231.454955][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2231.513364][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2231.524968][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2231.748319][T14433] Bluetooth: hci8: command 0x041b tx timeout [ 2232.383353][T25401] team0: Port device team_slave_0 added [ 2232.452127][T25401] team0: Port device team_slave_1 added [ 2233.917930][T15058] Bluetooth: hci8: command 0x040f tx timeout [ 2234.155517][T25401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2234.163081][T25401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.195758][T25401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.492255][T25401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.661895][T25401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.987853][T25401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2235.048675][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2235.056377][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2235.914991][T25316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2235.988094][T18359] Bluetooth: hci8: command 0x0419 tx timeout [ 2236.038185][T25401] device hsr_slave_0 entered promiscuous mode [ 2236.058852][T25401] device hsr_slave_1 entered promiscuous mode [ 2236.086043][T25401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2236.116954][T25401] Cannot create hsr debugfs directory [ 2236.181530][T25520] capability: warning: `syz.4.5757' uses deprecated v2 capabilities in a way that may be insecure [ 2236.276922][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2236.368686][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2236.462918][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2236.704671][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2237.314307][T25316] device veth0_vlan entered promiscuous mode [ 2237.326073][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2237.358657][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2237.487481][T25316] device veth1_vlan entered promiscuous mode [ 2237.577695][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2237.598209][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2237.692843][T25316] device veth0_macvtap entered promiscuous mode [ 2237.719605][T25316] device veth1_macvtap entered promiscuous mode [ 2237.833344][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2237.864515][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.895517][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2237.926850][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.957667][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2237.987899][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.007818][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2238.029688][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.068186][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2238.087891][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.108409][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2238.131817][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.153573][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2238.178792][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.202796][T25316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2238.227941][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2238.241014][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2238.261433][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2238.283563][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2238.314369][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.358413][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.378893][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.421474][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.447840][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.491324][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.528318][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.557760][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.575889][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.597512][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.610230][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.624924][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.645291][T25316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.658820][T25316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.679752][T25316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2238.716781][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2238.730823][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2238.739350][T12710] Bluetooth: hci3: command 0x0406 tx timeout [ 2238.755794][T25553] tipc: Started in network mode [ 2238.761610][T25553] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 2238.770247][T25553] tipc: Enabled bearer , priority 0 [ 2238.783767][T25316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.804021][T25316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.816913][T25316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.830860][T25316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.985922][ T3701] device hsr_slave_0 left promiscuous mode [ 2239.005788][ T3701] device hsr_slave_1 left promiscuous mode [ 2239.026773][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2239.045074][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2239.058185][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2239.066022][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2239.074067][ T3701] device bridge_slave_1 left promiscuous mode [ 2239.080665][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 2239.089680][ T3701] device bridge_slave_0 left promiscuous mode [ 2239.096008][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.110755][ T3701] device veth1_macvtap left promiscuous mode [ 2239.117448][ T3701] device veth0_macvtap left promiscuous mode [ 2239.125043][ T3701] device veth1_vlan left promiscuous mode [ 2239.132056][ T3701] device veth0_vlan left promiscuous mode [ 2239.844502][T18851] tipc: Node number set to 8432298 [ 2239.900418][ T3701] team0 (unregistering): Port device team_slave_1 removed [ 2239.917321][ T3701] team0 (unregistering): Port device team_slave_0 removed [ 2239.932928][ T3701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2239.951117][ T3701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2240.082886][ T3701] bond0 (unregistering): Released all slaves [ 2240.177501][T25401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2240.214230][T25401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2240.248414][T25401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2240.273794][T25401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2240.526054][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2240.615912][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2241.144093][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2241.174578][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2241.194322][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2241.242537][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2241.528595][T25401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2241.566490][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2241.575773][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2241.609361][T25401] 8021q: adding VLAN 0 to HW filter on device team0 [ 2241.762349][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2241.912362][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2242.070464][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2242.077624][ T9878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2242.282300][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2242.489964][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2242.505505][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2242.515168][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 2242.522752][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2242.531280][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2242.841573][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2243.144116][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2243.258831][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2243.315020][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2243.358760][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2243.380469][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2243.453607][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2243.473522][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2244.261340][T25401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2244.388847][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2244.414569][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2244.497537][T25655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5799'. [ 2245.409064][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2245.427198][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2245.479825][T25401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2245.571530][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2245.602816][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2245.776346][T25401] device veth0_vlan entered promiscuous mode [ 2246.623685][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2246.646624][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2246.680531][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2246.722981][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2246.870365][T25703] netlink: 'syz.4.5812': attribute type 10 has an invalid length. [ 2246.917080][T25703] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5812'. [ 2247.582723][T25708] loop1: detected capacity change from 0 to 2048 [ 2247.741081][T25401] device veth1_vlan entered promiscuous mode [ 2247.824607][T25715] overlayfs: failed to resolve './file1': -2 [ 2247.848129][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2247.870526][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2247.919289][T25401] device veth0_macvtap entered promiscuous mode [ 2247.982114][T25401] device veth1_macvtap entered promiscuous mode [ 2248.185011][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.262884][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.294238][T25725] loop1: detected capacity change from 0 to 40427 [ 2248.312829][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.363703][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.407856][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.446967][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.478146][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.510986][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.544908][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.581695][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.612590][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.650401][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.682790][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.717147][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.754857][T25401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2248.790140][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2248.808625][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2248.835650][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2248.868847][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2248.902039][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.923390][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.943673][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.966623][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.987042][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2249.077915][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.118438][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2249.168172][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.217780][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2249.431644][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.487789][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2249.541613][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.593038][T25401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2249.640090][T25401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.687054][T25401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2249.743161][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2249.776239][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2249.812764][T25401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.846450][T25401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.876407][T25401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.890539][T25401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2250.049443][T25755] device