last executing test programs: 6m26.093593208s ago: executing program 4 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 6m15.241924848s ago: executing program 4 (id=225): io_setup(0x800, &(0x7f0000000440)=0x0) eventfd(0x0) io_submit(r0, 0x0, &(0x7f0000000940)) 6m14.241052078s ago: executing program 4 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x227e, 0x1000000000000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000280)={0x2, [[0x2, 0x0, 0x0, 0x0, 0x54], [0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x2], [0x2, 0x8, 0x0, 0x7f, 0x0, 0x4]], '\x00', [{}, {}, {0xfffffffc, 0x5}, {}, {0x0, 0x4}, {0x0, 0x5000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x3}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44890) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r6, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r6, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0xe}) 6m10.350328523s ago: executing program 4 (id=241): syz_io_uring_setup(0x4d71, 0x0, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0), 0x2a4ac2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x38011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xe5fe, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000140), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300), 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, &(0x7f00000003c0), &(0x7f0000000400)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1, 0x9}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 6m9.357883472s ago: executing program 4 (id=243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 6m8.006118979s ago: executing program 4 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r3}, 0x18) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000380)={&(0x7f00000002c0)=[{0xfffc, 0x11, 0x0, 0x0}], 0x1}) 5m52.215961334s ago: executing program 32 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r3}, 0x18) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000380)={&(0x7f00000002c0)=[{0xfffc, 0x11, 0x0, 0x0}], 0x1}) 4m2.137905458s ago: executing program 1 (id=533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r2, 0x8) accept4$inet(r2, 0x0, 0x0, 0x80800) close_range(r1, 0xffffffffffffffff, 0x0) 4m2.03240023s ago: executing program 1 (id=535): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3m56.85992286s ago: executing program 1 (id=547): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)="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", 0x156}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa8800"], 0x0) 3m56.661855644s ago: executing program 1 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x227e, 0x1000000000000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x2, [[0x2, 0x0, 0x0, 0x0, 0x54], [0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x2], [0x2, 0x8, 0x0, 0x7f, 0x0, 0x4]], '\x00', [{}, {}, {0xfffffffc, 0x5}, {}, {0x0, 0x4}, {0x0, 0x5000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x3}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44890) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r5, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0xe}) 3m51.980553055s ago: executing program 1 (id=561): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) 3m49.229764488s ago: executing program 1 (id=563): syz_io_uring_setup(0x4d71, 0x0, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3m45.549733219s ago: executing program 2 (id=575): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m44.189774916s ago: executing program 2 (id=579): r0 = mq_open(&(0x7f0000000080)='!seli\x1a\x1d!\xa7\x00\x00inub\x00G\xd0\xc6(X\xbe\xa8B\xb7s\x04\x8c;\xba}\xda!\x9f4\xd7qk\x8f+\xc2\xda\x98xj\x83y\xc4@\x0f3\xfe\x18\xc6\xa1\xfe\xcbf\x7f\xaa}{\xf4H\x13Z\xf2\xf0\xe6\xfd\xed\xcf\xd8t\xc4O\x8bE\xd8\xc0\xac\xa5N\xc7O\r\x88k\x81\x10W;0\xed\\m\xd2J<\x04\xef\xa9\x95\"@\x13\x89\xe6\xff\xfc\xc9\n/S\xbdl%\xf7\xe4\xf0\xc5\xbb\xe4\xfb._O\xbc\xc4\xcci\xd0\x10\xdf\xb2\x02\xea\xae\x83\x19)Rfs\xfe\x00\xc06.\x02\xb6d\x86B\x02\xb6\xcc\xf6', 0x80, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000951fe60000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r6}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x2, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 2', 0x1b) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 3m43.040587148s ago: executing program 2 (id=582): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpid() ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(0x0, 0x8, 0x2ff41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x7fffffff, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000700000000000019078ac1e00010d000000030190780300000045e7000000000000050400007f000001ac1414aa441cd9036401010100000004ac1414aa000000080a010102000000088606"], 0x0) 3m41.096767445s ago: executing program 2 (id=585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0xffb7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3m40.929923308s ago: executing program 2 (id=587): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) 3m39.641668903s ago: executing program 2 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000205000100070000000900020073797a31000000000c0007800800124000000009050005000200"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x1000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000003d20ac8d9e4e18e15711aea64e7f9ee6de8868aae8401e04d544f916b03ab6e68da15ef456"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$802154_dgram(r5, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = userfaultfd(0x80800) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 3m33.043426102s ago: executing program 33 (id=563): syz_io_uring_setup(0x4d71, 0x0, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3m22.551190865s ago: executing program 34 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000205000100070000000900020073797a31000000000c0007800800124000000009050005000200"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x1000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000003d20ac8d9e4e18e15711aea64e7f9ee6de8868aae8401e04d544f916b03ab6e68da15ef456"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$802154_dgram(r5, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = userfaultfd(0x80800) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 9.460255017s ago: executing program 3 (id=1157): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random='*\x00'}) 8.638627013s ago: executing program 0 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 7.21762705s ago: executing program 3 (id=1165): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xc28, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = semget$private(0x0, 0x207, 0x0) socket$inet6(0xa, 0x3, 0x5) semctl$GETALL(r5, 0x0, 0xd, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x741}}, 0x30) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x6, 0x40, 0x6, {0x0, 0x2710}, {r9, r10/1000+60000}, {0x1}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x26, 0x1, 0x0, 0x0, "813a8e38286970e9679556548e306163cca11c30ff50a5947df88acc1f4f2e38fb334c2a9ae03efdcb9f190cc1869007ef653e6413b8adfa5e37ce1aa5a5e221"}}, 0x80}, 0x1, 0x0, 0x0, 0x200000c5}, 0x24000805) r11 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6.390026737s ago: executing program 3 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0x5, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.187698691s ago: executing program 0 (id=1172): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 6.068490453s ago: executing program 6 (id=1175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) 4.694728379s ago: executing program 6 (id=1177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, &(0x7f0000000900)="45c2452d6f8ba31386dca30325f207b4013096e87a322284f6f24d5714589b4045a4e7f3eb55afb1091f723dd12aa2bd730f50fddb8bacb3776c501ac0ebd79aff35c18eb979d3af4ae3bd11d132a9065512ef0c53abf5458cd4f012fc468100f0e642c3493f8cc76d0fb28659b4642c04837f3648a142e3dd383864082ec45461e9b570e87e8d12816c833cd2a577cac8e8e6e51227423ba35af89b42d1e74874a66f3e085bc670", &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, r1, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x4000000}}, 0x1c) 4.575510652s ago: executing program 5 (id=1178): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.574508652s ago: executing program 0 (id=1179): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x6f, 0x60, &(0x7f0000000140)="3242703ecf43aa3a432bab0e86dd2a6c847ebba3b631ab3ad4009ea20cc564fe82532a562c025472677707f33cd1f8158bb764b1638aadddfd29b675a955654f3048dd0b54ad1f2e82018b85cb6911e514baf257999473287ab1306dad94a529629f4b396f8dd3e4c6d41c994386d8", &(0x7f00000000c0)=""/96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x19) 4.551663652s ago: executing program 3 (id=1180): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xc28, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = semget$private(0x0, 0x207, 0x0) socket$inet6(0xa, 0x3, 0x5) semctl$GETALL(r5, 0x0, 0xd, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x6, 0x40, 0x6, {0x0, 0x2710}, {r8, r9/1000+60000}, {0x1}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x26, 0x1, 0x0, 0x0, "813a8e38286970e9679556548e306163cca11c30ff50a5947df88acc1f4f2e38fb334c2a9ae03efdcb9f190cc1869007ef653e6413b8adfa5e37ce1aa5a5e221"}}, 0x80}, 0x1, 0x0, 0x0, 0x200000c5}, 0x24000805) r10 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.453812174s ago: executing program 7 (id=1181): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.376475896s ago: executing program 5 (id=1182): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r1, 0x20, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)=""/159, 0x9f}}, 0x10) 4.351402836s ago: executing program 0 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 4.237297578s ago: executing program 5 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) io_setup(0x202, 0x0) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 4.236460728s ago: executing program 7 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa5dfff2268e07f45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.063805871s ago: executing program 6 (id=1186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000000000002400000085000000ad00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.062616081s ago: executing program 3 (id=1187): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000030000000300000000200000000000000000000130400000000000000000000090100000000000000010000040002000000000000000000"], 0x0, 0x4a}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x26e}], 0x3}}], 0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x3, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 2.949786043s ago: executing program 7 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) 1.668429888s ago: executing program 6 (id=1189): r0 = mq_open(&(0x7f0000000080)='!seli\x1a\x1d!\xa7\x00\x00inub\x00G\xd0\xc6(X\xbe\xa8B\xb7s\x04\x8c;\xba}\xda!\x9f4\xd7qk\x8f+\xc2\xda\x98xj\x83y\xc4@\x0f3\xfe\x18\xc6\xa1\xfe\xcbf\x7f\xaa}{\xf4H\x13Z\xf2\xf0\xe6\xfd\xed\xcf\xd8t\xc4O\x8bE\xd8\xc0\xac\xa5N\xc7O\r\x88k\x81\x10W;0\xed\\m\xd2J<\x04\xef\xa9\x95\"@\x13\x89\xe6\xff\xfc\xc9\n/S\xbdl%\xf7\xe4\xf0\xc5\xbb\xe4\xfb._O\xbc\xc4\xcci\xd0\x10\xdf\xb2\x02\xea\xae\x83\x19)Rfs\xfe\x00\xc06.\x02\xb6d\x86B\x02\xb6\xcc\xf6', 0x80, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000951fe60000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x2, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 2', 0x1b) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 1.636829029s ago: executing program 0 (id=1190): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.04780125s ago: executing program 3 (id=1191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0x5, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 763.426005ms ago: executing program 5 (id=1192): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB=' \x00'/12, @ANYRES32=0x0, @ANYBLOB='h'], 0x20) 762.435736ms ago: executing program 7 (id=1193): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) 288.441405ms ago: executing program 0 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc0, 0x0, [0x0, 0x3]}}) 113.893718ms ago: executing program 7 (id=1195): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 113.579518ms ago: executing program 6 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x50}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 113.527858ms ago: executing program 5 (id=1197): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000006040000000000000000000001052000000800ab1480"], 0x0, 0x5a, 0x0, 0x0, 0x6}, 0x28) 96.192288ms ago: executing program 5 (id=1198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, &(0x7f0000000900)="45c2452d6f8ba31386dca30325f207b4013096e87a322284f6f24d5714589b4045a4e7f3eb55afb1091f723dd12aa2bd730f50fddb8bacb3776c501ac0ebd79aff35c18eb979d3af4ae3bd11d132a9065512ef0c53abf5458cd4f012fc468100f0e642c3493f8cc76d0fb28659b4642c04837f3648a142e3dd383864082ec45461e9b570e87e8d12816c833cd2a577cac8e8e6e51227423ba35af89b42d1e74874a66f3e085bc670", &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, r1, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x4000000}}, 0x1c) 266.581µs ago: executing