last executing test programs: 1m11.676292407s ago: executing program 3 (id=71): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x200, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200"}) 1m11.628205871s ago: executing program 3 (id=72): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b7432401"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 1m11.52706208s ago: executing program 3 (id=73): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x230, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) 1m11.356416746s ago: executing program 3 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x810, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x90c20, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa2c01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) dup3(r0, r1, 0x0) 40.619935204s ago: executing program 3 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x810, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x90c20, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa2c01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) dup3(r0, r1, 0x0) 14.779937658s ago: executing program 3 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x810, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x90c20, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa2c01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) dup3(r0, r1, 0x0) 6.87293202s ago: executing program 1 (id=297): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 6.174385115s ago: executing program 4 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000007000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0xd000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x203, 0x0, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 5.623906088s ago: executing program 4 (id=303): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 5.320049421s ago: executing program 4 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x28}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xe0, 0x3e, 0xa3, 0x20, 0x57b, 0x0, 0x5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x93, 0xef, 0x13}}]}}]}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000580)=0x1, 0x4) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) splice(r3, 0x0, r5, 0x0, 0x8001, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) 4.686823398s ago: executing program 1 (id=311): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r0, &(0x7f000001a680)=ANY=[@ANYBLOB="9200"], 0x8) 4.514861307s ago: executing program 1 (id=313): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x48) close_range(r2, 0xffffffffffffffff, 0x0) 3.481766745s ago: executing program 0 (id=317): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) unshare(0x2000680) 3.290989761s ago: executing program 0 (id=319): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}}, 0x30) 3.161204525s ago: executing program 0 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000260001000000000000000000030000007c431756b3d58830cff0b74bc7f888f904d29c0888b35131090368cd5266"], 0x14}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0x10b}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e060425"], 0x9) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigaction(0x29, 0x0, 0x0, 0x8, &(0x7f0000000100)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 2.96279305s ago: executing program 2 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_getrule={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 2.664843431s ago: executing program 2 (id=323): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 2.516178445s ago: executing program 2 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000052c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=')', 0x1}], 0x1, &(0x7f0000001dc0)=[@iv={0x28, 0x117, 0x2, 0x10, "477bff93f3b4ebb42ac36b458cfe6e1c"}], 0x28}], 0x1, 0x0) 2.354831785s ago: executing program 2 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 2.193900881s ago: executing program 2 (id=326): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f0000002440)="6558e08d7b077433", 0x8}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000940)="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", 0xed6}], 0x4}, 0x0) pipe2(&(0x7f0000000140), 0x800) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8953, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r4, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101b01) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x5f, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) openat$cgroup_ro(r6, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x38, 0x100, 0x0, 0x0, {0x3}}, 0x14}}, 0x4) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r11], 0x24}}, 0x0) move_mount(r8, &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 2.175600386s ago: executing program 4 (id=327): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1a, 0x0, 0x20003f00) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = io_uring_setup(0x354a, &(0x7f0000000080)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) 1.965828026s ago: executing program 0 (id=328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305839, &(0x7f0000000240)=0x28084) 1.814851021s ago: executing program 2 (id=329): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r2, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 448.396119ms ago: executing program 1 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="918ceff8045e100cd69d946ddff87150e7e2d8568a392831b77fb8e507cc08bb1f3cda6e626188f4c7bf707895e1f1c0b45bc7c24c1cd94dba10a67c9001c35ec236c3ff684071221d2c69e08cf10ef922e375dcf2d14a7362069f5e1b088299ea7cdaeb90246c4c728f7ffd962b6c72ec94dc24ca41b14431b59d41a9e35303132a0568e82715a9c6d9daf42fea2ce4a4e0b8f2a701c36bb6a5b6ad9f9d58d17796fd5d54d5159a199a7b801c42c461a49fb2e11290236983c9fba48505a845f817809d01a601610b91999f1df874b7bb8b7ac0a476007cae0a60", 0xdb}, {&(0x7f0000000280)="0330747d1bbe7aab79036aa6c1729b4e08772fcd68761174bc57faffd97481f93bc3979e", 0x24}], 0x2}], 0x1, 0x0) 260.250506ms ago: executing program 4 (id=331): ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) 195.788559ms ago: executing program 1 (id=332): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, r0}}, 0x30) 159.012494ms ago: executing program 0 (id=333): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 64.683435ms ago: executing program 4 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$netlink(0x10, 0x3, 0x8000000004) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 50.970569ms ago: executing program 0 (id=335): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000640)=[r2, r1], 0x2, 0x800}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003340)}) 0s ago: executing program 1 (id=336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 48.208617][ T5209] cgroup: Unknown subsys name 'net' [ 48.356664][ T5209] cgroup: Unknown subsys name 'cpuset' [ 48.364404][ T5209] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.603452][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.715292][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.726695][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.727943][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.734969][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.742033][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.749616][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.757429][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.763129][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.777132][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.777987][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.792407][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.800931][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.801642][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.808289][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.823002][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.827591][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.830629][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.838405][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.855096][ T4615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.862878][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.863104][ T4615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.877944][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.886092][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.886733][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.893530][ T4615] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.901024][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.908290][ T4615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.914361][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.930701][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.942002][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.221695][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 52.371882][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.380383][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.388233][ T5219] bridge_slave_0: entered allmulticast mode [ 52.395847][ T5219] bridge_slave_0: entered promiscuous mode [ 52.406704][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.413990][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.421296][ T5219] bridge_slave_1: entered allmulticast mode [ 52.428513][ T5219] bridge_slave_1: entered promiscuous mode [ 52.456083][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 52.466283][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 52.505862][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.522420][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.565060][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 