last executing test programs: 9m59.586123813s ago: executing program 5 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 9m57.634111425s ago: executing program 5 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 9m56.927778267s ago: executing program 5 (id=257): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x40}, 0x0) 9m56.516126439s ago: executing program 5 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x800) msgsnd(r3, 0x0, 0x27, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setpgid(0x0, r4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 9m56.238152656s ago: executing program 5 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) lseek(r0, 0x40203, 0x4) 9m55.005108705s ago: executing program 5 (id=262): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xc84}, 0x1c) listen(0xffffffffffffffff, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 9m53.359444124s ago: executing program 32 (id=262): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xc84}, 0x1c) listen(0xffffffffffffffff, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 9m8.459833111s ago: executing program 4 (id=359): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192e20845050c800a0301020301090212000100000000090404"], 0x0) syz_usb_ep_write(r0, 0x5, 0xdb, &(0x7f0000000440)="46508837fa3679aac5c86ae9f71c019f7b62cf46da098d37ebe16fd84ea36fca4a3559ecf9829eb761deca77977a49898142f6fd837e8f867f5053b3745ad880ccc58b3ef6e59305704b13d61c36e6825aa7cfe311126dff89db6d88ac1119d2e883f4605d0f9f314b0ade084cf947c052a99884765621d14a0026c1e32a16eb61496e97e69878b6c7975f5e431fa4f8c0b2b3747fe52d662ab96498442ab1bfe36272ec4403c04bec478fc6e16a6e357726f7f60e01d1333caf7d67f4e101b5d461deec47c7f8ab17af7d22375e24547b9706002e272b83d45836") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x9, 0x0) timerfd_gettime(r4, 0x0) 9m4.94786426s ago: executing program 4 (id=366): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460403ad03000000000000000002003e00000000000103000038"], 0x58) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x991) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 9m3.502331958s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) 8m58.146524036s ago: executing program 4 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000001b000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0ff03000087dbe9abc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m57.648101807s ago: executing program 4 (id=382): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x4351, &(0x7f0000000080)={0x0, 0xc982, 0x80, 0x3, 0x135}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000300)={0x0, 0xa}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) setrlimit(0x7, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0) sendmsg$tipc(r6, 0x0, 0x0) accept4$tipc(r5, &(0x7f0000000280), 0x0, 0x80000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m54.270403769s ago: executing program 4 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x2ef8}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40008062, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8m39.225080089s ago: executing program 33 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x2ef8}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40008062, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m51.242460727s ago: executing program 1 (id=1333): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1e8, 0x1e8, 0xfeffffff, 0x2e0, 0x2e0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1e}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x1, 0xc}, 0x6, 0x2}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x4, 0x6]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'lo\x00', 'vlan0\x00', {}, {}, 0x1d}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e24], 0x4, 0x1, 0x5d, 0xce}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wlan0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x204, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010100, @ipv6=@local, @icmp_id=0x64, @gre_key=0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 2m50.453460631s ago: executing program 1 (id=1335): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000003c0)={r3, 0x10, "d24ec8bedb50a214ed375f000000005d"}, &(0x7f0000000480)=0x18) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x200, 0x0, 0x2f7}, &(0x7f0000002000), &(0x7f0000000000)) 2m48.71599256s ago: executing program 1 (id=1338): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m46.09855062s ago: executing program 1 (id=1348): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1e8, 0x1e8, 0xfeffffff, 0x2e0, 0x2e0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1e}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x1, 0xc}, 0x6, 0x2}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x4, 0x6]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'lo\x00', 'vlan0\x00', {}, {}, 0x1d}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e24], 0x4, 0x1, 0x5d, 0xce}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wlan0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x204, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010100, @ipv6=@local, @icmp_id=0x64, @gre_key=0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 2m45.374225254s ago: executing program 1 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2m35.822420625s ago: executing program 1 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) 2m19.977793844s ago: executing program 34 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) 1m53.336795842s ago: executing program 0 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x3) r4 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x8000, 0x10000, 0x8003, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 1m49.958213235s ago: executing program 0 (id=1477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x8000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x0) 1m49.459993992s ago: executing program 0 (id=1479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) 1m45.492565764s ago: executing program 2 (id=1484): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r1, @ANYBLOB='\x00'/10, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) 1m44.655869449s ago: executing program 2 (id=1486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe2$9p(0x0, 0x4000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000080)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000300), &(0x7f0000000240)=ANY=[], 0xa9, 0x1) 1m40.125004121s ago: executing program 2 (id=1494): openat$ptmx(0xffffffffffffff9c, 0x0, 0x220000, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x24004084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioperm(0x4, 0x2000000000004, 0x2020008007) prctl$PR_SET_PDEATHSIG(0x1, 0x200000000000) 1m40.050416121s ago: executing program 0 (id=1495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r0}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="02", 0x29) 1m38.138715846s ago: executing program 0 (id=1498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1m33.402667277s ago: executing program 0 (id=1506): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a32000000000900030073797a31000000000900010073797a09"], 0x58}}, 0x24004084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1}}], 0x1, 0x4c040) 1m32.038373705s ago: executing program 7 (id=1509): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100083, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4000}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000200)={[{0x9, 0x4e00, "f80837cd64be0bd548"}]}) 1m31.894358076s ago: executing program 2 (id=1510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r0}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="02", 0x29) 1m30.498299876s ago: executing program 2 (id=1512): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r1, @ANYBLOB='\x00'/10, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) 1m30.212437914s ago: executing program 7 (id=1513): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m28.598319623s ago: executing program 7 (id=1516): r0 = syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f1, &(0x7f0000000180)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x56, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$tun(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r6, 0xe10000, 0x1000000000084003, 0x3) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x14020, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT], 0xfd, 0x233, &(0x7f00000002c0)="$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") 1m25.974033556s ago: executing program 2 (id=1520): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f000001f6c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x400) r0 = creat(0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="15000046007c00"/21], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x20, 0x4}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800000, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1m24.627373781s ago: executing program 7 (id=1524): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r0}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="02", 0x29) 1m23.323197118s ago: executing program 7 (id=1526): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, 0x0, 0x0) 1m22.957983305s ago: executing program 6 (id=1527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) r5 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x8000, 0x10000, 0x8003, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') close_range(r5, 0xffffffffffffffff, 0x0) 1m21.3743462s ago: executing program 6 (id=1529): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m19.846603781s ago: executing program 7 (id=1535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000003a00)=[{{&(0x7f00000003c0)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1, &(0x7f00000004c0)=""/162, 0xa2}, 0x7}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/251, 0xfb}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000840)=""/240, 0xf0}, {&(0x7f0000000940)=""/136, 0x88}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000b00)=""/175, 0xaf}, {&(0x7f0000000bc0)=""/79, 0x4f}], 0x9}, 0x3}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000d80)=""/118, 0x76}, {&(0x7f0000000e00)=""/90, 0x5a}], 0x2, &(0x7f0000000e80)=""/179, 0xb3}, 0x3}, {{&(0x7f0000000f40)=@un=@abs, 0x80, &(0x7f0000003300)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/21, 0x15}, {&(0x7f0000002040)=""/75, 0x4b}, {&(0x7f00000020c0)=""/86, 0x56}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/35, 0x23}, {&(0x7f0000003180)=""/197, 0xc5}, {&(0x7f0000003280)=""/27, 0x1b}, {&(0x7f00000032c0)=""/43, 0x2b}], 0x9, &(0x7f00000033c0)=""/29, 0x1d}, 0x1000000}, {{&(0x7f0000003400)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f0000003480)=""/111, 0x6f}, {&(0x7f0000003500)=""/52, 0x34}, {&(0x7f0000003540)=""/81, 0x51}, {&(0x7f00000035c0)=""/159, 0x9f}, {&(0x7f0000003680)=""/161, 0xa1}], 0x5, &(0x7f00000037c0)=""/26, 0x1a}, 0xfffffff3}, {{&(0x7f0000003800)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003b80)=""/64, 0x40}, {&(0x7f00000038c0)=""/69, 0x45}], 0x2, &(0x7f0000003980)=""/98, 0x62}, 0x1ff}], 0x6, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x7, @buffer={0x2, 0x4d, &(0x7f00000000c0)=""/77}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [], [0x2b8, 0x8, 0xea, 0x1], [0x0, 0x9, 0x0, 0xfffffffe], [0xfffffffffffffffd, 0x0, 0x2]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x143c, &(0x7f0000003bc0)={0x0, 0xc793, 0x40, 0x3, 0x30}, &(0x7f0000000000), 0x0) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) close_range(r5, 0xffffffffffffffff, 0x0) 1m19.395223759s ago: executing program 6 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = creat(0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) epoll_create1(0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) ioctl$FIBMAP(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m18.378350914s ago: executing program 6 (id=1538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r1}, 0x18) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="02", 0x29) 1m17.208118557s ago: executing program 6 (id=1540): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100083, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4000}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000200)={[{0x9, 0x4e00, "f80837cd64be0bd548"}]}) 1m15.56659107s ago: executing program 6 (id=1544): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x4, 0x7fff, 0x0, @empty, @mcast1, 0x1, 0x20, 0x7, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.608638372s ago: executing program 8 (id=1548): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m12.818818922s ago: executing program 8 (id=1550): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) 1m11.608520891s ago: executing program 8 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = creat(0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) epoll_create1(0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) ioctl$FIBMAP(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m10.445719605s ago: executing program 8 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r1}, 0x18) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="02", 0x29) 1m9.266830716s ago: executing program 8 (id=1554): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) 1m6.522751981s ago: executing program 8 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) 6.74827586s ago: executing program 3 (id=1602): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xf0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) 6.646264195s ago: executing program 3 (id=1603): r0 = syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f1, &(0x7f0000000180)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x56, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$tun(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r7, 0xe10000, 0x1000000000084003, 0x3) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x14020, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT], 0xfd, 0x233, &(0x7f00000002c0)="$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") 4.656980092s ago: executing program 3 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040), 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4bfa, &(0x7f00000000c0)={0x0, "5366af460219f74f3a10d53249c26a74801b7170d0e388210751ff688b8250671da8332949f74cc0cabedc9b5ab25f175a6bfed70799a0a818a99da723a1b0711640b5909a1841593f7d272db6734be415b8ef1493139706a107988927ecc85f8ebe93100301562c6d9f0281e760decce5f0602ca2b6b5851d53dd9816eb80f865a1ff0c3f5878bcae613b26df9114875fa19a54a0cb0418ab932715ab83984ebd012d68c410a4e8d6f84641d0cfd127cd2f8f8beae9e2d3272abd1f09afff1f4b99b063b13bd1cd6835f4e9b8ffd69e7959462324138950f889f27683474132a7be1cd95f18365f7b83cab391f5fceb415907a4deb6008124c37a620900bff7a78b5dd2ca9b2804b5fa190e211b734f5a8d1d56245b070d85a36a05e4488d2d7e9dcc4803e2db979a1548e64a67f147c37d1f31d4aff18eba29e3b7d232b4a19b0965c132259c68307c940e781d60a100c87ee324791015b74fe2e37883c3ca0b28aa5af7225998f8bdd996f8d067317a26776edd1a3036ec4100967229f98fa14280e6fb8ff8465f0ff663e771ec5b0a21c43ab26b3f19d016856b727a1fd1866d97df34c8d0748644055e056757be749d19072dd0540fbc1c0423307c5822417bd3bf224af1bdb6e5831b8eae35c82fe7aaf099bd0f248f7ca351face45402c02ecdaeafc0b49e03715bb21436205e49c24b7c2650c805b8f986153844411"}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f00000000c0)=ANY=[]) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0xff8, 0x10100}, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x327b, 0x220002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x401, 0x1, 0x3, 0x1, 0x1}, 0x8) 2.146331727s ago: executing program 3 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r1}, 0x18) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="02", 0x29) 1.009336862s ago: executing program 3 (id=1606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800) 0s ago: executing program 3 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02) kernel console output (not intermixed with test programs): leasing backup interface [ 333.764188][ T12] bond0 (unregistering): Released all slaves [ 333.853593][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.898436][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.943639][ T8160] bridge_slave_0: entered allmulticast mode [ 333.966914][ T8160] bridge_slave_0: entered promiscuous mode [ 333.993244][ T12] hsr_slave_0: left promiscuous mode [ 333.999035][ T12] hsr_slave_1: left promiscuous mode [ 334.006358][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.020026][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.177315][ T8263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'. [ 335.605174][ T12] team0 (unregistering): Port device team_slave_1 removed [ 335.663915][ T12] team0 (unregistering): Port device team_slave_0 removed [ 