syzkaller0 entered promiscuous mode [ 2250.258584][ T3726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.290211][ T3726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.347039][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2250.380269][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.431496][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.490359][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2250.585408][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2250.698052][T25791] IPv6: Can't replace route, no match found [ 2250.934879][T25795] loop1: detected capacity change from 0 to 4096 [ 2251.709044][T25795] ntfs3: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿ18446744073709551615' [ 2253.067154][T25816] loop1: detected capacity change from 0 to 2048 [ 2253.212210][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2254.193824][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5864'. [ 2255.265217][T25884] loop9: detected capacity change from 0 to 7 [ 2255.304511][T25884] Dev loop9: unable to read RDB block 7 [ 2255.314221][T25884] loop9: unable to read partition table [ 2255.328365][T25884] loop9: partition table beyond EOD, truncated [ 2255.344994][T25884] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 2255.344994][T25884] ) failed (rc=-5) [ 2255.888540][T25892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5879'. [ 2256.203367][T25881] loop1: detected capacity change from 0 to 32768 [ 2258.096449][T25408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (25408) [ 2258.971485][T25935] netlink: 4144 bytes leftover after parsing attributes in process `syz.2.5896'. [ 2259.035908][T25935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5896'. [ 2260.986589][T25962] netlink: 'syz.4.5908': attribute type 29 has an invalid length. [ 2261.025512][T25962] netlink: 'syz.4.5908': attribute type 29 has an invalid length. [ 2261.059625][T25965] netlink: 'syz.4.5908': attribute type 29 has an invalid length. [ 2261.104016][T25962] netlink: 'syz.4.5908': attribute type 29 has an invalid length. [ 2261.182990][T25962] netlink: 'syz.4.5908': attribute type 29 has an invalid length. [ 2261.258553][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5909'. [ 2261.592471][T25975] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2261.797372][T25985] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5910'. [ 2262.713719][T26013] 9pnet: Insufficient options for proto=fd [ 2266.251746][T26063] loop1: detected capacity change from 0 to 256 [ 2268.140906][T26095] netlink: 'syz.3.5953': attribute type 7 has an invalid length. [ 2268.189961][T26072] loop1: detected capacity change from 0 to 32768 [ 2270.368728][T26123] overlayfs: failed to resolve './file1': -2 [ 2274.038111][T26166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2274.138383][T26164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2274.474381][T26161] chnl_net:caif_netlink_parms(): no params data found [ 2274.618666][T26161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.626992][T26161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.046008][T26161] device bridge_slave_0 entered promiscuous mode [ 2275.389580][T26161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.396995][T26161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.405682][T26161] device bridge_slave_1 entered promiscuous mode [ 2275.456833][T26161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.476487][T26161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2275.624526][T26161] team0: Port device team_slave_0 added [ 2276.090444][T18538] Bluetooth: hci2: command 0x0409 tx timeout [ 2276.195720][T26161] team0: Port device team_slave_1 added [ 2276.447181][T26161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.483099][T26161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.544284][T26161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.681488][T26161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.699329][T26161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.366045][T26161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.519755][T26184] loop1: detected capacity change from 0 to 32768 [ 2277.538079][T26161] device hsr_slave_0 entered promiscuous mode [ 2277.555546][T26161] device hsr_slave_1 entered promiscuous mode [ 2277.573919][T26161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2277.601455][T26161] Cannot create hsr debugfs directory [ 2278.619032][T18536] Bluetooth: hci2: command 0x041b tx timeout [ 2278.651540][T26161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.728588][T26232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6001'. [ 2278.820353][T26237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 2278.860810][T26161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.987980][T26161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.133447][T26161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.204240][T26249] team0: Port device team_slave_0 removed [ 2279.219024][T26249] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2279.391195][T26253] loop1: detected capacity change from 0 to 8192 [ 2279.406539][T26161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2279.596179][T26161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2279.606056][T26161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2279.660151][T26161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2280.540959][T26161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2280.598732][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2280.607800][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2280.631830][T26161] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.650852][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2280.671889][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2280.684325][T26086] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.691729][T26086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.693911][T18536] Bluetooth: hci2: command 0x040f tx timeout [ 2280.723875][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2280.739392][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2280.761349][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2280.780977][T26086] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.788300][T26086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.831541][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2280.875166][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2280.909179][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2280.930863][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2281.439936][T26270] loop1: detected capacity change from 0 to 512 [ 2281.536250][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2281.579188][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2281.589411][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2281.598564][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2281.608340][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2281.634300][T26276] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 2281.643299][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2281.666451][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2281.679172][T26161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2281.772413][T26278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.802948][T26278] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.935273][T26279] bridge0: port 3(ipvlan2) entered blocking state [ 2281.946499][T26279] bridge0: port 3(ipvlan2) entered disabled state [ 2282.820145][T18536] Bluetooth: hci2: command 0x0419 tx timeout [ 2282.974153][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2282.981966][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2283.007674][T26161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2283.485381][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.491913][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.655673][T26323] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2283.753877][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2283.777909][T14574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2283.895944][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2283.914763][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2283.965428][T26161] device veth0_vlan entered promiscuous mode [ 2283.991977][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2284.019863][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2284.069652][T26161] device veth1_vlan entered promiscuous mode [ 2284.154191][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2284.207592][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2284.234131][T26161] device veth0_macvtap entered promiscuous mode [ 2284.270179][T26161] device veth1_macvtap entered promiscuous mode [ 2284.329909][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.379835][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.420639][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.474482][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.501714][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.554202][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.588021][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.625033][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.659981][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.695616][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.746078][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.785733][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.806981][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.827905][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.848370][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.867928][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.880946][T26161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2284.890303][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2284.907844][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2284.941995][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2284.973744][T25631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2285.000172][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2285.022276][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2285.044663][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2285.069632][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2285.667731][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2285.977583][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.089455][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.116380][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.136947][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.158169][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.179232][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.200913][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.231783][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.252101][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.279018][T26161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.321127][T26161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.355382][T26161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2286.373084][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2286.503522][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2287.064107][T26161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2287.098776][T26161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2287.146277][T26161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2287.196463][T26161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2287.475406][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2287.511870][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2287.559353][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2287.769309][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2287.844957][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2287.934910][T26365] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2288.000327][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2289.782148][T26400] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2290.340587][T26424] usb