last executing test programs: 1m40.576910852s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 1m39.018959165s ago: executing program 0 (id=37): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x4, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x0, 0x0, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x0, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0x0, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 1m37.096240444s ago: executing program 0 (id=44): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x102, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x2, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1m36.076243395s ago: executing program 0 (id=49): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x22, 0x1c, 0x68, 0x0, 0x50, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}}, {0x22, 0x7, 0x0, @private=0xa010100}}}}}, 0x0) 1m34.155757287s ago: executing program 0 (id=52): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x2, 0x21, 0x1, 0x200, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) 1m33.224031808s ago: executing program 0 (id=55): r0 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$sock_buf(r0, 0x1, 0x2e, 0x0, &(0x7f0000001240)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000000c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = openat$cgroup_int(r1, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x27) close(r4) 1m17.113518764s ago: executing program 32 (id=55): r0 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$sock_buf(r0, 0x1, 0x2e, 0x0, &(0x7f0000001240)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000000c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = openat$cgroup_int(r1, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x27) close(r4) 13.579195133s ago: executing program 4 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 12.384316232s ago: executing program 4 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=@newtfilter={0x38, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 10.941799829s ago: executing program 4 (id=293): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000033c40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000020, 0x0) 10.359459919s ago: executing program 4 (id=297): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000001bc0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e21, 0x81, @empty}}, {{0xa, 0x4e20, 0x7ff, @mcast2, 0x7}}}, 0x104) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xe, @empty, 0x3}, 0x20) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc9, 0x1}, {0xc9, 0x4}, {0xc9, 0x6}, {0xc9, 0x7}, {0xc9, 0x401}, {0xc8, 0x400}, {0xc8}]}}}, 0x20) 9.095747725s ago: executing program 4 (id=301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 8.58416445s ago: executing program 3 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 6.450623676s ago: executing program 5 (id=307): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f0000033c40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000020, 0x0) 6.347691708s ago: executing program 4 (id=308): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x76) r3 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x800, 0x6, 0xd4}, &(0x7f0000000240)=0x0, &(0x7f0000000b80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x2, 0x0, 0xc}) io_uring_enter(r7, 0x775e, 0x0, 0x46, 0x0, 0xd8e418676acb4ab8) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x100000000000000) 6.219673534s ago: executing program 3 (id=309): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x4, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x0, 0x0, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x0, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0x0, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsmount(r8, 0x0, 0x0) 6.219366647s ago: executing program 2 (id=310): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89e0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(0x0, 0x157) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 6.1685505s ago: executing program 1 (id=311): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0xa4, 0x24, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x8}, {0x6, 0xffff}, {0xffe0, 0xffff}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x88f}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3c}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x8081) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES8=0x0, @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) 6.019082925s ago: executing program 5 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0xb, @sliced={0x5, [0x3ff, 0x9, 0x3, 0x1, 0x5, 0x8, 0x6, 0x5, 0x6, 0x9, 0xc, 0xffff, 0x8, 0x0, 0x8, 0xb, 0x7, 0x0, 0xfffa, 0xf59c, 0xffff, 0xf89, 0xc81, 0x0, 0xfffb, 0xfff9, 0xfffd, 0x8, 0x1, 0xfffb, 0xd, 0x1, 0x2, 0x5, 0xff, 0x0, 0x2, 0x2, 0xd, 0xe, 0xfffc, 0x7, 0xc, 0x6, 0x4, 0x2, 0x3, 0x2], 0x4}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.632032887s ago: executing program 2 (id=313): openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000100)={{0x7, 0x3cba}, {0x5, 0x9}, 0x1, 0x1}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1}) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.078951633s ago: executing program 1 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 4.984522336s ago: executing program 5 (id=315): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0xff88) 3.657067733s ago: executing program 1 (id=316): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=@newtfilter={0x38, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.394698157s ago: executing program 5 (id=317): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) 3.39407825s ago: executing program 2 (id=318): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) 3.307753525s ago: executing program 1 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.899019533s ago: executing program 2 (id=320): ioperm(0x2, 0xd4b7, 0xa) setresuid(0xee01, 0x0, 0x0) 2.882621006s ago: executing program 1 (id=321): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 2.808145735s ago: executing program 3 (id=322): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f0000033c40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000020, 0x0) 2.642935869s ago: executing program 2 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28040, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="6cf184df9facfb3cdca87cba6f2b352dad77e283c1ede1e9c4", 0x19}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0xd}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa9, [@remote, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}, @ssrr={0x89, 0xf, 0x22, [@rand_addr=0x64010102, @private=0xa010102, @broadcast]}, @cipso={0x86, 0x4e, 0x3, [{0x1, 0xa, "feb54d612c74d84a"}, {0x6, 0x9, "efce0c49b6ba5e"}, {0x0, 0x4, "cd99"}, {0x7, 0x10, "e9f356f518b97f23834da0c04f7c"}, {0x2, 0x10, "34a5f2f842b912cf651e8105c045"}, {0x5, 0x9, "bd6d415cc94a3a"}, {0x1, 0x8, "d9433d7ebea8"}]}, @generic={0x94, 0x12, "a01842b325ed30e5df97051711b1d99e"}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x4}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x73, 0x3, 0x7, [{@private=0xa010102, 0xfffffffe}]}, @timestamp={0x44, 0x28, 0x3b, 0x0, 0x6, [0x5, 0x800, 0x1, 0x803, 0x6, 0x4, 0x6, 0x5, 0xffffffff]}, @ssrr={0x89, 0x7, 0x20, [@multicast2]}, @lsrr={0x83, 0x7, 0x4c, [@remote]}, @end, @timestamp_addr={0x44, 0x34, 0x75, 0x1, 0x0, [{@rand_addr=0x64010102, 0x1}, {@private=0xa010101, 0x9}, {@multicast2, 0x1}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x3}, {@rand_addr=0x64010102, 0xc}]}, @timestamp_addr={0x44, 0x2c, 0xda, 0x1, 0x2, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x2}, {@loopback, 0x24e1f207}, {@multicast1, 0x9}]}]}}}, @ip_tos_int={{0x10}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0xc, [{@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0xe, 0x3, 0x6, [{@multicast2, 0x7f}, {@rand_addr=0x64010100, 0x3}, {@remote, 0x2}, {@loopback, 0xb}, {@private=0xa010102}, {@private=0xa010102, 0x1}]}, @ssrr={0x89, 0x1f, 0x58, [@empty, @remote, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x89, 0x12, "f4e2481b5a45b813c95b3759a3f5138a"}, @end, @timestamp={0x44, 0x4, 0x48, 0x0, 0x5}]}}}], 0x220}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="7d7806b7f303ca842e416cb8e9b975f9d93d95cb27db16b442c7149fb5c62617468b6645ba2d686ffc1a567fbda7461ee70307", 0x33}, {&(0x7f00000005c0)="1de76d68ceb26aee68dc8718d377c30dcdb03953db273e4a8343b378c040ae", 0x1f}, {&(0x7f0000000600)="e716c37919de4b2ca59a8bd7523af43df4ed0ba1c77f27b584d3a3cacb2c0162ff8555a43d9aaa861856daea8fc0df939389", 0x32}, {&(0x7f0000000640)="1a9778227bd77cfcd6dd566c3a2ae0f3cbc59f6f4202c628e65232c10008e5b4c343decf4ad11bd35943d8de3cfd890c4ace6accdb1036d62b661909505f71bb7c1b2022e75cccf07befa74837fcade3f9223e987a2d376f85ca192995c4ace8b90742fd8238a3d93c5d69cda327b321b2dbb39ec6c5805c39101d858f1495496d21694092150e804c1bf300a99b4ffabac38b1570f0d153622b12fea296c2d8a819d0962ee109b079a3", 0xaa}], 0x4, &(0x7f0000000740)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7fff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x30}}, {{&(0x7f0000000780)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000840)="87912ee5d4f637dfaa93e1ed030b8bd411e07404d5fdfb680e5b", 0x1a}, {&(0x7f0000000880)="ddc381c1324736da9d95b3fbc08ea76af7e58d207af892570335309338f928b7a7dcbf11a121fb880b80235ce279373bfd160474f66207676bd0f446d4cbf2454f3fa69a4b6985cdfa9ae3f7009356b8fffc875c463eed08762522c97b6d316b677e4d0328b72236cbb5e0ef5fc2865b7ae8e6d53110e8144d95387e62c69cfc79f16c", 0x83}, {&(0x7f0000000940)="a40c0441eeec28add7a7f75bfc533a7a432a3447eb095341195e33faaf0e98825f9f74c375d707", 0x27}, {&(0x7f0000000980)="77995023c73aead83eae5ebcb6caa6e5af65570e5b1afcdc7aec727508efd2d61c3a5a9ff9eb298bc94945a6d9c01c80dc60081beac4a6b70aba15c5db4c0fdaa5d37648c9fde6ce8e6b31b8e729ac14de214017d8f513b99c2413ae9ac1cde3b046327edb89c6f381e3b39affc84e", 0x6f}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="ed9a62ba763841e3b67e7b5712f62ac4d8ea0916b8b590c38664c131aed37254c771", 0x22}, {&(0x7f0000001a80)="ef41b58dae28e7075918408a1251dbf43c21cb19946a322894d3f4f986726009b31a82c45e4e8e17de3cb7d5935d2099898f1d14e6847d4208ecb5182c6ba3868c78ebd956296d2a2face4dbe186f5d8ffb83dfcc870c72c499de46daba19fad50a70b2c58d5cf7abdce96536ae123c24b7106dc01eb2965718198eb56ea959a47209bf39834c8ae361cf0185487b8c84a8aa5ca4d34045d36", 0x99}], 0x8, &(0x7f0000001bc0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xff}}], 