336.177014][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.292714][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.325129][ T8160] bridge_slave_1: entered allmulticast mode [ 336.471971][ T8160] bridge_slave_1: entered promiscuous mode [ 337.737953][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.767367][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.235633][ T8160] team0: Port device team_slave_0 added [ 339.317262][ T8160] team0: Port device team_slave_1 added [ 339.780438][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.690234][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.720498][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.759983][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.779891][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.910027][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.834703][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.228137][ T8160] hsr_slave_0: entered promiscuous mode [ 343.257558][ T8160] hsr_slave_1: entered promiscuous mode [ 343.275048][ T8160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.295657][ T8160] Cannot create hsr debugfs directory [ 344.353908][ T7879] veth0_vlan: entered promiscuous mode [ 344.411184][ T7879] veth1_vlan: entered promiscuous mode [ 345.217653][ T7879] veth0_macvtap: entered promiscuous mode [ 345.436287][ T7879] veth1_macvtap: entered promiscuous mode [ 346.288717][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.320698][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.359962][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.389912][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.479093][ T8364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.479462][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.650194][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.875355][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.070073][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.089471][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.129612][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.162820][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.172949][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.195889][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.239376][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.266732][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.310039][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.349933][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.398409][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.982584][ T7879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.052654][ T7879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.112229][ T8386] input: syz0 as /devices/virtual/input/input7 [ 348.122640][ T7879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.157025][ T7879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.502787][ T8160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.578876][ T8160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.643992][ T8160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.838843][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.839555][ T8160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.877796][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.296032][ T8409] Cannot find set identified by id 0 to match [ 349.768465][ T8409] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 349.776460][ T8410] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 350.008161][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 350.568556][ T7197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.577289][ T7197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.703949][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.569200][ T5959] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.810206][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.819703][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.830513][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.840741][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.860261][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.894396][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.905345][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.151723][ T5959] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.765504][ T5959] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.857126][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.864284][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.002277][ T5843] Bluetooth: hci2: command tx timeout [ 355.003941][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.015310][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.145367][ T8465] input: syz0 as /devices/virtual/input/input8 [ 355.260297][ T5959] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.622748][ T8160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.672074][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.682034][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.690139][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.698587][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.710712][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 355.720006][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.960763][ T5959] bridge_slave_1: left allmulticast mode [ 355.969957][ T5963] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 355.990102][ T5959] bridge_slave_1: left promiscuous mode [ 355.995878][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.040889][ T6066] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 356.113442][ T5959] bridge_slave_0: left allmulticast mode [ 356.119248][ T5959] bridge_slave_0: left promiscuous mode [ 356.129614][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.161827][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.179675][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 356.202111][ T6066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.211488][ T5963] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.229697][ T6066] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 356.231781][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.251647][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.268660][ T5963] usb 1-1: config 0 descriptor?? [ 356.278418][ T6066] usb 4-1: Product: syz [ 356.278687][ T5963] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 356.285993][ T6066] usb 4-1: Manufacturer: syz [ 356.315643][ T6066] usb 4-1: SerialNumber: syz [ 356.335974][ T6066] usb 4-1: config 0 descriptor?? [ 356.361752][ T6066] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 356.394924][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 356.409169][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 356.434412][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 356.448187][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 356.471536][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 356.479430][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 356.487345][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 356.516699][ T6066] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 357.091024][ T5839] Bluetooth: hci2: command tx timeout [ 357.472640][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.601189][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.662436][ T5959] bond0 (unregistering): Released all slaves [ 357.774574][ T25] usb 4-1: USB disconnect, device number 4 [ 357.800419][ T5839] Bluetooth: hci5: command tx timeout [ 357.844977][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 357.878222][ T25] keyspan 4-1:0.0: device disconnected [ 358.149557][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 358.285501][ T5959] hsr_slave_0: left promiscuous mode [ 358.309298][ T5959] hsr_slave_1: left promiscuous mode [ 358.315718][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.324620][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.339704][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.353584][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.426062][ T5959] veth1_macvtap: left promiscuous mode [ 358.434740][ T5959] veth0_macvtap: left promiscuous mode [ 358.470061][ T5959] veth1_vlan: left promiscuous mode [ 358.475461][ T5959] veth0_vlan: left promiscuous mode [ 358.810648][ T5898] usb 1-1: USB disconnect, device number 18 [ 359.467982][ T5839] Bluetooth: hci2: command tx timeout [ 359.904266][ T5839] Bluetooth: hci5: command tx timeout [ 360.242112][ T8515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 361.220005][ T29] audit: type=1800 audit(1739639150.550:7): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.546" name="file0" dev="overlay" ino=20281 res=0 errno=0 [ 361.471103][ T8517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.550'. [ 361.480617][ T5839] Bluetooth: hci2: command tx timeout [ 361.831468][ T8523] 9pnet_fd: Insufficient options for proto=fd [ 361.979976][ T5839] Bluetooth: hci5: command tx timeout [ 364.442576][ T5839] Bluetooth: hci5: command tx timeout [ 364.905226][ T8545] Invalid ELF header type: 0 != 1 [ 364.956720][ T29] audit: type=1107 audit(1739639155.170:8): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u¸á-…ã]êÇÜ\= G!í y-œ÷ [ 364.956720][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 365.591994][ T8547] No such timeout policy "syz1" [ 367.111777][ T29] audit: type=1326 audit(1739639157.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 367.939865][ T29] audit: type=1326 audit(1739639157.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 367.986623][ T29] audit: type=1326 audit(1739639157.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.009659][ T29] audit: type=1326 audit(1739639157.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.040882][ T29] audit: type=1326 audit(1739639157.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.091235][ T8563] netlink: 64 bytes leftover after parsing attributes in process `syz.1.562'. [ 368.110946][ T29] audit: type=1326 audit(1739639157.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.134491][ T29] audit: type=1326 audit(1739639157.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.160619][ T29] audit: type=1326 audit(1739639157.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.190607][ T29] audit: type=1326 audit(1739639157.340:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 368.407021][ T29] audit: type=1326 audit(1739639157.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 369.009416][ T5959] team0 (unregistering): Port device team_slave_0 removed [ 369.162341][ T8575] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 371.022312][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.565'. [ 372.307872][ T8575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.448273][ T8575] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 372.452702][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.817825][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.840356][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.859319][ T8442] bridge_slave_0: entered allmulticast mode [ 372.871415][ T8442] bridge_slave_0: entered promiscuous mode [ 373.002341][ T8575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.012236][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.063926][ T8575] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 373.077031][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.109034][ T8442] bridge_slave_1: entered allmulticast mode [ 373.121961][ T8575] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 373.127930][ T8575] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 373.148916][ T8442] bridge_slave_1: entered promiscuous mode [ 373.395542][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.408618][ T8160] veth0_vlan: entered promiscuous mode [ 373.422070][ T8160] veth1_vlan: entered promiscuous mode [ 373.460190][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.570818][ T8442] team0: Port device team_slave_0 added [ 373.583733][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 373.640667][ T872] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 373.656125][ T8442] team0: Port device team_slave_1 added [ 373.700060][ T5913] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 373.740921][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.747930][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.778861][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.798595][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.806408][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.834213][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.856360][ T8606] vlan2: entered promiscuous mode [ 373.862037][ T872] usb 1-1: Using ep0 maxpacket: 8 [ 373.882256][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 373.894746][ T872] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 373.917041][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.929948][ T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.941880][ T5913] usb 4-1: config 0 descriptor?? [ 373.946912][ T872] usb 1-1: Product: syz [ 373.954268][ T872] usb 1-1: Manufacturer: syz [ 373.962971][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 373.970244][ T872] usb 1-1: SerialNumber: syz [ 373.978024][ T872] usb 1-1: config 0 descriptor?? [ 373.989080][ T872] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 374.012927][ T872] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 374.233464][ T8160] veth0_macvtap: entered promiscuous mode [ 374.280546][ T8160] veth1_macvtap: entered promiscuous mode [ 374.434987][ T8612] netlink: 64 bytes leftover after parsing attributes in process `syz.1.576'. [ 374.485401][ T1092] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.563151][ T8442] hsr_slave_0: entered promiscuous mode [ 374.575851][ T8442] hsr_slave_1: entered promiscuous mode [ 374.662378][ T1092] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.700277][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.722952][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.735799][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.747833][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.758439][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.769905][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.780489][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.800205][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.819196][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.992720][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.000270][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.007545][ T8469] bridge_slave_0: entered allmulticast mode [ 375.015015][ T8469] bridge_slave_0: entered promiscuous mode [ 375.063921][ T1092] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.103246][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.128587][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.309819][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.320819][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.331252][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.342199][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.352637][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.363966][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.375816][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.392429][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.403040][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.419601][ T8469] bridge_slave_1: entered allmulticast mode [ 375.429727][ T8469] bridge_slave_1: entered promiscuous mode [ 375.477143][ T1092] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.595423][ T8160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.606499][ T8160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.618708][ T8160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.637288][ T8160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.673447][ T5913] gspca_stv06xx: I2C: Read error writing address: -71 [ 375.688397][ T5913] usb 4-1: USB disconnect, device number 5 [ 375.723174][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.784790][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.920643][ T8469] team0: Port device team_slave_0 added [ 375.937938][ T8469] team0: Port device team_slave_1 added [ 376.030667][ T1092] bridge_slave_1: left allmulticast mode [ 376.052916][ T1092] bridge_slave_1: left promiscuous mode [ 376.076736][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.092924][ T1092] bridge_slave_0: left allmulticast mode [ 376.101158][ T8618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 376.106563][ T1092] bridge_slave_0: left promiscuous mode [ 376.118452][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.144288][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 376.144305][ T29] audit: type=1800 