usb7: Process 26424 (syz.2.6062) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 2290.946256][T26426] loop1: detected capacity change from 0 to 512 [ 2291.417735][T26438] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2291.494151][T26438] Cannot find set identified by id 0 to match [ 2293.042085][T26451] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2293.439802][T26467] loop1: detected capacity change from 0 to 64 [ 2296.155582][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 2296.155597][ T26] audit: type=1326 audit(1729278319.408:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.272638][ T26] audit: type=1326 audit(1729278319.437:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.333116][ T26] audit: type=1326 audit(1729278319.437:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.401663][ T26] audit: type=1326 audit(1729278319.437:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.465285][ T26] audit: type=1326 audit(1729278319.437:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.500545][ T26] audit: type=1326 audit(1729278319.437:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.536022][ T26] audit: type=1326 audit(1729278319.437:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.572446][ T26] audit: type=1326 audit(1729278319.437:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.608212][ T26] audit: type=1326 audit(1729278319.437:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2296.643241][ T26] audit: type=1326 audit(1729278319.437:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7fc00000 [ 2298.057380][T26524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2300.481622][T26569] tipc: Failed to remove unknown binding: 66,1,1/0:3125571154/3125571156 [ 2300.490781][T26569] tipc: Failed to remove unknown binding: 66,1,1/0:3125571154/3125571156 [ 2302.900369][T26585] netlink: 'syz.2.6122': attribute type 298 has an invalid length. [ 2302.999324][T13314] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci8/hci8:201' [ 2303.011027][T13314] CPU: 1 PID: 13314 Comm: kworker/u5:0 Not tainted 5.15.168-syzkaller #0 [ 2303.020404][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2303.030709][T13314] Workqueue: hci8 hci_rx_work [ 2303.035592][T13314] Call Trace: [ 2303.038957][T13314] [ 2303.041978][T13314] dump_stack_lvl+0x1e3/0x2d0 [ 2303.046661][T13314] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2303.052369][T13314] ? panic+0x860/0x860 [ 2303.056536][T13314] ? sysfs_create_dir_ns+0x282/0x390 [ 2303.061826][T13314] sysfs_create_dir_ns+0x2c6/0x390 [ 2303.067230][T13314] ? sysfs_warn_dup+0xa0/0xa0 [ 2303.071919][T13314] ? do_raw_spin_unlock+0x137/0x8b0 [ 2303.077363][T13314] kobject_add_internal+0x6e0/0xe00 [ 2303.082664][T13314] kobject_add+0x14e/0x210 [ 2303.087084][T13314] ? lockdep_hardirqs_on+0x94/0x130 [ 2303.092539][T13314] ? device_add+0x3c2/0xfd0 [ 2303.097165][T13314] ? kobject_init+0x1d0/0x1d0 [ 2303.101946][T13314] ? device_add+0x3c2/0xfd0 [ 2303.106708][T13314] device_add+0x476/0xfd0 [ 2303.111218][T13314] hci_conn_add_sysfs+0xe4/0x1f0 [ 2303.116347][T13314] le_conn_complete_evt+0xc15/0x1500 [ 2303.121784][T13314] ? cs_le_create_conn+0x5f0/0x5f0 [ 2303.127087][T13314] hci_le_meta_evt+0x28c/0x3f50 [ 2303.132043][T13314] ? __lock_acquire+0x1ff0/0x1ff0 [ 2303.137265][T13314] ? __mutex_lock_common+0x444/0x25a0 [ 2303.142736][T13314] ? mark_lock+0x98/0x340 [ 2303.147251][T13314] ? hci_remote_host_features_evt+0x280/0x280 [ 2303.153335][T13314] ? __mutex_unlock_slowpath+0x218/0x750 [ 2303.159151][T13314] ? hci_event_packet+0x3b4/0x1550 [ 2303.164381][T13314] ? mutex_unlock+0x10/0x10 [ 2303.169005][T13314] ? mark_lock+0x98/0x340 [ 2303.173456][T13314] hci_event_packet+0xc41/0x1550 [ 2303.178677][T13314] ? rcu_lock_release+0x20/0x20 [ 2303.183723][T13314] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 2303.189959][T13314] ? hci_send_to_monitor+0x99/0x4d0 [ 2303.195264][T13314] hci_rx_work+0x232/0x990 [ 2303.199728][T13314] process_one_work+0x8a1/0x10c0 [ 2303.204881][T13314] ? worker_detach_from_pool+0x260/0x260 [ 2303.210520][T13314] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2303.216533][T13314] ? kthread_data+0x4e/0xc0 [ 2303.221064][T13314] ? wq_worker_running+0x97/0x170 [ 2303.226291][T13314] worker_thread+0xaca/0x1280 [ 2303.231181][T13314] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2303.237204][T13314] kthread+0x3f6/0x4f0 [ 2303.241372][T13314] ? rcu_lock_release+0x20/0x20 [ 2303.246547][T13314] ? kthread_blkcg+0xd0/0xd0 [ 2303.251358][T13314] ret_from_fork+0x1f/0x30 [ 2303.256230][T13314] [ 2303.311357][T13314] kobject_add_internal failed for hci8:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2303.327616][T13314] Bluetooth: hci8: failed to register connection device [ 2303.574273][T26594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6127'. [ 2305.353644][T26600] chnl_net:caif_netlink_parms(): no params data found [ 2305.779580][T26627] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2305.867156][T26600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2305.912495][T26600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2305.946135][T26600] device bridge_slave_0 entered promiscuous mode [ 2305.972547][T26600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.997697][T26600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.028637][T26600] device bridge_slave_1 entered promiscuous mode [ 2306.153517][T26600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2306.197478][T26600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2306.346428][T26600] team0: Port device team_slave_0 added [ 2306.365051][T26600] team0: Port device team_slave_1 added [ 2307.036025][T18846] Bluetooth: hci9: command 0x0409 tx timeout [ 2307.334430][T26600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2307.370741][T26600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2307.489576][T26600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2307.655278][T26600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2308.557575][T26654] binder: 26648:26654 ioctl 40046205 9999999999999999 returned -22 [ 2309.067307][ T3585] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 2309.077648][ T3585] CPU: 1 PID: 3585 Comm: kworker/u5:7 Not tainted 5.15.168-syzkaller #0 [ 2309.086193][ T3585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2309.096256][ T3585] Workqueue: hci3 hci_rx_work [ 2309.101123][ T3585] Call Trace: [ 2309.104411][ T3585] [ 2309.107345][ T3585] dump_stack_lvl+0x1e3/0x2d0 [ 2309.112119][ T3585] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2309.117936][ T3585] ? panic+0x860/0x860 [ 2309.122204][ T3585] ? sysfs_create_dir_ns+0x282/0x390 [ 2309.127798][ T3585] sysfs_create_dir_ns+0x2c6/0x390 [ 2309.133135][ T3585] ? sysfs_warn_dup+0xa0/0xa0 [ 2309.137827][ T3585] ? do_raw_spin_unlock+0x137/0x8b0 [ 2309.143045][ T3585] kobject_add_internal+0x6e0/0xe00 [ 2309.148255][ T3585] kobject_add+0x14e/0x210 [ 2309.152678][ T3585] ? device_add+0x3c2/0xfd0 [ 2309.157441][ T3585] ? kobject_init+0x1d0/0x1d0 [ 2309.162394][ T3585] ? __raw_spin_lock_init+0x41/0x100 [ 2309.167874][ T3585] ? get_device_parent+0x128/0x400 [ 2309.173206][ T3585] device_add+0x476/0xfd0 [ 2309.177634][ T3585] hci_conn_add_sysfs+0xe4/0x1f0 [ 2309.182671][ T3585] le_conn_complete_evt+0xc15/0x1500 [ 2309.188273][ T3585] ? cs_le_create_conn+0x5f0/0x5f0 [ 2309.193423][ T3585] hci_le_meta_evt+0x28c/0x3f50 [ 2309.198291][ T3585] ? __lock_acquire+0x1ff0/0x1ff0 [ 2309.203412][ T3585] ? __mutex_lock_common+0x444/0x25a0 [ 2309.208970][ T3585] ? hci_remote_host_features_evt+0x280/0x280 [ 2309.215044][ T3585] ? __mutex_unlock_slowpath+0x218/0x750 [ 2309.220892][ T3585] ? hci_event_packet+0x3b4/0x1550 [ 2309.226367][ T3585] ? mutex_unlock+0x10/0x10 [ 2309.231065][ T3585] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2309.237051][ T3585] ? print_irqtrace_events+0x210/0x210 [ 2309.242699][ T3585] hci_event_packet+0xc41/0x1550 [ 2309.247854][ T3585] ? rcu_lock_release+0x20/0x20 [ 2309.252809][ T3585] ? hci_send_to_monitor+0x99/0x4d0 [ 2309.258058][ T3585] hci_rx_work+0x232/0x990 [ 2309.262493][ T3585] process_one_work+0x8a1/0x10c0 [ 2309.267539][ T3585] ? worker_detach_from_pool+0x260/0x260 [ 2309.273442][ T3585] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2309.279176][ T3585] ? kthread_data+0x4e/0xc0 [ 2309.283697][ T3585] ? wq_worker_running+0x97/0x170 [ 2309.288738][ T3585] worker_thread+0xaca/0x1280 [ 2309.293531][ T3585] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2309.299497][ T3585] kthread+0x3f6/0x4f0 [ 2309.303573][ T3585] ? rcu_lock_release+0x20/0x20 [ 2309.308522][ T3585] ? kthread_blkcg+0xd0/0xd0 [ 2309.313162][ T3585] ret_from_fork+0x1f/0x30 [ 2309.317808][ T3585] [ 2309.320942][ C1] vkms_vblank_simulate: vblank timer overrun [ 2309.344395][T18846] Bluetooth: hci9: command 0x041b tx timeout [ 2309.358963][ T3585] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2309.374169][ T3585] Bluetooth: hci3: failed to register connection device [ 2309.385424][T26600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.625198][T26600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.574114][T26600] device hsr_slave_0 entered promiscuous mode [ 2310.621258][T26600] device hsr_slave_1 entered promiscuous mode [ 2310.672050][T26600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.702305][T26600] Cannot create hsr debugfs directory [ 2311.088937][T26682] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2311.717134][T18846] Bluetooth: hci9: command 0x040f tx timeout [ 2311.857689][T26691] overlayfs: failed to resolve './file1': -2 [ 2311.948631][T25631] bridge0: port 2(bridge_slave_1) entered disabled state [ 2311.985368][T26696] netlink: 'syz.2.6157': attribute type 5 has an invalid length. [ 2312.113099][T26600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.163774][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6160'. [ 2312.223695][T26600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.326397][T26600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.581574][T26600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.081189][T26719] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2313.742969][T14434] Bluetooth: hci9: command 0x0419 tx timeout [ 2314.320819][T26600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2314.382353][T26600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2314.424483][T26600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2314.502067][T26600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2315.168024][T26600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2315.308387][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2315.327323][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2315.369603][T26600] 8021q: adding VLAN 0 to HW filter on device team0 [ 2315.380700][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2315.422469][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2315.530065][T26756] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2315.560510][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.567852][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2315.709341][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2315.748590][T14433] Bluetooth: hci3: command 0x0406 tx timeout [ 2315.780286][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2315.810540][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2315.859503][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.866787][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2315.949367][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2315.982914][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2316.000134][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6178'. [ 2316.034381][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2316.094818][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2316.104417][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2316.136813][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2316.171132][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2316.203334][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2316.223641][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2316.250519][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2316.270212][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2316.302314][T26600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2316.766408][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2316.775557][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2316.836744][T26600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2316.992081][T26797] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2317.257355][T26600] device