0x20}}, {{&(0x7f0000001c00)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002fc0)=[{0x0}, {&(0x7f0000001d00)="86163fbc4284d5b72094b5c712f23dc389ee016a2e90db91418a403792edac408254e47fdf0a8121d775e776fbc0c89582e84bd7d4c7e492755903efe123cc445acdd044bf67850bcd297da817b02a02a362bb19c885435594b6b8d9a0d1fdcc2a7cf44f96d482ec93a7cdeb7c08f89e0d426315d89f870b35c8b5fb61152a103471df0f60e2eb674e1534cecb9805fd5f9948c5c92784794e6b390e615961f89752148b696feeb9d22cd0c3b2d16b76d576e21031aeb5c2585ac0126d2430b6", 0xc0}, {&(0x7f0000001dc0)="17d05e639f43c55881570ae8bf76baa1581e4791da1803d77604a1c3c593c7750d031c4b8743fe69a8f05577b34c2196227960710a8f7ea66c269d8b93a76b0737077823a55fc65bb9524ab9cc1ed4a5569a7e3caa4b7eb54e51a10f51aa0e6b44721b46f3bead2ec7c40bd98596acc20faf8cef5d035d6bc075b4fec55ef3b0782072ac513d17f8b140892ef99c2f9d4a018efdd976af4c40f489b707038f8c218a4a1d2eab7e4c5321c16df1645e45a285b3c59b411a60953606aec2eb4247c04b4e75b51b80f0f141bd4f54946128", 0xd0}, {&(0x7f0000001ec0)="45f2ebf14bf420eb732ed677674884ba5cdbb6fe5ee5c75c59cc92507c342cefa9c5784aa7b5876cef9e5cabf6ee34c40461f16bebb017771491d4265e58b64a6bf2db1af467ed539d98d4935d968e921690fc8ee5498fc141471ffce0bf93d34595cd81fc2ccdc251fec2fa2c7325b4eb491cc76e1151a381ab0424312378b92186436ae524be5b43f91664", 0x8c}, {&(0x7f0000001f80)="9cad366b09cec64e8fd01594093e143a32ed35e39bad4289eaa9d135b1cc0a402f081c", 0x23}, {&(0x7f0000001fc0)="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", 0x1000}], 0x6, &(0x7f0000003000)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xe7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x20}}], 0x4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000800)=0xffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x2, 0x0, 0x8000, 0x4, 0x6]}) 2.616279033s ago: executing program 1 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioperm(0x0, 0x9, 0x5) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x3, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x4}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200020000000000010100000080000000000000942abce6cd09401d12abc2c40fba34f219cc7a496fbc5cefc392ee46cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r7, &(0x7f0000000240)=""/134, 0x86) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) 2.357490623s ago: executing program 3 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0xb, @sliced={0x5, [0x3ff, 0x9, 0x3, 0x1, 0x5, 0x8, 0x6, 0x5, 0x6, 0x9, 0xc, 0xffff, 0x8, 0x0, 0x8, 0xb, 0x7, 0x0, 0xfffa, 0xf59c, 0xffff, 0xf89, 0xc81, 0x0, 0xfffb, 0xfff9, 0xfffd, 0x8, 0x1, 0xfffb, 0xd, 0x1, 0x2, 0x5, 0xff, 0x0, 0x2, 0x2, 0xd, 0xe, 0xfffc, 0x7, 0xc, 0x6, 0x4, 0x2, 0x3, 0x2], 0x4}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.356882873s ago: executing program 5 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 2.01994801s ago: executing program 2 (id=327): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x23, 0x2, 0x1, "a677c17a5a00030000400000f9ff00000000000000000000008000", 0x31324d59}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) iopl(0x3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r4, &(0x7f0000000140)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000300)={0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r8, 0xc08c5334, &(0x7f0000000140)={0x0, 0x400, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000240"], 0xc4}}, 0x4000040) 1.022735332s ago: executing program 5 (id=328): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)}, 0x1, 0x0, 0x0, 0xcb8d46772b9ca991}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x81, 0x12, 0x5, '\x00', 0x6}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 377.55228ms ago: executing program 3 (id=329): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f0000000280)="23d40325", 0x4) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xfeff, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r2) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x1ff, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x200108d0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2050) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca353}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_ENTRY(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000580)={r7, r8, 0x101, 0x0, &(0x7f0000000400), 0x2, 0xfc, 0xb, 0x7fff, 0x100, 0x2, 0x800, 'syz1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xd}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 90.939295][ T5826] cgroup: Unknown subsys name 'net' [ 91.080964][ T5826] cgroup: Unknown subsys name 'cpuset' [ 91.091425][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.188829][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.245301][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.254175][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.262930][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.271478][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.273659][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.279462][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.293911][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.294705][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.309695][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.325614][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.334362][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.343487][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.397661][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.407016][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.417566][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.431897][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.447272][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.458377][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.466906][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.475146][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.483274][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.491853][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.499600][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.518256][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.556346][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.563918][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.577183][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.593833][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.602036][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.610035][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.107726][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 97.319888][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.383787][ T909] cfg80211: failed to load regulatory.db [ 97.501129][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 97.545979][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.553331][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.567075][ T5838] bridge_slave_0: entered allmulticast mode [ 97.575421][ T5838] bridge_slave_0: entered promiscuous mode [ 97.630525][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.639471][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.647288][ T5838] bridge_slave_1: entered allmulticast mode [ 97.654487][ T5838] bridge_slave_1: entered promiscuous mode [ 97.733888][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 97.784962][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 97.847217][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.854405][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.862175][ T5836] bridge_slave_0: entered allmulticast mode [ 97.869602][ T5836] bridge_slave_0: entered promiscuous mode [ 97.889460][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.938012][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.945257][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.952764][ T5836] bridge_slave_1: entered allmulticast mode [ 97.960982][ T5836] bridge_slave_1: entered promiscuous mode [ 98.013433][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.127900][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.140334][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.228887][ T5838] team0: Port device team_slave_0 added [ 98.235100][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.243430][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.250962][ T5846] bridge_slave_0: entered allmulticast mode [ 98.259333][ T5846] bridge_slave_0: entered promiscuous mode [ 98.269112][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.276658][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.283834][ T5846] bridge_slave_1: entered allmulticast mode [ 98.291764][ T5846] bridge_slave_1: entered promiscuous mode [ 98.299542][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.306916][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.314104][ T5845] bridge_slave_0: entered allmulticast mode [ 98.322159][ T5845] bridge_slave_0: entered promiscuous mode [ 98.336953][ T5839] Bluetooth: hci0: command tx timeout [ 98.373847][ T5838] team0: Port device team_slave_1 added [ 98.413963][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.421217][ T5839] Bluetooth: hci1: command tx timeout [ 98.428189][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.437030][ T5845] bridge_slave_1: entered allmulticast mode [ 98.444266][ T5845] bridge_slave_1: entered promiscuous mode [ 98.471012][ T5836] team0: Port device team_slave_0 added [ 98.510894][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.517951][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.544213][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.575875][ T5839] Bluetooth: hci3: command tx timeout [ 98.591165][ T5836] team0: Port device team_slave_1 added [ 98.613317][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.624461][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.632356][ T5847] bridge_slave_0: entered allmulticast mode [ 98.639701][ T5847] bridge_slave_0: entered promiscuous mode [ 98.649949][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.655732][ T5839] Bluetooth: hci2: command tx timeout [ 98.660174][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.662848][ T5839] Bluetooth: hci4: command tx timeout [ 98.694594][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.718493][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.762092][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.769649][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.777998][ T5847] bridge_slave_1: entered allmulticast mode [ 98.785248][ T5847] bridge_slave_1: entered promiscuous mode [ 98.813596][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.843110][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.853462][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.861313][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.888086][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.902369][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.909626][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.935620][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.966506][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.997197][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.033493][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.064395][ T5846] team0: Port device team_slave_0 added [ 99.074456][ T5846] team0: Port device team_slave_1 added [ 99.103889][ T5845] team0: Port device team_slave_0 added [ 99.114846][ T5845] team0: Port device team_slave_1 added [ 99.222121][ T5838] hsr_slave_0: entered promiscuous mode [ 99.229450][ T5838] hsr_slave_1: entered promiscuous mode [ 99.256152][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.263132][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.289353][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.324218][ T5836] hsr_slave_0: entered promiscuous mode [ 99.331434][ T5836] hsr_slave_1: entered promiscuous mode [ 99.338328][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.346218][ T5836] Cannot create hsr debugfs directory [ 99.372185][ T5847] team0: Port device team_slave_0 added [ 99.403078][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.410340][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.437252][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.477243][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.484255][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.510457][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.525028][ T5847] team0: Port device team_slave_1 added [ 99.582974][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.593845][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.620882][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.680887][ T5846] hsr_slave_0: entered promiscuous mode [ 99.688045][ T5846] hsr_slave_1: entered promiscuous mode [ 99.695090][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.702875][ T5846] Cannot create hsr debugfs directory [ 99.717259][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.724221][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.750657][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.814532][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.821570][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.847952][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.034974][ T5845] hsr_slave_0: entered promiscuous mode [ 100.041946][ T5845] hsr_slave_1: entered promiscuous mode [ 100.048959][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.056651][ T5845] Cannot create hsr debugfs directory [ 100.170664][ T5847] hsr_slave_0: entered promiscuous mode [ 100.178461][ T5847] hsr_slave_1: entered promiscuous mode [ 100.184844][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.192684][ T5847] Cannot create hsr debugfs directory [ 100.417020][ T5839] Bluetooth: hci0: command tx timeout [ 100.495743][ T5839] Bluetooth: hci1: command tx timeout [ 100.560552][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.605094][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.620705][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.656001][ T5839] Bluetooth: hci3: command tx timeout [ 100.707403][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.736447][ T5854] Bluetooth: hci2: command tx timeout [ 100.742058][ T5839] Bluetooth: hci4: command tx timeout [ 100.822009][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.833316][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.856942][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.892341][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.943038][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.963402][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.983958][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.000303][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.121026][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.149362][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.166702][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.182735][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.311080][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.343352][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.377355][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.390500][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.524102][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.574092][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.637966][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.664213][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.688889][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.696386][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.726903][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.734106][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.774135][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.781350][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.794855][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.802090][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.912254][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.960374][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.076640][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.104371][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.123970][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.131169][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.213639][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.220932][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.233738][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.241022][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.280244][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.287505][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.335385][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.468065][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.497320][ T5839] Bluetooth: hci0: command tx timeout [ 102.576069][ T5839] Bluetooth: hci1: command tx timeout [ 102.588757][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.596100][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.616514][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.623727][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.736437][ T5839] Bluetooth: hci3: command tx timeout [ 102.819061][ T5854] Bluetooth: hci2: command tx timeout [ 102.824635][ T5839] Bluetooth: hci4: command tx timeout [ 102.833212][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.861657][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.190161][ T5836] veth0_vlan: entered promiscuous mode [ 103.228601][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.262691][ T5846] veth0_vlan: entered promiscuous mode [ 103.285399][ T5836] veth1_vlan: entered promiscuous mode [ 103.314222][ T5846] veth1_vlan: entered promiscuous mode [ 103.332856][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.491806][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.500541][ T5846] veth0_macvtap: entered promiscuous mode [ 103.539669][ T5836] veth0_macvtap: entered promiscuous mode [ 103.598014][ T5846] veth1_macvtap: entered promiscuous mode [ 103.631998][ T5845] veth0_vlan: entered promiscuous mode [ 103.659588][ T5836] veth1_macvtap: entered promiscuous mode [ 103.724534][ T5845] veth1_vlan: entered promiscuous mode [ 103.773171][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.812502][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.824656][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.837612][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.863972][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.883245][ T5847] veth0_vlan: entered promiscuous mode [ 103.899376][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.910620][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.923254][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.935307][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.945003][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.954351][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.963431][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.983171][ T5847] veth1_vlan: entered promiscuous mode [ 103.994961][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.004301][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.018416][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.028253][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.101800][ T5845] veth0_macvtap: entered promiscuous mode [ 104.137408][ T5845] veth1_macvtap: entered promiscuous mode [ 104.231485][ T5838] veth0_vlan: entered promiscuous mode [ 104.283929][ T5838] veth1_vlan: entered promiscuous mode [ 104.317259][ T5847] veth0_macvtap: entered promiscuous mode [ 104.345044][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.347020][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.358980][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.374088][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.381986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.385994][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.404724][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.443960][ T5847] veth1_macvtap: entered promiscuous mode [ 104.482309][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.493720][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.494137][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.509370][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.513398][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.533406][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.547608][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.575670][ T5839] Bluetooth: hci0: command tx timeout [ 104.616447][ T5838] veth0_macvtap: entered promiscuous mode [ 104.628828][ T5838] veth1_macvtap: entered promiscuous mode [ 104.656399][ T5839] Bluetooth: hci1: command tx timeout [ 104.687811][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.697826][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.705605][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.707513][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.714378][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.723582][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.797341][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.809629][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.819059][ T5839] Bluetooth: hci3: command tx timeout [ 104.821381][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.835712][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.846230][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.856742][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.869506][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.882917][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.893301][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.895975][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.901922][ T5839] Bluetooth: hci4: command tx timeout [ 104.918703][ T5854] Bluetooth: hci2: command tx timeout [ 104.925654][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.935651][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.946294][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.956699][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.967232][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.980522][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.991179][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.003375][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.031514][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.042393][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.059460][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.069995][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.082447][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.092514][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.103074][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.115360][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.130694][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.156510][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.174791][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.216151][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.234451][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.251663][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.261935][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.273026][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.298319][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.348879][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.371295][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.381523][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.392749][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.431649][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.454904][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.473341][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.497859][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.752319][ T5925] evm: overlay not supported [ 106.803855][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.813214][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.920308][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 107.646109][ T5934] loop1: detected capacity change from 0 to 256 [ 107.812980][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.862755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.042948][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.104227][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.106159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.166185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.568629][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.499468][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.655821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.402921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.582172][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.656310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.693944][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.732406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.735815][ T5839] Bluetooth: hci0: command tx timeout [ 110.750959][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.632182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.632238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.632310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.632383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.632433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.014391][ T5956] tty tty25: ldisc open failed (-12), clearing slot 24 [ 113.018342][ T5965] Zero length message leads to an empty skb [ 113.911900][ T5972] loop3: detected capacity change from 0 to 128 [ 115.979845][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.003624][ T5985] loop0: detected capacity change from 0 to 4096 [ 117.053658][ T5985] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 117.068497][ T5985] ntfs3(loop0): Failed to load $Extend (-22). [ 117.074914][ T5985] ntfs3(loop0): Failed to initialize $Extend. [ 117.598278][ T5985] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 117.614523][ T5985] ax25_connect(): syz.0.16 uses autobind, please contact jreuter@yaina.de [ 118.592081][ T5997] loop3: detected capacity change from 0 to 4096 [ 118.872333][ T6005] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.887550][ T6004] loop2: detected capacity change from 0 to 512 [ 118.942545][ T6004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.967436][ T6004] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.098565][ T6004] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.183056][ T6004] EXT4-fs (loop2): 1 truncate cleaned up [ 119.191823][ T6004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.281598][ T6023] loop4: detected capacity change from 0 to 256 [ 121.288729][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.576132][ T6023] ======================================================= [ 121.576132][ T6023] WARNING: The mand mount option has been deprecated and [ 121.576132][ T6023] and is ignored by this kernel. Remove the mand [ 121.576132][ T6023] option from the mount to silence this warning. [ 121.576132][ T6023] ======================================================= [ 122.275779][ T6023] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.333640][ T6026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.369967][ T6023] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 122.429663][ T6023] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 122.921766][ T6035] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 123.216568][ T6038] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 124.612510][ T6056] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 126.149114][ T6064] netlink: 'syz.3.38': attribute type 11 has an invalid length. [ 126.222572][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 127.288130][ T6071] sctp: failed to load transform for md5: -2 [ 128.419993][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.933441][ T6109] veth1_macvtap: left promiscuous mode [ 130.468683][ T29] audit: type=1804 audit(1738976136.183:2): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.48" name="file0" dev="ramfs" ino=8633 res=1 errno=0 [ 130.591041][ T6121] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET) [ 134.336311][ T29] audit: type=1326 audit(1738976139.913:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8358cde9 code=0x7ffc0000 [ 134.460128][ T29] audit: type=1326 audit(1738976139.913:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8358cde9 code=0x7ffc0000 [ 134.737361][ T6161] 9pnet_fd: Insufficient options for proto=fd [ 135.727130][ T6165] overlayfs: missing 'lowerdir' [ 136.180288][ T6152] syz.2.57 (6152): drop_caches: 2 [ 136.996203][ T6153] Bluetooth: MGMT ver 1.23 [ 137.093107][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.101723][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.271654][ T6178] netlink: 56 bytes leftover after parsing attributes in process `syz.4.64'. [ 138.372707][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.384911][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.074973][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.083707][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.249600][ T6177] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 139.256440][ T6177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.271003][ T6177] vhci_hcd vhci_hcd.0: Device attached [ 139.587358][ T5885] vhci_hcd: vhci_device speed not set [ 139.676260][ T5885] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 139.742078][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.837542][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.987423][ T6186] vhci_hcd: connection reset by peer [ 140.051014][ T2955] vhci_hcd: stop threads [ 140.135619][ T2955] vhci_hcd: release socket [ 140.150093][ T6163] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.163412][ T6163] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.181865][ T2955] vhci_hcd: disconnect device [ 140.229170][ T6163] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.239410][ T6163] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.591832][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.605274][ T6201] bond0: (slave rose0): Enslaving as an active interface with an up link [ 141.895931][ T6209] hub 6-0:1.0: USB hub found [ 141.948406][ T6209] hub 6-0:1.0: 1 port detected [ 142.006503][ T6208] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 142.013105][ T6208] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.058033][ T6208] vhci_hcd vhci_hcd.0: Device attached [ 142.285979][ T5969] vhci_hcd: vhci_device speed not set [ 142.333960][ T6219] dvmrp8: entered allmulticast mode [ 142.358150][ T5969] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 142.373290][ T6214] vhci_hcd: connection closed [ 142.374767][ T62] vhci_hcd: stop threads [ 142.423688][ T62] vhci_hcd: release socket [ 142.505720][ T62] vhci_hcd: disconnect device [ 