audit(1739639166.380:21): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.578" name="file0" dev="overlay" ino=20281 res=0 errno=0 [ 376.614643][ T8] usb 1-1: USB disconnect, device number 19 [ 378.245535][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.105788][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.331101][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.371878][ T1092] bond0 (unregistering): Released all slaves [ 382.276764][ T8660] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.340295][ T8660] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.349129][ T8660] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.400073][ T8660] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.439992][ T8660] geneve2: entered promiscuous mode [ 382.469944][ T8660] geneve2: entered allmulticast mode [ 382.551713][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.558717][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.609954][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.631786][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.642493][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.649481][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.685481][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.693203][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.704189][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.712763][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.720560][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 382.728139][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.760566][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.773070][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.782763][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.841488][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.851890][ T5839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 382.863561][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.554396][ T8469] hsr_slave_0: entered promiscuous mode [ 383.574199][ T8469] hsr_slave_1: entered promiscuous mode [ 383.588834][ T8469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.600318][ T8469] Cannot create hsr debugfs directory [ 383.686189][ T1092] hsr_slave_0: left promiscuous mode [ 383.703067][ T1092] hsr_slave_1: left promiscuous mode [ 383.729536][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.750770][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.773327][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.810033][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.869425][ T1092] veth1_macvtap: left promiscuous mode [ 383.900054][ T1092] veth0_macvtap: left promiscuous mode [ 383.908038][ T1092] veth1_vlan: left promiscuous mode [ 383.936382][ T1092] veth0_vlan: left promiscuous mode [ 384.928875][ T5843] Bluetooth: hci6: command tx timeout [ 385.559050][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 386.299361][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 387.001322][ T5843] Bluetooth: hci6: command tx timeout [ 387.825827][ T8692] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input10 [ 389.286310][ T5843] Bluetooth: hci6: command tx timeout [ 391.319986][ T5843] Bluetooth: hci6: command tx timeout [ 395.261383][ T8442] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 395.330840][ T8442] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.355270][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 395.478765][ T1092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.573249][ T8442] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 396.851757][ T1092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.921967][ T8442] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.128984][ T1092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.173492][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.205377][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.249062][ T8662] bridge_slave_0: entered allmulticast mode [ 397.280389][ T8662] bridge_slave_0: entered promiscuous mode [ 397.323776][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.354769][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.388701][ T8662] bridge_slave_1: entered allmulticast mode [ 397.421540][ T8662] bridge_slave_1: entered promiscuous mode [ 397.571006][ T1092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.714644][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.754291][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.926047][ T8662] team0: Port device team_slave_0 added [ 397.967553][ T8662] team0: Port device team_slave_1 added [ 398.170392][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.177393][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.398025][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.301170][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.308179][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.335575][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.498920][ T1092] bridge_slave_1: left allmulticast mode [ 399.511907][ T1092] bridge_slave_1: left promiscuous mode [ 399.538290][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.612272][ T1092] bridge_slave_0: left allmulticast mode [ 399.618007][ T1092] bridge_slave_0: left promiscuous mode [ 399.671013][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.162004][ T872] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 400.351677][ T872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.782448][ T872] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 400.883899][ T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.912250][ T872] usb 1-1: Product: syz [ 400.917058][ T872] usb 1-1: Manufacturer: syz [ 400.931959][ T872] usb 1-1: SerialNumber: syz [ 400.950635][ T872] usb 1-1: config 0 descriptor?? [ 400.980453][ T872] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 400.988017][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 401.005538][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 401.038512][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 401.054748][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 401.070387][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.089229][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 401.106867][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.146482][ T1092] bond0 (unregistering): Released all slaves [ 401.155006][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 401.185556][ T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 401.242915][ T8469] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.258207][ T872] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 401.469671][ T8662] hsr_slave_0: entered promiscuous mode [ 401.512261][ T8662] hsr_slave_1: entered promiscuous mode [ 401.541165][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.548927][ T8662] Cannot create hsr debugfs directory [ 401.555450][ T8469] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 401.572850][ T8469] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.619498][ T1092] hsr_slave_0: left promiscuous mode [ 401.656431][ T25] usb 1-1: USB disconnect, device number 20 [ 401.672121][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 401.699947][ T1092] hsr_slave_1: left promiscuous mode [ 401.718671][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.728587][ T25] keyspan 1-1:0.0: device disconnected [ 401.751103][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.800827][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.808307][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.867314][ T1092] veth1_macvtap: left promiscuous mode [ 401.886126][ T1092] veth0_macvtap: left promiscuous mode [ 401.896320][ T1092] veth1_vlan: left promiscuous mode [ 401.923927][ T1092] veth0_vlan: left promiscuous mode [ 403.059645][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 403.143192][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 403.358247][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.413899][ T8469] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.908784][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.762696][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.877841][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.885067][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.963694][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.971093][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.230891][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.504394][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.573815][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.581019][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.759202][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.766413][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.613744][ T8662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.706240][ T8662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.816014][ T8662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.146070][ T8662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 408.616552][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.961977][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.038467][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.102396][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.109565][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.186204][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.193385][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.105482][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.152060][ T8662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.480391][ T8865] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 410.632595][ T8442] veth0_vlan: entered promiscuous mode [ 410.705834][ T8442] veth1_vlan: entered promiscuous mode [ 411.347302][ T8442] veth0_macvtap: entered promiscuous mode [ 411.652451][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.047710][ T8662] veth0_vlan: entered promiscuous mode [ 412.133203][ T8662] veth1_vlan: entered promiscuous mode [ 412.244911][ T8469] veth0_vlan: entered promiscuous mode [ 412.320907][ T8469] veth1_vlan: entered promiscuous mode [ 412.493046][ T8469] veth0_macvtap: entered promiscuous mode [ 412.522665][ T8662] veth0_macvtap: entered promiscuous mode [ 412.603715][ T8662] veth1_macvtap: entered promiscuous mode [ 412.637847][ T8469] veth1_macvtap: entered promiscuous mode [ 412.731645][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.808498][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.860006][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.899093][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.945519][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.988664][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.039614][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.101773][ T8914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.143820][ T8914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.164080][ T8914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.179072][ T8914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.187713][ T8914] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.195226][ T8914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.319954][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.358684][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.400127][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.444549][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.489840][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.515334][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.574175][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.833507][ T8662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.889952][ T8662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.898724][ T8662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.979803][ T8662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.363245][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.373478][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.381900][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.390268][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.397940][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.405522][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.094969][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.150444][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.236095][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 415.248160][ T8914] Bluetooth: hci1: command tx timeout [ 415.305306][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.382343][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.249957][ T8914] Bluetooth: hci2: command tx timeout [ 417.320350][ T8914] Bluetooth: hci1: command tx timeout [ 417.323150][ T8913] chnl_net:caif_netlink_parms(): no params data found [ 417.394391][ T985] bridge_slave_1: left allmulticast mode [ 417.415355][ T985] bridge_slave_1: left promiscuous mode [ 417.434971][ T985] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.447302][ T8953] loop7: detected capacity change from 0 to 16384 [ 417.480397][ T8948] loop7: detected capacity change from 16384 to 16383 [ 417.497921][ T985] bridge_slave_0: left allmulticast mode [ 417.509994][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.519839][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 417.525519][ T985] bridge_slave_0: left promiscuous mode [ 417.529406][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.551408][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 417.552710][ T985] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.572406][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.587348][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 417.655318][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.239405][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.263120][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.279099][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.298617][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.325566][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.363761][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.373355][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.383869][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.395836][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.416682][ T8948] ldm_validate_partition_table(): Disk read failed. [ 418.445486][ T8964] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 418.446842][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.453158][ T8964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.463164][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.518438][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.530098][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read [ 418.587220][ T8948] Dev loop7: unable to read RDB block 0 [ 418.617873][ T8948] loop7: unable to read partition table [ 418.713169][ T8948] loop_reread_partitions: partition scan of loop7 (R%0Öå—ÊT·$7ñ)]W°ÝÈð?”18úá´;9ƒ×C?š-ôá…z׌¨€× ²žç»…97dª¥÷) failed (rc=-5) [ 419.360076][ T8914] Bluetooth: hci2: command tx timeout [ 419.399933][ T8914] Bluetooth: hci1: command tx timeout [ 419.445798][ T8976] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 420.099067][ T985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.141878][ T985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.169037][ T985] bond0 (unregistering): Released all slaves [ 420.246020][ T8976] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 420.272832][ T8976] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 421.158991][ T985] hsr_slave_0: left promiscuous mode [ 421.178110][ T8976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 421.184544][ T8976] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 421.194251][ T985] hsr_slave_1: left promiscuous mode [ 421.214250][ T985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.244478][ T985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.411664][ T985] veth0_macvtap: left promiscuous mode [ 421.417303][ T8914] Bluetooth: hci2: command tx timeout [ 421.430827][ T8976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.437056][ T985] veth1_vlan: left promiscuous mode [ 421.440284][ T8976] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 421.447106][ T985] veth0_vlan: left promiscuous mode [ 422.621151][ T8997] Illegal XDP return value 4294967262 on prog (id 92) dev N/A, expect packet loss! [ 423.532676][ T9004] befs: (nullb0): No write support. Marking filesystem read-only [ 423.545784][ T9004] befs: (nullb0): invalid magic header [ 425.484380][ T9015] overlayfs: missing 'lowerdir' [ 426.512798][ T985] team0 (unregistering): Port device team_slave_1 removed [ 426.602337][ T985] team0 (unregistering): Port device team_slave_0 removed [ 427.364099][ T9028] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 427.373001][ T9028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.600056][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.607274][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.775288][ T8913] bridge_slave_0: entered allmulticast mode [ 430.743654][ T8913] bridge_slave_0: entered promiscuous mode [ 430.772151][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.779645][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.867005][ T9057] Invalid ELF header type: 0 != 1 [ 430.909911][ T29] audit: type=1107 audit(1739639221.110:22): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u¸á-…ã]êÇÜ\= G!