veth0_vlan entered promiscuous mode [ 2317.339923][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2317.373307][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2317.384222][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2317.393700][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2317.413350][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2317.428493][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2317.447452][T26600] device veth1_vlan entered promiscuous mode [ 2317.521812][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2317.537091][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2317.575795][T26600] device veth0_macvtap entered promiscuous mode [ 2317.603953][T26600] device veth1_macvtap entered promiscuous mode [ 2317.651027][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.698853][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.731257][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.792854][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.819554][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.869963][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.015264][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.027570][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.037873][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.048581][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.059965][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.073605][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.085035][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.096394][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.112926][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.124072][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.146010][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.161769][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.187750][T26600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2319.216772][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.238699][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.263337][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.305183][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.331800][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.350806][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.361114][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.372617][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.382940][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.394498][ T13] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2319.402673][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.414371][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.431959][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.753727][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.766786][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 2319.880078][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.893763][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2320.014698][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.046599][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.078997][ T13] usb 3-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=22.a4 [ 2320.100910][T26600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.105256][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.114027][T26600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.132824][T26600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2320.360168][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2320.389098][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2320.416988][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2320.512708][ T13] usb 3-1: Product: syz [ 2320.517170][ T13] usb 3-1: Manufacturer: syz [ 2320.522300][ T13] usb 3-1: SerialNumber: syz [ 2320.529219][ T13] usb 3-1: config 0 descriptor?? [ 2320.544623][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2320.679730][T26846] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2321.170839][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2321.364124][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2321.416340][T26600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.462078][T26600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.490178][T26600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.501562][ T13] usb 3-1: Found UVC 0.00 device syz (30c9:0093) [ 2321.508412][ T13] usb 3-1: No valid video chain found. [ 2321.521551][ T13] usb 3-1: USB disconnect, device number 54 [ 2321.669778][T26600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.815304][T20570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.840823][T20570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.886256][T20570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2321.912076][T20570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.938034][T20570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.972164][T25433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2322.518686][T26892] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2324.107073][T26939] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2325.112968][T26917] loop1: detected capacity change from 0 to 32768 [ 2327.068074][T26981] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2328.358935][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6256'. [ 2328.418485][T26967] loop1: detected capacity change from 0 to 32768 [ 2328.477695][T27007] tipc: Enabling of bearer rejected, failed to enable media [ 2328.539562][T26967] /dev/loop1: Can't open blockdev [ 2329.713360][T27021] tipc: Enabling of bearer rejected, failed to enable media [ 2329.741374][T27018] loop1: detected capacity change from 0 to 32768 [ 2330.345926][T27029] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2332.067636][T27065] tipc: Enabling of bearer rejected, failed to enable media [ 2332.693213][T27075] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2335.105715][T27117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6295'. [ 2335.198475][T27119] overlayfs: failed to resolve './file1': -2 [ 2335.385749][T27123] sp0: Synchronizing with TNC [ 2335.920948][T27125] loop1: detected capacity change from 0 to 32768 [ 2336.097714][T27137] tipc: Enabling of bearer rejected, failed to enable media [ 2337.662469][T27150] loop1: detected capacity change from 0 to 512 [ 2338.379817][T27150] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 2338.645399][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6311'. [ 2338.836633][T27164] loop1: detected capacity change from 0 to 4096 [ 2340.176619][T27180] loop1: detected capacity change from 0 to 32768 [ 2340.858936][T27195] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2341.810497][T27216] ALSA: mixer_oss: invalid OSS volume 'Ñ' [ 2341.935696][T27220] tipc: Enabling of bearer rejected, failed to enable media [ 2342.781413][T27228] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2343.255795][ T3616] Bluetooth: hci7: command 0x0406 tx timeout [ 2343.723018][T27240] capability: warning: `syz.0.6339' uses 32-bit capabilities (legacy support in use) [ 2344.800569][T27274] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2345.725437][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.731985][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.066910][T27295] loop1: detected capacity change from 0 to 32768 [ 2347.158998][T27127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (27127) [ 2347.521422][T27311] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2348.286737][T27319] tipc: Enabling of bearer rejected, failed to enable media [ 2349.723248][T27358] tipc: Enabling of bearer rejected, failed to enable media [ 2350.282312][T27368] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2351.686865][T27381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6386'. [ 2352.135802][T27396] 9pnet: Insufficient options for proto=fd [ 2352.653237][T18842] Bluetooth: hci8: command 0x0406 tx timeout [ 2352.767289][T27406] tipc: Enabling of bearer rejected, failed to enable media [ 2353.823853][T27427] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2353.986913][ T8466] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2355.316183][ T8466] Bluetooth: hci2: Injecting HCI hardware error event [ 2355.323554][ T3585] Bluetooth: hci2: hardware error 0x00 [ 2356.444263][T27471] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2359.734589][T27509] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2359.942862][T27510] loop1: detected capacity change from 0 to 32768 [ 2359.960203][T27509] overlayfs: missing 'lowerdir' [ 2360.212961][T27520] device bridge_slave_0 left promiscuous mode [ 2360.336748][T27526] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2360.373604][T27520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.536152][T27520] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2360.753673][T27539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6441'. [ 2361.923123][T27576] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2363.250622][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6459'. [ 2363.604545][T27566] loop1: detected capacity change from 0 to 32768 [ 2363.964698][T27566] /dev/loop1: Can't open blockdev [ 2364.390579][T27600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6463'. [ 2364.404562][T27600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6463'. [ 2365.804971][T27616] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2366.310543][T27634] loop1: detected capacity change from 0 to 64 [ 2368.616684][T23761] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2368.718527][T27654] syz.4.6483 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2369.345277][T27662] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2370.445125][T23761] usb 3-1: Using ep0 maxpacket: 32 [ 2370.505115][T23761] usb 3-1: device descriptor read/all, error -71 [ 2374.622591][T27720] loop1: detected capacity change from 0 to 1024 [ 2375.014408][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 2375.014427][ T26] audit: type=1326 audit(1729278398.134:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27729 comm="syz.4.6504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2375.520443][T18851] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2375.528334][ T26] audit: type=1326 audit(1729278398.134:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27729 comm="syz.4.6504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2375.613605][ T26] audit: type=1326 audit(1729278398.134:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27729 comm="syz.4.6504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2375.938566][T18851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2376.002618][T18851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2376.202508][T18851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2376.292677][ T26] audit: type=1326 audit(1729278398.134:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27729 comm="syz.4.6504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2376.385234][ T26] audit: type=1326 audit(1729278399.504:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.4.6509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5347db5ff9 code=0x0 [ 2376.462757][T27747] loop1: detected capacity change from 0 to 32768 [ 2376.470749][T18851] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 2376.479961][T18851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.498505][T18851] usb 4-1: config 0 descriptor?? [ 2376.825644][T18538] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2377.105595][T18538] usb 3-1: Using ep0 maxpacket: 16 [ 2377.225807][T18538] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 2377.234122][T18538] usb 3-1: config 0 has no interface number 0 [ 2377.350357][T27756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2377.357776][T27756] IPv6: NLM_F_CREATE should be set when creating new route [ 2377.445721][T18538] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=ab.22 [ 2377.458093][T18851] holtek_mouse 0003:04D9:A070.0053: item fetching failed at offset 1/5 [ 2377.468770][T18851] holtek_mouse 0003:04D9:A070.0053: hid