last executing test programs: 2m14.50758835s ago: executing program 3 (id=1107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce6981e21f7d1188a61822f008aa08b08d8ee304fc9fff96ec931"], 0x30}}, 0x0) 2m11.973288677s ago: executing program 3 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r6) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = dup(r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099"], 0x30}}, 0x0) 2m9.453807492s ago: executing program 3 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 1m25.394406836s ago: executing program 2 (id=1135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1m22.536265219s ago: executing program 2 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), 0x0, 0x0, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0)) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 1m21.123353975s ago: executing program 2 (id=1139): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0xc01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016"], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7}) close_range(r5, 0xffffffffffffffff, 0x0) dup(r3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) 1m15.529132289s ago: executing program 2 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r6) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = dup(r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce698"], 0x30}}, 0x0) 1m10.818085718s ago: executing program 4 (id=1150): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000695ffc)) ftruncate(r0, 0x88801) r4 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fbffc001) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400800, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x541b, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000240)=')}\x00', &(0x7f0000000280)='./file0\x00', r3) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="34bb2eacbc0b2b9558266c93e134a668dbd13c0dca28be56453007dcacd3177247247c5faf42578a6c624bed9feb54d4f9ce9d8435cd6ad66fe4b407c7d67804af43c607f9a63563f5a7f988d18242ab43bd9a5ff4e3a3c5c12da4c7ce69ba4c815675f9e1bb74c9", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000100)={&(0x7f0000000000)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m9.460490554s ago: executing program 4 (id=1151): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200ff010000"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0) 1m8.917296087s ago: executing program 2 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002400)={0x2020}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, 0x0, 0x0) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r6, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 1m4.581038706s ago: executing program 4 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 47.437869594s ago: executing program 0 (id=1164): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100070000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000002000000000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800168024000180100002000000000000000000000000000c00040000000000020001"], 0x48}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read$FUSE(r5, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$usbmon(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 45.962898094s ago: executing program 0 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), 0x0, 0x0, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0)) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 44.641437352s ago: executing program 0 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce6981e21f7d1188a61822f008aa08b08d8ee304fc9fff9"], 0x30}}, 0x0) 43.091772301s ago: executing program 0 (id=1167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000100), 0x0, 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0182101, &(0x7f00000004c0)) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 42.080009327s ago: executing program 0 (id=1168): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000002240)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6W\xed\xf4\xaaB\xc1l\x13\xf1t;\x98\x0f\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\x8c\x11\xd8\f\xfc\x98\x86\x03o,\xf3Y\x04\xa53\x9e\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002180)=ANY=[@ANYBLOB="c5ac38b94ad03a8c6da2580000000010", @ANYRES64=r3, @ANYBLOB="070000000000001400000000000000000800000000000000402d2f5c260d802d000000000000000000000000000000000a000000000000002f3e0d762f6375736500000000000000"], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000002200)) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={0x0, r6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/292], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket(0x25, 0x1, 0x0) recvfrom$packet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [0x0, 0x42, 0x0, 0x76bc10cd], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r12}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 40.165850819s ago: executing program 0 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, 0x0, 0x0) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r6, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 27.217092609s ago: executing program 3 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 23.106113764s ago: executing program 3 (id=1173): open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000695ffc)) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fbffc001) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400800, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x541b, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000240)=')}\x00', &(0x7f0000000280)='./file0\x00', r2) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="34bb2eacbc0b2b9558266c93e134a668dbd13c0dca28be56453007dcacd3177247247c5faf42578a6c624bed9feb54d4f9ce9d8435cd6ad66fe4b407c7d67804af43c607f9a63563f5a7f988d18242ab43bd9a5ff4e3a3c5c12da4c7ce69ba4c815675f9e1bb74c9", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000100)={&(0x7f0000000000)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.403662214s ago: executing program 1 (id=1174): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000002240)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6W\xed\xf4\xaaB\xc1l\x13\xf1t;\x98\x0f\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\x8c\x11\xd8\f\xfc\x98\x86\x03o,\xf3Y\x04\xa53\x9e\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002180)=ANY=[@ANYBLOB="c5ac38b94ad03a8c6da2580000000010", @ANYRES64=r3, @ANYBLOB="070000000000001400000000000000000800000000000000402d2f5c260d802d000000000000000000000000000000000a000000000000002f3e0d762f6375736500000000000000"], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000002200)) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={0x0, r6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/297], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket(0x25, 0x1, 0x0) recvfrom$packet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [0x0, 0x42, 0x0, 0x76bc10cd], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r12}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 19.646741048s ago: executing program 1 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000100), 0x0, 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0182101, &(0x7f00000004c0)) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 18.105679898s ago: executing program 1 (id=1176): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 17.838837705s ago: executing program 3 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c000a0000000d0085a168d0bf46d32345653600648d0b00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2", 0x75, 0x0, 0x0, 0x0) socket(0x1f, 0x80000, 0x32) r6 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='memory.min\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000800"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 14.041144073s ago: executing program 1 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), 0x0, 0x0, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0)) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 13.605849692s ago: executing program 4 (id=1160): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100070000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="48000000020000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800168024000180100002000000000000000000000000000c000400000000000200010004"], 0x48}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read$FUSE(r5, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$usbmon(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.442612655s ago: executing program 1 (id=1179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 4.69946026s ago: executing program 1 (id=1181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 4.678220106s ago: executing program 4 (id=1182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 432.661632ms ago: executing program 4 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000100), 0x0, 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0182101, &(0x7f00000004c0)) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 0s ago: executing program 2 (id=1158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) kernel console output (not intermixed with test programs): avoid problems! [ 1594.137577][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.239434][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.284114][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.446927][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.535820][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.582646][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.705538][T13418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.874155][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.901535][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.971302][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.083424][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.117960][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.242589][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.294321][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.367753][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.408463][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.455684][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.500267][T13418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.601379][T13418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.624351][ T9419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1595.636400][ T9419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1595.656789][ T9419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1595.699950][ T9419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1595.710252][ T9419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1595.718886][ T9419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1595.764019][T13418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.777370][T13418] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.906903][T13418] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.183481][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1597.232572][T13664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 1597.249496][T13665] netlink: 'syz.1.1056': attribute type 5 has an invalid length. [ 1597.922760][ T9419] Bluetooth: hci1: command tx timeout [ 1599.027845][ T29] audit: type=1326 audit(1724364513.373:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.4.1058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f135ef79e79 code=0x0 [ 1599.728232][T13686] fuseblk: Unknown parameter '4».¬¼ +•X&l“á4¦hÛÑ<Ê(¾VE0ܬÓrG$|_¯BWŠlbKíŸëTÔù΄5ÍjÖoä´ÇÖx¯CÆù¦5cõ§ùˆÑ‚B«C½š_ôã£ÅÁ-¤ÇÎiºLVuùá»tÉ0xffffffffffffffff' [ 1600.069670][ T9419] Bluetooth: hci1: command tx timeout [ 1600.751491][T13689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1061'. [ 1601.026734][T10437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.062663][T10437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.462114][T13692] netlink: 'syz.3.1062': attribute type 5 has an invalid length. [ 1602.264436][ T9419] Bluetooth: hci1: command tx timeout [ 1605.819236][ T5232] Bluetooth: hci1: command tx timeout [ 1605.886460][T13702] usb usb9: usbfs: process 13702 (syz.1.1064) did not claim interface 0 before use [ 1605.896171][T13702] usb usb9: selecting invalid altsetting 21783 [ 1606.425090][ T2557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.453963][ T2557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.638587][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.822643][T13706] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1065'. [ 1606.936730][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.322196][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.426707][ T5299] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1607.550206][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.874445][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 1607.917494][ T5299] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1608.138739][ T5299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.230547][ T5299] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1608.340784][ T5299] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1608.695228][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.853275][ T5299] usb 1-1: Product: syz [ 1608.863181][ T5299] usb 1-1: Manufacturer: syz [ 1608.869392][T13662] chnl_net:caif_netlink_parms(): no params data found [ 1608.883208][ T5299] usb 1-1: SerialNumber: syz [ 1608.931848][ T5299] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1610.603050][ T29] audit: type=1326 audit(1724364524.833:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13721 comm="syz.3.