52.611831][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 52.623913][ T5219] team0: Port device team_slave_0 added [ 52.645381][ T5219] team0: Port device team_slave_1 added [ 52.692787][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.700396][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.708061][ T5223] bridge_slave_0: entered allmulticast mode [ 52.715525][ T5223] bridge_slave_0: entered promiscuous mode [ 52.742939][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.751126][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.778221][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.802109][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.809339][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.816809][ T5223] bridge_slave_1: entered allmulticast mode [ 52.823322][ T5223] bridge_slave_1: entered promiscuous mode [ 52.834863][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.841966][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.849596][ T5230] bridge_slave_0: entered allmulticast mode [ 52.856455][ T5230] bridge_slave_0: entered promiscuous mode [ 52.863629][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.870601][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.896566][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.952043][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.959354][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.969607][ T5230] bridge_slave_1: entered allmulticast mode [ 52.976411][ T5230] bridge_slave_1: entered promiscuous mode [ 53.002220][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.014733][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.024109][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.031177][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.039579][ T5220] bridge_slave_0: entered allmulticast mode [ 53.046453][ T5220] bridge_slave_0: entered promiscuous mode [ 53.054581][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.061680][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.069828][ T5220] bridge_slave_1: entered allmulticast mode [ 53.077236][ T5220] bridge_slave_1: entered promiscuous mode [ 53.101850][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.148677][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.163214][ T5219] hsr_slave_0: entered promiscuous mode [ 53.170215][ T5219] hsr_slave_1: entered promiscuous mode [ 53.184614][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.191792][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.199591][ T5227] bridge_slave_0: entered allmulticast mode [ 53.206679][ T5227] bridge_slave_0: entered promiscuous mode [ 53.223361][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.259422][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.266743][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.274332][ T5227] bridge_slave_1: entered allmulticast mode [ 53.281138][ T5227] bridge_slave_1: entered promiscuous mode [ 53.297971][ T5223] team0: Port device team_slave_0 added [ 53.306257][ T5223] team0: Port device team_slave_1 added [ 53.318899][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.340688][ T5230] team0: Port device team_slave_0 added [ 53.348738][ T5230] team0: Port device team_slave_1 added [ 53.400801][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.411074][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.418417][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.445941][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.459875][ T5220] team0: Port device team_slave_0 added [ 53.468299][ T5220] team0: Port device team_slave_1 added [ 53.483981][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.497635][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.504820][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.531514][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.561076][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.568275][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.595639][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.608509][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.615753][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.641961][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.668440][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.675700][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.701734][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.741574][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.748592][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.774821][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.791851][ T5227] team0: Port device team_slave_0 added [ 53.800739][ T5227] team0: Port device team_slave_1 added [ 53.866379][ T5223] hsr_slave_0: entered promiscuous mode [ 53.872491][ T5223] hsr_slave_1: entered promiscuous mode [ 53.878978][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.887265][ T5223] Cannot create hsr debugfs directory [ 53.896757][ T5230] hsr_slave_0: entered promiscuous mode [ 53.903026][ T5230] hsr_slave_1: entered promiscuous mode [ 53.909585][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.914784][ T54] Bluetooth: hci0: command tx timeout [ 53.917287][ T5230] Cannot create hsr debugfs directory [ 53.951674][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.958839][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.985533][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.996344][ T54] Bluetooth: hci1: command tx timeout [ 53.999186][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.002029][ T54] Bluetooth: hci2: command tx timeout [ 54.014910][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.014937][ T5241] Bluetooth: hci3: command tx timeout [ 54.046434][ T5240] Bluetooth: hci4: command tx timeout [ 54.046691][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.084851][ T5220] hsr_slave_0: entered promiscuous mode [ 54.091575][ T5220] hsr_slave_1: entered promiscuous mode [ 54.098194][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.105972][ T5220] Cannot create hsr debugfs directory [ 54.194595][ T5227] hsr_slave_0: entered promiscuous mode [ 54.200761][ T5227] hsr_slave_1: entered promiscuous mode [ 54.207228][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.215184][ T5227] Cannot create hsr debugfs directory [ 54.322381][ T5219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.357373][ T5219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.396625][ T5219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.413935][ T5219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.509318][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.532879][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.550017][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.575770][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.611236][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.637934][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.649495][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.671804][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.701355][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.735738][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.749503][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.760110][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.786274][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.813795][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.848469][ T5220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.857930][ T5220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.869546][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.876767][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.895637][ T5220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.909257][ T5220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.920387][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.927543][ T3095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.081501][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.106641][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.129679][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.162129][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.176278][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.192735][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.199909][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.226629][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.233864][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.245808][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.261953][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.269119][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.299212][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.306363][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.331548][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.346250][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.353357][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.373138][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.380285][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.401884][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.469759][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.510267][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.517519][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.534263][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.541397][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.598762][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.631291][ T5219] veth0_vlan: entered promiscuous mode [ 55.680616][ T5219] veth1_vlan: entered promiscuous mode [ 55.786008][ T5219] veth0_macvtap: entered promiscuous mode [ 55.819763][ T5219] veth1_macvtap: entered promiscuous mode [ 55.840669][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.896450][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.954629][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.977143][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.996863][ T54] Bluetooth: hci0: command tx timeout [ 56.025855][ T5219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.037421][ T5219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.046997][ T5219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.056606][ T5219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.069813][ T5227] veth0_vlan: entered promiscuous mode [ 56.075532][ T54] Bluetooth: hci3: command tx timeout [ 56.086592][ T5228] Bluetooth: hci4: command tx timeout [ 56.092041][ T5228] Bluetooth: hci1: command tx timeout [ 56.093693][ T54] Bluetooth: hci2: command tx timeout [ 56.098714][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.133055][ T5227] veth1_vlan: entered promiscuous mode [ 56.143086][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.248321][ T5230] veth0_vlan: entered promiscuous mode [ 56.280882][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.297208][ T5230] veth1_vlan: entered promiscuous mode [ 56.311828][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.380452][ T5227] veth0_macvtap: entered promiscuous mode [ 56.390609][ T5227] veth1_macvtap: entered promiscuous mode [ 56.428707][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.440126][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.487534][ T5220] veth0_vlan: entered promiscuous mode [ 56.498577][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.515860][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.527424][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.547276][ T5230] veth0_macvtap: entered promiscuous mode [ 56.552268][ T5219] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.557621][ T5230] veth1_macvtap: entered promiscuous mode [ 56.583176][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.597630][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.607571][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.618374][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.630210][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.642645][ T5220] veth1_vlan: entered promiscuous mode [ 56.670880][ T5220] veth0_macvtap: entered promiscuous mode [ 56.680512][ T5220] veth1_macvtap: entered promiscuous mode [ 56.705077][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.719042][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.731010][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.747262][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.757960][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.768462][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.779543][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.790790][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.809704][ T5223] veth0_vlan: entered promiscuous mode [ 56.822824][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.832215][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841487][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.850580][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.871262][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.880268][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.889788][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.898725][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.927014][ T5223] veth1_vlan: entered promiscuous mode [ 56.938721][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.952388][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.962566][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.973909][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.984464][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.995191][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.006759][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.066225][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.077003][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.091752][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.117086][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.128035][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.128077][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.129805][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.184232][ T5220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.201454][ T5220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.210381][ T5220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.219231][ T5220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.264548][ T5223] veth0_macvtap: entered promiscuous mode [ 57.333810][ T5223] veth1_macvtap: entered promiscuous mode [ 57.363113][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.371805][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.409012][ T5312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 57.418505][ T5312] Zero length message leads to an empty skb [ 57.436179][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.447648][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.459445][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.471407][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.481340][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.492388][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.510923][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.534470][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.841144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.943493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.233739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 58.362657][ T54] Bluetooth: hci0: command tx timeout [ 58.367785][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.369973][ T54] Bluetooth: hci1: command tx timeout [ 58.380825][ T54] Bluetooth: hci2: command tx timeout [ 58.386572][ T54] Bluetooth: hci3: command tx timeout [ 58.391946][ T54] Bluetooth: hci4: command tx timeout [ 58.411075][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.419459][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.447977][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.497036][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.500390][ T5318] Invalid architecture in ELF header: 4096 [ 58.510988][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.527203][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.540962][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.551509][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.567843][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.579156][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.591349][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.611463][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.612463][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.631708][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.641027][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.641861][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.650204][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.720369][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.726789][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.735646][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.752841][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.876815][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.923255][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.671104][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.706256][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.778016][ T5343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.543753][ T5228] Bluetooth: hci4: command tx timeout [ 60.549222][ T5228] Bluetooth: hci3: command tx timeout [ 60.556944][ T5228] Bluetooth: hci2: command tx timeout [ 60.562405][ T5228] Bluetooth: hci1: command tx timeout [ 60.568183][ T5228] Bluetooth: hci0: command tx timeout [ 61.889654][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.931697][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.063603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.083938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 64.906753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.112864][ T5368] warning: `syz.2.