parse failed: -22 [ 2377.472285][T18538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.476201][T18851] holtek_mouse: probe of 0003:04D9:A070.0053 failed with error -22 [ 2377.562282][T18851] usb 4-1: USB disconnect, device number 49 [ 2378.187712][T18538] usb 3-1: Product: syz [ 2378.192089][T18538] usb 3-1: Manufacturer: syz [ 2378.196976][T18538] usb 3-1: SerialNumber: syz [ 2378.283244][T18538] usb 3-1: config 0 descriptor?? [ 2378.326997][T18538] ftdi_sio 3-1:0.3: FTDI USB Serial Device converter detected [ 2378.356710][T18538] usb 3-1: Detected FT-X [ 2378.563186][T18538] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2378.593817][T18538] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2378.635575][T18538] ftdi_sio 3-1:0.3: GPIO initialisation failed: -71 [ 2378.677884][T18538] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2378.748379][T18538] usb 3-1: USB disconnect, device number 57 [ 2379.510462][T18538] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2379.521546][T18538] ftdi_sio 3-1:0.3: device disconnected [ 2382.050145][T27783] input: syz0 as /devices/virtual/input/input169 [ 2382.843188][T18538] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2383.635714][T18538] usb 3-1: Using ep0 maxpacket: 8 [ 2383.756331][T18538] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 2383.764851][T18538] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.845739][T18538] usb 3-1: config 135 has no interface number 0 [ 2383.865792][T18538] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 2383.925768][T18538] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 2383.981474][T18538] usb 3-1: config 135 interface 230 has no altsetting 0 [ 2384.151910][T27849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6541'. [ 2384.161456][T27849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6541'. [ 2384.588278][T18538] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 2384.605700][T18538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.613805][T18538] usb 3-1: Product: syz [ 2384.625881][T18538] usb 3-1: Manufacturer: syz [ 2384.631781][T18538] usb 3-1: SerialNumber: syz [ 2384.896003][T18538] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 2384.908887][T18538] usb 3-1: No valid video chain found. [ 2385.100320][T18851] usb 3-1: USB disconnect, device number 58 [ 2385.238994][ T26] audit: type=1326 audit(1729278408.363:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27859 comm="syz.4.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2385.285975][ T26] audit: type=1326 audit(1729278408.383:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27859 comm="syz.4.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2385.369788][ T26] audit: type=1326 audit(1729278408.383:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27859 comm="syz.4.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2387.076385][ T26] audit: type=1107 audit(1729278410.193:306): pid=27881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2387.167785][ T26] audit: type=1326 audit(1729278410.293:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.1.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2387.250612][T27885] serio: Serial port pts0 [ 2387.315965][ T26] audit: type=1326 audit(1729278410.313:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.1.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2387.586232][T18538] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2387.636031][ T26] audit: type=1326 audit(1729278410.323:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.1.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2387.719827][ T26] audit: type=1326 audit(1729278410.343:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.1.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2387.752649][ T26] audit: type=1326 audit(1729278410.343:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.1.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2387.897743][ T26] audit: type=1326 audit(1729278410.343:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.1.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2387.996119][T18538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.015064][T18538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.102281][T27902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6556'. [ 2388.745619][T18538] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2388.755205][T18538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.810359][T18538] usb 3-1: config 0 descriptor?? [ 2388.850415][T27907] loop1: detected capacity change from 0 to 512 [ 2389.154065][T27909] loop1: detected capacity change from 0 to 128 [ 2389.436103][T18538] usbhid 3-1:0.0: can't add hid device: -71 [ 2390.171411][T18538] usbhid: probe of 3-1:0.0 failed with error -71 [ 2390.180097][T18538] usb 3-1: USB disconnect, device number 59 [ 2390.241248][T27920] loop1: detected capacity change from 0 to 256 [ 2390.326129][T27922] ptrace attach of "./syz-executor exec"[25401] was attempted by "./syz-executor exec"[27922] [ 2390.337051][T27923] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2392.436641][T14433] Bluetooth: hci10: command 0x1003 tx timeout [ 2392.443107][T13314] Bluetooth: hci10: sending frame failed (-49) [ 2392.473671][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 2392.473694][ T26] audit: type=1326 audit(1729278415.593:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2392.916776][ T26] audit: type=1326 audit(1729278415.593:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.162134][ T26] audit: type=1326 audit(1729278415.593:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.256480][T18534] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2393.321989][ T26] audit: type=1326 audit(1729278415.593:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.348470][T27951] binder: Unknown parameter 'func' [ 2393.395929][ T26] audit: type=1326 audit(1729278415.593:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.446041][ T26] audit: type=1326 audit(1729278415.593:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.515976][ T26] audit: type=1326 audit(1729278415.593:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.565972][ T26] audit: type=1326 audit(1729278415.593:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.646119][ T26] audit: type=1326 audit(1729278415.603:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2393.686296][T18534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2393.688572][T27959] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 2393.705978][ T26] audit: type=1326 audit(1729278415.603:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.6575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76fde66033 code=0x7ffc0000 [ 2393.729588][T18534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2393.756052][T18534] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2393.765110][T18534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.792433][T18534] usb 3-1: config 0 descriptor?? [ 2393.816885][T18538] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2394.418080][T18538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2394.443339][T18538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2394.465965][T18538] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2394.475132][T18538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2394.495071][T18538] usb 2-1: config 0 descriptor?? [ 2394.501099][T18534] usb 3-1: string descriptor 0 read error: -22 [ 2394.512540][ T8466] Bluetooth: hci10: command 0x1001 tx timeout [ 2394.519464][T13314] Bluetooth: hci10: sending frame failed (-49) [ 2394.709387][T18534] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0054/input/input170 [ 2394.791343][T18534] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0054/input/input171 [ 2394.846790][T18534] uclogic 0003:256C:006D.0054: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 2394.913927][T14434] usb 3-1: USB disconnect, device number 60 [ 2395.825076][T27976] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2396.609923][T18534] Bluetooth: hci10: command 0x1009 tx timeout [ 2396.646053][T18538] usbhid 2-1:0.0: can't add hid device: -71 [ 2396.652252][T18538] usbhid: probe of 2-1:0.0 failed with error -71 [ 2396.690458][T18538] usb 2-1: USB disconnect, device number 31 [ 2397.014171][T27994] tipc: Started in network mode [ 2397.019813][T27994] tipc: Node identity ac14140f, cluster identity 4711 [ 2397.040415][T27994] tipc: New replicast peer: 255.255.255.255 [ 2397.050654][T27994] tipc: Enabled bearer , priority 10 [ 2397.976388][T28005] loop1: detected capacity change from 0 to 1024 [ 2398.066022][T14433] tipc: Node number set to 2886997007 [ 2398.327893][T28010] loop1: detected capacity change from 0 to 512 [ 2398.572812][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6594'. [ 2398.625875][T28014] device vlan2 entered promiscuous mode [ 2398.631651][T28014] device ip6gretap0 entered promiscuous mode [ 2398.971437][T28010] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 2398.981556][T28010] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2399.482992][T28023] binder: 28020:28023 ioctl 4018620d 0 returned -22 [ 2399.624120][T28025] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2401.213799][T28042] device vlan2 entered promiscuous mode [ 2401.236529][T28042] device ip6gretap0 entered promiscuous mode [ 2401.293038][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 2401.293054][ T26] audit: type=1326 audit(1729278424.413:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28043 comm="syz.2.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2401.325589][T28042] device ip6gretap0 left promiscuous mode [ 2401.359178][ T26] audit: type=1326 audit(1729278424.443:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28043 comm="syz.2.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2401.466405][ T26] audit: type=1326 audit(1729278424.443:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28043 comm="syz.2.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2401.496953][ T26] audit: type=1326 audit(1729278424.443:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28043 comm="syz.2.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2401.618950][ T26] audit: type=1326 audit(1729278424.443:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28043 comm="syz.2.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2401.746490][T26826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2402.597331][T26826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2402.709471][T28062] loop1: detected capacity change from 0 to 1024 [ 2402.762771][T26826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2402.815706][T28045] chnl_net:caif_netlink_parms(): no params data found [ 2403.463723][T28071] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2403.808285][ T3616] Bluetooth: hci10: command 0x0409 tx timeout [ 2403.843524][T26826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.066478][ T26] audit: type=1107 audit(1729278427.183:399): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2404.094929][T28081] device wireguard0 entered promiscuous mode [ 2404.225706][T28089] loop1: detected capacity change from 0 to 512 [ 2404.808914][T28045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.817431][T28045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.840209][T28089] loop1: detected capacity change from 0 to 512 [ 2404.844724][T28045] device bridge_slave_0 entered promiscuous mode [ 2404.867238][T28045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2404.874665][T28045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2404.900665][T28045] device bridge_slave_1 entered promiscuous mode [ 2405.250410][ T26] audit: type=1326 audit(1729278428.373:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2405.287298][T28045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2405.307834][T28045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2405.323541][ T26] audit: type=1326 audit(1729278428.393:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2405.555756][ T26] audit: type=1326 audit(1729278428.393:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2406.051624][ T3616] Bluetooth: hci10: command 0x041b tx timeout [ 2406.099425][T28045] team0: Port device team_slave_0 added [ 2406.109822][ T26] audit: type=1326 audit(1729278428.393:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9196077ff9 code=0x7ffc0000 [ 2406.203116][T28045] team0: Port device team_slave_1 