program 6 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 0s ago: executing program 7 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 30][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.307329][ T3578] Bluetooth: hci2: command 0x041b tx timeout [ 72.308369][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.313924][ T3578] Bluetooth: hci4: command 0x041b tx timeout [ 72.328989][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.336130][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.368634][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.377734][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.388300][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.398455][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.410805][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.419917][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.428884][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.438536][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.448086][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.461183][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.487996][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.499015][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.517922][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.526851][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.536040][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.544652][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.554022][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.562918][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.572938][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.582951][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.591836][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.601490][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.610443][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.618971][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.629510][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.642155][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.651318][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.659976][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.668357][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.691567][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.702069][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.714924][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.724788][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.748052][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.774960][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.786518][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.797890][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.816434][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.853927][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.870384][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.907798][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.928079][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.974291][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.989154][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.012079][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.031023][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.042821][ T4188] device veth0_vlan entered promiscuous mode [ 73.067213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.078095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.094116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.104846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.122200][ T4186] device veth0_vlan entered promiscuous mode [ 73.135136][ T4188] device veth1_vlan entered promiscuous mode [ 73.158313][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.166655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.175330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.187363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.220167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.229166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.238814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.247697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.255747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.265906][ T4186] device veth1_vlan entered promiscuous mode [ 73.276304][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.298241][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.311505][ T4188] device veth0_macvtap entered promiscuous mode [ 73.336861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.345766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.362522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.376101][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.385164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.397998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.407340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.437697][ T4188] device veth1_macvtap entered promiscuous mode [ 73.471277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.483436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.492252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.506955][ T4187] device veth0_vlan entered promiscuous mode [ 73.514525][ T4186] device veth0_macvtap entered promiscuous mode [ 73.539970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.548288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.562912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.572176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.581943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.592610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.601424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.611373][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.623729][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.644151][ T4186] device veth1_macvtap entered promiscuous mode [ 73.657143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.665520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.676597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.693127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.703430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.719130][ T4187] device veth1_vlan entered promiscuous mode [ 73.732458][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.742403][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.751176][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.760060][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.823933][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.836648][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.847641][ T4185] device veth0_vlan entered promiscuous mode [ 73.875654][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.887241][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.899839][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.912195][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.921375][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.929392][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.939466][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.949004][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.958599][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.974779][ T4185] device veth1_vlan entered promiscuous mode [ 74.018094][ T415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.030289][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.041682][ T415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.050954][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.063377][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.076441][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.085883][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095927][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.105047][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.131280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.140581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.148908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.157713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.167016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.176109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.186123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.195920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.204794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.214359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.222677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.242264][ T4199] device veth0_vlan entered promiscuous mode [ 74.258397][ T4187] device veth0_macvtap entered promiscuous mode [ 74.274094][ T4187] device veth1_macvtap entered promiscuous mode [ 74.297905][ T4199] device veth1_vlan entered promiscuous mode [ 74.320453][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.328960][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.338118][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.347585][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.351045][ T3578] Bluetooth: hci4: command 0x040f tx timeout [ 74.361496][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 74.361554][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 74.368593][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.373984][ T3578] Bluetooth: hci2: command 0x040f tx timeout [ 74.387906][ T3578] Bluetooth: hci0: command 0x040f tx timeout [ 74.408994][ T4185] device veth0_macvtap entered promiscuous mode [ 74.429167][ T415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.438116][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.451259][ T415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.461329][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.473253][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.484330][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.495612][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.507352][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.519443][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.529818][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.540667][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.553102][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.563624][ T4185] device veth1_macvtap entered promiscuous mode [ 74.577485][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.588284][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.599446][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.607951][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.615927][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.625120][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.634518][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.643869][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.666898][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.677496][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.686763][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.695679][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.727968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.738974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.775515][ T4199] device veth0_macvtap entered promiscuous mode [ 74.792253][ T4199] device veth1_macvtap entered promiscuous mode [ 74.805844][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.819575][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.832861][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.844407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.868853][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.881480][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.893690][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.920201][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.937699][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.948395][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.964187][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.975839][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.986908][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.999229][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.011089][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.022470][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.034104][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.057452][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.065715][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.074354][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.087125][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.098590][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.118250][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.137685][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.150711][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.170407][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.183293][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.196361][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.207273][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.218316][