í y-œ÷ [ 430.909911][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 430.960134][ T8913] bridge_slave_1: entered allmulticast mode [ 431.480734][ T8913] bridge_slave_1: entered promiscuous mode [ 431.902892][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.971037][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 432.582160][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.826140][ T9091] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 432.851982][ T9093] ip6t_REJECT: ECHOREPLY is not supported [ 433.009129][ T8913] team0: Port device team_slave_0 added [ 433.127888][ T8913] team0: Port device team_slave_1 added [ 434.163063][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.180911][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.220300][ T8924] bridge_slave_0: entered allmulticast mode [ 434.230793][ T8924] bridge_slave_0: entered promiscuous mode [ 434.251570][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.390611][ T9114] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 434.398713][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.420933][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.435606][ T8924] bridge_slave_1: entered allmulticast mode [ 434.793971][ T8924] bridge_slave_1: entered promiscuous mode [ 434.838073][ T9113] Invalid ELF header type: 0 != 1 [ 435.644349][ T29] audit: type=1107 audit(1739639225.080:23): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u¸á-…ã]êÇÜ\= G!í y-œ÷ [ 435.644349][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 435.910873][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.918049][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.019855][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.194406][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.261230][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.268621][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.429941][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.492175][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.884594][ T8913] hsr_slave_0: entered promiscuous mode [ 436.916826][ T8913] hsr_slave_1: entered promiscuous mode [ 437.092045][ T8924] team0: Port device team_slave_0 added [ 437.124158][ T8924] team0: Port device team_slave_1 added [ 437.952523][ T9155] ip6t_REJECT: ECHOREPLY is not supported [ 438.089402][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.110626][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.184989][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.228248][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.258952][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.349814][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.449630][ T9170] Invalid ELF header type: 0 != 1 [ 438.501858][ T29] audit: type=1107 audit(1739639228.690:24): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u¸á-…ã]êÇÜ\= G!í y-œ÷ [ 438.501858][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 439.665249][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.056769][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 440.402032][ T6066] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 440.696680][ T8924] hsr_slave_0: entered promiscuous mode [ 440.856094][ T8924] hsr_slave_1: entered promiscuous mode [ 440.890096][ T9192] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 440.899881][ T8924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.923429][ T6066] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.945102][ T8924] Cannot create hsr debugfs directory [ 440.976062][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 440.989871][ T6066] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 441.000850][ T9187] bridge0: port 3(batadv1) entered blocking state [ 441.064381][ T9187] bridge0: port 3(batadv1) entered disabled state [ 441.079324][ T6066] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 441.091520][ T9187] batadv1: entered allmulticast mode [ 441.110341][ T6066] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.120909][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 441.130753][ T9187] batadv1: entered promiscuous mode [ 441.136111][ T6066] usb 2-1: Product: syz [ 441.149355][ T6066] usb 2-1: Manufacturer: syz [ 441.158129][ T9187] bridge0: port 3(batadv1) entered blocking state [ 441.164742][ T9187] bridge0: port 3(batadv1) entered forwarding state [ 441.172726][ T6066] usb 2-1: SerialNumber: syz [ 441.188760][ T6066] cdc_mbim 2-1:1.0: skipping garbage [ 441.402933][ T9186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.535757][ T80] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 441.545336][ T80] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 441.809877][ T5913] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 441.943119][ T985] bridge_slave_1: left allmulticast mode [ 441.969265][ T985] bridge_slave_1: left promiscuous mode [ 442.018799][ T985] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.032049][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 442.043407][ T6066] cdc_mbim 2-1:1.0: bind() failure [ 442.063498][ T5913] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 442.071829][ T6066] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 442.079331][ T5913] usb 3-1: config 1 has no interface number 1 [ 442.095811][ T985] bridge_slave_0: left allmulticast mode [ 442.099806][ T5913] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 442.114426][ T6066] cdc_ncm 2-1:1.1: bind() failure [ 442.122150][ T985] bridge_slave_0: left promiscuous mode [ 442.127962][ T985] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.137730][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.149921][ T6066] usb 2-1: USB disconnect, device number 3 [ 442.151107][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.729578][ T5913] usb 3-1: Product: syz [ 442.749964][ T5913] usb 3-1: Manufacturer: syz [ 442.761918][ T5913] usb 3-1: SerialNumber: syz [ 443.467576][ T5913] usb 3-1: found format II with max.bitrate = 26774, frame size=1 [ 443.529651][ T5913] usb 3-1: found format II with max.bitrate = 26774, frame size=1 [ 443.587930][ T5913] usb 3-1: failed to enable PITCH for EP 0x82 [ 444.237764][ T5913] usb 3-1: USB disconnect, device number 6 [ 444.611236][ T985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.639494][ T985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.673023][ T985] bond0 (unregistering): Released all slaves [ 444.913059][ T985] hsr_slave_0: left promiscuous mode [ 444.926757][ T985] hsr_slave_1: left promiscuous mode [ 444.935485][ T985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.971860][ T985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.980019][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 445.023439][ T985] veth1_macvtap: left promiscuous mode [ 445.029117][ T985] veth0_macvtap: left promiscuous mode [ 445.080555][ T985] veth1_vlan: left promiscuous mode [ 445.089513][ T985] veth0_vlan: left promiscuous mode [ 445.168677][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 445.228548][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.265100][ T5913] usb 3-1: config 0 descriptor?? [ 445.322778][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 447.182979][ T29] audit: type=1326 audit(1739639237.420:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 447.211277][ T29] audit: type=1326 audit(1739639237.420:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 447.238891][ T29] audit: type=1326 audit(1739639237.420:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 447.322975][ T5913] gspca_stv06xx: I2C: Read error writing address: -71 [ 447.376141][ T5913] usb 3-1: USB disconnect, device number 7 [ 447.440705][ T6066] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 447.515912][ T985] team0 (unregistering): Port device team_slave_1 removed [ 447.564708][ T985] team0 (unregistering): Port device team_slave_0 removed [ 447.609929][ T6066] usb 4-1: Using ep0 maxpacket: 16 [ 447.630716][ T6066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.650387][ T6066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.669077][ T6066] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 447.687837][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.712772][ T6066] usb 4-1: config 0 descriptor?? [ 448.503793][ T6066] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 448.726595][ T6066] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71). [ 448.940213][ T6066] usb 4-1: USB disconnect, device number 6 [ 449.969575][ T9311] netlink: 11 bytes leftover after parsing attributes in process `syz.1.740'. [ 453.392093][ T8913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 454.446403][ T8913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 454.469994][ T872] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 454.656353][ T8913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 454.757299][ T872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.772520][ T8913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 454.830147][ T872] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 454.860025][ T872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.916356][ T872] usb 2-1: Product: syz [ 454.940062][ T872] usb 2-1: Manufacturer: syz [ 454.960653][ T872] usb 2-1: SerialNumber: syz [ 455.027604][ T872] usb 2-1: config 0 descriptor?? [ 455.072781][ T872] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 455.131182][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 455.138944][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 455.213693][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 455.305993][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 455.390119][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 455.436868][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 455.480260][ T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 455.578529][ T872] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 455.889513][ T872] usb 2-1: USB disconnect, device number 4 [ 455.918382][ T872] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 456.108243][ T872] keyspan 2-1:0.0: device disconnected [ 456.118103][ T9380] netlink: 11 bytes leftover after parsing attributes in process `syz.2.753'. [ 456.602646][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.667399][ T8924] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 456.707880][ T8924] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 456.823224][ T8924] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 456.888275][ T8924] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 457.053860][ T8913] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.078162][ T9388] befs: (nullb0): No write support. Marking filesystem read-only [ 457.086437][ T9388] befs: (nullb0): invalid magic header [ 457.210996][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.218139][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.244590][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.251775][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.143244][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.280958][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.353968][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.361211][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.851261][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.858507][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.258075][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.612514][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.249651][ T8913] veth0_vlan: entered promiscuous mode [ 461.324772][ T8913] veth1_vlan: entered promiscuous mode [ 461.465924][ T8913] veth0_macvtap: entered promiscuous mode [ 461.564721][ T8913] veth1_macvtap: entered promiscuous mode [ 461.598675][ T8924] veth0_vlan: entered promiscuous mode [ 461.652937][ T8924] veth1_vlan: entered promiscuous mode [ 461.740815][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.779486][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.809998][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.843025][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.865340][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.889783][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.920127][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.939814][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.961875][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.988029][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.991806][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 462.008902][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.038632][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.062338][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 462.069810][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.110832][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.134693][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.144988][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.159945][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.173016][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.225374][ T9473] ip6t_REJECT: ECHOREPLY is not supported [ 462.727088][ T8913] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.777509][ T8913] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.843804][ T8913] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.030200][ T8913] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.487029][ T8924] veth0_macvtap: entered promiscuous mode [ 463.536869][ T8924] veth1_macvtap: entered promiscuous mode [ 464.351632][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.421344][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.469454][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.496650][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.525764][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.557213][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.589872][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.626021][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.663379][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.707175][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.718592][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.817813][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.856314][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.900523][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.918648][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.929702][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.942689][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.957635][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.978956][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.010789][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.053229][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.101251][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.138453][ T9514] vlan2: entered promiscuous mode [ 465.145203][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.167801][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.246409][ T8924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.283280][ T8924] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.346145][ T8924] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.365558][ T8924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.496652][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.526152][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.708016][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.739400][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.864182][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.893028][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.987350][ T9537] ip6t_REJECT: ECHOREPLY is not supported [ 468.101300][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 468.206352][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 468.369037][ T9565] overlayfs: missing 'lowerdir' [ 468.965829][ T9559] bridge0: port 4(batadv2) entered blocking state [ 469.036511][ T9559] bridge0: port 4(batadv2) entered disabled state [ 469.059954][ T9559] batadv2: entered allmulticast mode [ 469.098805][ T9559] batadv2: entered promiscuous mode [ 469.137666][ T9559] bridge0: port 4(batadv2) entered blocking state [ 469.144269][ T9559] bridge0: port 4(batadv2) entered forwarding state [ 469.841452][ T52] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 469.850849][ T52] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 471.342529][ T9592] netlink: 11 bytes leftover after parsing attributes in process `syz.0.794'. [ 472.451251][ T6066] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 473.246429][ T6066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.296263][ T6066] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 473.315847][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.344430][ T6066] usb 4-1: Product: syz [ 473.369208][ T6066] usb 4-1: Manufacturer: syz [ 473.374129][ T6066] usb 4-1: SerialNumber: syz [ 473.423476][ T6066] usb 4-1: config 0 descriptor?? [ 473.535750][ T6066] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 473.603595][ T9615] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 473.613217][ T9615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.661642][ T9616] bpf: Bad value for 'gid' [ 473.671467][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 474.320980][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 474.813290][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 474.849510][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 474.867481][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 474.875506][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 474.883703][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 474.892994][ T6066] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 474.967807][ T6066] usb 4-1: USB disconnect, device number 7 [ 474.991116][ T9622] fuse: Bad value for 'fd' [ 475.028085][ T6066] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 475.089156][ T6066] keyspan 4-1:0.0: device disconnected [ 475.800137][ T5895] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 475.939954][ T5895] usb 1-1: device descriptor read/64, error -71 [ 476.729894][ T5895] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 477.506167][ T5895] usb 1-1: device descriptor read/64, error -71 [ 477.735076][ T5895] usb usb1-port1: attempt power cycle [ 478.353004][ T9659] netlink: 11 bytes leftover after parsing attributes in process `syz.3.810'. [ 478.490336][ T5895] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 478.760953][ T5895] usb 1-1: device not accepting address 23, error -71 [ 479.664942][ T9675] overlayfs: missing 'lowerdir' [ 479.722027][ T9676] bpf: Bad value for 'gid' [ 480.803856][ T9681] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 480.811886][ T9681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.697276][ T9690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.726493][ T9690] serio: Serial port ptm0 [ 483.039344][ T9702] befs: (nullb0): No write support. Marking filesystem read-only [ 483.059258][ T9702] befs: (nullb0): invalid magic header [ 484.915030][ T9724] netlink: 11 bytes leftover after parsing attributes in process `syz.7.827'. [ 488.049096][ T9756] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 494.950024][ T6066] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 495.134962][ T6066] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.198411][ T6066] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 495.233590][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.275104][ T6066] usb 2-1: Product: syz [ 495.279471][ T6066] usb 2-1: Manufacturer: syz [ 495.325797][ T6066] usb 2-1: SerialNumber: syz [ 495.348814][ T6066] usb 2-1: config 0 descriptor?? [ 495.388319][ T6066] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 495.412525][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 495.499889][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 495.541977][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 495.589473][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 495.646137][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 495.672220][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 495.726199][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 495.775362][ T6066] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 495.931017][ T5895] usb 2-1: USB disconnect, device number 5 [ 496.133721][ T5895] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 496.338079][ T5895] keyspan 2-1:0.0: device disconnected [ 501.375703][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.830767][ T9916] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 501.838456][ T9916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.319905][ T833] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 502.562404][ T833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.582913][ T833] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 502.594307][ T833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.611518][ T833] usb 1-1: Product: syz [ 502.621237][ T833] usb 1-1: Manufacturer: syz [ 502.634981][ T833] usb 1-1: SerialNumber: syz [ 502.722835][ T833] usb 1-1: config 0 descriptor?? [ 502.738424][ T833] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 502.747247][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 502.765588][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 503.034998][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 503.109425][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 503.125150][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 503.216395][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 503.230097][ T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 503.580288][ T833] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 503.823833][ T5913] usb 1-1: USB disconnect, device number 25 [ 503.861349][ T5913] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 503.906894][ T5913] keyspan 1-1:0.0: device disconnected [ 506.035589][ T9971] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 506.043387][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.900664][T10049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.434673][T10097] loop7: detected capacity change from 0 to 512 [ 515.520063][T10097] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 515.586443][T10097] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 517.040466][T10097] EXT4-fs (loop7): 1 truncate cleaned up [ 517.141002][T10097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.935524][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 518.036522][ T8913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.091402][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.110638][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.163841][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.243324][ T5900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.320969][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.372564][ T5900] usb 2-1: config 0 descriptor?? [ 519.828136][ T5900] usbhid 2-1:0.0: can't add hid device: -71 [ 519.836092][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 519.866266][ T5900] usb 2-1: USB disconnect, device number 6 [ 522.906529][T10190] befs: (nullb0): No write support. Marking filesystem read-only [ 522.918639][T10190] befs: (nullb0): invalid magic header [ 526.634089][T10229] loop6: detected capacity change from 0 to 32768 [ 526.641300][T10229] ======================================================= [ 526.641300][T10229] WARNING: The mand mount option has been deprecated and [ 526.641300][T10229] and is ignored by this kernel. Remove the mand [ 526.641300][T10229] option from the mount to silence this warning. [ 526.641300][T10229] ======================================================= [ 527.994984][T10229] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 528.186569][T10229] XFS (loop6): Ending clean mount [ 528.198732][T10229] XFS (loop6): Quotacheck needed: Please wait. [ 528.323759][T10229] XFS (loop6): Quotacheck: Done. [ 528.630117][ T8924] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 529.850546][T10266] input: syz0 as /devices/virtual/input/input12 [ 530.327585][T10251] evm: overlay not supported [ 530.371211][ T29] audit: type=1800 audit(1739639320.560:28): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.956" name="file1" dev="overlay" ino=932 res=0 errno=0 [ 533.681731][T10320] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 537.090130][ T5838] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 537.264523][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.344536][ T5838] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 537.368961][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.388807][ T5838] usb 4-1: Product: syz [ 537.414335][ T5838] usb 4-1: Manufacturer: syz [ 537.418982][ T5838] usb 4-1: SerialNumber: syz [ 537.456706][ T5838] usb 4-1: config 0 descriptor?? [ 537.494367][ T5838] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 537.551901][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 537.595461][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 537.650607][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 537.712829][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 537.759891][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 537.767974][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 537.863620][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 537.896386][ T5838] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 538.650569][ T5900] usb 4-1: USB disconnect, device number 8 [ 538.681999][ T5900] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 538.750575][ T5900] keyspan 4-1:0.0: device disconnected [ 542.268332][ T9500] udevd[9500]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 542.343327][T10418] bridge0: port 3(syz_tun) entered blocking state [ 542.367824][T10418] bridge0: port 3(syz_tun) entered disabled state [ 542.832643][T10418] syz_tun: entered allmulticast mode [ 542.961366][T10418] syz_tun: entered promiscuous mode [ 542.968828][T10418] bridge0: port 3(syz_tun) entered blocking state [ 542.975750][T10418] bridge0: port 3(syz_tun) entered forwarding state [ 543.141546][T10418] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 543.330510][T10418] syz.6.1002 (10418) used greatest stack depth: 16568 bytes left [ 543.649524][T10442] SET target dimension over the limit! [ 547.922874][ T5900] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 548.130748][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 548.157237][ T5900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.173518][ T5900] usb 4-1: config 0 has no interface number 0 [ 548.187376][ T5900] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 548.194382][T10499] Cannot find add_set index 0 as target [ 548.242481][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.273241][ T5900] usb 4-1: Product: syz [ 548.292063][ T5900] usb 4-1: Manufacturer: syz [ 548.309798][ T5900] usb 4-1: SerialNumber: syz [ 548.324446][ T5900] usb 4-1: config 0 descriptor?? [ 548.555697][ T5900] hub 4-1:0.1: bad descriptor, ignoring hub [ 548.595015][ T5900] hub 4-1:0.1: probe with driver hub failed with error -5 [ 549.380512][ T5900] usb 4-1: selecting invalid altsetting 1 [ 549.386317][ T5900] snd-usb-us122l 4-1:0.1: usb_set_interface error [ 549.428901][ T5900] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 549.511397][ T5900] usb 4-1: USB disconnect, device number 9 [ 552.500176][ T833] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 552.983677][ T833] usb 4-1: Using ep0 maxpacket: 8 [ 553.078092][T10555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.762350][ T833] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 553.779772][ T833] usb 4-1: config 179 has no interface number 0 [ 553.786165][ T833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 553.801529][ T833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 553.813657][ T833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 553.833623][ T833] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 553.855038][ T833] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 554.079744][ T833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.096082][T10546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 555.030020][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 555.297874][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 555.698810][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.735428][ T25] usb 3-1: config 0 has no interface number 0 [ 555.770069][ T25] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 555.805327][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.837267][ T25] usb 3-1: Product: syz [ 555.854140][ T25] usb 3-1: Manufacturer: syz [ 555.875302][ T25] usb 3-1: SerialNumber: syz [ 555.926850][ T25] usb 3-1: config 0 descriptor?? [ 555.944702][ T25] hub 3-1:0.1: bad descriptor, ignoring hub [ 556.006412][ T25] hub 3-1:0.1: probe with driver hub failed with error -5 [ 556.042144][ T25] usb 3-1: selecting invalid altsetting 1 [ 556.066717][ T25] snd-usb-us122l 3-1:0.1: usb_set_interface error [ 556.095928][ T25] snd-usb-us122l 3-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 557.898539][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 557.906936][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 557.916924][ T5900] usb 4-1: USB disconnect, device number 10 [ 558.142833][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.486066][T10610] befs: (nullb0): No write support. Marking filesystem read-only [ 558.564629][T10610] befs: (nullb0): invalid magic header [ 559.084065][T10621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.034568][ T5900] usb 3-1: USB disconnect, device number 8 [ 562.121962][T10641] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1067'. [ 562.891458][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.792127][T10661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.289622][T10671] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 565.222518][T10674] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 565.251068][T10674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.307910][T10678] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 565.342866][T10674] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 565.432378][T10678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1077'. [ 565.491984][T10678] batadv0: entered promiscuous mode [ 565.497377][T10678] batadv0: entered allmulticast mode [ 565.595146][T10678] bond0: (slave batadv0): Releasing backup interface [ 565.743500][T10678] bridge0: port 4(batadv0) entered blocking state [ 566.171949][T10678] bridge0: port 4(batadv0) entered disabled state [ 566.413339][T10691] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1082'. [ 567.212005][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 567.221406][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 567.489830][T10706] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 567.941199][T10719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.147668][T10726] bpf: Bad value for 'gid' [ 570.494228][T10739] befs: (nullb0): No write support. Marking filesystem read-only [ 570.509814][T10739] befs: (nullb0): invalid magic header [ 570.537146][T10736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.212490][T10742] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1097'. [ 573.623650][T10761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.976365][ T29] audit: type=1326 audit(1739639365.210:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 575.114060][ T29] audit: type=1326 audit(1739639365.210:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 575.216767][ T29] audit: type=1326 audit(1739639365.240:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 575.289318][ T29] audit: type=1326 audit(1739639365.240:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 575.392990][T10789] syzkaller0: entered promiscuous mode [ 575.409876][ T29] audit: type=1326 audit(1739639365.240:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 575.442686][T10789] syzkaller0: entered allmulticast mode [ 576.015931][ T29] audit: type=1326 audit(1739639365.240:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 576.141084][ T29] audit: type=1326 audit(1739639365.240:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 576.282325][ T29] audit: type=1326 audit(1739639365.240:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 576.432179][ T29] audit: type=1326 audit(1739639365.240:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 576.688258][ T29] audit: type=1326 audit(1739639365.240:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000 [ 577.230470][T10804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.820015][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 578.949846][ T5838] usb 2-1: device descriptor read/64, error -71 [ 579.191377][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 579.330954][ T5838] usb 2-1: device descriptor