added [ 2406.448617][T28045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2406.448638][T28045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2406.448663][T28045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2406.485290][T28045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2406.485310][T28045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2406.485335][T28045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2406.617083][T28045] device hsr_slave_0 entered promiscuous mode [ 2406.618752][T28129] loop1: detected capacity change from 0 to 1024 [ 2406.634130][T28045] device hsr_slave_1 entered promiscuous mode [ 2406.639381][T28045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2406.639527][T28045] Cannot create hsr debugfs directory [ 2406.676395][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.676437][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.856865][T28131] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2406.984988][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 2406.985003][ T26] audit: type=1326 audit(1729278430.103:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.008673][ T26] audit: type=1326 audit(1729278430.133:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.008718][ T26] audit: type=1326 audit(1729278430.133:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.008751][ T26] audit: type=1326 audit(1729278430.133:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.017421][ T26] audit: type=1326 audit(1729278430.133:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.017459][ T26] audit: type=1326 audit(1729278430.143:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.017487][ T26] audit: type=1326 audit(1729278430.143:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.017514][ T26] audit: type=1326 audit(1729278430.143:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.017544][ T26] audit: type=1326 audit(1729278430.143:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2407.018471][ T26] audit: type=1326 audit(1729278430.143:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28141 comm="syz.2.6621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x7ffc0000 [ 2408.089216][T26826] device hsr_slave_0 left promiscuous mode [ 2408.089727][T26826] device hsr_slave_1 left promiscuous mode [ 2408.090262][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2408.090351][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2408.090983][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2408.091017][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2408.091559][T26826] device bridge_slave_1 left promiscuous mode [ 2408.091673][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2408.093073][T26826] device bridge_slave_0 left promiscuous mode [ 2408.093188][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2408.124653][T26826] device veth1_macvtap left promiscuous mode [ 2408.124765][T26826] device veth0_macvtap left promiscuous mode [ 2408.124944][T26826] device veth1_vlan left promiscuous mode [ 2408.125003][T26826] device veth0_vlan left promiscuous mode [ 2408.176143][ T8466] Bluetooth: hci10: command 0x040f tx timeout [ 2409.002715][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2409.077100][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2409.124163][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2409.190239][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2409.653889][T26826] bond0 (unregistering): Released all slaves [ 2410.218847][T28045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2410.251242][T28045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2410.258767][ T3616] Bluetooth: hci10: command 0x0419 tx timeout [ 2410.378119][T28045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2410.408897][T28045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2410.905251][T28188] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2411.009733][T28045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2411.054461][T28045] 8021q: adding VLAN 0 to HW filter on device team0 [ 2411.131919][T27380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2411.142112][T27380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2411.200055][T27380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2411.246995][T27380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2411.321488][T27380] bridge0: port 1(bridge_slave_0) entered blocking state [ 2411.328640][T27380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2411.386622][T27380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2411.416497][T28215] ptrace attach of "./syz-executor exec"[24266] was attempted by "./syz-executor exec"[28215] [ 2411.712948][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2411.910347][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2412.123567][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.130841][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2412.196237][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2412.222994][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 2412.223010][ T26] audit: type=1326 audit(1729278435.343:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2412.309779][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2412.330310][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2412.356576][ T26] audit: type=1326 audit(1729278435.343:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2412.383223][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2412.418753][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2412.451808][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2412.503158][ T26] audit: type=1326 audit(1729278435.343:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2412.727025][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2412.739549][ T26] audit: type=1326 audit(1729278435.343:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2412.803463][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2412.888913][ T26] audit: type=1326 audit(1729278435.343:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2412.914703][T28225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6636'. [ 2412.984710][ T26] audit: type=1326 audit(1729278435.343:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2413.026649][T28045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2413.045936][T28045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2413.054820][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2413.074145][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2413.112841][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2413.192695][ T26] audit: type=1326 audit(1729278435.343:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2413.222769][T12710] Bluetooth: hci3: command 0x0409 tx timeout [ 2413.754780][ T26] audit: type=1326 audit(1729278435.343:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2413.998810][ T26] audit: type=1326 audit(1729278435.343:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2414.067889][ T26] audit: type=1326 audit(1729278435.343:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28221 comm="syz.0.6636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d67e9ff9 code=0x7ffc0000 [ 2414.192009][T28203] chnl_net:caif_netlink_parms(): no params data found [ 2415.453379][T15058] Bluetooth: hci3: command 0x041b tx timeout [ 2415.581660][T28267] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2416.786174][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2416.794125][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2416.818056][T28203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.825365][T28203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.834847][T28203] device bridge_slave_0 entered promiscuous mode [ 2416.873059][T28045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2417.028222][T28203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2417.035486][T28203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.077431][T28203] device bridge_slave_1 entered promiscuous mode [ 2417.112130][T28295] ªªªªªª: renamed from vlan0 [ 2417.535990][T28203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2417.539117][T15058] Bluetooth: hci3: command 0x040f tx timeout [ 2417.557319][T28203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2417.755433][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2417.795198][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2417.823026][T28203] team0: Port device team_slave_0 added [ 2417.866539][T28203] team0: Port device team_slave_1 added [ 2418.109679][T28203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2418.138012][T28203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2418.242097][T28203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2418.304545][T28045] device veth0_vlan entered promiscuous mode [ 2418.526738][T28318] device veth0_vlan left promiscuous mode [ 2418.547728][T28318] device veth0_vlan entered promiscuous mode [ 2418.590997][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2418.621170][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2418.668832][T28203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2418.701970][T28203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2418.836269][T28203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2418.987449][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2419.007100][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2419.064744][T28203] device hsr_slave_0 entered promiscuous mode [ 2419.090550][T28203] device hsr_slave_1 entered promiscuous mode [ 2419.111713][T28203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2419.121678][T28203] Cannot create hsr debugfs directory [ 2419.139722][T28045] device veth1_vlan entered promiscuous mode [ 2419.316458][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2419.327278][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2419.349786][T28203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.381945][T28045] device veth0_macvtap entered promiscuous mode [ 2419.411091][T28045] device veth1_macvtap entered promiscuous mode [ 2419.448342][T28203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.513932][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.547981][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.583056][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.605531][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.616255][T15058] Bluetooth: hci3: command 0x0419 tx timeout [ 2419.626169][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.649040][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.796379][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.829689][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.876242][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.918080][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.966371][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.017062][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.055098][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.235108][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.267167][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.302382][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.828074][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.880640][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.922211][T28045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2420.954064][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2420.973051][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2420.992158][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2421.007530][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2421.017161][T28344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6649'. [ 2421.085524][T28203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.125608][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 2421.125632][ T26] audit: type=1326 audit(1729278444.243:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.162187][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.183453][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.212861][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.234669][ T26] audit: type=1326 audit(1729278444.253:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.238994][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.308394][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.327229][ T26] audit: type=1326 audit(1729278444.253:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.346121][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.366195][ T26] audit: type=1326 audit(1729278444.253:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.386158][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.401955][ T26] audit: type=1326 audit(1729278444.253:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.427938][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.435861][ T26] audit: type=1326 audit(1729278444.253:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.446088][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.472193][ T26] audit: type=1326 audit(1729278444.313:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.506553][ T26] audit: type=1326 audit(1729278444.313:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.4.