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1612.124297][ T29] audit: type=1326 audit(1724364526.273:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13729 comm="syz.3.1068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1612.288858][ T5299] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 1612.367305][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.419757][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.452611][T13662] bridge_slave_0: entered allmulticast mode [ 1612.477618][T13662] bridge_slave_0: entered promiscuous mode [ 1612.570593][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.578358][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.620334][T13662] bridge_slave_1: entered allmulticast mode [ 1612.642831][T13662] bridge_slave_1: entered promiscuous mode [ 1612.643277][T13738] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1070'. [ 1612.655878][ T11] bridge_slave_1: left allmulticast mode [ 1612.669135][ T11] bridge_slave_1: left promiscuous mode [ 1612.682526][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.748982][ T11] bridge_slave_0: left allmulticast mode [ 1612.775200][ T11] bridge_slave_0: left promiscuous mode [ 1612.849647][T13743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1071'. [ 1612.873761][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.940515][T13744] binder: BINDER_SET_CONTEXT_MGR already set [ 1612.969697][T13744] binder: 13740:13744 ioctl 4018620d 20000040 returned -16 [ 1613.063867][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.078645][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.027295][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1614.046114][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1614.055300][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1614.086098][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1614.094567][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1614.102123][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1617.827630][ T5232] Bluetooth: hci2: command tx timeout [ 1617.857368][T13752] usb usb9: usbfs: process 13752 (syz.1.1073) did not claim interface 0 before use [ 1617.866978][T13752] usb usb9: selecting invalid altsetting 21783 [ 1618.553757][T13756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1619.070715][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1619.130866][T13760] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 1619.137452][T13760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1619.158014][T13760] vhci_hcd vhci_hcd.0: Device attached [ 1619.172443][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.843664][ T5232] Bluetooth: hci2: command tx timeout [ 1619.873701][ T5299] vhci_hcd: vhci_device speed not set [ 1619.942661][ T5299] usb 11-2: new full-speed USB device number 9 using vhci_hcd [ 1620.235325][ T11] bond0 (unregistering): Released all slaves [ 1620.763329][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.792291][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.214536][T13764] vhci_hcd: connection reset by peer [ 1621.222026][T10436] vhci_hcd: stop threads [ 1621.228587][T10436] vhci_hcd: release socket [ 1621.242019][T10436] vhci_hcd: disconnect device [ 1621.634830][T13662] team0: Port device team_slave_0 added [ 1621.674223][T13662] team0: Port device team_slave_1 added [ 1621.828593][ T11] hsr_slave_0: left promiscuous mode [ 1621.952611][ T5232] Bluetooth: hci2: command tx timeout [ 1622.042888][ T11] hsr_slave_1: left promiscuous mode [ 1622.063782][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.071259][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.080216][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.088046][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.121616][ T11] veth1_macvtap: left promiscuous mode [ 1622.127372][ T11] veth0_macvtap: left promiscuous mode [ 1622.133584][ T11] veth1_vlan: left promiscuous mode [ 1622.139047][ T11] veth0_vlan: left promiscuous mode [ 1623.037242][ T29] audit: type=1326 audit(1724364537.323:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.3.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1623.655183][T10614] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1623.854011][T10614] usb 2-1: Using ep0 maxpacket: 16 [ 1623.865695][T10614] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1623.888193][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1078'. [ 1623.897486][T10614] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.158628][T10614] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1624.172513][ T5232] Bluetooth: hci2: command tx timeout [ 1624.183949][T10614] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1624.193238][T10614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.202996][T10614] usb 2-1: Product: syz [ 1624.207210][T10614] usb 2-1: Manufacturer: syz [ 1624.211841][T10614] usb 2-1: SerialNumber: syz [ 1624.224819][T10614] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1625.062825][ T5299] vhci_hcd: vhci_device speed not set [ 1625.129452][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1625.300849][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1625.402629][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1626.557580][ T944] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 1626.767142][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.800919][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.840201][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.862784][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.869868][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.952921][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.446236][T13662] hsr_slave_0: entered promiscuous mode [ 1627.466032][T13662] hsr_slave_1: entered promiscuous mode [ 1627.889431][T13809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 1632.141957][T13820] usb usb9: usbfs: process 13820 (syz.3.1083) did not claim interface 0 before use [ 1632.152912][T13820] usb usb9: selecting invalid altsetting 21783 [ 1632.717975][T13748] chnl_net:caif_netlink_parms(): no params data found [ 1636.347780][T13831] usb usb9: usbfs: process 13831 (syz.3.1085) did not claim interface 0 before use [ 1636.357406][T13831] usb usb9: selecting invalid altsetting 21783 [ 1636.841446][ T9419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1636.872374][ T9419] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1636.882023][ T9419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1636.919393][ T9419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1636.932060][ T9419] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1636.939951][ T9419] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1640.514167][T13843] usb usb9: usbfs: process 13843 (syz.1.1087) did not claim interface 0 before use [ 1640.523836][T13843] usb usb9: selecting invalid altsetting 21783 [ 1640.559653][ T9419] Bluetooth: hci7: command tx timeout [ 1641.092735][T13855] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1641.296683][T13858] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 1641.303232][T13858] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1641.315858][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.323362][T13858] vhci_hcd vhci_hcd.0: Device attached [ 1641.357224][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.382919][T13748] bridge_slave_0: entered allmulticast mode [ 1641.394358][T13748] bridge_slave_0: entered promiscuous mode [ 1641.437195][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.453858][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.482926][T13748] bridge_slave_1: entered allmulticast mode [ 1641.548639][T13748] bridge_slave_1: entered promiscuous mode [ 1641.558538][ T5273] vhci_hcd: vhci_device speed not set [ 1641.632871][ T5273] usb 11-2: new full-speed USB device number 10 using vhci_hcd [ 1641.961617][T13865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1089'. [ 1642.271575][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.335710][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.482175][T13861] vhci_hcd: connection reset by peer [ 1642.493460][ T52] vhci_hcd: stop threads [ 1642.497765][ T52] vhci_hcd: release socket [ 1642.508661][ T52] vhci_hcd: disconnect device [ 1642.644093][ T9419] Bluetooth: hci7: command tx timeout [ 1642.792114][T13748] team0: Port device team_slave_0 added [ 1642.843342][T13662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1642.889295][T13662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1642.965307][T13748] team0: Port device team_slave_1 added [ 1642.978328][T13662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1643.039024][T13662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1643.343142][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.350151][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.423400][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.510452][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.528381][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.559247][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.063376][ T7975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1644.294426][ T29] audit: type=1326 audit(1724364559.303:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.3.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1644.766537][ T5232] Bluetooth: hci7: command tx timeout [ 1644.974850][ T7975] usb 2-1: Using ep0 maxpacket: 16 [ 1644.985887][ T7975] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1645.004955][ T7975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.054769][ T7975] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1645.083898][ T7975] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1645.100625][ T7975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.109742][T13748] hsr_slave_0: entered promiscuous mode [ 1645.117225][ T7975] usb 2-1: Product: syz [ 1645.121675][ T7975] usb 2-1: Manufacturer: syz [ 1645.127198][ T7975] usb 2-1: SerialNumber: syz [ 1645.136874][T13748] hsr_slave_1: entered promiscuous mode [ 1645.166006][ T7975] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1645.178011][T13748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.212509][T13748] Cannot create hsr debugfs directory [ 1646.432630][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 1646.501941][ T29] audit: type=1326 audit(1724364560.743:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.1092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1646.815748][T13836] chnl_net:caif_netlink_parms(): no params data found [ 1646.883016][ T9419] Bluetooth: hci7: command tx timeout [ 1647.067360][ T5273] vhci_hcd: vhci_device speed not set [ 1647.526907][ T29] audit: type=1326 audit(1724364562.543:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13895 comm="syz.3.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1648.323152][ T5274] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 1650.862098][T13911] usb usb9: usbfs: process 13911 (syz.3.1094) did not claim interface 0 before use [ 1650.872236][T13911] usb usb9: selecting invalid altsetting 21783 [ 1651.255452][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.292750][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.326074][T13836] bridge_slave_0: entered allmulticast mode [ 1651.358409][T13836] bridge_slave_0: entered promiscuous mode [ 1652.696449][ T29] audit: type=1326 audit(1724364566.923:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13914 comm="syz.3.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1654.998611][T13748] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.072749][T13836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.079990][T13836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.163237][T13836] bridge_slave_1: entered allmulticast mode [ 1655.205443][T13836] bridge_slave_1: entered promiscuous mode [ 1655.410485][T13748] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.429038][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1655.656084][T13836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.936599][T13748] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.049786][T13836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.529339][T13748] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.611567][T13894] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1656.627598][T13894] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1656.640403][T13894] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1656.669799][T13894] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1656.670711][T13836] team0: Port device team_slave_0 added [ 1656.701537][T13894] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1656.710560][T13894] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1656.772913][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1656.908849][T13836] team0: Port device team_slave_1 added [ 1657.320777][T13836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.339419][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.380204][T13836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.398992][T13836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.412224][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.459047][T13836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.764497][T13748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1657.896796][T13836] hsr_slave_0: entered promiscuous mode [ 1657.905365][T13836] hsr_slave_1: entered promiscuous mode [ 1657.916387][T13836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1657.930659][T13836] Cannot create hsr debugfs directory [ 1657.949799][T13748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1658.053012][T13748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1658.804639][T13894] Bluetooth: hci8: command tx timeout [ 1659.251424][T13748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1659.742976][ T6817] bridge_slave_1: left allmulticast mode [ 1659.772245][ T6817] bridge_slave_1: left promiscuous mode [ 1659.788375][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.818183][ T6817] bridge_slave_0: left allmulticast mode [ 1659.839771][ T6817] bridge_slave_0: left promiscuous mode [ 1659.853189][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.456566][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.529704][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.555172][ T6817] bond0 (unregistering): Released all slaves [ 1660.859165][ T6817] hsr_slave_0: left promiscuous mode [ 1660.866460][ T6817] hsr_slave_1: left promiscuous mode [ 1660.886228][T13894] Bluetooth: hci8: command tx timeout [ 1660.913091][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.943207][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.206452][T13894] Bluetooth: hci0: command 0x0406 tx timeout [ 1661.562650][ T5273] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1661.574635][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 1661.663093][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 1661.752602][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 1661.764471][ T5273] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1661.774181][ T5273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.786909][ T5273] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1661.801435][ T5273] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1661.820647][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.832590][ T5273] usb 4-1: Product: syz [ 1661.846981][ T5273] usb 4-1: Manufacturer: syz [ 1661.857343][ T5273] usb 4-1: SerialNumber: syz [ 1661.881714][ T5273] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1662.196194][T13836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.586534][T13836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.853710][T13836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.967453][ T9419] Bluetooth: hci8: command tx timeout [ 1663.047703][T13836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.133412][T13933] chnl_net:caif_netlink_parms(): no params data found [ 1663.357037][T13748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.607829][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.616361][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.624183][T13933] bridge_slave_0: entered allmulticast mode [ 1663.631971][T13933] bridge_slave_0: entered promiscuous mode [ 1663.652005][T13748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.675545][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.694110][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.701392][T13933] bridge_slave_1: entered allmulticast mode [ 1663.710778][T13933] bridge_slave_1: entered promiscuous mode [ 1663.742551][T13836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1663.759376][T13836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1663.823681][T13836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1663.844760][T13836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1663.865413][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.872678][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.897439][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.913413][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.974836][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.982253][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.109482][T13933] team0: Port device team_slave_0 added [ 1664.173244][T13933] team0: Port device team_slave_1 added [ 1664.387193][ T5274] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 1664.853072][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.860093][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.991863][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.044779][ T9419] Bluetooth: hci8: command tx timeout [ 1665.084517][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.091553][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.187981][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.567162][T13933] hsr_slave_0: entered promiscuous mode [ 1665.606870][T13933] hsr_slave_1: entered promiscuous mode [ 1666.173681][T13836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.201863][T13748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.285940][T14003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1103'. [ 1666.354299][T13836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1666.556905][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.564210][T10437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.664159][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.671444][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.019313][T13748] veth0_vlan: entered promiscuous mode [ 1669.297942][T13748] veth1_vlan: entered promiscuous mode [ 1669.705231][ T29] audit: type=1326 audit(1724364584.723:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.1106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed34979e79 code=0x0 [ 1670.694968][T13748] veth0_macvtap: entered promiscuous mode [ 1670.712602][T13933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1670.799592][T13748] veth1_macvtap: entered promiscuous mode [ 1670.812779][T13933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1670.869160][T13933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1670.958103][T13933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1670.996643][T11972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1671.009674][T11972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1671.017896][T11972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1671.027643][T11972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1671.036008][T11972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1671.064634][T11972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1671.115850][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1107'. [ 1671.456002][T11972] Bluetooth: hci3: command 0x0406 tx timeout [ 1671.497770][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.523799][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.562607][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.602565][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.642518][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.666416][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.692680][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.732524][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.742417][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.772602][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.815055][T13748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.920654][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.935033][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.964526][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.995274][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.015351][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.045659][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.072656][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.125790][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.135918][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.146537][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.166279][T13748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1672.210619][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.277894][T13748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.296766][T13748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.315919][T13748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.335480][T13748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.122764][T11972] Bluetooth: hci1: command tx timeout [ 1673.335332][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.368924][T13836] veth0_vlan: entered promiscuous mode [ 1673.485914][T13836] veth1_vlan: entered promiscuous mode [ 1673.603956][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.766324][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1108'. [ 1673.967574][T10436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.974867][T10436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.063378][ T9419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1674.073529][ T9419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1674.081556][ T9419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1674.092079][ T9419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1674.101859][ T9419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1674.111477][ T9419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1674.361795][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.369043][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.497454][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.503965][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.665689][T13836] veth0_macvtap: entered promiscuous mode [ 1674.772044][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.859907][T14051] chnl_net:caif_netlink_parms(): no params data found [ 1674.923254][T13836] veth1_macvtap: entered promiscuous mode [ 1675.109515][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.212558][ T9419] Bluetooth: hci1: command tx timeout [ 1675.456332][T13933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1675.472621][T13933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.722112][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.322336][ T9419] Bluetooth: hci2: command tx timeout [ 1676.382701][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.435075][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.465789][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.496050][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.506040][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.516589][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.526492][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.536995][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.552495][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.566388][ T9419] Bluetooth: hci6: command 0x0406 tx timeout [ 1676.578824][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.607478][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.618783][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.634414][T13836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.688960][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.783330][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.824291][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.842517][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.881055][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.902521][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.928062][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.955371][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.966460][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.977250][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.006589][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.027284][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.051107][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.074027][T13836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.181165][T13836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.209911][T13836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.229402][T13836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.249502][T13836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.283371][T11972] Bluetooth: hci1: command tx timeout [ 1677.319879][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.327428][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.338544][T14051] bridge_slave_0: entered allmulticast mode [ 1677.347372][T14051] bridge_slave_0: entered promiscuous mode [ 1677.374603][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.384134][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.391401][T14051] bridge_slave_1: entered allmulticast mode [ 1677.422955][T14051] bridge_slave_1: entered promiscuous mode [ 1677.573827][T14051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.598988][T14051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.958611][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.004081][T14051] team0: Port device team_slave_0 added [ 1678.017191][T14051] team0: Port device team_slave_1 added [ 1678.265844][ T11] bridge_slave_1: left allmulticast mode [ 1678.271562][ T11] bridge_slave_1: left promiscuous mode [ 1678.294628][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.344257][ T11] bridge_slave_0: left allmulticast mode [ 1678.349974][ T11] bridge_slave_0: left promiscuous mode [ 1678.364373][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.402832][T11972] Bluetooth: hci2: command tx timeout [ 1679.137388][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.172119][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.197706][ T11] bond0 (unregistering): Released all slaves [ 1679.288422][T14051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.295775][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.372602][T11972] Bluetooth: hci1: command tx timeout [ 1679.385462][T14051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.418360][T14051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.443527][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.487203][T14051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.575020][ T11] hsr_slave_0: left promiscuous mode [ 1679.588222][ T11] hsr_slave_1: left promiscuous mode [ 1679.596003][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.614573][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.632643][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.640161][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.717128][ T11] veth1_macvtap: left promiscuous mode [ 1679.723191][ T11] veth0_macvtap: left promiscuous mode [ 1679.729025][ T11] veth1_vlan: left promiscuous mode [ 1679.734637][ T11] veth0_vlan: left promiscuous mode [ 1680.483780][T11972] Bluetooth: hci2: command tx timeout [ 1680.520689][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1680.576324][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1681.209729][T14084] chnl_net:caif_netlink_parms(): no params data found [ 1681.265043][T14051] hsr_slave_0: entered promiscuous mode [ 1681.273118][T14051] hsr_slave_1: entered promiscuous mode [ 1681.286212][T14051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1681.295490][T14051] Cannot create hsr debugfs directory [ 1681.306781][T10436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.324281][T10436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.538375][ T6817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.547103][ T6817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.687301][T13933] veth0_vlan: entered promiscuous mode [ 1681.996540][T14084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.043217][T14084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.062853][T14084] bridge_slave_0: entered allmulticast mode [ 1682.091668][T14084] bridge_slave_0: entered promiscuous mode [ 1682.175972][T14084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.693773][T11972] Bluetooth: hci2: command tx timeout [ 1683.282560][ T29] audit: type=1326 audit(1724364597.693:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14168 comm="syz.0.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1683.305732][T14084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.343546][T14084] bridge_slave_1: entered allmulticast mode [ 1683.392702][T14084] bridge_slave_1: entered promiscuous mode [ 1683.564829][T13933] veth1_vlan: entered promiscuous mode [ 1683.635007][T14084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.667023][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1683.681864][T14084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.809372][T14084] team0: Port device team_slave_0 added [ 1683.867977][T14084] team0: Port device team_slave_1 added [ 1683.882817][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1683.900044][ T9] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1683.911642][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.924784][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1683.958842][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1683.984530][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.997485][ T9] usb 1-1: Product: syz [ 1684.001710][ T9] usb 1-1: Manufacturer: syz [ 1684.006927][ T9] usb 1-1: SerialNumber: syz [ 1684.029098][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1684.030608][T14051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.148373][T14084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.157978][T14084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.188945][T14084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.254671][T14051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.283236][T14084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.290241][T14084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.318564][T14084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.470745][T14051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.569994][T13933] veth0_macvtap: entered promiscuous mode [ 1684.685453][T14051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.762034][T14084] hsr_slave_0: entered promiscuous mode [ 1684.794673][T14084] hsr_slave_1: entered promiscuous mode [ 1684.801513][T14084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1684.811563][T14084] Cannot create hsr debugfs directory [ 1684.848185][T13933] veth1_macvtap: entered promiscuous mode [ 