read/64, error -71 [ 579.446719][ T5838] usb usb2-port1: attempt power cycle [ 579.789898][ T5838] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 579.825169][ T5838] usb 2-1: device descriptor read/8, error -71 [ 579.887069][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 580.090045][ T5838] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 580.132480][ T5838] usb 2-1: device descriptor read/8, error -71 [ 580.257230][ T5838] usb usb2-port1: unable to enumerate USB device [ 582.000943][T10848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.019647][T10848] serio: Serial port ptm0 [ 586.629913][ T6066] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 586.858796][ T6066] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.878783][ T6066] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 586.906010][ T6066] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.944267][ T6066] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.991675][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 587.325921][ T6066] usb 2-1: Product: syz [ 587.431074][ T6066] usb 2-1: Manufacturer: syz [ 587.521717][ T6066] usb 2-1: SerialNumber: syz [ 587.551624][ T6066] cdc_mbim 2-1:1.0: skipping garbage [ 587.560032][ T6066] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 587.566955][ T6066] cdc_mbim 2-1:1.0: bind() failure [ 589.387852][ T5900] usb 2-1: USB disconnect, device number 11 [ 589.749373][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 589.771255][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 599.087039][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 599.145281][T11015] vlan2: entered promiscuous mode [ 599.308596][ T6339] tipc: Subscription rejected, illegal request [ 600.990413][T11044] : renamed from bond0 (while UP) [ 605.940074][T11098] befs: (nullb0): No write support. Marking filesystem read-only [ 605.954277][T11098] befs: (nullb0): invalid magic header [ 608.181788][T11118] vlan2: entered promiscuous mode [ 611.206966][T11165] vlan2: entered promiscuous mode [ 616.638270][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 616.638293][ T29] audit: type=1800 audit(1739639406.870:46): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1258" name="file1" dev="overlay" ino=492 res=0 errno=0 [ 618.005936][T11252] netlink: 'syz.6.1265': attribute type 1 has an invalid length. [ 620.908728][ T29] audit: type=1800 audit(1739639411.140:47): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1274" name="file1" dev="overlay" ino=1225 res=0 errno=0 [ 621.371550][T11252] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 621.432797][T11282] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1278'. [ 622.272948][T11292] ubi31: attaching mtd0 [ 622.278841][T11292] ubi31 error: ubi_attach_mtd_dev: bad VID header (24) or data offsets (88) [ 623.187169][T11301] befs: (nullb0): No write support. Marking filesystem read-only [ 624.008782][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.125096][T11301] befs: (nullb0): invalid magic header [ 629.654150][T11374] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 629.678061][T11374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.934032][ T833] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 630.079867][ T833] usb 2-1: device descriptor read/64, error -71 [ 630.334392][ T833] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 630.412528][T11303] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 630.499935][ T833] usb 2-1: device descriptor read/64, error -71 [ 630.623682][ T833] usb usb2-port1: attempt power cycle [ 631.220208][T11303] usb 3-1: Using ep0 maxpacket: 32 [ 631.653107][T11303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.673306][T11303] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 631.690219][T11303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.711579][T11303] usb 3-1: config 0 descriptor?? [ 631.750088][ T833] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 631.780814][ T833] usb 2-1: device descriptor read/8, error -71 [ 632.391219][ T833] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 632.603657][ T833] usb 2-1: device descriptor read/8, error -71 [ 632.740770][ T833] usb usb2-port1: unable to enumerate USB device [ 633.376718][T11303] usbhid 3-1:0.0: can't add hid device: -71 [ 633.417860][T11303] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 633.465848][T11303] usb 3-1: USB disconnect, device number 9 [ 633.793621][T11420] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 633.875163][T11420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.942849][T11437] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 636.380114][ T6066] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 636.573786][ T6066] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 636.622594][ T6066] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 636.672807][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.870451][ T6066] usb 4-1: config 0 descriptor?? [ 639.015712][ T833] usb 4-1: USB disconnect, device number 11 [ 639.219617][T11468] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 639.227411][T11468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.572766][ T833] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 639.761830][ T833] usb 2-1: Using ep0 maxpacket: 32 [ 639.776749][ T833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.845232][ T833] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 639.909902][ T833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.945029][ T833] usb 2-1: config 0 descriptor?? [ 640.014281][T11486] input: syz0 as /devices/virtual/input/input13 [ 640.741006][ T833] usbhid 2-1:0.0: can't add hid device: -71 [ 640.753090][ T833] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 640.774254][ T833] usb 2-1: USB disconnect, device number 16 [ 641.460588][T11498] Cannot find set identified by id 0 to match [ 642.660209][ T51] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 644.970449][T11513] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 645.070164][ T51] usb 4-1: device descriptor read/64, error -71 [ 645.332790][ T51] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 645.521626][ T51] usb 4-1: device descriptor read/64, error -71 [ 645.714427][ T51] usb usb4-port1: attempt power cycle [ 645.966079][T11529] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 646.011635][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.037059][T11551] Cannot find set identified by id 0 to match [ 652.660007][T11573] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 652.667916][T11573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.226409][T11621] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 660.244691][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.431658][T11626] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 668.823598][T11681] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 668.871810][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.880617][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.888263][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 669.006846][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 669.021050][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 669.028434][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.075966][ T8914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 669.084290][ T8914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 669.099870][ T8914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 669.108160][ T8914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 669.117582][ T8914] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 669.125301][ T8914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.854626][T11687] chnl_net:caif_netlink_parms(): no params data found [ 671.256836][ T5843] Bluetooth: hci5: command tx timeout [ 673.319781][ T5843] Bluetooth: hci5: command tx timeout [ 675.114844][T11687] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.149862][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.188132][T11687] bridge_slave_0: entered allmulticast mode [ 675.213822][T11687] bridge_slave_0: entered promiscuous mode [ 675.252132][T11687] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.269784][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.277202][T11687] bridge_slave_1: entered allmulticast mode [ 675.388012][T11687] bridge_slave_1: entered promiscuous mode [ 675.400079][ T5843] Bluetooth: hci5: command tx timeout [ 677.385161][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.425921][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.480465][ T5843] Bluetooth: hci5: command tx timeout [ 679.485504][T11687] team0: Port device team_slave_0 added [ 679.576935][T11687] team0: Port device team_slave_1 added [ 681.331102][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.346594][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.420258][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.466880][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.488329][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.585764][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.531647][T11687] hsr_slave_0: entered promiscuous mode [ 682.538062][T11687] hsr_slave_1: entered promiscuous mode [ 682.585115][T11687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.652376][T11687] Cannot create hsr debugfs directory [ 685.414147][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.900273][T11687] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 688.631832][T11687] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 688.893012][T11687] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 689.415785][T11687] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 691.272503][T11687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.574047][T11687] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.747395][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.754739][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.838763][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.845932][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.121940][T11687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.323737][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.269788][ T5913] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 694.366273][T11687] veth0_vlan: entered promiscuous mode [ 694.424849][T11687] veth1_vlan: entered promiscuous mode [ 694.502073][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.511811][T11687] veth0_macvtap: entered promiscuous mode [ 694.548751][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 694.551750][T11687] veth1_macvtap: entered promiscuous mode [ 694.789737][ T5913] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 694.796668][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.556995][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.590850][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.602006][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.607092][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.612261][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.630963][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.657083][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.676594][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.697249][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.718078][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.734714][ T5913] usb 4-1: config 0 descriptor?? [ 695.784368][ T5913] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 695.801113][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.837591][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.885370][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.952832][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.028945][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.189469][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.239167][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.289742][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.320369][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.377715][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.598509][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.610534][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.621438][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.631627][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.642511][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.832899][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.288908][T11687] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.334347][T11687] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.361025][T11687] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.383028][T11687] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.167375][ T5898] usb 4-1: USB disconnect, device number 15 [ 700.656749][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.707690][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.028696][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.068062][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.383091][T11980] Cannot find set identified by id 0 to match [ 703.549962][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 703.743804][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 703.759815][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.781686][ T8] usb 3-1: Product: syz [ 704.022773][ T8] usb 3-1: Manufacturer: syz [ 704.793979][ T8] usb 3-1: SerialNumber: syz [ 705.447391][T11998] netlink: 'syz.3.1488': attribute type 10 has an invalid length. [ 705.459963][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.472958][T11998] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 705.720761][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 705.812016][ T833] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 706.321957][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 706.471993][T12005] smc: net device bond0 applied user defined pnetid SYZ [ 706.839905][ T833] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 707.387642][ T833] ath9k_htc: Failed to initialize the device [ 707.461346][ T833] usb 3-1: ath9k_htc: USB layer deinitialized [ 707.612401][ T5898] usb 3-1: USB disconnect, device number 10 [ 712.628290][T12055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.643101][T12055] serio: Serial port ptm0 [ 713.720080][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1501'. [ 714.121594][T12047] block nbd7: Device being setup by another task [ 714.148424][ T5843] block nbd7: Receive control failed (result -32) [ 714.870023][T12054] block nbd7: shutting down sockets [ 716.457450][T12078] Cannot find set identified by id 0 to match [ 717.267303][T12081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 717.280175][T12081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 717.288172][T12081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 717.309872][T12081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 717.318702][T12081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 717.327702][T12081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 718.026340][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1514'. [ 718.071642][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1514'. [ 719.509794][T12081] Bluetooth: hci4: command tx timeout [ 721.569789][T12081] Bluetooth: hci4: command tx timeout [ 722.483656][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.445660][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 723.454928][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 723.463075][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 723.471561][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 723.481167][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 723.488490][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.720703][T12125] Cannot find set identified by id 0 to match [ 724.417683][ T5843] Bluetooth: hci4: command tx timeout [ 725.092365][T12079] chnl_net:caif_netlink_parms(): no params data found [ 725.560096][ T5843] Bluetooth: hci6: command tx timeout [ 726.439884][ T5843] Bluetooth: hci4: command tx timeout [ 726.446625][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1529'. [ 726.455960][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1529'. [ 727.643179][ T5843] Bluetooth: hci6: command tx timeout [ 727.989455][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.788403][T12162] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 729.419569][T12081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 729.429852][T12081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 729.437666][T12081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 729.451394][T12081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 729.670314][T12081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 