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2421.516150][T15058] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2421.546075][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.556006][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.583551][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.605293][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.626129][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.647953][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.666166][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.689369][T28045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.714327][T28045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.737893][T28045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2421.747226][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2421.773933][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2421.807982][T28045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.825000][T28045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.837100][T15058] usb 5-1: Using ep0 maxpacket: 16 [ 2421.848031][T28045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.866261][T28045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.928340][T28203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.979399][T15058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2421.996234][T15058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2422.030525][T15058] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2422.085686][T15058] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2422.105463][T15058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.138460][T15058] usb 5-1: config 0 descriptor?? [ 2422.191339][T14514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2422.212405][T14514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2422.266277][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2422.325509][T28203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2422.348463][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2422.351274][T28203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2422.376874][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2422.387739][T28203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2422.476795][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2422.495145][T28203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2422.618885][T15058] koneplus 0003:1E7D:2E22.0055: item fetching failed at offset 0/2 [ 2422.629615][T15058] koneplus 0003:1E7D:2E22.0055: parse failed [ 2422.635666][T15058] koneplus: probe of 0003:1E7D:2E22.0055 failed with error -22 [ 2422.779464][T28203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2422.809810][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2422.828690][T12710] usb 5-1: USB disconnect, device number 30 [ 2422.829226][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2422.889572][T28203] 8021q: adding VLAN 0 to HW filter on device team0 [ 2423.053131][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2423.083188][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2423.254532][T28360] overlayfs: invalid origin (0000) [ 2423.385151][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 2423.392681][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2423.492872][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2423.785925][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2423.805308][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2423.836853][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2423.844149][ T3726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2423.873583][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2423.907676][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2423.947218][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2423.980513][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2424.088293][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2424.137235][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2424.181217][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2424.248906][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2424.267931][T14514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2424.334688][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2424.347951][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2424.359739][T28203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2424.431466][T26826] device hsr_slave_0 left promiscuous mode [ 2424.443798][T26826] device hsr_slave_1 left promiscuous mode [ 2424.457281][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2424.554917][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2424.593731][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2424.626831][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2424.685899][T26826] device bridge_slave_1 left promiscuous mode [ 2424.711445][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2425.288265][T18846] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2425.476518][T26826] device bridge_slave_0 left promiscuous mode [ 2425.512123][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.580301][T26826] device veth1_macvtap left promiscuous mode [ 2425.616767][T26826] device veth0_macvtap left promiscuous mode [ 2425.623138][T26826] device veth1_vlan left promiscuous mode [ 2425.658634][T18846] usb 3-1: Using ep0 maxpacket: 8 [ 2425.694393][T26826] device veth0_vlan left promiscuous mode [ 2425.765566][ T26] audit: type=1326 audit(1729278448.883:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2425.788865][ T26] audit: type=1326 audit(1729278448.883:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2425.857361][T18846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2425.966307][T18846] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2425.985379][T18846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2426.006484][T18846] usb 3-1: SerialNumber: syz [ 2426.037471][T18846] usb 3-1: config 0 descriptor?? [ 2426.109001][T18846] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 2426.129026][T18846] usb 3-1: No valid video chain found. [ 2426.269001][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 2426.269015][ T26] audit: type=1326 audit(1729278449.393:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2426.299245][T28383] mmap: syz.4.6657 (28383) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 2426.353176][ T26] audit: type=1326 audit(1729278449.423:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2426.495751][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2426.548757][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2426.578051][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.626626][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.856501][T26826] bond0 (unregistering): Released all slaves [ 2427.316511][T28203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2427.341379][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2427.384536][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2427.442044][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2427.470712][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2427.527027][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2427.560690][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2427.590597][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2427.617519][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2427.641780][T28203] device veth0_vlan entered promiscuous mode [ 2427.680599][T28203] device veth1_vlan entered promiscuous mode [ 2427.764635][ T23] usb 3-1: USB disconnect, device number 61 [ 2427.766792][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2427.800002][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2427.827418][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2427.855420][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2427.890217][T28203] device veth0_macvtap entered promiscuous mode [ 2427.921285][T28203] device veth1_macvtap entered promiscuous mode [ 2427.948127][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2427.975436][T26086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2428.000893][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.076221][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.117666][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.294888][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.306162][ T26] audit: type=1326 audit(1729278451.403:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.2.6666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76fde65ff9 code=0x0 [ 2428.587292][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.785379][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.796473][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.807464][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.818344][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.829372][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.839980][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.850668][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.860953][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.888387][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.923203][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.945131][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.965164][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.993596][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.019377][T28203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2429.042006][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.066611][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.129607][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.156194][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.196701][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.231849][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.262439][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.289713][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.313632][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.337269][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.354619][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.377318][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.401904][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.447600][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.462196][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.482884][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.511276][T28203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.535298][T28203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.572393][T28203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2429.598196][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2429.613808][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2429.634728][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2429.678429][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2429.716388][T28203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.740404][T28203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.763917][T28203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.785364][T28203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.361776][ T9878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2430.381720][ T9878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2430.421114][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2430.461302][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2430.486548][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2430.542986][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2431.399461][T28429] loop1: detected capacity change from 0 to 1024 [ 2435.602502][T28475] netlink: 'syz.2.6690': attribute type 3 has an invalid length. [ 2437.257013][T28488] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2440.059320][ T26] audit: type=1326 audit(1729278463.183:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28530 comm="syz.4.