1685.052261][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.068962][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.080746][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.095530][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.106520][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.117883][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.129027][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.140065][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.150370][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.161980][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.176708][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.206087][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.231807][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.300244][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.311152][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.358341][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.399064][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.432504][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.472564][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.501415][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.532813][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.572626][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.612492][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.622397][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.673256][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.706820][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.857933][T13933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.886046][T13933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.902577][T13933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.923364][T13933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.177596][ T9419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1686.193626][ T9419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1686.201728][ T9419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1686.225478][ T9419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1686.233799][ T9419] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1686.241427][ T9419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1686.261776][T14051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1686.294459][T14051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1686.350584][T14051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1686.469044][T14051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1686.473649][ T5274] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 1687.045885][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.086874][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.711055][T14223] usb usb9: usbfs: process 14223 (syz.0.1113) did not claim interface 0 before use [ 1689.852626][ T9419] Bluetooth: hci5: command tx timeout [ 1690.125143][T14223] usb usb9: selecting invalid altsetting 21783 [ 1690.265964][ T2557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.301718][ T2557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.913758][T14084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1691.924127][T14084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1691.942664][ T9419] Bluetooth: hci5: command tx timeout [ 1692.134522][T14084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1692.205911][T14084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1692.464734][T14051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.481963][T14203] chnl_net:caif_netlink_parms(): no params data found [ 1692.496100][T14235] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1053'. [ 1693.412611][ T29] audit: type=1326 audit(1724364607.673:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.0.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1693.565296][T14051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.004094][ T9419] Bluetooth: hci5: command tx timeout [ 1694.012822][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.020071][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.189041][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.196288][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.285855][T14203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.293558][T14203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.300967][T14203] bridge_slave_0: entered allmulticast mode [ 1694.319054][T14203] bridge_slave_0: entered promiscuous mode [ 1694.359910][T14203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.369810][T14203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.378294][T14203] bridge_slave_1: entered allmulticast mode [ 1694.387602][T14203] bridge_slave_1: entered promiscuous mode [ 1694.671692][T14203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.740422][T14203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.232414][T14203] team0: Port device team_slave_0 added [ 1695.294010][T14203] team0: Port device team_slave_1 added [ 1695.538632][T14203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.565313][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.649395][T14203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.711512][T14203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.728305][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.859563][T14203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.941048][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1118'. [ 1695.961188][T14264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1117'. [ 1696.182627][ T9419] Bluetooth: hci5: command tx timeout [ 1696.555277][T14084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.008888][T14203] hsr_slave_0: entered promiscuous mode [ 1697.052871][T14203] hsr_slave_1: entered promiscuous mode [ 1697.156692][T14203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1697.182717][T14203] Cannot create hsr debugfs directory [ 1697.228219][T14084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.585115][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.592360][ T6817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.803450][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.810710][T10437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.826316][ T5311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1698.032513][ T5311] usb 3-1: Using ep0 maxpacket: 16 [ 1698.048614][ T5311] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1698.085176][ T5311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.116562][ T5311] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1698.158683][ T5311] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1698.174876][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.183416][ T5311] usb 3-1: Product: syz [ 1698.187623][ T5311] usb 3-1: Manufacturer: syz [ 1698.192252][ T5311] usb 3-1: SerialNumber: syz [ 1698.216715][ T5311] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1698.260676][T14299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1120'. [ 1698.332922][T14051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.761894][T14203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.958733][T14084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1699.215638][T14203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.577141][T14203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.839223][T14051] veth0_vlan: entered promiscuous mode [ 1699.896487][T14312] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1121'. [ 1699.967431][T14203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.070254][T14051] veth1_vlan: entered promiscuous mode [ 1700.352098][T14051] veth0_macvtap: entered promiscuous mode [ 1700.402238][T14051] veth1_macvtap: entered promiscuous mode [ 1700.748814][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.770139][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.792823][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.806955][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.822488][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.834346][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.846488][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.865028][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.876133][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.891636][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.901915][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.914466][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.924642][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.935259][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.984165][T14051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.071775][ T5311] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 1701.137810][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.157720][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.181954][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.193178][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.205663][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.218934][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.241888][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.289119][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.332561][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.352673][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.382595][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.407868][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.440112][T14051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.476936][T14051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.490817][T14051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.519913][T14203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1701.598081][T14203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1701.636094][T14084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1701.650977][T14051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.669122][T14051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.952834][T14051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.255900][T14051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.455443][T14203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1702.858745][T14203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1703.614227][T14338] netlink: 'syz.2.1123': attribute type 5 has an invalid length. [ 1703.644587][ T9714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.673062][ T9714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.904077][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1704.046122][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.067986][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.092391][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.378861][T14203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.434619][T14084] veth0_vlan: entered promiscuous mode [ 1704.481011][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.488244][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.525044][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.532269][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.563589][T14347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1704.600587][T14084] veth1_vlan: entered promiscuous mode [ 1704.925977][T14348] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 1704.932588][T14348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1704.975071][T14348] vhci_hcd vhci_hcd.0: Device attached [ 1705.183172][ T9] vhci_hcd: vhci_device speed not set [ 1705.191922][T14084] veth0_macvtap: entered promiscuous mode [ 1705.398603][ T9] usb 11-2: new full-speed USB device number 11 using vhci_hcd [ 1705.687815][T14084] veth1_macvtap: entered promiscuous mode [ 1706.466810][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.551268][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.565010][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1706.649163][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.729164][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.861027][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.886011][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.066338][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.106255][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.131830][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.316813][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.339750][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.361564][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.372349][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.393351][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.641801][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.653455][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.675050][T14350] vhci_hcd: connection reset by peer [ 1707.681581][T10437] vhci_hcd: stop threads [ 1707.697544][T14084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1707.708600][T10437] vhci_hcd: release socket [ 1708.622236][ T29] audit: type=1326 audit(1724364622.883:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.2.