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.229493][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.242973][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.266311][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.278287][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291321][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.308603][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.324602][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.336368][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.346655][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.357484][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.378261][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.387906][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.440644][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.453959][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.466031][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.476164][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.491269][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.500881][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.509997][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.519019][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.551997][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.562051][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.564502][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.579769][ T3578] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.582321][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598324][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.608438][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.640119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.814484][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.893559][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.989914][ T3578] usb 3-1: not running at top speed; connect to a high speed hub [ 75.994905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.070918][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.073601][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.088370][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.102021][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.111887][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.122574][ T3578] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.140715][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.161760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.182038][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.213725][ T3578] usb 3-1: config 1 interface 0 has no altsetting 0 [ 76.228033][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.252416][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.273127][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.290591][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.321003][ T415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.329321][ T415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.430273][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 76.431684][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 76.436413][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 76.444221][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 76.467041][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.599589][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.608648][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.629564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.638615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.649572][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.658472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.667427][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.676448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.685435][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.694428][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.798637][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 77.230998][ T3578] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 77.248820][ T3578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.258689][ T3578] usb 3-1: Product: syz [ 77.263433][ T3578] usb 3-1: SerialNumber: syz [ 79.414893][ T4322] sched: RT throttling activated [ 79.549600][ T4324] qnx6: unable to read the first superblock [ 79.559711][ T4323] lo speed is unknown, defaulting to 1000 [ 79.566388][ T4323] lo speed is unknown, defaulting to 1000 [ 79.573686][ T4323] lo speed is unknown, defaulting to 1000 [ 79.583754][ T4323] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.595448][ T4323] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 79.608780][ T4324] futex_wake_op: syz.3.8 tries to shift op by 144; fix this program [ 79.625710][ T4323] lo speed is unknown, defaulting to 1000 [ 79.633950][ T4323] lo speed is unknown, defaulting to 1000 [ 79.641040][ T4323] lo speed is unknown, defaulting to 1000 [ 79.647843][ T4323] lo speed is unknown, defaulting to 1000 [ 79.654495][ T4323] lo speed is unknown, defaulting to 1000 [ 79.659820][ T3578] usbhid 3-1:1.0: can't add hid device: -71 [ 79.699963][ T3578] usbhid: probe of 3-1:1.0 failed with error -71 [ 79.800098][ T3578] usb 3-1: USB disconnect, device number 2 [ 82.262649][ T264] block nbd2: Attempted send on invalid socket [ 82.269711][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.300761][ T264] block nbd2: Attempted send on invalid socket [ 82.307070][ T264] blk_update_request: I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.357347][ T4355] program syz.3.