143.397724][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.405828][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.750058][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.786799][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.079177][ T6224] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.089170][ T6224] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.115791][ T6224] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.156584][ T6224] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.776191][ T6218] dvmrp8: left allmulticast mode [ 144.856900][ T5885] vhci_hcd: vhci_device speed not set [ 145.640216][ T6243] netlink: 'syz.2.75': attribute type 9 has an invalid length. [ 145.676627][ T6243] netlink: 201384 bytes leftover after parsing attributes in process `syz.2.75'. [ 145.712280][ T6243] openvswitch: netlink: Message has 6 unknown bytes. [ 146.303753][ T6254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.576060][ T5969] vhci_hcd: vhci_device speed not set [ 147.672757][ T6260] 9pnet_virtio: no channels available for device syz [ 148.273222][ T6268] netlink: 148 bytes leftover after parsing attributes in process `syz.4.81'. [ 148.661117][ T6274] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 148.737763][ T6274] lo speed is unknown, defaulting to 1000 [ 148.804260][ T6274] lo speed is unknown, defaulting to 1000 [ 148.872003][ T6274] lo speed is unknown, defaulting to 1000 [ 148.982240][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.033273][ T6274] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.237685][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.247807][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.256905][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.267933][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.279454][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.289666][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.302022][ T6274] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.441710][ T6286] lo speed is unknown, defaulting to 1000 [ 149.519283][ T29] audit: type=1800 audit(1738976155.193:5): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.85" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 150.002378][ T6274] lo speed is unknown, defaulting to 1000 [ 150.058880][ T6274] lo speed is unknown, defaulting to 1000 [ 150.087364][ T6300] netlink: 'syz.2.87': attribute type 9 has an invalid length. [ 150.118742][ T6300] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.87'. [ 150.255053][ T6305] netlink: 'syz.1.88': attribute type 10 has an invalid length. [ 150.295599][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 150.336244][ T6274] lo speed is unknown, defaulting to 1000 [ 150.339458][ T6305] batadv0: entered promiscuous mode [ 150.366479][ T6305] batadv0: entered allmulticast mode [ 150.388141][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.437325][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'. [ 150.438709][ T6305] bridge0: port 3(batadv0) entered blocking state [ 150.497364][ T6305] bridge0: port 3(batadv0) entered disabled state [ 150.669485][ T6274] lo speed is unknown, defaulting to 1000 [ 150.723087][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.733266][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 150.814128][ T6136] Set syz1 is full, maxelem 65536 reached [ 150.830891][ T6274] lo speed is unknown, defaulting to 1000 [ 150.873749][ T6286] chnl_net:caif_netlink_parms(): no params data found [ 151.377575][ T5842] Bluetooth: hci5: command tx timeout [ 151.572895][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 151.635123][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.646265][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.663889][ T6286] bridge_slave_0: entered allmulticast mode [ 151.696603][ T6286] bridge_slave_0: entered promiscuous mode [ 151.725152][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.745413][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.752802][ T6286] bridge_slave_1: entered allmulticast mode [ 151.791418][ T6286] bridge_slave_1: entered promiscuous mode [ 152.081093][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.126496][ T6326] netlink: 'syz.3.92': attribute type 27 has an invalid length. [ 152.143558][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.377220][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.385312][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.623824][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.652039][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.833704][ T6326] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.843987][ T6326] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.858255][ T6326] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.869046][ T6326] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.190775][ T5886] lo speed is unknown, defaulting to 1000 [ 153.195011][ T6286] team0: Port device team_slave_0 added [ 153.267507][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 153.318248][ T29] audit: type=1326 audit(1738976159.023:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9c838cde9 code=0x0 [ 153.458725][ T5842] Bluetooth: hci5: command tx timeout [ 153.469760][ T6286] team0: Port device team_slave_1 added [ 153.842293][ T1339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.196265][ T5842] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 154.207497][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: kworker/u9:3 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 154.207526][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.207546][ T5842] Workqueue: hci1 hci_rx_work [ 154.207594][ T5842] Call Trace: [ 154.207604][ T5842] [ 154.207614][ T5842] dump_stack_lvl+0x241/0x360 [ 154.207649][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.207675][ T5842] ? __pfx__printk+0x10/0x10 [ 154.207734][ T5842] ? __kmalloc_cache_noprof+0x243/0x390 [ 154.207759][ T5842] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 154.207791][ T5842] sysfs_create_dir_ns+0x2ce/0x3a0 [ 154.207820][ T5842] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 154.207861][ T5842] kobject_add_internal+0x435/0x8d0 [ 154.207909][ T5842] kobject_add+0x152/0x220 [ 154.207942][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 154.207969][ T5842] ? device_add+0x3e7/0xbf0 [ 154.208004][ T5842] ? __pfx_kobject_add+0x10/0x10 [ 154.208036][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 154.208067][ T5842] ? get_device_parent+0x165/0x410 [ 154.208109][ T5842] device_add+0x4e5/0xbf0 [ 154.208155][ T5842] hci_conn_add_sysfs+0xe8/0x200 [ 154.208213][ T5842] le_conn_complete_evt+0xc9f/0x12e0 [ 154.208266][ T5842] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 154.208312][ T5842] ? __mutex_unlock_slowpath+0x227/0x800 [ 154.208359][ T5842] ? skb_pull_data+0x112/0x230 [ 154.208397][ T5842] hci_le_conn_complete_evt+0x18c/0x420 [ 154.208455][ T5842] hci_event_packet+0xa55/0x1540 [ 154.208487][ T5842] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 154.208526][ T5842] ? __pfx_hci_event_packet+0x10/0x10 [ 154.208562][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 154.208602][ T5842] ? hci_send_to_monitor+0xd8/0x7f0 [ 154.208632][ T5842] ? kcov_remote_start+0x97/0x7d0 [ 154.208669][ T5842] hci_rx_work+0x3f3/0xdb0 [ 154.208709][ T5842] ? process_scheduled_works+0x976/0x1840 [ 154.208738][ T5842] process_scheduled_works+0xa66/0x1840 [ 154.208820][ T5842] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.208866][ T5842] ? assign_work+0x364/0x3d0 [ 154.208905][ T5842] worker_thread+0x870/0xd30 [ 154.208961][ T5842] ? __kthread_parkme+0x169/0x1d0 [ 154.208998][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 154.209028][ T5842] kthread+0x7a9/0x920 [ 154.209057][ T5842] ? __pfx_kthread+0x10/0x10 [ 154.209093][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 154.209123][ T5842] ? __pfx_kthread+0x10/0x10 [ 154.209152][ T5842] ? __pfx_kthread+0x10/0x10 [ 154.209191][ T5842] ? __pfx_kthread+0x10/0x10 [ 154.209220][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.209244][ T5842] ? lockdep_hardirqs_on+0x99/0x150 [ 154.209270][ T5842] ? __pfx_kthread+0x10/0x10 [ 154.209312][ T5842] ret_from_fork+0x4b/0x80 [ 154.209342][ T5842] ? __pfx_kthread+0x10/0x10 [ 154.209376][ T5842] ret_from_fork_asm+0x1a/0x30 [ 154.209433][ T5842] [ 154.209477][ T5842] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 154.505969][ T5842] Bluetooth: hci1: failed to register connection device [ 154.626477][ T1339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.739762][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.855929][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.032757][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.188549][ T1339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.381104][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.424960][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.585177][ T5842] Bluetooth: hci5: command tx timeout [ 155.642197][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.889775][ T6375] Bluetooth: MGMT ver 1.23 [ 156.033713][ T1339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.137238][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.145533][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.615929][ T5842] Bluetooth: hci5: command tx timeout [ 157.633757][ T6286] hsr_slave_0: entered promiscuous mode [ 157.816350][ T6286] hsr_slave_1: entered promiscuous mode [ 157.846548][ T6286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.870395][ T6286] Cannot create hsr debugfs directory [ 158.257003][ T6395] @: renamed from vlan0 (while UP) [ 158.715746][ T5888] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 158.924858][ T5888] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 158.991509][ T5888] usb 3-1: config 7 has no interface number 0 [ 159.023582][ T5888] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 159.077763][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.099977][ T1339] bridge_slave_1: left allmulticast mode [ 159.125760][ T1339] bridge_slave_1: left promiscuous mode [ 159.134460][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.147554][ T5888] usb 3-1: Product: syz [ 159.174316][ T5888] usb 3-1: Manufacturer: syz [ 159.181339][ T5888] usb 3-1: SerialNumber: syz [ 159.239739][ T1339] bridge_slave_0: left allmulticast mode [ 159.265944][ T1339] bridge_slave_0: left promiscuous mode [ 159.276442][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.693940][ T5888] as10x_usb: device has been detected [ 159.717926][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 159.812174][ T5888] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 159.946429][ T5888] as10x_usb: error during firmware upload part1 [ 159.980559][ T5888] Registered device Elgato EyeTV DTT Deluxe [ 160.055947][ T5888] usb 3-1: USB disconnect, device number 2 [ 160.159641][ T5888] Unregistered device Elgato EyeTV DTT Deluxe [ 160.182575][ T5888] as10x_usb: device has been disconnected [ 162.012802][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.043788][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.908475][ T1339] bond0 (unregistering): Released all slaves [ 163.480456][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.487692][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.442119][ T1339] hsr_slave_0: left promiscuous mode [ 164.464264][ T1339] hsr_slave_1: left promiscuous mode [ 164.482629][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.499477][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.534154][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.554547][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.640544][ T1339] veth1_macvtap: left promiscuous mode [ 164.662692][ T1339] veth0_macvtap: left promiscuous mode [ 164.674580][ T1339] veth1_vlan: left promiscuous mode [ 164.685380][ T1339] veth0_vlan: left promiscuous mode [ 165.658704][ T6481] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 165.688446][ T6481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.132'. [ 166.084485][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 166.136205][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 167.133720][ T6286] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.670908][ T6286] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.956269][ T6286] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.036379][ T6286] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.707819][ T6524] trusted_key: encrypted_key: insufficient parameters specified [ 168.780712][ T5969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.818935][ T5842] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 168.829071][ T5842] Bluetooth: hci2: Injecting HCI hardware error event [ 168.841881][ T5839] Bluetooth: hci2: hardware error 0x00 [ 168.864548][ T6527] capability: warning: `syz.1.144' uses deprecated v2 capabilities in a way that may be insecure [ 169.086708][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 169.114465][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.115765][ T5969] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 169.213689][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.270502][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.278151][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.318251][ T5969] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 169.453819][ T5969] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 169.497353][ T5969] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.517696][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.524963][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.559086][ T5969] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 169.586129][ T5969] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 169.623409][ T5969] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 169.623447][ T5969] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.629049][ T5969] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 169.629108][ T5969] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 169.629134][ T5969] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 169.629160][ T5969] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.637901][ T5969] usb 3-1: string descriptor 0 read error: -22 [ 169.638085][ T5969] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 169.638111][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.671242][ T5969] adutux 3-1:168.0: interrupt endpoints not found [ 169.871196][ T5888] usb 3-1: USB disconnect, device number 3 [ 170.503604][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.514699][ T6544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3738224872 (478492783616 ns) > initial count (91121186304 ns). Using initial count to start timer. [ 171.055620][ T5839] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 172.329233][ T6581] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 172.410944][ T6286] veth0_vlan: entered promiscuous mode [ 172.479993][ T6286] veth1_vlan: entered promiscuous mode [ 172.638847][ T6286] veth0_macvtap: entered promiscuous mode [ 172.699659][ T5839] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 172.699731][ T5839] Bluetooth: hci3: Dropping invalid advertising data [ 172.714044][ T5839] Bluetooth: hci3: Malformed LE Event: 0x02 [ 172.722909][ T6286] veth1_macvtap: entered promiscuous mode [ 172.756282][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.768226][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.781552][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.793530][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.804161][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.816513][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.854659][ T6286] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.878009][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.899847][ T6286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.916569][ T6286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.935633][ T6286] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.057431][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 173.086494][ T5848] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.114224][ T5848] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.151384][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.186638][ T5848] usb 5-1: Product: syz [ 173.211443][ T5848] usb 5-1: Manufacturer: syz [ 173.236540][ T5848] usb 5-1: SerialNumber: syz [ 173.249281][ T5848] usb 5-1: config 0 descriptor?? [ 173.267639][ T6585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 173.291498][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.339791][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.489343][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.528052][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.637794][ T5848] usb 5-1: USB disconnect, device number 2 [ 176.179079][ T6642] dvmrp8: entered allmulticast mode [ 176.221010][ T6642] dvmrp8: left allmulticast mode [ 176.602915][ T29] audit: type=1326 audit(1738976182.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c37b8cde9 code=0x0 [ 176.635990][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.825160][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 176.849757][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 176.886798][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.909557][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.922045][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.933764][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.947951][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.959252][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.719311][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 177.724890][ T8] usbtmc 6-1:16.0: can't read capabilities [ 177.935711][ T5885] usb 6-1: USB disconnect, device number 2 [ 179.340302][ T6698] netlink: 9 bytes leftover after parsing attributes in process `syz.4.186'. [ 180.626314][ T6698] siw: device registration error -23 [ 180.668325][ T6698] lo speed is unknown, defaulting to 1000 [ 181.506214][ T6726] input: syz0 as /devices/virtual/input/input7 [ 182.365673][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.555610][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 182.559070][ T6745] netlink: 'syz.2.198': attribute type 9 has an invalid length. [ 182.582301][ T5848] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 182.590789][ T6745] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.198'. [ 182.617464][ T5848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.665976][ T5848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.710796][ T5848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.761968][ T5848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.791307][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.825607][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.845117][ T29] audit: type=1326 audit(1738976188.533:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.3.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9c838cde9 code=0x0 [ 183.318631][ T5848] usb 5-1: usb_control_msg returned -32 [ 183.498421][ T5848] usbtmc 5-1:16.0: can't read capabilities [ 185.217053][ T6771] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[6771] [ 186.368557][ T5888] usb 5-1: USB disconnect, device number 3 [ 187.545994][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.761456][ T8] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 187.794136][ T6802] netlink: 'syz.5.210': attribute type 9 has an invalid length. [ 187.796156][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.830935][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.836552][ T6802] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.210'. [ 187.848793][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.893321][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.912929][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.964508][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.001372][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.053012][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.160257][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.015023][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.026990][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.055579][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.064047][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.095986][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.125551][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.164349][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.201032][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.252981][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.275909][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.301094][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.364084][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.450869][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.933803][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.965495][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.005017][ T8] usb 3-1: string descriptor 0 read error: -71 [ 190.043282][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.077396][ T8] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.119816][ T8] usb 3-1: config 0 descriptor?? [ 191.027160][ T8] usb 3-1: can't set config #0, error -71 [ 191.041328][ T8] usb 3-1: USB disconnect, device number 4 [ 192.545591][ T6847] netlink: 'syz.4.223': attribute type 9 has an invalid length. [ 192.553460][ T6847] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.223'. [ 193.263763][ T6867] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 193.396951][ T6867] batadv0: left allmulticast mode [ 193.402086][ T6867] batadv0: left promiscuous mode [ 193.483510][ T6867] bridge0: port 3(batadv0) entered disabled state [ 195.523200][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.578098][ T6867] team0: Port device batadv0 added [ 197.037881][ T29] audit: type=1326 audit(1738976202.743:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.3.235" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9c838cde9 code=0x0 [ 197.188856][ T6908] random: crng reseeded on system resumption [ 197.220291][ T6909] netlink: 'syz.2.236': attribute type 9 has an invalid length. [ 197.266416][ T6909] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.236'. [ 200.377161][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.423267][ T6958] netlink: 'syz.2.249': attribute type 9 has an invalid length. [ 200.669082][ T6958] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.249'. [ 201.842991][ T6979] smc: net device bond0 applied user defined pnetid SYZ2 [ 202.975303][ T29] audit: type=1326 audit(1738976208.673:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e8ff8cde9 code=0x0 [ 203.215660][ T7001] hub 6-0:1.0: USB hub found [ 203.223704][ T7001] hub 6-0:1.0: 1 port detected [ 203.627716][ T7000] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 203.634290][ T7000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.795826][ T7000] vhci_hcd vhci_hcd.0: Device attached [ 203.827781][ T7003] vhci_hcd: connection closed [ 203.829692][ T12] vhci_hcd: stop threads [ 203.861501][ T12] vhci_hcd: release socket [ 203.886310][ T12] vhci_hcd: disconnect device [ 205.166375][ T7019] netlink: 'syz.3.264': attribute type 9 has an invalid length. [ 205.182815][ T7019] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.264'. [ 205.395528][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.815634][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 205.835142][ T5885] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 206.034056][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.245096][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.472098][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.543965][ T5885] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.645502][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.705693][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.959006][ T5885] usb 2-1: usb_control_msg returned -32 [ 206.980884][ T5885] usbtmc 2-1:16.0: can't read capabilities [ 207.056160][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 207.259969][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 207.275752][ T5848] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 207.298345][ T5848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.966471][ T7062] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 208.109055][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.119161][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.129283][ T5848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.142478][ T5848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.151708][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.178091][ T5955] usb 2-1: USB disconnect, device number 2 [ 208.341671][ T7067] netlink: 'syz.2.278': attribute type 9 has an invalid length. [ 208.349933][ T7067] netlink: 201384 bytes leftover after parsing attributes in process `syz.2.278'. [ 208.388795][ T7067] openvswitch: netlink: Message has 6 unknown bytes. [ 208.396095][ T5848] usb 6-1: usb_control_msg returned -32 [ 208.430345][ T5848] usbtmc 6-1:16.0: can't read capabilities [ 208.656876][ T5969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.778702][ T7083] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 208.812374][ T5848] usb 6-1: USB disconnect, device number 3 [ 208.845737][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 208.859509][ T5969] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 208.903553][ T5969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.116310][ T5955] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 209.187794][ T5969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.198461][ T5969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.208486][ T5969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.223187][ T5969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.232666][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.667305][ T5839] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 209.677920][ T5839] Bluetooth: hci4: Injecting HCI hardware error event [ 209.690332][ T5839] Bluetooth: hci4: hardware error 0x00 [ 209.926242][ T5969] usb 5-1: GET_CAPABILITIES returned 0 [ 209.938867][ T5969] usbtmc 5-1:16.0: can't read capabilities [ 210.096000][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 210.103471][ T5955] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 210.133513][ T5969] usb 5-1: USB disconnect, device number 4 [ 210.154715][ T5955] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.205125][ T5955] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.259283][ T5955] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.296386][ T5955] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.336139][ T5955] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.368565][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.716899][ T976] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 210.813423][ T5955] usb 4-1: GET_CAPABILITIES returned 0 [ 210.848185][ T5955] usbtmc 4-1:16.0: can't read capabilities [ 210.928125][ T976] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.982932][ T976] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.038248][ T5969] usb 4-1: USB disconnect, device number 2 [ 211.047988][ T976] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.075672][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.113924][ T7106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.178819][ T976] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.267580][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 213.052957][ T7123] netlink: 'syz.4.290': attribute type 9 has an invalid length. [ 213.156419][ T7123] netlink: 201384 bytes leftover after parsing attributes in process `syz.4.290'. [ 213.548555][ T7123] openvswitch: netlink: Message has 6 unknown bytes. [ 213.827609][ T5848] usb 2-1: USB disconnect, device number 3 [ 214.135216][ T5885] hid-generic 0005:15C2:2412.0001: hidraw0: BLUETOOTH HID v0.0e Device [syz0] on aa:aa:aa:aa:aa:aa [ 215.216148][ T5969] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.489993][ T5969] usb 6-1: Using ep0 maxpacket: 16 [ 215.521587][ T5969] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 215.557450][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 215.583027][ T5969] usb 6-1: Product: syz [ 215.590985][ T5969] usb 6-1: Manufacturer: syz [ 215.596182][ T5969] usb 6-1: SerialNumber: syz [ 215.612234][ T5969] usb 6-1: config 0 descriptor?? [ 215.715786][ T7162] bridge_slave_0: left allmulticast mode [ 215.721763][ T7162] bridge_slave_0: left promiscuous mode [ 215.781195][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.901779][ T5885] usb 6-1: USB disconnect, device number 4 [ 216.861653][ T7162] bridge_slave_1: left allmulticast mode [ 216.915249][ T7162] bridge_slave_1: left promiscuous mode [ 216.952938][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.041361][ T7162] bond0: (slave bond_slave_0): Releasing backup interface [ 217.057698][ T7173] netlink: 'syz.1.303': attribute type 9 has an invalid length. [ 217.075554][ T7173] netlink: 201384 bytes leftover after parsing attributes in process `syz.1.303'. [ 217.084941][ T7173] openvswitch: netlink: Message has 6 unknown bytes. [ 217.282041][ T7162] bond0: (slave bond_slave_1): Releasing backup interface [ 217.303825][ T7162] team0: Port device team_slave_0 removed [ 217.351317][ T7162] team0: Port device team_slave_1 removed [ 217.361564][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.390468][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.427894][ T7168] batman_adv: batadv0: Adding interface: dummy0 [ 217.448733][ T7168] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.494561][ T7168] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 221.076454][ T7218] netlink: 'syz.1.316': attribute type 9 has an invalid length. [ 221.122425][ T7218] netlink: 201384 bytes leftover after parsing attributes in process `syz.1.316'. [ 221.156470][ T7218] openvswitch: netlink: Message has 6 unknown bytes. [ 222.064879][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 222.176203][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 222.340025][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 222.346242][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 224.404034][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 224.413020][ T7261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.483746][ T7261] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.518741][ T7261] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.551737][ T7261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.586387][ T7261] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.615746][ T7261] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 224.646644][ T7261] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 224.751624][ T7261] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 224.751671][ T7139] ================================================================== [ 224.765658][ T7139] BUG: KASAN: slab-use-after-free in hci_chan_del+0x3b/0x1b0 [ 224.773092][ T7139] Read of size 8 at addr ffff888045305b18 by task khidpd_15c22412/7139 [ 224.781366][ T7139] [ 224.783728][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: khidpd_15c22412 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 224.783753][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 224.783767][ T7139] Call Trace: [ 224.783775][ T7139] [ 224.783783][ T7139] dump_stack_lvl+0x241/0x360 [ 224.783812][ T7139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.783834][ T7139] ? __pfx__printk+0x10/0x10 [ 224.783867][ T7139] ? _printk+0xd5/0x120 [ 224.783898][ T7139] ? __virt_addr_valid+0x183/0x530 [ 224.783929][ T7139] ? __virt_addr_valid+0x183/0x530 [ 224.783962][ T7139] print_report+0x169/0x550 [ 224.783984][ T7139] ? __virt_addr_valid+0x183/0x530 [ 224.784014][ T7139] ? __virt_addr_valid+0x183/0x530 [ 224.784043][ T7139] ? __virt_addr_valid+0x45f/0x530 [ 224.784074][ T7139] ? __phys_addr+0xba/0x170 [ 224.784105][ T7139] ? hci_chan_del+0x3b/0x1b0 [ 224.784135][ T7139] kasan_report+0x143/0x180 [ 224.784161][ T7139] ? queue_delayed_work_on+0x267/0x390 [ 224.784190][ T7139] ? hci_chan_del+0x3b/0x1b0 [ 224.784225][ T7139] hci_chan_del+0x3b/0x1b0 [ 224.784257][ T7139] l2cap_conn_put+0x70/0xe0 [ 224.784290][ T7139] hidp_session_put+0x1e7/0x220 [ 224.784319][ T7139] hidp_session_thread+0x458/0x490 [ 224.784349][ T7139] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 224.784375][ T7139] ? __pfx_hidp_session_thread+0x10/0x10 [ 224.784403][ T7139] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 224.784427][ T7139] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 224.784461][ T7139] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 224.784494][ T7139] ? __kthread_parkme+0x169/0x1d0 [ 224.784523][ T7139] ? __pfx_hidp_session_thread+0x10/0x10 [ 224.784553][ T7139] kthread+0x7a9/0x920 [ 224.784581][ T7139] ? __pfx_kthread+0x10/0x10 [ 224.784611][ T7139] ? __pfx_hidp_session_thread+0x10/0x10 [ 224.784641][ T7139] ? __pfx_kthread+0x10/0x10 [ 224.784669][ T7139] ? __pfx_kthread+0x10/0x10 [ 224.784700][ T7139] ? __pfx_kthread+0x10/0x10 [ 224.784728][ T7139] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.784750][ T7139] ? lockdep_hardirqs_on+0x99/0x150 [ 224.784775][ T7139] ? __pfx_kthread+0x10/0x10 [ 224.784804][ T7139] ret_from_fork+0x4b/0x80 [ 224.784831][ T7139] ? __pfx_kthread+0x10/0x10 [ 224.784861][ T7139] ret_from_fork_asm+0x1a/0x30 [ 224.784895][ T7139] [ 224.784902][ T7139] [ 224.820411][ T7279] fuse: Bad value for 'fd' [ 224.821655][ T7139] Allocated by task 5839: [ 225.014705][ T7139] kasan_save_track+0x3f/0x80 [ 225.019423][ T7139] __kasan_kmalloc+0x98/0xb0 [ 225.024040][ T7139] __kmalloc_cache_noprof+0x243/0x390 [ 225.029443][ T7139] hci_chan_create+0xc8/0x310 [ 225.034161][ T7139] l2cap_conn_add+0x69/0x8e0 [ 225.038793][ T7139] l2cap_connect_cfm+0x115/0x1090 [ 225.043852][ T7139] hci_remote_features_evt+0x68e/0xac0 [ 225.049351][ T7139] hci_event_packet+0xac2/0x1540 [ 225.054752][ T7139] hci_rx_work+0x3f3/0xdb0 [ 225.059291][ T7139] process_scheduled_works+0xa66/0x1840 [ 225.064879][ T7139] worker_thread+0x870/0xd30 [ 225.069597][ T7139] kthread+0x7a9/0x920 [ 225.073742][ T7139] ret_from_fork+0x4b/0x80 [ 225.078201][ T7139] ret_from_fork_asm+0x1a/0x30 [ 225.083002][ T7139] [ 225.085343][ T7139] Freed by task 7261: [ 225.089378][ T7139] kasan_save_track+0x3f/0x80 [ 225.094094][ T7139] kasan_save_free_info+0x40/0x50 [ 225.099165][ T7139] __kasan_slab_free+0x59/0x70 [ 225.103957][ T7139] kfree+0x196/0x430 [ 225.107875][ T7139] hci_conn_del+0x4b5/0xc40 [ 225.112408][ T7139] hci_conn_failed+0x319/0x400 [ 225.117202][ T7139] hci_abort_conn_sync+0x56c/0x11f0 [ 225.122435][ T7139] hci_disconnect_all_sync+0x264/0x460 [ 225.127924][ T7139] hci_suspend_sync+0x41a/0xca0 [ 225.132805][ T7139] hci_suspend_dev+0x203/0x3e0 [ 225.137597][ T7139] hci_suspend_notifier+0xf2/0x2b0 [ 225.142743][ T7139] notifier_call_chain+0x1a5/0x3f0 [ 225.147888][ T7139] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 225.154426][ T7139] pm_notifier_call_chain_robust+0x2c/0x60 [ 225.160264][ T7139] snapshot_open+0x19b/0x280 [ 225.164938][ T7139] misc_open+0x2cc/0x340 [ 225.169213][ T7139] chrdev_open+0x521/0x600 [ 225.173671][ T7139] do_dentry_open+0xdec/0x1960 [ 225.178469][ T7139] vfs_open+0x3b/0x370 [ 225.182577][ T7139] path_openat+0x2c9f/0x35b0 [ 225.187212][ T7139] do_filp_open+0x282/0x4e0 [ 225.191755][ T7139] do_sys_openat2+0x13f/0x1c0 [ 225.196469][ T7139] __x64_sys_openat+0x247/0x2a0 [ 225.201356][ T7139] do_syscall_64+0xf3/0x230 [ 225.205906][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.211845][ T7139] [ 225.214193][ T7139] The buggy address belongs to the object at ffff888045305b00 [ 225.214193][ T7139] which belongs to the cache kmalloc-128 of size 128 [ 225.228269][ T7139] The buggy address is located 24 bytes inside of [ 225.228269][ T7139] freed 128-byte region [ffff888045305b00, ffff888045305b80) [ 225.241990][ T7139] [ 225.244317][ T7139] The buggy address belongs to the physical page: [ 225.250725][ T7139] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45305 [ 225.259498][ T7139] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 225.267055][ T7139] page_type: f5(slab) [ 225.271064][ T7139] raw: 00fff00000000000 ffff88801ac41a00 0000000000000000 dead000000000001 [ 225.279660][ T7139] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 225.288250][ T7139] page dumped because: kasan: bad access detected [ 225.294763][ T7139] page_owner tracks the page as allocated [ 225.300479][ T7139] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6282, tgid 6282 (sed), ts 148919186849, free_ts 30576300961 [ 225.319326][ T7139] post_alloc_hook+0x1f4/0x240 [ 225.324101][ T7139] get_page_from_freelist+0x365c/0x37a0 [ 225.329667][ T7139] __alloc_frozen_pages_noprof+0x292/0x710 [ 225.335484][ T7139] allocate_slab+0x66/0x3a0 [ 225.340008][ T7139] ___slab_alloc+0xc27/0x14a0 [ 225.344691][ T7139] __slab_alloc+0x58/0xa0 [ 225.349030][ T7139] __kmalloc_node_noprof+0x2ee/0x4d0 [ 225.354342][ T7139] allocate_slab+0x179/0x3a0 [ 225.358951][ T7139] ___slab_alloc+0xc27/0x14a0 [ 225.363640][ T7139] __slab_alloc+0x58/0xa0 [ 225.367980][ T7139] kmem_cache_alloc_noprof+0x268/0x380 [ 225.373449][ T7139] vm_area_alloc+0x24/0x1d0 [ 225.377955][ T7139] _install_special_mapping+0x32/0x350 [ 225.383423][ T7139] map_vdso+0x34b/0x4d0 [ 225.387580][ T7139] load_elf_binary+0x1cb6/0x2820 [ 225.392518][ T7139] bprm_execve+0x979/0x1430 [ 225.397047][ T7139] page last free pid 1 tgid 1 stack trace: [ 225.402864][ T7139] free_frozen_pages+0xe0d/0x10e0 [ 225.407906][ T7139] free_contig_range+0x14c/0x430 [ 225.412868][ T7139] destroy_args+0x94/0x4b0 [ 225.417303][ T7139] debug_vm_pgtable+0x4be/0x550 [ 225.422176][ T7139] do_one_initcall+0x248/0x870 [ 225.426953][ T7139] do_initcall_level+0x157/0x210 [ 225.431902][ T7139] do_initcalls+0x3f/0x80 [ 225.436242][ T7139] kernel_init_freeable+0x435/0x5d0 [ 225.441458][ T7139] kernel_init+0x1d/0x2b0 [ 225.445803][ T7139] ret_from_fork+0x4b/0x80 [ 225.450232][ T7139] ret_from_fork_asm+0x1a/0x30 [ 225.455004][ T7139] [ 225.457355][ T7139] Memory state around the buggy address: [ 225.462991][ T7139] ffff888045305a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 225.471227][ T7139] ffff888045305a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.479308][ T7139] >ffff888045305b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.487377][ T7139] ^ [ 225.492231][ T7139] ffff888045305b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.500311][ T7139] ffff888045305c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.508382][ T7139] ================================================================== [ 225.538356][ T7139] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 225.545607][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: khidpd_15c22412 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 225.556219][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.566287][ T7139] Call Trace: [ 225.569588][ T7139] [ 225.572547][ T7139] dump_stack_lvl+0x241/0x360 [ 225.577238][ T7139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.582441][ T7139] ? __pfx__printk+0x10/0x10 [ 225.587047][ T7139] ? preempt_schedule+0xe1/0xf0 [ 225.591910][ T7139] ? vscnprintf+0x5d/0x90 [ 225.596250][ T7139] panic+0x349/0x880 [ 225.600162][ T7139] ? check_panic_on_warn+0x21/0xb0 [ 225.605288][ T7139] ? __pfx_panic+0x10/0x10 [ 225.609725][ T7139] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 225.615714][ T7139] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.622045][ T7139] ? print_report+0x502/0x550 [ 225.626732][ T7139] check_panic_on_warn+0x86/0xb0 [ 225.631680][ T7139] ? hci_chan_del+0x3b/0x1b0 [ 225.636283][ T7139] end_report+0x77/0x160 [ 225.640533][ T7139] kasan_report+0x154/0x180 [ 225.645038][ T7139] ? queue_delayed_work_on+0x267/0x390 [ 225.650528][ T7139] ? hci_chan_del+0x3b/0x1b0 [ 225.655156][ T7139] hci_chan_del+0x3b/0x1b0 [ 225.659725][ T7139] l2cap_conn_put+0x70/0xe0 [ 225.664256][ T7139] hidp_session_put+0x1e7/0x220 [ 225.669137][ T7139] hidp_session_thread+0x458/0x490 [ 225.674270][ T7139] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 225.680175][ T7139] ? __pfx_hidp_session_thread+0x10/0x10 [ 225.685825][ T7139] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 225.691726][ T7139] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 225.697984][ T7139] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 225.704241][ T7139] ? __kthread_parkme+0x169/0x1d0 [ 225.709279][ T7139] ? __pfx_hidp_session_thread+0x10/0x10 [ 225.714932][ T7139] kthread+0x7a9/0x920 [ 225.719015][ T7139] ? __pfx_kthread+0x10/0x10 [ 225.723622][ T7139] ? __pfx_hidp_session_thread+0x10/0x10 [ 225.729267][ T7139] ? __pfx_kthread+0x10/0x10 [ 225.733871][ T7139] ? __pfx_kthread+0x10/0x10 [ 225.738472][ T7139] ? __pfx_kthread+0x10/0x10 [ 225.743161][ T7139] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.748365][ T7139] ? lockdep_hardirqs_on+0x99/0x150 [ 225.753572][ T7139] ? __pfx_kthread+0x10/0x10 [ 225.758179][ T7139] ret_from_fork+0x4b/0x80 [ 225.762608][ T7139] ? __pfx_kthread+0x10/0x10 [ 225.767225][ T7139] ret_from_fork_asm+0x1a/0x30 [ 225.772019][ T7139] [ 225.775181][ T7139] Kernel Offset: disabled [ 225.779511][ T7139] Rebooting in 86400 seconds..