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2440.163663][ T26] audit: type=1326 audit(1729278463.223:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28530 comm="syz.4.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2440.247927][ T26] audit: type=1326 audit(1729278463.223:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28530 comm="syz.4.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2440.409929][ T26] audit: type=1326 audit(1729278463.223:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28530 comm="syz.4.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2440.758825][ T26] audit: type=1326 audit(1729278463.223:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28530 comm="syz.4.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5347db5ff9 code=0x7ffc0000 [ 2441.035196][T28526] chnl_net:caif_netlink_parms(): no params data found [ 2442.124628][T15058] Bluetooth: hci9: command 0x0409 tx timeout [ 2442.905388][T28526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2442.947461][T28526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.983187][T28526] device bridge_slave_0 entered promiscuous mode [ 2443.018313][T28526] bridge0: port 2(bridge_slave_1) entered blocking state [ 2443.072501][T28526] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.092081][T28526] device bridge_slave_1 entered promiscuous mode [ 2443.186264][ T27] INFO: task syz.1.6076:26467 blocked for more than 143 seconds. [ 2443.210383][ T27] Not tainted 5.15.168-syzkaller #0 [ 2443.246203][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2443.379898][ T27] task:syz.1.6076 state:D stack:25344 pid:26467 ppid: 25316 flags:0x00004004 [ 2443.423785][ T27] Call Trace: [ 2443.440842][ T27] [ 2443.454386][ T27] __schedule+0x12c4/0x45b0 [ 2443.475228][ T27] ? release_firmware_map_entry+0x190/0x190 [ 2443.508100][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2443.508156][ T27] ? print_irqtrace_events+0x210/0x210 [ 2443.541475][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 2443.553620][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 2443.565340][ T27] schedule+0x11b/0x1f0 [ 2443.583179][ T27] schedule_preempt_disabled+0xf/0x20 [ 2443.616232][ T27] rwsem_down_read_slowpath+0x605/0xb40 [ 2443.635676][ T27] ? down_write_killable_nested+0x90/0x90 [ 2443.669788][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 2443.693330][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 2443.721837][ T27] down_read+0x9a/0x2e0 [ 2443.742890][ T27] iterate_supers+0xac/0x1e0 [ 2443.763544][ T27] ? do_quotactl+0x6c0/0x6c0 [ 2443.785285][ T27] __se_sys_quotactl+0x347/0x770 [ 2443.813259][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 2443.841171][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 2443.864802][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2443.895998][ T27] ? print_irqtrace_events+0x210/0x210 [ 2443.921209][ T27] ? vtime_user_exit+0x2d1/0x400 [ 2443.947164][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2443.980328][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 2443.992494][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2444.005246][ T27] do_syscall_64+0x3b/0xb0 [ 2444.014426][ T27] ? clear_bhb_loop+0x15/0x70 [ 2444.023299][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2444.029885][ T27] RIP: 0033:0x7eff4251aff9 [ 2444.034535][ T27] RSP: 002b:00007eff40993038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2444.043265][ T27] RAX: ffffffffffffffda RBX: 00007eff426d2f80 RCX: 00007eff4251aff9 [ 2444.052040][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 2444.060307][ T27] RBP: 00007eff4258d296 R08: 0000000000000000 R09: 0000000000000000 [ 2444.069999][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2444.078351][ T27] R13: 0000000000000000 R14: 00007eff426d2f80 R15: 00007fffbd584068 [ 2444.086714][ T27] [ 2444.090000][ T27] [ 2444.090000][ T27] Showing all locks held in the system: [ 2444.106399][ T27] 1 lock held by khungtaskd/27: [ 2444.114814][ T27] #0: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 2444.120220][T28526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2444.136737][ T27] 2 locks held by getty/3328: [ 2444.163803][ T27] #0: ffff88802a0f6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2444.174327][ T27] #1: ffffc9000248e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 2444.177694][T28526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2444.186601][ T27] 3 locks held by kworker/u4:6/9878: [ 2444.194065][T15058] Bluetooth: hci9: command 0x041b tx timeout [ 2444.199792][ T27] 5 locks held by kworker/1:11/15058: [ 2444.211269][ T27] 1 lock held by syz-executor/23983: [ 2444.217183][ T27] #0: ffff8880239700e0 (&type->s_umount_key#85){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 2444.231206][ T27] 1 lock held by syz-executor/23990: [ 2444.243772][ T27] #0: ffff88806628e0e0 (&type->s_umount_key#85){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 2444.255142][ T27] 1 lock held by syz-executor/24272: [ 2444.261113][ T27] #0: ffff88807aabc0e0 (&type->s_umount_key#85){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 2444.272030][ T27] 1 lock held by syz.1.6076/26467: [ 2444.277728][ T27] #0: ffff8880239700e0 (&type->s_umount_key#85){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 2444.290259][ T27] 2 locks held by syz.0.6669/28406: [ 2444.295866][ T27] #0: ffffffff8da265d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 2444.308117][ T27] #1: ffffffff8c9240f0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 2444.318855][ T27] 2 locks held by syz-executor/28526: [ 2444.324460][ T27] #0: ffffffff8da32188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 2444.335552][ T27] #1: ffffffff8c9241e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 2444.357337][ T27] [ 2444.360521][ T27] ============================================= [ 2444.360521][ T27] [ 2444.380184][T28526] team0: Port device team_slave_0 added [ 2444.386599][ T27] NMI backtrace for cpu 0 [ 2444.391033][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 2444.399107][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2444.409924][ T27] Call Trace: [ 2444.413413][ T27] [ 2444.416508][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 2444.421666][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2444.427489][ T27] ? panic+0x860/0x860 [ 2444.431921][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 2444.437232][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 2444.442573][ T27] ? __wake_up_klogd+0xd5/0x100 [ 2444.447702][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 2444.454303][ T27] ? _printk+0xd1/0x120 [ 2444.458659][ T27] ? panic+0x860/0x860 [ 2444.462800][ T27] ? __wake_up_klogd+0xcc/0x100 [ 2444.467751][ T27] ? panic+0x860/0x860 [ 2444.471828][ T27] ? __rcu_read_unlock+0x92/0x100 [ 2444.476864][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2444.482949][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 2444.488954][ T27] watchdog+0xe72/0xeb0 [ 2444.493163][ T27] kthread+0x3f6/0x4f0 [ 2444.497235][ T27] ? hungtask_pm_notify+0x50/0x50 [ 2444.502355][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2444.507044][ T27] ret_from_fork+0x1f/0x30 [ 2444.511580][ T27] [ 2444.516275][ T27] Sending NMI from CPU 0 to CPUs 1: [ 2444.521517][ C1] NMI backtrace for cpu 1 [ 2444.521531][ C1] CPU: 1 PID: 3758 Comm: kworker/u4:10 Not tainted 5.15.168-syzkaller #0 [ 2444.521548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2444.521557][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2444.521581][ C1] RIP: 0010:kasan_check_range+0x5c/0x290 [ 2444.521600][ C1] Code: fb 48 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4e 8d 0c 03 4c 8d 54 37 ff 49 c1 ea 03 49 bb 01 00 00 00 00 fc ff df 4f 8d 34 1a <4c> 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 [ 2444.521612][ C1] RSP: 0018:ffffc900031c77d8 EFLAGS: 00000807 [ 2444.521623][ C1] RAX: 0000000000000001 RBX: 1ffffffff20ec63c RCX: ffffffff8162ca93 [ 2444.521634][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff907631e0 [ 2444.521644][ C1] RBP: 000000000001ffff R08: dffffc0000000000 R09: fffffbfff20ec63c [ 2444.521654][ C1] R10: 1ffffffff20ec63c R11: dffffc0000000001 R12: 0000000000000000 [ 2444.521664][ C1] R13: ffff88802a058b10 R14: fffffbfff20ec63d R15: ffff88802a058b04 [ 2444.521675][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 2444.521687][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2444.521698][ C1] CR2: 00007f9d0856b178 CR3: 0000000049721000 CR4: 00000000003506e0 [ 2444.521711][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2444.521720][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2444.521729][ C1] Call Trace: [ 2444.521733][ C1] [ 2444.521740][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 2444.521756][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2444.521771][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 2444.521791][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 2444.521806][ C1] ? nmi_handle+0xf7/0x370 [ 2444.521822][ C1] ? kasan_check_range+0x5c/0x290 [ 2444.521834][ C1] ? default_do_nmi+0x62/0x150 [ 2444.521850][ C1] ? exc_nmi+0xa8/0x100 [ 2444.521863][ C1] ? end_repeat_nmi+0x16/0x31 [ 2444.521878][ C1] ? __lock_acquire+0x7a3/0x1ff0 [ 2444.521891][ C1] ? kasan_check_range+0x5c/0x290 [ 2444.521905][ C1] ? kasan_check_range+0x5c/0x290 [ 2444.521918][ C1] ? kasan_check_range+0x5c/0x290 [ 2444.521931][ C1] [ 2444.521936][ C1] [ 2444.521941][ C1] __lock_acquire+0x7a3/0x1ff0 [ 2444.521959][ C1] lock_acquire+0x1db/0x4f0 [ 2444.521971][ C1] ? rcu_lock_acquire+0x5/0x30 [ 2444.521987][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2444.522001][ C1] ? _local_bh_enable+0xa0/0xa0 [ 2444.522015][ C1] ? rcu_lock_release+0x5/0x20 [ 2444.522029][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 2444.522044][ C1] ? batadv_tvlv_container_ogm_append+0x456/0x4c0 [ 2444.522062][ C1] rcu_lock_acquire+0x2a/0x30 [ 2444.522076][ C1] ? rcu_lock_acquire+0x5/0x30 [ 2444.522089][ C1] batadv_iv_ogm_schedule+0x429/0x1000 [ 2444.522105][ C1] ? skb_push+0x93/0x100 [ 2444.522122][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 2444.522138][ C1] ? batadv_send_skb_packet+0x3bc/0x5f0 [ 2444.522157][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 2444.522179][ C1] process_one_work+0x8a1/0x10c0 [ 2444.522199][ C1] ? worker_detach_from_pool+0x260/0x260 [ 2444.522215][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2444.522231][ C1] ? kthread_data+0x4e/0xc0 [ 2444.522244][ C1] ? wq_worker_running+0x97/0x170 [ 2444.522258][ C1] worker_thread+0xaca/0x1280 [ 2444.522281][ C1] kthread+0x3f6/0x4f0 [ 2444.522293][ C1] ? rcu_lock_release+0x20/0x20 [ 2444.522307][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2444.522320][ C1] ret_from_fork+0x1f/0x30 [ 2444.522339][ C1] [ 2444.540539][T28526] team0: Port device team_slave_1 added [ 2444.938053][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 2444.944929][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 2444.953009][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2444.963192][ T27] Call Trace: [ 2444.966751][ T27] [ 2444.969696][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 2444.974428][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2444.980425][ T27] ? panic+0x860/0x860 [ 2444.984609][ T27] panic+0x318/0x860 [ 2444.988695][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 2444.994337][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 2445.000584][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 2445.005882][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2445.012232][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 2445.018762][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 2445.025196][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 2445.031708][ T27] watchdog+0xeb0/0xeb0 [ 2445.035905][ T27] kthread+0x3f6/0x4f0 [ 2445.039987][ T27] ? hungtask_pm_notify+0x50/0x50 [ 2445.045126][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2445.049988][ T27] ret_from_fork+0x1f/0x30 [ 2445.054428][ T27] [ 2445.057783][ T27] Kernel Offset: disabled [ 2445.062113][ T27] Rebooting in 86400 seconds..