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.320383][ T5378] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.453995][ T5372] tty tty28: ldisc open failed (-12), clearing slot 27 [ 65.674397][ T5385] vlan2: entered promiscuous mode [ 65.689763][ T5385] team0: entered promiscuous mode [ 65.701340][ T5385] team_slave_0: entered promiscuous mode [ 65.713538][ T5385] team_slave_1: entered promiscuous mode [ 65.773708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.786640][ T5385] team0: Device vlan2 is already an upper device of the team interface [ 65.841818][ T5385] team0: left promiscuous mode [ 66.023794][ T5385] team_slave_0: left promiscuous mode [ 66.029473][ T5385] team_slave_1: left promiscuous mode [ 66.797412][ T5401] netlink: 36 bytes leftover after parsing attributes in process `syz.3.28'. [ 67.057225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.274408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.671233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.687296][ T5440] sp0: Synchronizing with TNC [ 71.921423][ T5275] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.935937][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.942425][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.683562][ T5275] usb 4-1: device descriptor read/all, error -71 [ 74.346231][ T5463] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.673586][ T5273] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.560143][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 75.596180][ T5273] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 75.606073][ T5273] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.617588][ T5273] usb 5-1: config 0 has no interface number 0 [ 75.646699][ T5273] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.671378][ T5273] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 75.720184][ T5273] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 76.493851][ T5273] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.565723][ T5273] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 76.587433][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.693450][ T5273] usb 5-1: Product: syz [ 76.709312][ T5273] usb 5-1: Manufacturer: syz [ 76.723589][ T5273] usb 5-1: SerialNumber: syz [ 76.884352][ T940] cfg80211: failed to load regulatory.db [ 76.899344][ T5273] usb 5-1: config 0 descriptor?? [ 77.703736][ T5273] usb 5-1: can't set config #0, error -71 [ 77.716772][ T5273] usb 5-1: USB disconnect, device number 2 [ 77.909552][ T5494] sp0: Synchronizing with TNC [ 81.773522][ T5276] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 81.918530][ T3095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.951201][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.997739][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.170228][ T3095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.221140][ T29] audit: type=1326 audit(1727980767.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5524 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 82.322326][ T29] audit: type=1326 audit(1727980767.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5524 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 82.370258][ T5276] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.431513][ T3095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.456292][ T5276] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 82.518913][ T5276] usb 5-1: can't read configurations, error -71 [ 82.539406][ T29] audit: type=1326 audit(1727980767.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5524 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 82.601934][ T3095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.793333][ T29] audit: type=1326 audit(1727980767.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5524 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 82.814919][ T29] audit: type=1326 audit(1727980767.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5524 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 82.836515][ T29] audit: type=1326 audit(1727980767.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5524 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 82.857635][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.880904][ T3095] bridge_slave_1: left allmulticast mode [ 83.908338][ T3095] bridge_slave_1: left promiscuous mode [ 83.924933][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.023650][ T3095] bridge_slave_0: left allmulticast mode [ 84.029704][ T3095] bridge_slave_0: left promiscuous mode [ 84.044466][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.053732][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.062238][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.070028][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.079676][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.088158][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.096416][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.610191][ T5228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.623961][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.648566][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.660123][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.668120][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.677341][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.153637][ T5240] Bluetooth: hci1: command tx timeout [ 86.196249][ T3095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.239269][ T3095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.266891][ T3095] bond0 (unregistering): Released all slaves [ 86.713601][ T5240] Bluetooth: hci5: command tx timeout [ 87.833547][ T5313] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 88.001007][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.028030][ T3095] hsr_slave_0: left promiscuous mode [ 88.028181][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.173513][ T29] audit: type=1326 audit(1727980773.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5600 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 88.209927][ T29] audit: type=1326 audit(1727980773.180:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5600 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 88.262080][ T29] audit: type=1326 audit(1727980773.180:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5600 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 88.273773][ T5240] Bluetooth: hci1: command tx timeout [ 88.298435][ T3095] hsr_slave_1: left promiscuous mode [ 88.310486][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.328550][ T29] audit: type=1326 audit(1727980773.180:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5600 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 88.331827][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.489101][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.716204][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.793692][ T5240] Bluetooth: hci5: command tx timeout [ 88.937131][ T3095] veth1_macvtap: left promiscuous mode [ 88.960537][ T3095] veth0_macvtap: left promiscuous mode [ 88.983612][ T3095] veth1_vlan: left promiscuous mode [ 89.015387][ T3095] veth0_vlan: left promiscuous mode [ 90.313636][ T5240] Bluetooth: hci1: command tx timeout [ 90.320557][ T3095] team0 (unregistering): Port device team_slave_1 removed [ 90.366517][ T3095] team0 (unregistering): Port device team_slave_0 removed [ 90.873741][ T5240] Bluetooth: hci5: command tx timeout [ 91.008600][ T5313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.018002][ T5313] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 91.027902][ T5557] chnl_net:caif_netlink_parms(): no params data found [ 91.040548][ T5313] usb 5-1: can't read configurations, error -71 [ 91.320258][ T5553] chnl_net:caif_netlink_parms(): no params data found [ 92.394597][ T5240] Bluetooth: hci1: command tx timeout [ 92.412114][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.486048][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.581671][ T5557] bridge_slave_0: entered allmulticast mode [ 92.667681][ T5557] bridge_slave_0: entered promiscuous mode [ 92.777010][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.798888][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.823678][ T5557] bridge_slave_1: entered allmulticast mode [ 92.868587][ T5557] bridge_slave_1: entered promiscuous mode [ 92.953472][ T5240] Bluetooth: hci5: command tx timeout [ 93.024479][ T3095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.523256][ T3095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.593208][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.621615][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.635339][ T5553] bridge_slave_0: entered allmulticast mode [ 93.643915][ T5553] bridge_slave_0: entered promiscuous mode [ 93.795333][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.864680][ T3095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.909507][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.925412][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.932761][ T5553] bridge_slave_1: entered allmulticast mode [ 93.951066][ T5553] bridge_slave_1: entered promiscuous mode [ 94.002909][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.015381][ T5698] netlink: 'syz.4.110': attribute type 29 has an invalid length. [ 94.027802][ T5703] netlink: 'syz.4.110': attribute type 29 has an invalid length. [ 94.044270][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.072332][ T3095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.107217][ T5706] netlink: 'syz.4.110': attribute type 29 has an invalid length. [ 94.128725][ T5553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.188302][ T5557] team0: Port device team_slave_0 added [ 94.197904][ T5698] netlink: 'syz.4.110': attribute type 29 has an invalid length. [ 94.213900][ T5313] usb 1-1: Using ep0 maxpacket: 16 [ 94.221021][ T5313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.243996][ T5553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.261353][ T5313] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.276302][ T5313] usb 1-1: New USB device found, idVendor=0b97, idProduct=172a, bcdDevice=f7.f4 [ 94.289017][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.304594][ T5313] usb 1-1: Product: syz [ 94.308852][ T5313] usb 1-1: Manufacturer: syz [ 94.319867][ T5313] usb 1-1: SerialNumber: syz [ 94.341168][ T5557] team0: Port device team_slave_1 added [ 94.351869][ T5313] usb 1-1: config 0 descriptor?? [ 94.478143][ T5553] team0: Port device team_slave_0 added [ 94.516619][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.531850][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.576853][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.697334][ T5553] team0: Port device team_slave_1 added [ 94.719582][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.743500][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.770345][ T5313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.808941][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.858859][ T5553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.867514][ T5553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.936595][ T5724] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 95.084787][ T5553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.776073][ T5553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.784841][ T5313] usb 3-1: Using ep0 maxpacket: 8 [ 95.799114][ T5553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.810725][ T5313] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 95.835585][ T5313] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.850874][ T5313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.860317][ T5553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.881601][ T5313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.903321][ T5313] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.920513][ T5313] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.930355][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.991308][ T3095] bridge_slave_1: left allmulticast mode [ 96.003500][ T3095] bridge_slave_1: left promiscuous mode [ 96.023282][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.058717][ T3095] bridge_slave_0: left allmulticast mode [ 96.078879][ T3095] bridge_slave_0: left promiscuous mode [ 96.099813][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.182708][ T5313] usb 3-1: GET_CAPABILITIES returned 0 [ 96.188792][ T5313] usbtmc 3-1:16.0: can't read capabilities [ 96.490166][ T5274] usb 3-1: USB disconnect, device number 2 [ 97.110662][ T940] usb 1-1: USB disconnect, device number 2 [ 97.503611][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 98.209008][ T5758] xt_limit: Overflow, try lower: 0/0 [ 98.360682][ T3095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.419762][ T3095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.438694][ T3095] bond0 (unregistering): Released all slaves [ 99.039734][ T5553] hsr_slave_0: entered promiscuous mode [ 99.290543][ T5553] hsr_slave_1: entered promiscuous mode [ 99.301991][ T5553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.316717][ T5553] Cannot create hsr debugfs directory [ 99.378025][ T5557] hsr_slave_0: entered promiscuous mode [ 99.384740][ T5557] hsr_slave_1: entered promiscuous mode [ 99.415997][ T5557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.470805][ T5557] Cannot create hsr debugfs directory [ 99.893518][ T5274] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.624874][ T3095] hsr_slave_0: left promiscuous mode [ 100.891861][ T3095] hsr_slave_1: left promiscuous mode [ 100.903498][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 100.910208][ T5274] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.923823][ T5274] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.946010][ T5274] usb 1-1: New USB device found, idVendor=0b97, idProduct=172a, bcdDevice=f7.f4 [ 100.964156][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.988813][ T5274] usb 1-1: Product: syz [ 100.993033][ T5274] usb 1-1: Manufacturer: syz [ 101.004139][ T5274] usb 1-1: SerialNumber: syz [ 101.029425][ T5274] usb 1-1: config 0 descriptor?? [ 101.162830][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.171468][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.181497][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.189065][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.208066][ T3095] veth1_macvtap: left promiscuous mode [ 101.214371][ T3095] veth0_macvtap: left promiscuous mode [ 101.219997][ T3095] veth1_vlan: left promiscuous mode [ 101.225563][ T3095] veth0_vlan: left promiscuous mode [ 101.393634][ T5275] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.572377][ T5808] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.242909][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.253836][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 102.273496][ T5275] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.289692][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.325406][ T5275] usb 5-1: config 0 descriptor?? [ 102.334526][ T5275] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 102.728592][ T3095] team0 (unregistering): Port device team_slave_1 removed [ 102.805756][ T3095] team0 (unregistering): Port device team_slave_0 removed [ 103.128059][ T940] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 103.291195][ T5275] usb 1-1: USB disconnect, device number 3 [ 103.307497][ T940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.317360][ T940] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 103.367544][ T940] usb 3-1: config 1 interface 0 has no altsetting 0 [ 103.397216][ T940] usb 3-1: string descriptor 0 read error: -22 [ 103.414007][ T940] usb 3-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40 [ 103.423089][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.444950][ T5821] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 104.329572][ T5274] usb 5-1: USB disconnect, device number 7 [ 104.353771][ T940] usbhid 3-1:1.0: can't add hid device: -71 [ 104.366298][ T940] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 104.387749][ T940] usb 3-1: USB disconnect, device number 3 [ 105.371514][ T5557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.383213][ T5557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.398815][ T5557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.422495][ T5557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.709947][ T5553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.749001][ T5553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.792008][ T5553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.516019][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.535781][ T5553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.718932][ T5553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.737604][ T5553] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.772627][ T5553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.783099][ T5553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.820972][ T5557] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.857451][ T5557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.868300][ T5557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.970013][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.977612][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.095426][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.102547][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.306857][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.314131][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.323119][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.330298][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.646854][ T5553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.689467][ T5912] nbd: must specify a device to reconfigure [ 108.773249][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.845482][ T5557] veth0_vlan: entered promiscuous mode [ 108.856245][ T5557] veth1_vlan: entered promiscuous mode [ 108.877020][ T5557] veth0_macvtap: entered promiscuous mode [ 108.885918][ T5557] veth1_macvtap: entered promiscuous mode [ 108.900204][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.910723][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.920636][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.931175][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.941450][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.952278][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.963581][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.973075][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.983703][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.993659][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.004205][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.014408][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.025091][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.037213][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.049135][ T5557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.057994][ T5557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.067056][ T5557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.076127][ T5557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.229220][ T5553] veth0_vlan: entered promiscuous mode [ 109.298704][ T5553] veth1_vlan: entered promiscuous mode [ 109.312032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.321115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.331562][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.344654][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.440627][ T5553] veth0_macvtap: entered promiscuous mode [ 109.479366][ T5553] veth1_macvtap: entered promiscuous mode [ 109.558310][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.584252][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.605727][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.634171][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.676994][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.698988][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.718160][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.753958][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.923043][ T5553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.370284][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.455503][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.465552][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.513442][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.528393][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.595782][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.619725][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.645733][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.675777][ T5553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.692192][ T5553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.701451][ T5553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.710759][ T5553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.720669][ T5553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.569025][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.577008][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.642528][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.668283][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.823609][ T5959] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.156'. [ 112.180924][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 112.458518][ T5994] netlink: 104 bytes leftover after parsing attributes in process `syz.1.163'. [ 112.642000][ T5997] syz.0.165 uses obsolete (PF_INET,SOCK_PACKET) [ 112.752827][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.909428][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.924962][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.137276][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.159832][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.183129][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.192325][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.711230][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.789068][ T6049] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.172'. [ 116.313542][ T5240] Bluetooth: hci1: command tx timeout [ 116.325444][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.406929][ T6015] chnl_net:caif_netlink_parms(): no params data found [ 116.911441][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.412241][ T1169] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.755479][ T1169] usb 2-1: Using ep0 maxpacket: 16 [ 117.760964][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.773770][ T1169] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.785961][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.804050][ T6015] bridge_slave_0: entered allmulticast mode [ 117.810091][ T1169] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.821320][ T1169] usb 2-1: New USB device found, idVendor=0b97, idProduct=172a, bcdDevice=f7.f4 [ 117.841408][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.844285][ T6015] bridge_slave_0: entered promiscuous mode [ 117.857751][ T1169] usb 2-1: Product: syz [ 117.861994][ T1169] usb 2-1: Manufacturer: syz [ 117.893462][ T1169] usb 2-1: SerialNumber: syz [ 117.917528][ T1169] usb 2-1: config 0 descriptor?? [ 117.960248][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.977081][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.988032][ T6015] bridge_slave_1: entered allmulticast mode [ 117.998997][ T6015] bridge_slave_1: entered promiscuous mode [ 118.091866][ T6015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.111801][ T6015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.128433][ T61] bridge_slave_1: left allmulticast mode [ 118.135660][ T61] bridge_slave_1: left promiscuous mode [ 118.254139][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.286187][ T61] bridge_slave_0: left allmulticast mode [ 118.302730][ T61] bridge_slave_0: left promiscuous mode [ 118.332034][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.456292][ T6124] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.514529][ T5240] Bluetooth: hci1: command tx timeout [ 119.762101][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.803747][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.830198][ T61] bond0 (unregistering): Released all slaves [ 119.935370][ T6015] team0: Port device team_slave_0 added [ 120.042631][ T6015] team0: Port device team_slave_1 added [ 120.109030][ T5277] usb 2-1: USB disconnect, device number 2 [ 120.461154][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.475826][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.543526][ T6168] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.553965][ T5240] Bluetooth: hci1: command tx timeout [ 121.546285][ T6015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.576167][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.583151][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.619528][ T6015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.669842][ T6015] hsr_slave_0: entered promiscuous mode [ 121.678158][ T6015] hsr_slave_1: entered promiscuous mode [ 121.684740][ T6015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.692537][ T6015] Cannot create hsr debugfs directory [ 121.895297][ T61] hsr_slave_0: left promiscuous mode [ 121.901467][ T61] hsr_slave_1: left promiscuous mode [ 121.909445][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.917334][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.927040][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.935427][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.958343][ T61] veth1_macvtap: left promiscuous mode [ 121.964123][ T61] veth0_macvtap: left promiscuous mode [ 121.969912][ T61] veth1_vlan: left promiscuous mode [ 121.975441][ T61] veth0_vlan: left promiscuous mode [ 122.482746][ T61] team0 (unregistering): Port device team_slave_1 removed [ 122.518918][ T61] team0 (unregistering): Port device team_slave_0 removed [ 122.643764][ T5240] Bluetooth: hci1: command tx timeout [ 122.864369][ T6173] vlan2: entered promiscuous mode [ 122.870206][ T6173] vlan2: entered allmulticast mode [ 123.172426][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 125.598703][ T6231] process 'syz.1.204' launched './file1' with NULL argv: empty string added [ 126.691341][ T6241] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.207'. [ 127.448120][ T5274] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 127.462533][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 127.535766][ T6015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.644968][ T6015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.827561][ T6015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.127127][ T6015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.869645][ T5274] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.882681][ T5274] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 129.892346][ T5274] usb 2-1: can't read configurations, error -71 [ 130.796319][ T6015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.813020][ T6015] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.856012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.863148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.164762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.171870][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.332641][ T6015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.447884][ T29] audit: type=1326 audit(1727980816.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6292 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 131.472160][ T29] audit: type=1326 audit(1727980816.440:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6292 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 131.495558][ T29] audit: type=1326 audit(1727980816.450:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6292 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 131.516871][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.523855][ T29] audit: type=1326 audit(1727980816.450:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6292 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a017dff9 code=0x7ffc0000 [ 131.867098][ T6299] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.221'. [ 132.050910][ T6303] binder: 6302:6303 ioctl c0306201 20000240 returned -22 [ 132.324120][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 133.114532][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121005][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.742159][ T6015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.789993][ T6015] veth0_vlan: entered promiscuous mode [ 134.811643][ T6015] veth1_vlan: entered promiscuous mode [ 134.841281][ T6015] veth0_macvtap: entered promiscuous mode [ 134.852084][ T6015] veth1_macvtap: entered promiscuous mode [ 134.866959][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.877752][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.887827][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.898583][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.908675][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.919492][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.929601][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.940328][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.960210][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.970272][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.980807][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.990735][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.001264][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.011138][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.021650][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.031555][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.050648][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.061921][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.073195][ T6015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.081999][ T6015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.090766][ T6015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.099565][ T6015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.346985][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.356993][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.463091][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.511811][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.513757][ T6366] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.293753][ T6377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.246'. [ 138.953166][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.228709][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.352485][ T6399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.371021][ T6399] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 139.511550][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.526588][ T6399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.533459][ T6399] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 139.624250][ T6399] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.630330][ T6399] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 139.689461][ T6399] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 139.708329][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.722237][ T6399] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 139.836667][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.846117][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.854290][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.862494][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.871674][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.879338][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.892143][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.903037][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.911647][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.921397][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.930566][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.938287][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.330170][ T11] bridge_slave_1: left allmulticast mode [ 140.336393][ T11] bridge_slave_1: left promiscuous mode [ 140.342156][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.361910][ T11] bridge_slave_0: left allmulticast mode [ 140.367795][ T11] bridge_slave_0: left promiscuous mode [ 140.373716][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.364870][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.383145][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.405127][ T11] bond0 (unregistering): Released all slaves [ 141.990653][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.999050][ T5228] Bluetooth: hci1: command tx timeout [ 142.036187][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.172514][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 142.616099][ T5273] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.731476][ T11] hsr_slave_0: left promiscuous mode [ 142.833330][ T11] hsr_slave_1: left promiscuous mode [ 142.846279][ T5273] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 142.855612][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.863039][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.877526][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.898908][ T5273] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 142.913188][ T5273] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 142.928335][ T5273] usb 1-1: Manufacturer: syz [ 143.004131][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.013005][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.084101][ T5273] usb 1-1: config 0 descriptor?? [ 143.215187][ T11] veth1_macvtap: left promiscuous mode [ 143.220758][ T11] veth0_macvtap: left promiscuous mode [ 143.226435][ T11] veth1_vlan: left promiscuous mode [ 143.231781][ T11] veth0_vlan: left promiscuous mode [ 143.953423][ T5273] rc_core: IR keymap rc-hauppauge not found [ 143.960269][ T5273] Registered IR keymap rc-empty [ 143.969786][ T5273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 143.982475][ T5273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 144.036525][ T5273] usb 1-1: USB disconnect, device number 4 [ 144.073448][ T5228] Bluetooth: hci1: command tx timeout [ 145.011811][ T11] team0 (unregistering): Port device team_slave_1 removed [ 145.086869][ T11] team0 (unregistering): Port device team_slave_0 removed [ 145.671759][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.697595][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.712026][ T6406] bridge_slave_0: entered allmulticast mode [ 145.729597][ T6406] bridge_slave_0: entered promiscuous mode [ 145.775832][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.831069][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.841764][ T6406] bridge_slave_1: entered allmulticast mode [ 145.850549][ T6406] bridge_slave_1: entered promiscuous mode [ 145.942571][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.980102][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.049514][ T6546] team_slave_0: entered promiscuous mode [ 146.055537][ T6546] team_slave_1: entered promiscuous mode [ 146.063083][ T6546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.075479][ T6546] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 146.112119][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.153608][ T5228] Bluetooth: hci1: command tx timeout [ 146.324206][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.436172][ T6406] team0: Port device team_slave_0 added [ 146.469069][ T6406] team0: Port device team_slave_1 added [ 146.479413][ T6572] vlan3: entered promiscuous mode [ 146.492817][ T6572] bond0: entered promiscuous mode [ 146.500908][ T6572] bond_slave_0: entered promiscuous mode [ 146.509312][ T6572] bond_slave_1: entered promiscuous mode [ 146.516939][ T6572] macvlan2: entered promiscuous mode [ 146.523007][ T6572] team0: entered promiscuous mode [ 146.533192][ T6572] bond0: left promiscuous mode [ 146.538144][ T6572] bond_slave_0: left promiscuous mode [ 146.546007][ T6572] bond_slave_1: left promiscuous mode [ 146.551611][ T6572] macvlan2: left promiscuous mode [ 146.557617][ T6572] team0: left promiscuous mode [ 146.605233][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 146.639776][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.652266][ T5274] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.671570][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.720561][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.751027][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.776010][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.845516][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 146.851044][ T6582] nbd: must specify a device to reconfigure [ 146.876950][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.879692][ T5274] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 146.979812][ T6583] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.300'. [ 147.004301][ T5274] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16698, setting to 1024 [ 147.298634][ T5274] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.430553][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.489333][ T5274] hub 2-1:4.0: USB hub found [ 147.654343][ T6406] hsr_slave_0: entered promiscuous mode [ 147.690438][ T5274] hub 2-1:4.0: 2 ports detected [ 147.695528][ T5274] usb 2-1: selecting invalid altsetting 1 [ 147.702582][ T5274] hub 2-1:4.0: Using single TT (err -22) [ 147.748745][ T6406] hsr_slave_1: entered promiscuous mode [ 147.797369][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.817036][ T6406] Cannot create hsr debugfs directory [ 147.913513][ T5274] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 147.934246][ T5274] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 147.994591][ T5274] usb 2-1: USB disconnect, device number 5 [ 148.235865][ T5228] Bluetooth: hci1: command tx timeout [ 148.354312][ T51] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 148.486073][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 148.530478][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 148.556210][ T51] usb 5-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.5f [ 148.575681][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.590900][ T51] usb 5-1: Product: syz [ 148.597860][ T51] usb 5-1: Manufacturer: syz [ 148.602489][ T51] usb 5-1: SerialNumber: syz [ 148.614445][ T51] usb 5-1: config 0 descriptor?? [ 148.639772][ T51] usb-storage 5-1:0.0: USB Mass Storage device detected [ 148.675787][ T51] usb-storage 5-1:0.0: Quirks match for vid 057b pid 0000: 1 [ 148.688335][ T6624] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 150.032675][ T6406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.066297][ T6406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.086525][ T6406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.110050][ T6406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.129006][ T6663] nbd: must specify a device to reconfigure [ 150.376016][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 150.426616][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.499974][ T6406] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.546371][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.553590][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.645913][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.653069][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.908523][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 150.990755][ T5273] usb 5-1: USB disconnect, device number 8 [ 151.107322][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.308434][ T6406] veth0_vlan: entered promiscuous mode [ 152.639291][ T6406] veth1_vlan: entered promiscuous mode [ 152.817060][ T6406] veth0_macvtap: entered promiscuous mode [ 152.870806][ T6406] veth1_macvtap: entered promiscuous mode [ 