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6718779e79 code=0x0 [ 1708.691452][T10437] vhci_hcd: disconnect device [ 1708.872247][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1708.912638][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.963139][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.023645][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.085739][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.137962][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.178520][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.203216][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.293265][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.324622][T14375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1709.352689][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.391119][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.431047][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.700127][ T5273] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1709.742604][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.754696][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.714074][ T29] audit: type=1326 audit(1724364624.973:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.1130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1710.770815][T14084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.824883][T14084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.834917][ T9] vhci_hcd: vhci_device speed not set [ 1710.853130][T14385] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 1710.859684][T14385] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1710.872616][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 1710.880778][T14084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.889466][T14385] vhci_hcd vhci_hcd.0: Device attached [ 1711.041888][T14084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.122699][ T944] vhci_hcd: vhci_device speed not set [ 1711.210212][ T5273] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1711.219168][ T5273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.235077][ T5273] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1711.249858][ T5273] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1711.271550][T14084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.299479][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.322563][ T944] usb 13-2: new full-speed USB device number 13 using vhci_hcd [ 1711.331427][T14084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.344333][ T5273] usb 2-1: Product: syz [ 1711.348554][ T5273] usb 2-1: Manufacturer: syz [ 1711.363068][T14084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.383255][ T5273] usb 2-1: SerialNumber: syz [ 1711.462074][ T5273] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1711.716438][T14394] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.1131'. [ 1711.847247][T14203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.891890][T10437] bridge_slave_1: left allmulticast mode [ 1711.911835][T10437] bridge_slave_1: left promiscuous mode [ 1711.955193][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.994355][T14386] vhci_hcd: connection reset by peer [ 1712.001403][ T6911] vhci_hcd: stop threads [ 1712.013894][T10437] bridge_slave_0: left allmulticast mode [ 1712.016870][ T6911] vhci_hcd: release socket [ 1712.032546][T10437] bridge_slave_0: left promiscuous mode [ 1712.038467][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.039418][ T6911] vhci_hcd: disconnect device [ 1713.123261][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1132'. [ 1713.342323][ T5273] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 1713.365747][ T9419] Bluetooth: hci7: Opcode 0x206a failed: -110 [ 1713.373744][T11972] Bluetooth: hci7: command 0x206a tx timeout [ 1715.129770][T10437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.170069][T10437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.214731][T10437] bond0 (unregistering): Released all slaves [ 1719.190592][T14411] usb usb9: usbfs: process 14411 (syz.0.1134) did not claim interface 0 before use [ 1719.202236][T14411] usb usb9: selecting invalid altsetting 21783 [ 1719.363315][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.371187][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.514995][ T944] vhci_hcd: vhci_device speed not set [ 1720.994981][T14425] usb usb9: usbfs: process 14425 (syz.2.1135) did not claim interface 0 before use [ 1721.775376][ T29] audit: type=1326 audit(1724364635.213:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.0.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1721.820722][T14425] usb usb9: selecting invalid altsetting 21783 [ 1722.261604][T14428] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1137'. [ 1722.641254][T13174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.682602][T13174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1723.552254][ T29] audit: type=1326 audit(1724364637.793:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.2.1138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6718779e79 code=0x0 [ 1723.710149][T10437] hsr_slave_0: left promiscuous mode [ 1723.754803][T10437] hsr_slave_1: left promiscuous mode [ 1723.852613][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.860248][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.915914][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1723.958758][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.035489][T10437] veth1_macvtap: left promiscuous mode [ 1724.041187][T10437] veth0_macvtap: left promiscuous mode [ 1724.070587][T10437] veth1_vlan: left promiscuous mode [ 1724.079075][T10437] veth0_vlan: left promiscuous mode [ 1724.496041][T14446] fuseblk: Unknown parameter '4».¬¼ +•X&l“á4¦hÛÑ<Ê(¾VE0ܬÓrG$|_¯BWŠlbKíŸëTÔù΄5ÍjÖoä´ÇÖx¯CÆù¦5cõ§ùˆÑ‚B«C½š_ôã£ÅÁ-¤ÇÎiºLVuùá»tÉ0xffffffffffffffff' [ 1725.371692][ T5207] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1725.595627][ T5207] usb 1-1: Using ep0 maxpacket: 16 [ 1725.623642][ T5207] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1725.655128][ T5207] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.713119][ T5207] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1725.774016][ T5207] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1725.807699][ T5207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.853052][ T5207] usb 1-1: Product: syz [ 1725.857752][ T5207] usb 1-1: Manufacturer: syz [ 1725.869111][ T5207] usb 1-1: SerialNumber: syz [ 1725.912010][ T5207] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1726.390771][ T9419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1726.409238][ T9419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1726.430863][ T9419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1726.441042][ T9419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1726.455171][ T9419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1726.479664][ T9419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1727.244289][ T5273] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 1727.333821][T10437] team0 (unregistering): Port device team_slave_1 removed [ 1727.445005][T10437] team0 (unregistering): Port device team_slave_0 removed [ 1728.272788][T14459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1143'. [ 1728.582936][T11972] Bluetooth: hci4: command tx timeout [ 1729.037991][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 1729.220552][T14203] veth0_vlan: entered promiscuous mode [ 1729.343522][T14203] veth1_vlan: entered promiscuous mode [ 1731.012814][T11972] Bluetooth: hci4: command tx timeout [ 1731.041142][ T29] audit: type=1326 audit(1724364645.393:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14464 comm="syz.0.1146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1732.269377][ T29] audit: type=1326 audit(1724364646.543:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.4.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa964b79e79 code=0x0 [ 1732.413886][T14203] veth0_macvtap: entered promiscuous mode [ 1732.428723][T14203] veth1_macvtap: entered promiscuous mode [ 1733.835006][ T9419] Bluetooth: hci4: command tx timeout [ 1733.851608][ T29] audit: type=1326 audit(1724364648.113:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.4.1149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa964b79e79 code=0x0 [ 1734.000873][T14482] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1148'. [ 1734.472112][T14492] fuseblk: Unknown parameter '4».¬¼ +•X&l“á4¦hÛÑ<Ê(¾VE0ܬÓrG$|_¯BWŠlbKíŸëTÔù΄5ÍjÖoä´ÇÖx¯CÆù¦5cõ§ùˆÑ‚B«C½š_ôã£ÅÁ-¤ÇÎiºLVuùá»tÉ0xffffffffffffffff' [ 1735.439906][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.482609][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.498626][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.510298][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.520269][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.530945][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.543682][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.555770][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.568463][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.592177][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.611487][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.623099][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.635839][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.651831][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.670277][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.713931][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.730691][T14203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.738848][T14393] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1735.804765][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.842544][ T9419] Bluetooth: hci4: command tx timeout [ 1735.845834][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.915144][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.930914][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.931011][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.988495][T14393] usb 5-1: Using ep0 maxpacket: 16 [ 1736.021430][T14393] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1736.028096][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.042235][T14393] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.043998][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.072822][T14393] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1736.111943][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.132793][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.153671][T14393] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1736.172940][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.198845][T14393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.212552][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.223771][T14393] usb 5-1: Product: syz [ 1736.228022][T14393] usb 5-1: Manufacturer: syz [ 1736.252790][T14393] usb 5-1: SerialNumber: syz [ 1736.260619][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.308557][T14393] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1736.323457][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.354368][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.397074][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.449222][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.460040][T14203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.472049][T14203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.487149][T14203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.342398][T14453] chnl_net:caif_netlink_parms(): no params data found [ 1737.409550][T14203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.459691][T14203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.473731][T14203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.501800][T14203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.881568][T14453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.899767][T14453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.915823][T14453] bridge_slave_0: entered allmulticast mode [ 1737.939119][T14453] bridge_slave_0: entered promiscuous mode [ 1737.958041][T14453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.969786][T14453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.979460][T14453] bridge_slave_1: entered allmulticast mode [ 1737.993161][T14453] bridge_slave_1: entered promiscuous mode [ 1738.007192][T10437] bridge_slave_1: left allmulticast mode [ 1738.022192][T10437] bridge_slave_1: left promiscuous mode [ 1738.066251][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.097096][T10437] bridge_slave_0: left allmulticast mode [ 1738.105349][T10437] bridge_slave_0: left promiscuous mode [ 1738.112129][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.955361][T10437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1738.976983][T10437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.003256][T10437] bond0 (unregistering): Released all slaves [ 1739.241475][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 1739.306242][T14453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.343345][T14453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.659636][T10614] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 1739.832222][T14453] team0: Port device team_slave_0 added [ 1739.966606][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.998925][T14453] team0: Port device team_slave_1 added [ 1740.002984][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.639255][T14453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.653307][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.681628][T14453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.343281][T10437] hsr_slave_0: left promiscuous mode [ 1741.456906][T10437] hsr_slave_1: left promiscuous mode [ 1741.468290][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.482746][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.501766][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1741.524291][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.604118][T10437] veth1_macvtap: left promiscuous mode [ 1741.609748][T10437] veth0_macvtap: left promiscuous mode [ 1741.632785][T10437] veth1_vlan: left promiscuous mode [ 1741.640522][T10437] veth0_vlan: left promiscuous mode [ 1743.746497][T14522] usb usb9: usbfs: process 14522 (syz.0.1155) did not claim interface 0 before use [ 1743.756652][T14522] usb usb9: selecting invalid altsetting 21783 [ 1745.623325][ T29] audit: type=1326 audit(1724364659.993:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14523 comm="syz.0.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1749.386822][T14533] usb usb9: usbfs: process 14533 (syz.0.1157) did not claim interface 0 before use [ 1749.413159][T14533] usb usb9: selecting invalid altsetting 21783 [ 1750.059385][T11972] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1750.080042][T11972] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1750.088048][T14539] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.1159'. [ 1750.097988][T11972] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1750.122680][T11972] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1750.132974][T11972] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1750.145660][T11972] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1750.224985][T10437] team0 (unregistering): Port device team_slave_1 removed [ 1750.277471][ T9419] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1750.288098][ T9419] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1750.296383][ T9419] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1750.308962][ T9419] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1750.321147][ T9419] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1750.329173][ T9419] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1750.388757][T10437] team0 (unregistering): Port device team_slave_0 removed [ 1751.161172][T14453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.182465][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.213135][T14453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.409973][T11972] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1751.422147][T11972] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1751.434182][T11972] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1751.454906][T11972] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1751.463783][T11972] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1751.471450][T11972] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1751.735049][T14453] hsr_slave_0: entered promiscuous mode [ 1751.774583][T14453] hsr_slave_1: entered promiscuous mode [ 1751.820941][T14453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1751.869207][T14453] Cannot create hsr debugfs directory [ 1752.897602][ T29] audit: type=1326 audit(1724364667.253:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14546 comm="syz.0.1161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1752.908783][ T9419] Bluetooth: hci9: command tx timeout [ 1752.929087][ T9419] Bluetooth: hci10: command tx timeout [ 1753.393083][ T5274] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1753.523321][ T9419] Bluetooth: hci11: command tx timeout [ 1753.596336][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 1753.622799][ T5274] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1753.631680][ T5274] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.643411][ T5274] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1753.656852][ T5274] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1753.676556][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.684784][ T5274] usb 1-1: Product: syz [ 1753.689011][ T5274] usb 1-1: Manufacturer: syz [ 1753.693741][ T5274] usb 1-1: SerialNumber: syz [ 1753.716305][ T5274] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1753.858333][T14453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.021585][T10437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.286874][T14453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.370349][T10437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.489023][T14453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.548786][T10437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.655474][T14453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.734854][T10437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.836777][T14541] chnl_net:caif_netlink_parms(): no params data found [ 1754.962939][ T9419] Bluetooth: hci9: command tx timeout [ 1754.968499][ T9419] Bluetooth: hci10: command tx timeout [ 1755.287399][T14544] chnl_net:caif_netlink_parms(): no params data found [ 1755.317186][T14536] chnl_net:caif_netlink_parms(): no params data found [ 1755.480655][T10437] bridge_slave_1: left allmulticast mode [ 1755.490506][T10437] bridge_slave_1: left promiscuous mode [ 1755.498041][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.509417][T10437] bridge_slave_0: left allmulticast mode [ 1755.515822][T10437] bridge_slave_0: left promiscuous mode [ 1755.521691][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.606038][ T9419] Bluetooth: hci11: command tx timeout [ 1756.069155][T14393] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 1756.080605][T10437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1756.118989][T10437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.148542][T10437] bond0 (unregistering): Released all slaves [ 1756.331144][T14541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.339057][T14541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.347098][T14541] bridge_slave_0: entered allmulticast mode [ 1756.355554][T14541] bridge_slave_0: entered promiscuous mode [ 1756.371285][T14541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.379027][T14541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.386907][T14541] bridge_slave_1: entered allmulticast mode [ 1756.395651][T14541] bridge_slave_1: entered promiscuous mode [ 1756.406834][T14453] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1756.511794][T14453] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1756.547173][T14453] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1756.740297][T14453] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1756.848016][T14541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.944854][T14544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.969418][T14544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.007067][T14544] bridge_slave_0: entered allmulticast mode [ 1757.018210][T14544] bridge_slave_0: entered promiscuous mode [ 1757.049201][T11972] Bluetooth: hci9: command tx timeout [ 1757.056121][ T9419] Bluetooth: hci10: command tx timeout [ 1757.216564][T14541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.332286][T14544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.496771][T14544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.522845][T14544] bridge_slave_1: entered allmulticast mode [ 1757.552892][T14544] bridge_slave_1: entered promiscuous mode [ 1757.645161][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.663211][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.670717][T14536] bridge_slave_0: entered allmulticast mode [ 1757.699859][T11972] Bluetooth: hci11: command tx timeout [ 1757.724880][T14536] bridge_slave_0: entered promiscuous mode [ 1757.808748][T14541] team0: Port device team_slave_0 added [ 1758.453916][T14541] team0: Port device team_slave_1 added [ 1758.650813][T14541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.672680][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.722032][T14541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.787359][T10437] hsr_slave_0: left promiscuous mode [ 1758.795525][T10437] hsr_slave_1: left promiscuous mode [ 1758.802176][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.822007][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.846466][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.862609][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.967269][T10437] veth1_macvtap: left promiscuous mode [ 1758.988778][T10437] veth0_macvtap: left promiscuous mode [ 1759.007999][T10437] veth1_vlan: left promiscuous mode [ 1759.038327][T10437] veth0_vlan: left promiscuous mode [ 1759.126527][ T9419] Bluetooth: hci10: command tx timeout [ 1759.132102][ T9419] Bluetooth: hci9: command tx timeout [ 1760.029774][ T9419] Bluetooth: hci11: command tx timeout [ 1760.035479][ T29] audit: type=1326 audit(1724364674.513:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.0.1165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1760.754676][T14607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1166'. [ 1761.695889][T10437] team0 (unregistering): Port device team_slave_1 removed [ 1761.803946][T10437] team0 (unregistering): Port device team_slave_0 removed [ 1762.051192][ T29] audit: type=1326 audit(1724364677.063:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b8779e79 code=0x0 [ 1762.832833][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.840100][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.845449][T14614] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1168'. [ 1762.880117][T14536] bridge_slave_1: entered allmulticast mode [ 1762.916865][T14536] bridge_slave_1: entered promiscuous mode [ 1762.931707][T14541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.939593][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.972817][T14541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.083961][T14544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.125188][T14544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.433832][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.468353][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.496813][T14544] team0: Port device team_slave_0 added [ 1763.602900][T11972] Bluetooth: hci7: command 0x0406 tx timeout [ 1763.683264][T14544] team0: Port device team_slave_1 added [ 1763.780458][T14536] team0: Port device team_slave_0 added [ 1763.903028][T14536] team0: Port device team_slave_1 added [ 1763.972365][T14541] hsr_slave_0: entered promiscuous mode [ 1764.008369][T14541] hsr_slave_1: entered promiscuous mode [ 1764.024151][T14541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1764.031748][T14541] Cannot create hsr debugfs directory [ 1764.073416][T14544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.092976][T14544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.119108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.129668][T14544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.174990][T14544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.182205][T14544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.210004][T14544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.618731][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.632588][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.658572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.687944][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.836236][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.863191][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.889149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.967504][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1765.770268][T14544] hsr_slave_0: entered promiscuous mode [ 1765.811618][T14544] hsr_slave_1: entered promiscuous mode [ 1765.831206][T14544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1765.851433][T14544] Cannot create hsr debugfs directory [ 1765.969877][T14536] hsr_slave_0: entered promiscuous mode [ 1765.994508][T14536] hsr_slave_1: entered promiscuous mode [ 1766.012868][T14536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1766.020514][T14536] Cannot create hsr debugfs directory [ 1767.063519][T14541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.388102][T14541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.470861][T14453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.637375][T14541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.740538][T14453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.837541][T14541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.875791][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.883163][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.962206][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.969503][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.911140][T14453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1769.153682][T14536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1769.237615][T14544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.275402][T14536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1769.299036][T14536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1769.338322][T14453] veth0_vlan: entered promiscuous mode [ 1769.405303][T14544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.423163][T14536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1769.475527][T14453] veth1_vlan: entered promiscuous mode [ 1769.528605][T14544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.638150][T14544] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.762185][T14453] veth0_macvtap: entered promiscuous mode [ 1769.807273][T14453] veth1_macvtap: entered promiscuous mode [ 1769.969843][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1769.988137][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1769.998243][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.011465][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.022813][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.033438][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.044625][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.055255][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.065252][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.075957][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.089502][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.101724][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.111942][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.123513][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.136393][T14453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1770.228542][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.260481][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.298755][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.309187][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.320658][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.334982][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.345886][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.355947][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.366938][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.377312][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.394396][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.405901][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.416404][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.427982][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1770.442490][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.456980][T14453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1770.478088][T14453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.493325][T14453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.513391][T14453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.522155][T14453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.537608][T14544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1770.583199][T14544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1770.645889][T14544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1770.771939][T14544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1770.869064][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.974615][T14541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1771.017164][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.024485][T14413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.098665][T14541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1771.151983][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.159289][ T9714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.250646][T14541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1771.343619][T14541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1771.407233][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.427310][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.540505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.573572][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.970673][T14544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.098392][T14544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1772.322022][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.329398][ T9714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1772.414385][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.421666][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.687773][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1772.808232][T14541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.869729][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.003159][T14541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.105990][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.113321][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.235626][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.242927][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.517906][T14536] veth0_vlan: entered promiscuous mode [ 1773.698972][T14536] veth1_vlan: entered promiscuous mode [ 1773.945946][T14544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1774.197479][T14536] veth0_macvtap: entered promiscuous mode [ 1774.268819][T14536] veth1_macvtap: entered promiscuous mode [ 1774.424485][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.445952][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.497929][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.543089][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.568311][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.611242][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.622182][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.634060][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.648909][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.659875][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.672284][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.683413][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.712324][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.742449][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.754379][T14726] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.1170'. [ 