729.677656][T12081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 729.720015][ T5843] Bluetooth: hci6: command tx timeout [ 729.823082][T12169] Cannot find set identified by id 0 to match [ 731.422822][ T8924] bridge0: port 3(syz_tun) entered disabled state [ 731.706594][ T8924] syz_tun (unregistering): left allmulticast mode [ 731.713549][ T8924] syz_tun (unregistering): left promiscuous mode [ 731.720271][ T5843] Bluetooth: hci1: command tx timeout [ 731.720894][ T8924] bridge0: port 3(syz_tun) entered disabled state [ 731.799721][ T5843] Bluetooth: hci6: command tx timeout [ 732.401716][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.923872][T12079] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.934349][T12079] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.970072][T12079] bridge_slave_0: entered allmulticast mode [ 732.978219][T12079] bridge_slave_0: entered promiscuous mode [ 733.031009][T12119] chnl_net:caif_netlink_parms(): no params data found [ 733.295859][T12193] netlink: 'syz.8.1548': attribute type 15 has an invalid length. [ 733.340410][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1548'. [ 733.547425][T12081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.557027][T12081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.567634][T12081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.151220][T12081] Bluetooth: hci1: command tx timeout [ 734.158153][T12081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.167725][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.178512][T12081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 734.189929][T12081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.247944][T12079] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.266955][T12079] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.281718][T12079] bridge_slave_1: entered allmulticast mode [ 734.291938][T12079] bridge_slave_1: entered promiscuous mode [ 736.201876][T12081] Bluetooth: hci1: command tx timeout [ 736.279987][T12081] Bluetooth: hci2: command tx timeout [ 736.740889][T12079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.835930][T12079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.768315][T12221] Cannot find set identified by id 0 to match [ 738.279714][T12081] Bluetooth: hci1: command tx timeout [ 738.360068][T12081] Bluetooth: hci2: command tx timeout [ 738.650500][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.975828][T12079] team0: Port device team_slave_0 added [ 739.995285][T12079] team0: Port device team_slave_1 added [ 740.449844][T12081] Bluetooth: hci2: command tx timeout [ 741.026193][T12119] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.046547][T12119] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.080096][T12119] bridge_slave_0: entered allmulticast mode [ 741.088762][T12119] bridge_slave_0: entered promiscuous mode [ 741.121849][T12119] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.128954][T12119] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.155340][T12119] bridge_slave_1: entered allmulticast mode [ 741.179124][T12119] bridge_slave_1: entered promiscuous mode [ 741.617609][T12235] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1558'. [ 742.267840][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 742.289956][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 742.300005][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 742.311260][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 742.320786][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 742.328197][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.519784][T12081] Bluetooth: hci2: command tx timeout [ 742.723896][T12079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.749692][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.815576][T12079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.881840][T12119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.967326][T12079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.979931][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.028025][T12079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.062466][ T80] bridge_slave_1: left allmulticast mode [ 743.068144][ T80] bridge_slave_1: left promiscuous mode [ 743.093112][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.227726][ T80] bridge_slave_0: left allmulticast mode [ 743.260070][ T80] bridge_slave_0: left promiscuous mode [ 743.265806][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.143480][T12249] netlink: 'syz.3.1562': attribute type 15 has an invalid length. [ 744.159774][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 744.369179][T12081] Bluetooth: hci5: command tx timeout [ 746.440564][T12081] Bluetooth: hci5: command tx timeout [ 746.847199][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.529772][T12081] Bluetooth: hci5: command tx timeout [ 749.094288][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.330041][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.474696][ T80] bond0 (unregistering): Released all slaves [ 749.681371][T12119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.599788][T12081] Bluetooth: hci5: command tx timeout [ 750.955218][T12079] hsr_slave_0: entered promiscuous mode [ 750.982265][T12079] hsr_slave_1: entered promiscuous mode [ 750.996115][T12079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.010388][T12079] Cannot create hsr debugfs directory [ 751.674041][T12267] Cannot find set identified by id 0 to match [ 753.003895][T12119] team0: Port device team_slave_0 added [ 753.797583][T12163] chnl_net:caif_netlink_parms(): no params data found [ 753.872161][T12119] team0: Port device team_slave_1 added [ 755.870480][T12283] block nbd3: Device being setup by another task [ 756.211153][T12119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.218243][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.245647][T12119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.256174][T12282] block nbd3: shutting down sockets [ 756.604962][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 758.090254][T12290] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1571'. [ 758.306219][ T80] hsr_slave_0: left promiscuous mode [ 758.329849][ T80] hsr_slave_1: left promiscuous mode [ 758.349686][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.357142][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.507774][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.520347][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.817295][ T80] veth1_macvtap: left promiscuous mode [ 758.845305][ T80] veth0_macvtap: left promiscuous mode [ 758.860641][ T80] veth1_vlan: left promiscuous mode [ 758.876178][ T80] veth0_vlan: left promiscuous mode [ 761.680676][T12302] netlink: 'syz.3.1575': attribute type 15 has an invalid length. [ 761.688547][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 765.379995][ T80] team0 (unregistering): Port device team_slave_1 removed [ 765.980002][ T80] team0 (unregistering): Port device team_slave_0 removed [ 772.189991][T12119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.196979][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.232459][T12119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.289928][T12195] chnl_net:caif_netlink_parms(): no params data found [ 772.617888][T12119] hsr_slave_0: entered promiscuous mode [ 772.636304][T12119] hsr_slave_1: entered promiscuous mode [ 772.658100][T12119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.689495][T12119] Cannot create hsr debugfs directory [ 775.357299][T12336] Cannot find set identified by id 0 to match [ 777.199529][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 777.220381][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 777.231562][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 777.240391][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 777.259905][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 777.270071][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 779.381179][T12081] Bluetooth: hci7: command tx timeout [ 781.455579][T12362] syz.3.1583 (12362): drop_caches: 2 [ 781.480400][T12081] Bluetooth: hci7: command tx timeout [ 781.573459][T12362] syz.3.1583 (12362): drop_caches: 2 [ 782.267359][T12366] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1584'. [ 782.630003][T12240] chnl_net:caif_netlink_parms(): no params data found [ 782.782072][T12371] serio: Serial port ptm0 [ 783.559821][T12081] Bluetooth: hci7: command tx timeout [ 784.125460][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 784.139791][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 784.148070][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.157061][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.165300][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 784.178058][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.850191][T12163] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.857325][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.899915][T12163] bridge_slave_0: entered allmulticast mode [ 784.906965][T12163] bridge_slave_0: entered promiscuous mode [ 784.954102][T12163] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.971868][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.979053][T12163] bridge_slave_1: entered allmulticast mode [ 785.004709][T12163] bridge_slave_1: entered promiscuous mode [ 785.020457][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.027607][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.049871][T12195] bridge_slave_0: entered allmulticast mode [ 785.056906][T12195] bridge_slave_0: entered promiscuous mode [ 785.080407][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.087526][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.117514][T12195] bridge_slave_1: entered allmulticast mode [ 785.365185][T12195] bridge_slave_1: entered promiscuous mode [ 785.649762][T12081] Bluetooth: hci7: command tx timeout [ 786.280125][T12081] Bluetooth: hci4: command tx timeout [ 786.685262][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'. [ 788.369814][T12081] Bluetooth: hci4: command tx timeout [ 788.508144][T12163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.561385][T12163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.919967][T12393] syz.3.1590 (12393): drop_caches: 2 [ 788.940482][T12393] syz.3.1590 (12393): drop_caches: 2 [ 789.694147][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 789.703486][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 789.715519][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 789.723779][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 789.732886][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 789.741395][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 790.117618][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.162550][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.480007][ T5843] Bluetooth: hci4: command tx timeout [ 790.660507][T12409] Cannot find set identified by id 0 to match [ 791.800544][ T5843] Bluetooth: hci6: command tx timeout [ 792.530075][ T5843] Bluetooth: hci4: command tx timeout [ 792.705719][T12195] team0: Port device team_slave_0 added [ 793.774830][T12195] team0: Port device team_slave_1 added [ 793.879679][ T5843] Bluetooth: hci6: command tx timeout [ 794.945268][T12081] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 794.954406][T12081] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 794.962180][T12081] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 794.970508][T12081] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 794.978044][T12081] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 794.985394][T12081] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 795.192739][T12442] syz.3.1596 (12442): drop_caches: 2 [ 795.202248][T12442] syz.3.1596 (12442): drop_caches: 2 [ 795.960884][T12081] Bluetooth: hci6: command tx timeout [ 796.271840][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.278959][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.310808][T12240] bridge_slave_0: entered allmulticast mode [ 796.328403][T12240] bridge_slave_0: entered promiscuous mode [ 797.080270][T12081] Bluetooth: hci8: command tx timeout [ 797.721721][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.728895][T12240] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.754703][T12240] bridge_slave_1: entered allmulticast mode [ 797.771089][T12240] bridge_slave_1: entered promiscuous mode [ 798.040052][T12081] Bluetooth: hci6: command tx timeout [ 799.160521][T12081] Bluetooth: hci8: command tx timeout [ 799.778531][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.330405][T12462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.602184][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.240810][T12081] Bluetooth: hci8: command tx timeout [ 802.762914][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.780225][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.788673][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.798862][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.807244][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 802.830155][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.320220][T12081] Bluetooth: hci8: command tx timeout [ 804.284454][ T80] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.930245][T12081] Bluetooth: hci1: command tx timeout [ 805.962141][ T80] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.040297][T12486] Cannot find set identified by id 0 to match [ 807.001207][T12081] Bluetooth: hci1: command tx timeout [ 808.139226][ T80] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.288853][ T30] INFO: task syz.1.1368:11571 blocked for more than 143 seconds. [ 808.310850][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.331710][ T30] Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 808.436586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.541414][ T30] task:syz.1.1368 state:D stack:21744 pid:11571 tgid:11570 ppid:6647 task_flags:0x400040 flags:0x00004006 [ 808.914973][ T30] Call Trace: [ 808.918308][ T30] [ 808.944620][ T30] __schedule+0x190e/0x4c90 [ 808.949194][ T30] ? __pfx___schedule+0x10/0x10 [ 808.954228][ T30] ? __pfx_lock_release+0x10/0x10 [ 808.959295][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.965075][ T30] ? __lock_sock+0x1c8/0x330 [ 808.969781][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 809.019622][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 809.025304][ T30] ? schedule+0x90/0x320 [ 809.059875][ T30] schedule+0x14b/0x320 [ 809.064062][ T30] __lock_sock+0x1cd/0x330 [ 809.068492][ T30] ? __pfx___lock_sock+0x10/0x10 [ 809.089636][T12081] Bluetooth: hci1: command tx timeout [ 809.090957][T12347] chnl_net:caif_netlink_parms(): no params data found [ 809.112279][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 809.118387][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.159946][ T30] ? __local_bh_enable_ip+0x179/0x200 [ 809.165353][ T30] ? sk_stream_wait_memory+0x762/0xfa0 [ 809.234048][ T30] ? lock_sock_nested+0x6a/0x100 [ 809.239038][ T30] lock_sock_nested+0x9e/0x100 [ 809.243939][ T30] sk_stream_wait_memory+0x93c/0xfa0 [ 809.249269][ T30] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 809.255315][ T30] ? __pfx_woken_wake_function+0x10/0x10 [ 809.261021][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 809.266689][ T30] ? __tcp_push_pending_frames+0xd6/0x360 [ 809.272474][ T30] tcp_sendmsg_locked+0x1611/0x5330 [ 809.277708][ T30] ? mark_lock+0x9a/0x360 [ 809.282152][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 809.288529][ T30] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 809.294161][ T30] ? tcp_sendmsg+0x22/0x50 [ 809.298607][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 809.319646][ T30] tcp_sendmsg+0x30/0x50 [ 809.323929][ T30] __sock_sendmsg+0x1a6/0x270 [ 809.328635][ T30] ____sys_sendmsg+0x53a/0x860 [ 809.349694][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 809.355383][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.369651][ T30] ? __fget_files+0x2a/0x410 [ 809.374289][ T30] ? __fget_files+0x2a/0x410 [ 809.378917][ T30] __sys_sendmsg+0x269/0x350 [ 809.398915][ T30] ? __pfx_futex_wake+0x10/0x10 [ 809.404796][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.414604][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 809.420523][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 809.426891][ T30] ? do_syscall_64+0x100/0x230 [ 809.432145][ T30] ? do_syscall_64+0xb6/0x230 [ 809.436851][ T30] do_syscall_64+0xf3/0x230 [ 809.441797][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.447727][ T30] RIP: 0033:0x7fbba898cde9 [ 809.453183][ T30] RSP: 002b:00007fbba9832038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.461912][ T30] RAX: ffffffffffffffda RBX: 00007fbba8ba5fa0 RCX: 00007fbba898cde9 [ 809.470229][ T30] RDX: 0000000000000000 RSI: 00004000000015c0 