153.010453][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.021899][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.032113][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.057715][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.115275][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.151175][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.180118][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.227133][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.255846][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.285403][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.317457][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.346497][ T1169] ================================================================== [ 153.354597][ T1169] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x2f/0x140 [ 153.363736][ T1169] Read of size 8 at addr ffff888043d4fc88 by task kworker/0:2/1169 [ 153.371631][ T1169] [ 153.373969][ T1169] CPU: 0 UID: 0 PID: 1169 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 153.384756][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.394913][ T1169] Workqueue: events binder_deferred_func [ 153.400584][ T1169] Call Trace: [ 153.403871][ T1169] [ 153.406812][ T1169] dump_stack_lvl+0x241/0x360 [ 153.411497][ T1169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.416701][ T1169] ? __pfx__printk+0x10/0x10 [ 153.421301][ T1169] ? _printk+0xd5/0x120 [ 153.425473][ T1169] ? __virt_addr_valid+0x183/0x530 [ 153.430589][ T1169] ? __virt_addr_valid+0x183/0x530 [ 153.435707][ T1169] print_report+0x169/0x550 [ 153.440221][ T1169] ? __virt_addr_valid+0x183/0x530 [ 153.445338][ T1169] ? __virt_addr_valid+0x183/0x530 [ 153.450456][ T1169] ? __virt_addr_valid+0x45f/0x530 [ 153.455571][ T1169] ? __phys_addr+0xba/0x170 [ 153.460081][ T1169] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 153.466493][ T1169] kasan_report+0x143/0x180 [ 153.471037][ T1169] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 153.477390][ T1169] __list_del_entry_valid_or_report+0x2f/0x140 [ 153.483563][ T1169] binder_release_work+0xc7/0x480 [ 153.488604][ T1169] binder_deferred_func+0x1275/0x1460 [ 153.493989][ T1169] ? process_scheduled_works+0x976/0x1850 [ 153.499718][ T1169] process_scheduled_works+0xa63/0x1850 [ 153.505288][ T1169] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.511283][ T1169] ? assign_work+0x364/0x3d0 [ 153.515886][ T1169] worker_thread+0x870/0xd30 [ 153.520575][ T1169] ? __kthread_parkme+0x169/0x1d0 [ 153.525697][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 153.530817][ T1169] kthread+0x2f0/0x390 [ 153.534891][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 153.540010][ T1169] ? __pfx_kthread+0x10/0x10 [ 153.544699][ T1169] ret_from_fork+0x4b/0x80 [ 153.549122][ T1169] ? __pfx_kthread+0x10/0x10 [ 153.553715][ T1169] ret_from_fork_asm+0x1a/0x30 [ 153.558491][ T1169] [ 153.561508][ T1169] [ 153.563834][ T1169] Allocated by task 6728: [ 153.568157][ T1169] kasan_save_track+0x3f/0x80 [ 153.572846][ T1169] __kasan_kmalloc+0x98/0xb0 [ 153.577443][ T1169] __kmalloc_cache_noprof+0x19c/0x2c0 [ 153.582818][ T1169] binder_ioctl_write_read+0xe7f/0xb560 [ 153.588374][ T1169] binder_ioctl+0x436/0x1cc0 [ 153.592973][ T1169] __se_sys_ioctl+0xf9/0x170 [ 153.597569][ T1169] do_syscall_64+0xf3/0x230 [ 153.602077][ T1169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.607982][ T1169] [ 153.610306][ T1169] Freed by task 1169: [ 153.614288][ T1169] kasan_save_track+0x3f/0x80 [ 153.618980][ T1169] kasan_save_free_info+0x40/0x50 [ 153.624015][ T1169] __kasan_slab_free+0x59/0x70 [ 153.628789][ T1169] kfree+0x1a0/0x440 [ 153.632691][ T1169] binder_deferred_func+0x11df/0x1460 [ 153.638074][ T1169] process_scheduled_works+0xa63/0x1850 [ 153.639691][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.643620][ T1169] worker_thread+0x870/0xd30 [ 153.643642][ T1169] kthread+0x2f0/0x390 [ 153.643656][ T1169] ret_from_fork+0x4b/0x80 [ 153.643676][ T1169] ret_from_fork_asm+0x1a/0x30 [ 153.643695][ T1169] [ 153.643700][ T1169] The buggy address belongs to the object at ffff888043d4fc80 [ 153.643700][ T1169] which belongs to the cache kmalloc-64 of size 64 [ 153.668100][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.671842][ T1169] The buggy address is located 8 bytes inside of [ 153.671842][ T1169] freed 64-byte region [ffff888043d4fc80, ffff888043d4fcc0) [ 153.674194][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.688006][ T1169] [ 153.688013][ T1169] The buggy address belongs to the physical page: [ 153.688034][ T1169] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43d4f [ 153.688051][ T1169] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 153.688068][ T1169] page_type: f5(slab) [ 153.688084][ T1169] raw: 00fff00000000000 ffff88801ac418c0 ffffea0000bf4b80 dead000000000003 [ 153.688099][ T1169] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 153.688108][ T1169] page dumped because: kasan: bad access detected [ 153.688123][ T1169] page_owner tracks the page as allocated [ 153.688129][ T1169] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6406, tgid 6406 (syz-executor), ts 140310553494, free_ts 140242185449 [ 153.688164][ T1169] post_alloc_hook+0x1f3/0x230 [ 153.688186][ T1169] get_page_from_freelist+0x3039/0x3180 [ 153.688207][ T1169] __alloc_pages_noprof+0x256/0x6c0 [ 153.688227][ T1169] alloc_pages_mpol_noprof+0x3e8/0x680 [ 153.688241][ T1169] alloc_slab_page+0x6a/0x120 [ 153.688258][ T1169] allocate_slab+0x5a/0x2f0 [ 153.688276][ T1169] ___slab_alloc+0xcd1/0x14b0 [ 153.688294][ T1169] __slab_alloc+0x58/0xa0 [ 153.688311][ T1169] __kmalloc_noprof+0x25a/0x400 [ 153.688326][ T1169] kobject_get_path+0xb8/0x230 [ 153.688342][ T1169] kobject_uevent_env+0x2a5/0x8e0 [ 153.688357][ T1169] net_rx_queue_update_kobjects+0x304/0x5b0 [ 153.688377][ T1169] netdev_register_kobject+0x224/0x310 [ 153.723436][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.724392][ T1169] register_netdevice+0x12c5/0x1b00 [ 153.730804][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.739606][ T1169] register_netdev+0x3b/0x50 [ 153.739626][ T1169] vti6_init_net+0x233/0x2f0 [ 153.739645][ T1169] page last free pid 6420 tgid 6420 stack trace: [ 153.739656][ T1169] free_unref_folios+0xee2/0x18a0 [ 153.739675][ T1169] folios_put_refs+0x76c/0x860 [ 153.783387][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.799731][ T1169] free_pages_and_swap_cache+0x2ea/0x690 [ 153.799764][ T1169] tlb_flush_mmu+0x3a3/0x680 [ 153.799784][ T1169] tlb_finish_mmu+0xd4/0x200 [ 153.799803][ T1169] exit_mmap+0x496/0xc40 [ 153.799820][ T1169] __mmput+0x115/0x380 [ 153.799836][ T1169] exit_mm+0x220/0x310 [ 153.799849][ T1169] do_exit+0x9b2/0x28e0 [ 153.799861][ T1169] do_group_exit+0x207/0x2c0 [ 153.799876][ T1169] __x64_sys_exit_group+0x3f/0x40 [ 153.799891][ T1169] x64_sys_call+0x2634/0x2640 [ 153.799912][ T1169] do_syscall_64+0xf3/0x230 [ 153.799926][ T1169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.799949][ T1169] [ 153.799954][ T1169] Memory state around the buggy address: [ 153.799963][ T1169] ffff888043d4fb80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 153.799976][ T1169] ffff888043d4fc00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 153.799987][ T1169] >ffff888043d4fc80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 153.799996][ T1169] ^ [ 153.800006][ T1169] ffff888043d4fd00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 153.800018][ T1169] ffff888043d4fd80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 153.800027][ T1169] ================================================================== [ 153.800935][ T1169] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.800948][ T1169] CPU: 0 UID: 0 PID: 1169 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 153.800969][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.800980][ T1169] Workqueue: events binder_deferred_func [ 153.801003][ T1169] Call Trace: [ 153.801009][ T1169] [ 153.801017][ T1169] dump_stack_lvl+0x241/0x360 [ 153.801036][ T1169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.801052][ T1169] ? __pfx__printk+0x10/0x10 [ 153.801076][ T1169] ? vscnprintf+0x5d/0x90 [ 153.801096][ T1169] panic+0x349/0x880 [ 153.801117][ T1169] ? check_panic_on_warn+0x21/0xb0 [ 153.801134][ T1169] ? __pfx_panic+0x10/0x10 [ 153.801154][ T1169] ? mark_lock+0x9a/0x360 [ 153.801170][ T1169] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 153.801192][ T1169] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 153.801212][ T1169] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.801233][ T1169] ? print_report+0x502/0x550 [ 153.801256][ T1169] check_panic_on_warn+0x86/0xb0 [ 153.801273][ T1169] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 153.801296][ T1169] end_report+0x77/0x160 [ 153.801316][ T1169] kasan_report+0x154/0x180 [ 153.801338][ T1169] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 153.801363][ T1169] __list_del_entry_valid_or_report+0x2f/0x140 [ 153.801385][ T1169] binder_release_work+0xc7/0x480 [ 153.801409][ T1169] binder_deferred_func+0x1275/0x1460 [ 153.801431][ T1169] ? process_scheduled_works+0x976/0x1850 [ 153.801452][ T1169] process_scheduled_works+0xa63/0x1850 [ 153.801482][ T1169] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.801505][ T1169] ? assign_work+0x364/0x3d0 [ 153.801526][ T1169] worker_thread+0x870/0xd30 [ 153.801552][ T1169] ? __kthread_parkme+0x169/0x1d0 [ 153.801574][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 153.801595][ T1169] kthread+0x2f0/0x390 [ 153.801610][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 153.801630][ T1169] ? __pfx_kthread+0x10/0x10 [ 153.801646][ T1169] ret_from_fork+0x4b/0x80 [ 153.801667][ T1169] ? __pfx_kthread+0x10/0x10 [ 153.801682][ T1169] ret_from_fork_asm+0x1a/0x30 [ 153.801707][ T1169] [ 153.805152][ T1169] Kernel Offset: disabled