1774.758160][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.774746][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.819115][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1774.835382][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1774.862500][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.898576][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1774.932551][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.951353][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1774.982492][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.992375][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.064860][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.102972][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.133077][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.152562][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.172853][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.197768][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.222493][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.232365][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.262399][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.296235][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1775.440638][T14536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.466870][T14536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.479647][T14536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.488949][T14536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.774590][T14541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.874601][T14544] veth0_vlan: entered promiscuous mode [ 1776.055813][T14544] veth1_vlan: entered promiscuous mode [ 1776.374793][ T2575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.412537][ T2575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.424061][T13894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1776.453051][T13894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1776.467937][T13894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1776.513926][T13894] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1776.540487][T13894] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1776.549055][T13894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1776.563131][ T9419] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 1776.569813][T13894] Bluetooth: hci4: command 0x206a tx timeout [ 1776.836957][T14544] veth0_macvtap: entered promiscuous mode [ 1776.878095][ T9714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.902585][ T9714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.902646][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1172'. [ 1777.173290][T14544] veth1_macvtap: entered promiscuous mode [ 1777.203675][T14541] veth0_vlan: entered promiscuous mode [ 1777.438241][T14541] veth1_vlan: entered promiscuous mode [ 1777.592662][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.618226][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.628784][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.639811][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.650303][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.665379][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.676565][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.688147][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.701479][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.724857][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.752486][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.769753][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.779994][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.790607][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.808835][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.042494][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.074947][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.102622][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.318677][T14767] usb usb9: usbfs: process 14767 (syz.3.1111) did not claim interface 0 before use [ 1781.329480][T14767] usb usb9: selecting invalid altsetting 21783 [ 1781.352682][ T5232] Bluetooth: hci8: command 0x0406 tx timeout [ 1781.360954][T11972] Bluetooth: hci5: command tx timeout [ 1781.666871][T14544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.907399][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.942645][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.984383][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.068917][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.112598][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.158730][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.212578][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.272869][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.316095][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.352455][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.362347][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.402632][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.422485][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.447571][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.473286][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.505425][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.532536][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.557729][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.594787][T14544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.792885][T14544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.801669][T14544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.811313][T14544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.820349][T14544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.839493][T14541] veth0_macvtap: entered promiscuous mode [ 1782.855279][T14782] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1174'. [ 1782.950047][T14541] veth1_macvtap: entered promiscuous mode [ 1783.195297][T14748] chnl_net:caif_netlink_parms(): no params data found [ 1783.220928][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.243284][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.269089][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.300880][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.310901][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.321602][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.347939][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.374031][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.411015][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.433665][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.453694][T14753] Bluetooth: hci5: command tx timeout [ 1783.468307][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.548240][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.582214][T14774] fuseblk: Unknown parameter '4».¬¼ +•X&l“á4¦hÛÑ<Ê(¾VE0ܬÓrG$|_¯BWŠlbKíŸëTÔù΄5ÍjÖoä´ÇÖx¯CÆù¦5cõ§ùˆÑ‚B«C½š_ôã£ÅÁ-¤ÇÎiºLVuùá»tÉ0xffffffffffffffff' [ 1783.617473][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.659549][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.672110][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.706163][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.723340][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.734834][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.748650][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.792571][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.841362][T14541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1784.031590][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.048707][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.060065][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.071438][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.123429][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.150338][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.187799][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.232530][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.262489][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.278116][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.288747][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.341293][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.363586][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.375471][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.386411][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.397642][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.409131][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.431850][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.442608][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.454583][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.478674][T14541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.781667][T14541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.790769][T14541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.801054][T14541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.810698][T14541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.150182][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.160192][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.170195][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.179275][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.188219][T14748] bridge_slave_0: entered allmulticast mode [ 1785.197201][T14748] bridge_slave_0: entered promiscuous mode [ 1785.378092][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.432712][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.492730][T14748] bridge_slave_1: entered allmulticast mode [ 1785.519195][T14748] bridge_slave_1: entered promiscuous mode [ 1785.551972][T14753] Bluetooth: hci5: command tx timeout [ 1785.967669][ T29] audit: type=1326 audit(1724364700.973:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea5979e79 code=0x0 [ 1786.784808][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.020855][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.205217][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.378667][T14820] usb usb9: usbfs: process 14820 (syz.1.1176) did not claim interface 0 before use [ 1790.388736][T14820] usb usb9: selecting invalid altsetting 21783 [ 1790.406801][T14753] Bluetooth: hci5: command tx timeout [ 1790.437842][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.824835][T14748] team0: Port device team_slave_0 added [ 1790.999093][T14748] team0: Port device team_slave_1 added [ 1791.314940][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1792.208232][ T29] audit: type=1326 audit(1724364706.523:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14821 comm="syz.1.1178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea5979e79 code=0x0 [ 1792.286446][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1792.632582][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1795.927317][T13894] Bluetooth: hci1: command 0x0406 tx timeout [ 1799.233742][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.240749][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.291410][T14833] usb usb9: usbfs: process 14833 (syz.1.1179) did not claim interface 0 before use [ 1799.301110][T14833] usb usb9: selecting invalid altsetting 21783 [ 1799.331774][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1799.345519][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.019918][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.042546][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.483675][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.827639][T14842] usb usb9: usbfs: process 14842 (syz.4.1182) did not claim interface 0 before use [ 1803.837403][T14842] usb usb9: selecting invalid altsetting 21783 [ 1803.842611][T13894] Bluetooth: hci2: command 0x0406 tx timeout [ 1804.434312][T10437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.444507][T10437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.702860][T14852] usb usb9: usbfs: process 14852 (syz.1.1181) did not claim interface 0 before use [ 1807.712562][T14852] usb usb9: selecting invalid altsetting 21783 [ 1807.728950][ T30] INFO: task syz.1.1100:13940 blocked for more than 146 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1807.922837][ T30] Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1807.930546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1808.202515][ T30] task:syz.1.1100 state:D stack:22976 pid:13940 tgid:13935 ppid:13374 flags:0x00004002 [ 1808.271966][ T30] Call Trace: [ 1808.452681][ T30] [ 1808.455681][ T30] __schedule+0xe37/0x5490 [ 1808.460370][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1808.522546][ T30] ? hlock_class+0x4e/0x130 [ 1808.527241][ T30] ? __pfx___schedule+0x10/0x10 [ 1808.532151][ T30] ? schedule+0x298/0x350 [ 1808.537374][ T30] ? __pfx_lock_release+0x10/0x10 [ 1808.552471][ T30] schedule+0xe7/0x350 [ 1808.556703][ T30] rpc_wait_bit_killable+0x17/0x170 [ 1808.562138][ T30] __wait_on_bit+0x62/0x180 [ 1808.591892][ T30] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 1808.600933][ T30] ? __pfx_call_connect_status+0x10/0x10 [ 1808.612613][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 1808.618211][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1808.632491][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1808.638097][ T30] ? rcu_is_watching+0x12/0xc0 [ 1808.652446][ T30] __rpc_execute+0x556/0x1230 [ 1808.657280][ T30] ? __pfx___rpc_execute+0x10/0x10 [ 1808.668872][ T30] ? __pfx_lock_release+0x10/0x10 [ 1808.674110][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1808.679289][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1808.696113][ T30] rpc_execute+0x2f8/0x430 [ 1808.700701][ T30] rpc_run_task+0x530/0x750 [ 1808.706246][ T30] rpc_call_sync+0xca/0x1b0 [ 1808.710928][ T30] ? __pfx_rpc_call_sync+0x10/0x10 [ 1808.717341][ T30] ? net_generic+0xea/0x2a0 [ 1808.722094][ T30] rpcb_register+0x22a/0x4f0 [ 1808.729591][ T30] ? __pfx_rpcb_register+0x10/0x10 [ 1808.736289][ T30] ? __mutex_unlock_slowpath+0x164/0x650 [ 1808.742061][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1808.750347][ T30] svc_unregister+0x4fe/0x740 [ 1808.756526][ T30] svc_bind+0x1bb/0x210 [ 1808.760829][ T30] nfsd_create_serv+0x268/0x430 [ 1808.767820][ T30] ? __pfx_nfsd_create_serv+0x10/0x10 [ 1808.774749][ T30] ? __asan_memset+0x23/0x50 [ 1808.779488][ T30] nfsd_nl_listener_set_doit+0xeb/0x1b20 [ 1808.800554][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1808.810373][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1808.817212][ T30] ? __nla_parse+0x40/0x60 [ 1808.821772][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1808.830412][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1808.838347][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1808.845733][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1808.851942][ T30] ? security_capable+0x98/0xd0 [ 1808.857570][ T30] genl_rcv_msg+0x565/0x800 [ 1808.862226][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1808.868085][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1808.873868][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1808.880205][ T30] netlink_rcv_skb+0x16b/0x440 [ 1808.898111][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1808.903996][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1808.909438][ T30] ? down_read+0xc9/0x330 [ 1808.919156][ T30] ? __pfx_down_read+0x10/0x10 [ 1808.925587][ T30] ? rcu_is_watching+0x12/0xc0 [ 1808.930525][ T30] genl_rcv+0x28/0x40 [ 1808.936912][ T30] netlink_unicast+0x53c/0x7f0 [ 1808.941841][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1808.949498][ T30] netlink_sendmsg+0x8b8/0xd70 [ 1808.954835][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.960251][ T30] ? __import_iovec+0x1fd/0x6e0 [ 1808.966732][ T30] ____sys_sendmsg+0xab5/0xc90 [ 1808.971722][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 1808.978026][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1808.984381][ T30] ? __pfx___futex_wait+0x10/0x10 [ 1808.989611][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1809.013961][ T30] ? try_to_wake_up+0xc08/0x13e0 [ 1809.019408][ T30] ___sys_sendmsg+0x135/0x1e0 [ 1809.026472][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1809.031739][ T30] ? __fget_light+0x173/0x210 [ 1809.036624][ T30] __sys_sendmsg+0x117/0x1f0 [ 1809.041292][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1809.048022][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 1809.053203][ T30] do_syscall_64+0xcd/0x250 [ 1809.057885][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.064818][ T30] RIP: 0033:0x7f7464d79e79 [ 1809.069978][ T30] RSP: 002b:00007f7465bbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1809.084597][ T30] RAX: ffffffffffffffda RBX: 00007f7464f162e0 RCX: 00007f7464d79e79 [ 1809.102194][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1809.110462][ T30] RBP: 00007f7464de7916 R08: 0000000000000000 R09: 0000000000000000 [ 1809.125476][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1809.142921][ T30] R13: 0000000000000000 R14: 00007f7464f162e0 R15: 00007fffeb4a0c78 [ 1809.154749][ T30] [ 1809.157968][ T30] [ 1809.157968][ T30] Showing all locks held in the system: [ 1809.213625][ T30] 1 lock held by khungtaskd/30: [ 1809.218577][ T30] #0: ffffffff8ddb5be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1809.263157][T14748] hsr_slave_0: entered promiscuous mode [ 1809.312518][ T30] 3 locks held by kworker/0:3/944: [ 1809.317871][ T30] 2 locks held by getty/4980: [ 1809.362795][ T30] #0: ffff88802b3ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1809.422516][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1809.482865][ T30] 2 locks held by kworker/1:5/5273: [ 1809.488128][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1809.572453][ T30] #1: ffffc90003fc7d80 ((work_completion)(&clnt->cl_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1809.642560][ T30] 4 locks held by kworker/u8:11/6084: [ 1809.648090][ T30] 2 locks held by kworker/u8:13/6911: [ 1809.732584][ T30] #0: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1809.792463][ T30] #1: ffff8880b9228a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 1809.907075][ T30] 3 locks held by kworker/u8:15/10437: [ 1809.922490][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1809.944665][ T30] #1: ffffc9000384fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1809.955831][ T30] #2: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1809.968462][ T30] 3 locks held by kworker/1:8/10614: [ 1809.973895][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1809.984570][ T30] #1: ffffc900038f7d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1809.994506][ T30] #2: ffffffff8ddc1378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1810.009502][ T30] 3 locks held by kworker/u8:1/13174: [ 1810.020964][ T30] #0: ffff88802a9cc148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1810.036666][ T30] #1: ffffc9000342fd80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1810.050441][ T30] #2: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 1810.082491][ T30] 3 locks held by syz.0.1076/13771: [ 1810.092801][ T30] #0: ffff888044a3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1810.112775][ T30] #1: ffff888044a3c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1810.154200][ T30] #2: ffffffff8fc87a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1810.202553][ T30] 2 locks held by syz.1.1100/13940: [ 1810.207838][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1810.252852][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1810.292171][ T30] 2 locks held by syz.3.1109/14102: [ 1810.312347][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1810.328706][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1810.339315][ T30] 2 locks held by syz.1.1133/14405: [ 1810.344971][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1810.353557][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1810.364179][ T30] 3 locks held by syz-executor/14453: [ 1810.370984][ T30] #0: ffff8880228c4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1810.406496][ T30] #1: ffff8880228c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1810.417825][ T30] #2: ffffffff8fc87a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1810.455993][ T30] 2 locks held by syz.2.1152/14503: [ 1810.461261][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1810.469695][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1810.479963][ T30] 2 locks held by syz.4.1154/14520: [ 1810.485362][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1810.493712][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1810.504026][ T30] 3 locks held by syz-executor/14544: [ 1810.509425][ T30] #0: ffff88804f5ecd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1810.519328][ T30] #1: ffff88804f5ec078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1810.538819][ T30] #2: ffffffff8fc87a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1810.549092][ T30] 2 locks held by syz.0.1169/14626: [ 1810.554423][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1810.562803][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1810.573087][ T30] 2 locks held by syz-executor/14748: [ 1810.578492][ T30] #0: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1810.588068][ T30] #1: ffffffff8ddc1378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1810.598299][ T30] 3 locks held by syz.2.1158/14855: [ 1810.603903][ T30] #0: ffff88801f8c8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1810.613678][ T30] #1: ffff88801f8c8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1810.623526][ T30] #2: ffffffff8fc87a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1810.641578][ T30] [ 1810.647418][ T30] ============================================= [ 1810.647418][ T30] [ 1810.652607][T14748] hsr_slave_1: entered promiscuous mode [ 1810.672602][ T30] NMI backtrace for cpu 1 [ 1810.676992][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1810.687545][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1810.697646][ T30] Call Trace: [ 1810.700959][ T30] [ 1810.703925][ T30] dump_stack_lvl+0x116/0x1f0 [ 1810.708749][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1810.713796][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1810.719861][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1810.725887][ T30] watchdog+0xf0c/0x1240 [ 1810.730200][ T30] ? __pfx_watchdog+0x10/0x10 [ 1810.734909][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1810.740167][ T30] ? __kthread_parkme+0x148/0x220 [ 1810.745239][ T30] ? __pfx_watchdog+0x10/0x10 [ 1810.749952][ T30] kthread+0x2c1/0x3a0 [ 1810.754046][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1810.759451][ T30] ? __pfx_kthread+0x10/0x10 [ 1810.764062][ T30] ret_from_fork+0x45/0x80 [ 1810.768515][ T30] ? __pfx_kthread+0x10/0x10 [ 1810.773142][ T30] ret_from_fork_asm+0x1a/0x30 [ 1810.777991][ T30] [ 1810.784922][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1810.790216][ C0] NMI backtrace for cpu 0 [ 1810.790232][ C0] CPU: 0 UID: 0 PID: 944 Comm: kworker/0:3 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1810.790264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1810.790282][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1810.790400][ C0] RIP: 0010:mark_held_locks+0x7a/0xe0 [ 1810.790435][ C0] Code: 24 e0 0a 00 00 85 c0 7e 57 48 63 c3 48 8d 04 80 49 8d 34 c6 48 8d 7e 22 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 42 0f b6 04 28 <38> d0 7f 04 84 c0 75 4e 0f b6 46 22 89 c2 83 e2 03 80 fa 01 89 ea [ 1810.790460][ C0] RSP: 0018:ffffc90000007730 EFLAGS: 00000002 [ 1810.790479][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 1ffffffff28d17c6 [ 1810.790496][ C0] RDX: 0000000000000002 RSI: ffff8880215f8b30 RDI: ffff8880215f8b52 [ 1810.790514][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff28c54ff [ 1810.790530][ C0] R10: ffffffff9462a7ff R11: 0000000000000000 R12: ffff8880215f8000 [ 1810.790547][ C0] R13: dffffc0000000000 R14: ffff8880215f8ae0 R15: ffff888034d630f0 [ 1810.790566][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1810.790592][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1810.790611][ C0] CR2: 0000563b638b3160 CR3: 0000000029eb2000 CR4: 00000000003506f0 [ 1810.790627][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1810.790644][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1810.790660][ C0] Call Trace: [ 1810.790669][ C0] [ 1810.790678][ C0] ? show_regs+0x8c/0xa0 [ 1810.790728][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1810.790765][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1810.790802][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1810.790832][ C0] ? mark_held_locks+0x7a/0xe0 [ 1810.790862][ C0] ? default_do_nmi+0x6a/0x160 [ 1810.790889][ C0] ? exc_nmi+0x170/0x1e0 [ 1810.790914][ C0] ? end_repeat_nmi+0xf/0x53 [ 1810.790967][ C0] ? mark_held_locks+0x7a/0xe0 [ 1810.790997][ C0] ? mark_held_locks+0x7a/0xe0 [ 1810.791027][ C0] ? mark_held_locks+0x7a/0xe0 [ 1810.791056][ C0] [ 1810.791064][ C0] [ 1810.791072][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 1810.791136][ C0] lockdep_hardirqs_on_prepare+0x137/0x420 [ 1810.791169][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 1810.791203][ C0] trace_hardirqs_on+0x36/0x40 [ 1810.791234][ C0] __local_bh_enable_ip+0xa4/0x120 [ 1810.791276][ C0] ip6t_do_table+0xd2d/0x1d40 [ 1810.791313][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 1810.791347][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1810.791380][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 1810.791413][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 1810.791451][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 1810.791485][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1810.791520][ C0] ? nf_conntrack_in+0x7e8/0x1830 [ 1810.791591][ C0] ip6table_mangle_hook+0xc4/0x770 [ 1810.791629][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1810.791658][ C0] ? lock_acquire+0x1b1/0x560 [ 1810.791706][ C0] ? __do_replace+0x990/0x9c0 [ 1810.791741][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1810.791792][ C0] ? lock_acquire+0x1b1/0x560 [ 1810.791828][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1810.791866][ C0] nf_hook_slow+0xbb/0x200 [ 1810.791916][ C0] nf_hook.constprop.0+0x42e/0x750 [ 1810.791970][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1810.792009][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1810.792049][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1810.792090][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1810.792127][ C0] ipv6_rcv+0xa4/0x680 [ 1810.792183][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1810.792222][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 1810.792290][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1810.792331][ C0] ? process_backlog+0x3f1/0x15f0 [ 1810.792368][ C0] ? __pfx_lock_release+0x10/0x10 [ 1810.792416][ C0] ? mark_held_locks+0x9f/0xe0 [ 1810.792448][ C0] ? process_backlog+0x3f1/0x15f0 [ 1810.792490][ C0] __netif_receive_skb+0x1d/0x160 [ 1810.792535][ C0] process_backlog+0x443/0x15f0 [ 1810.792582][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1810.792631][ C0] net_rx_action+0xa92/0x1010 [ 1810.792679][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1810.792723][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1810.792778][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1810.792823][ C0] ? sched_clock+0x38/0x60 [ 1810.792864][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1810.792904][ C0] ? mark_held_locks+0x9f/0xe0 [ 1810.792944][ C0] handle_softirqs+0x216/0x8f0 [ 1810.792992][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1810.793039][ C0] ? wg_socket_send_skb_to_peer+0x14c/0x220 [ 1810.793089][ C0] do_softirq+0xb2/0xf0 [ 1810.793136][ C0] [ 1810.793146][ C0] [ 1810.793157][ C0] __local_bh_enable_ip+0x100/0x120 [ 1810.793206][ C0] wg_socket_send_skb_to_peer+0x14c/0x220 [ 1810.793258][ C0] wg_packet_tx_worker+0x1aa/0x810 [ 1810.793305][ C0] process_one_work+0x9c5/0x1b40 [ 1810.793350][ C0] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 1810.793397][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1810.793442][ C0] ? assign_work+0x1a0/0x250 [ 1810.793479][ C0] worker_thread+0x6c8/0xf20 [ 1810.793526][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1810.793568][ C0] kthread+0x2c1/0x3a0 [ 1810.793596][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1810.793637][ C0] ? __pfx_kthread+0x10/0x10 [ 1810.793666][ C0] ret_from_fork+0x45/0x80 [ 1810.793714][ C0] ? __pfx_kthread+0x10/0x10 [ 1810.793742][ C0] ret_from_fork_asm+0x1a/0x30 [ 1810.793794][ C0] [ 1810.843981][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1810.844005][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1810.844049][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1810.844070][ T30] Call Trace: [ 1810.844084][ T30] [ 1810.844098][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1810.844144][ T30] panic+0x6dc/0x7c0 [ 1810.844183][ T30] ? __pfx_panic+0x10/0x10 [ 1810.844221][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1810.844273][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1810.844322][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1810.844358][ T30] ? watchdog+0xd76/0x1240 [ 1810.844403][ T30] ? watchdog+0xd69/0x1240 [ 1810.844449][ T30] watchdog+0xd87/0x1240 [ 1810.844498][ T30] ? __pfx_watchdog+0x10/0x10 [ 1810.844543][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1810.844595][ T30] ? __kthread_parkme+0x148/0x220 [ 1810.844648][ T30] ? __pfx_watchdog+0x10/0x10 [ 1810.844692][ T30] kthread+0x2c1/0x3a0 [ 1810.844722][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1810.844764][ T30] ? __pfx_kthread+0x10/0x10 [ 1810.844795][ T30] ret_from_fork+0x45/0x80 [ 1810.844845][ T30] ? __pfx_kthread+0x10/0x10 [ 1810.844875][ T30] ret_from_fork_asm+0x1a/0x30 [ 1810.844929][ T30] [ 1810.850373][ T30] Kernel Offset: disabled [ 1811.453131][ T30] Rebooting in 86400 seconds..