RDI: 0000000000000005 [ 809.478222][ T30] RBP: 00007fbba8a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 809.499675][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.507670][ T30] R13: 0000000000000000 R14: 00007fbba8ba5fa0 R15: 00007ffeed9f1bb8 [ 809.539674][ T30] [ 809.542863][ T30] [ 809.542863][ T30] Showing all locks held in the system: [ 809.559961][ T30] 2 locks held by ksoftirqd/0/16: [ 809.565263][ T30] 1 lock held by khungtaskd/30: [ 809.579621][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 809.599608][ T30] 6 locks held by kworker/u8:4/80: [ 809.604736][ T30] #0: ffff88801beed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 809.629619][ T30] #1: ffffc9000239fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 809.659721][ T30] #2: ffffffff8fec7a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 809.669214][ T30] #3: ffff88802276b0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 809.695328][ T30] #4: ffff888056c70250 (&devlink->lock_key#21){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 809.712880][ T30] #5: ffffffff8eb3e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 809.739691][ T30] 2 locks held by kworker/u8:5/985: [ 809.744928][ T30] 1 lock held by dhcpcd/5497: [ 809.769698][ T30] #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc55/0x1d30 [ 809.778832][ T30] 2 locks held by getty/5591: [ 809.800068][ T30] #0: ffff8880354520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 809.839670][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 809.889633][ T30] 3 locks held by kworker/u8:10/6339: [ 809.895029][ T30] 3 locks held by kworker/u8:12/6486: [ 809.910301][ T30] #0: ffff8880310bc948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 809.930131][ T30] #1: ffffc9000b5afc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 809.970026][ T30] #2: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 [ 810.009689][ T30] 1 lock held by syz.1.1368/11571: [ 810.014821][ T30] #0: ffff88802cddced8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sk_stream_wait_memory+0x93c/0xfa0 [ 810.040146][ T30] 6 locks held by syz.1.1368/11575: [ 810.045391][ T30] 2 locks held by syz-executor/12240: [ 810.059875][ T30] #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 810.069011][ T30] #1: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820 [ 810.109747][ T30] 3 locks held by kworker/u8:0/12344: [ 810.115139][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 810.149158][ T30] #1: ffffc900040dfc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 810.169637][ T30] #2: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 810.178784][ T30] 3 locks held by syz-executor/12347: [ 810.219757][ T30] #0: ffff88805e0e4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 810.239675][ T30] #1: ffff88805e0e4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 810.249468][ T30] #2: ffff888076fa7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 810.269017][ T30] 1 lock held by syz-executor/12377: [ 810.289716][ T30] #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 810.299201][ T30] 3 locks held by syz-executor/12398: [ 810.330314][ T30] #0: ffff888057c04d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 810.349859][ T30] #1: ffff888057c04078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 810.369883][ T30] #2: ffff88807e448b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 810.379299][ T30] 1 lock held by syz-executor/12438: [ 810.399734][ T30] #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x47a/0x2310 [ 810.409129][ T30] 2 locks held by syz-executor/12472: [ 810.440413][ T30] #0: ffffffff8fec7a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 810.460029][ T30] #1: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x29a/0x7e0 [ 810.479879][ T30] 1 lock held by syz.3.1607/12493: [ 810.485008][ T30] #0: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 810.510787][ T30] [ 810.513235][ T30] ============================================= [ 810.513235][ T30] [ 810.719643][ T30] NMI backtrace for cpu 0 [ 810.719663][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0 [ 810.719690][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 810.719705][ T30] Call Trace: [ 810.719714][ T30] [ 810.719725][ T30] dump_stack_lvl+0x241/0x360 [ 810.719760][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.719793][ T30] ? __pfx__printk+0x10/0x10 [ 810.719829][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 810.719875][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 810.719911][ T30] ? _printk+0xd5/0x120 [ 810.719932][ T30] ? __pfx__printk+0x10/0x10 [ 810.719954][ T30] ? __wake_up_klogd+0xcc/0x110 [ 810.719987][ T30] ? __pfx__printk+0x10/0x10 [ 810.720010][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.720049][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 810.720084][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 810.720118][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 810.720161][ T30] watchdog+0x1058/0x10a0 [ 810.720201][ T30] ? watchdog+0x1ea/0x10a0 [ 810.720244][ T30] ? __pfx_watchdog+0x10/0x10 [ 810.720281][ T30] kthread+0x7ab/0x920 [ 810.720318][ T30] ? __pfx_kthread+0x10/0x10 [ 810.720357][ T30] ? __pfx_watchdog+0x10/0x10 [ 810.720393][ T30] ? __pfx_kthread+0x10/0x10 [ 810.720428][ T30] ? __pfx_kthread+0x10/0x10 [ 810.720468][ T30] ? __pfx_kthread+0x10/0x10 [ 810.720504][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.720528][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.720566][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 810.720593][ T30] ? __pfx_kthread+0x10/0x10 [ 810.720632][ T30] ret_from_fork+0x4d/0x80 [ 810.720664][ T30] ? __pfx_kthread+0x10/0x10 [ 810.720702][ T30] ret_from_fork_asm+0x1a/0x30 [ 810.720747][ T30] [ 810.720756][ T30] Sending NMI from CPU 0 to CPUs 1: [ 810.902553][ C1] NMI backtrace for cpu 1 [ 810.902569][ C1] CPU: 1 UID: 0 PID: 11575 Comm: syz.1.1368 Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0 [ 810.902594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 810.902608][ C1] RIP: 0010:preempt_count_add+0x44/0x190 [ 810.902641][ C1] Code: 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d 0c 59 d5 18 00 75 07 65 8b 05 0b 76 74 7e 65 01 1d 04 76 74 7e <48> c7 c0 80 b9 64 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 [ 810.902659][ C1] RSP: 0018:ffffc90014fae370 EFLAGS: 00000282 [ 810.902682][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff9a64b903 [ 810.902698][ C1] RDX: dffffc0000000000 RSI: ffffffff8a66b9f2 RDI: 0000000000000001 [ 810.902713][ C1] RBP: ffffc90014fae498 R08: 0000000000000009 R09: ffffc90014fae550 [ 810.902729][ C1] R10: dffffc0000000000 R11: ffffffff81ad4640 R12: dffffc0000000000 [ 810.902745][ C1] R13: ffffc90014fae460 R14: ffffffff8a66b9f2 R15: dffffc0000000000 [ 810.902764][ C1] FS: 00007fbba98116c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 810.902783][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.902798][ C1] CR2: 000055a874e6b978 CR3: 000000007cb40000 CR4: 0000000000350ef0 [ 810.902815][ C1] Call Trace: [ 810.902823][ C1] [ 810.902831][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 810.902867][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 810.902902][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 810.902936][ C1] ? nmi_handle+0x2a/0x5a0 [ 810.902979][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 810.903008][ C1] ? nmi_handle+0x151/0x5a0 [ 810.903041][ C1] ? nmi_handle+0x2a/0x5a0 [ 810.903075][ C1] ? preempt_count_add+0x44/0x190 [ 810.903101][ C1] ? default_do_nmi+0x63/0x160 [ 810.903134][ C1] ? exc_nmi+0x123/0x1f0 [ 810.903165][ C1] ? end_repeat_nmi+0xf/0x53 [ 810.903197][ C1] ? tcp_write_xmit+0x16e2/0x66c0 [ 810.903220][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 810.903252][ C1] ? tcp_write_xmit+0x16e2/0x66c0 [ 810.903273][ C1] ? preempt_count_add+0x44/0x190 [ 810.903299][ C1] ? preempt_count_add+0x44/0x190 [ 810.903326][ C1] ? preempt_count_add+0x44/0x190 [ 810.903353][ C1] [ 810.903360][ C1] [ 810.903368][ C1] ? tcp_write_xmit+0x16e2/0x66c0 [ 810.903388][ C1] unwind_next_frame+0xb0/0x22d0 [ 810.903426][ C1] ? __tcp_transmit_skb+0x23b0/0x3a60 [ 810.903453][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 810.903481][ C1] arch_stack_walk+0x11c/0x150 [ 810.903526][ C1] ? tcp_write_xmit+0x16e2/0x66c0 [ 810.903550][ C1] stack_trace_save+0x118/0x1d0 [ 810.903578][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 810.903614][ C1] kasan_save_track+0x3f/0x80 [ 810.903636][ C1] ? kasan_save_track+0x3f/0x80 [ 810.903657][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 810.903680][ C1] ? kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 810.903710][ C1] ? __alloc_skb+0x1c3/0x440 [ 810.903738][ C1] ? ip_frag_next+0xdc/0xb30 [ 810.903761][ C1] ? ip_do_fragment+0x8d3/0x1b30 [ 810.903783][ C1] ? __ip_finish_output+0x290/0x400 [ 810.903808][ C1] ? __ip_queue_xmit+0x103f/0x1960 [ 810.903830][ C1] ? __tcp_transmit_skb+0x23b0/0x3a60 [ 810.903852][ C1] ? tcp_write_xmit+0x16e2/0x66c0 [ 810.903899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.903934][ C1] __kasan_slab_alloc+0x66/0x80 [ 810.903960][ C1] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 810.903990][ C1] ? __alloc_skb+0x1c3/0x440 [ 810.904021][ C1] __alloc_skb+0x1c3/0x440 [ 810.904048][ C1] ? ip_finish_output2+0x43e/0x12e0 [ 810.904077][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 810.904105][ C1] ? ip_finish_output2+0x43e/0x12e0 [ 810.904136][ C1] ip_frag_next+0xdc/0xb30 [ 810.904164][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904201][ C1] ip_do_fragment+0x8d3/0x1b30 [ 810.904232][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904266][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 810.904294][ C1] ? __pfx_ip_do_fragment+0x10/0x10 [ 810.904321][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904354][ C1] ? skb_release_data+0x2b5/0x8a0 [ 810.904389][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904423][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904456][ C1] ? ip_fragment+0x9a/0x220 [ 810.904483][ C1] __ip_finish_output+0x290/0x400 [ 810.904512][ C1] __ip_queue_xmit+0x103f/0x1960 [ 810.904541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904575][ C1] ? csum_tcpudp_nofold+0x1e/0x60 [ 810.904600][ C1] ? __ip_queue_xmit+0x62/0x1960 [ 810.904624][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 810.904648][ C1] __tcp_transmit_skb+0x23b0/0x3a60 [ 810.904682][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 810.904720][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 810.904750][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904789][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904822][ C1] ? tcp_small_queue_check+0x206/0x410 [ 810.904847][ C1] tcp_write_xmit+0x16e2/0x66c0 [ 810.904876][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.904931][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 810.904956][ C1] tcp_rcv_established+0xf39/0x1f20 [ 810.904983][ C1] ? __pfx_lock_release+0x10/0x10 [ 810.905022][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905056][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 810.905083][ C1] ? rt_is_expired+0x1c/0x2c0 [ 810.905105][ C1] ? rt_is_expired+0x242/0x2c0 [ 810.905129][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 810.905165][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 810.905196][ C1] __release_sock+0x214/0x350 [ 810.905222][ C1] release_sock+0x61/0x1f0 [ 810.905249][ C1] sk_wait_data+0x250/0x510 [ 810.905275][ C1] ? __pfx_sk_wait_data+0x10/0x10 [ 810.905296][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 810.905335][ C1] ? __tcp_send_ack+0x17e/0x600 [ 810.905361][ C1] tcp_recvmsg_locked+0xcb4/0x3c80 [ 810.905390][ C1] ? mark_lock+0x9a/0x360 [ 810.905424][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905470][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 810.905497][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 810.905531][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 810.905564][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905597][ C1] ? mark_lock+0x9a/0x360 [ 810.905619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905652][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 810.905686][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 810.905722][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 810.905746][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905779][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 810.905804][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905837][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 810.905861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905895][ C1] ? tcp_recvmsg+0x23c/0x920 [ 810.905924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.905965][ C1] tcp_recvmsg+0x25d/0x920 [ 810.905999][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 810.906035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.906068][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 810.906092][ C1] ? inet_recvmsg+0xde/0x2d0 [ 810.906117][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 810.906146][ C1] inet_recvmsg+0x150/0x2d0 [ 810.906173][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 810.906198][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 810.906232][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.906265][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.906301][ C1] sock_recvmsg+0x1ae/0x280 [ 810.906328][ C1] ____sys_recvmsg+0x1c6/0x480 [ 810.906366][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 810.906413][ C1] __sys_recvmsg+0x291/0x390 [ 810.906448][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 810.906493][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.906530][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 810.906568][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 810.906602][ C1] ? exc_page_fault+0x590/0x8b0 [ 810.906624][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.906660][ C1] ? do_syscall_64+0xb6/0x230 [ 810.906688][ C1] do_syscall_64+0xf3/0x230 [ 810.906717][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.906747][ C1] RIP: 0033:0x7fbba898cde9 [ 810.906764][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.906782][ C1] RSP: 002b:00007fbba9811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 810.906804][ C1] RAX: ffffffffffffffda RBX: 00007fbba8ba6080 RCX: 00007fbba898cde9 [ 810.906819][ C1] RDX: 0000000000000700 RSI: 0000400000000580 RDI: 0000000000000005 [ 810.906833][ C1] RBP: 00007fbba8a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 810.906847][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.906860][ C1] R13: 0000000000000001 R14: 00007fbba8ba6080 R15: 00007ffeed9f1bb8 [ 810.906886][ C1] [ 810.934621][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 810.934640][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0 [ 810.934667][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 810.934684][ T30] Call Trace: [ 810.934694][ T30] [ 810.934705][ T30] dump_stack_lvl+0x241/0x360 [ 811.805998][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.811206][ T30] ? __pfx__printk+0x10/0x10 [ 811.815792][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 811.821799][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.827443][ T30] ? vscnprintf+0x5d/0x90 [ 811.831787][ T30] panic+0x349/0x880 [ 811.835690][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.841338][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 811.847503][ T30] ? __pfx_panic+0x10/0x10 [ 811.851936][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.857580][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.863220][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 811.868599][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 811.874766][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 811.880933][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.886577][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 811.892749][ T30] watchdog+0x1097/0x10a0 [ 811.897111][ T30] ? watchdog+0x1ea/0x10a0 [ 811.901546][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.906229][ T30] kthread+0x7ab/0x920 [ 811.910305][ T30] ? __pfx_kthread+0x10/0x10 [ 811.914909][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.919596][ T30] ? __pfx_kthread+0x10/0x10 [ 811.924195][ T30] ? __pfx_kthread+0x10/0x10 [ 811.928796][ T30] ? __pfx_kthread+0x10/0x10 [ 811.933395][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 811.938586][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.944227][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 811.949426][ T30] ? __pfx_kthread+0x10/0x10 [ 811.954024][ T30] ret_from_fork+0x4d/0x80 [ 811.958445][ T30] ? __pfx_kthread+0x10/0x10 [ 811.963044][ T30] ret_from_fork_asm+0x1a/0x30 [ 811.967824][ T30] [ 811.971035][ T30] Kernel Offset: disabled [ 811.975385][ T30] Rebooting in 86400 seconds..