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.374771][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.430132][ T264] block nbd2: Attempted send on invalid socket [ 82.436438][ T264] blk_update_request: I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.452554][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.477244][ T264] block nbd2: Attempted send on invalid socket [ 82.483545][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.505180][ T264] block nbd2: Attempted send on invalid socket [ 82.511805][ T264] blk_update_request: I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.547620][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.557994][ T264] block nbd2: Attempted send on invalid socket [ 82.564389][ T264] blk_update_request: I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.576618][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.588626][ T264] block nbd2: Attempted send on invalid socket [ 82.595026][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.606634][ T264] block nbd2: Attempted send on invalid socket [ 82.613627][ T264] blk_update_request: I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.625096][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.636745][ T264] block nbd2: Attempted send on invalid socket [ 82.643044][ T264] blk_update_request: I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.661689][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.704726][ T264] block nbd2: Attempted send on invalid socket [ 82.711008][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.722954][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.733986][ T4356] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.745617][ T4356] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 86.687035][ T1109] cfg80211: failed to load regulatory.db [ 87.241299][ T4392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.569646][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.890252][ T4398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.599734][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.435979][ T7] usb 5-1: config 0 has no interface number 0 [ 90.443295][ T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 90.491382][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.974912][ T7] usb 5-1: config 0 descriptor?? [ 91.051935][ T1111] Bluetooth: hci2: command 0x0401 tx timeout [ 91.091341][ T7] usb 5-1: selecting invalid altsetting 1 [ 91.097876][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 91.169978][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 91.668072][ T4415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.469310][ T7] DVB: Unable to find symbol cx22700_attach() [ 92.547463][ T7] DVB: Unable to find symbol tda10046_attach() [ 92.559652][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 92.761404][ T7] usb 5-1: USB disconnect, device number 2 [ 94.267058][ T1326] Bluetooth: hci2: command 0x0401 tx timeout [ 94.351458][ T4442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 95.590040][ T4454] netlink: 'syz.0.40': attribute type 2 has an invalid length. [ 99.953206][ T4489] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.051340][ T4230] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.129692][ T4230] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.952197][ T4230] Bluetooth: hci2: command 0x0401 tx timeout [ 104.079027][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 106.595849][ T4522] netlink: 'syz.0.58': attribute type 2 has an invalid length. [ 110.196726][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 111.237247][ T4556] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 111.323452][ T4556] sp0: Synchronizing with TNC [ 112.553771][ T4576] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 114.900224][ T4589] process 'syz.4.77' launched './file0' with NULL argv: empty string added [ 119.017767][ T4620] tipc: Enabling of bearer rejected, failed to enable media [ 119.374143][ T4634] netlink: 'syz.2.86': attribute type 2 has an invalid length. [ 124.584732][ T4674] syz.4.94 sent an empty control message without MSG_MORE. [ 124.796035][ T4672] affs: No valid root block on device nullb0 [ 126.129596][ T21] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 126.266146][ T4688] sp0: Synchronizing with TNC [ 127.659984][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.682625][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.692144][ T21] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 127.702859][ T21] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.881020][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.311122][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 128.320290][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 128.329308][ T4712] netlink: 'syz.1.108': attribute type 12 has an invalid length. [ 128.337277][ T4712] netlink: 'syz.1.108': attribute type 11 has an invalid length. [ 128.814393][ T4678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.850206][ T4718] netlink: 'syz.1.110': attribute type 13 has an invalid length. [ 128.971064][ T4718] netlink: 'syz.1.110': attribute type 17 has an invalid length. [ 130.302710][ T21] hub 3-1:1.0: bad descriptor, ignoring hub [ 130.311866][ T21] hub: probe of 3-1:1.0 failed with error -5 [ 130.318498][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 130.324280][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 130.329839][ T21] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 131.465651][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.605531][ T4259] usb 3-1: USB disconnect, device number 3 [ 132.754074][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762639][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906607][ T4718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.861644][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 134.059706][ T4746] affs: No valid root block on device nullb0 [ 138.314789][ T4242] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 138.771153][ T4242] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.788513][ T4242] usb 4-1: config 0 has no interface number 0 [ 138.795265][ T4242] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 140.380545][ T4242] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 140.399882][ T4242] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.409150][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.569762][ T4242] usb 4-1: config 0 descriptor?? [ 140.589968][ T4795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.650219][ T4242] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 140.836687][ T4242] usb 4-1: USB disconnect, device number 2 [ 152.019712][ T4242] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 153.119727][ T1326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.129920][ T4242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.145022][ T4242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.172125][ T4242] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 153.185357][ T4242] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 153.195867][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.240986][ T4908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.271022][ T4242] hub 4-1:1.0: bad descriptor, ignoring hub [ 153.291177][ T4242] hub: probe of 4-1:1.0 failed with error -5 [ 153.298228][ T4242] cdc_wdm 4-1:1.0: skipping garbage [ 153.306141][ T4242] cdc_wdm 4-1:1.0: skipping garbage [ 153.313851][ T4242] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 153.389715][ T1326] usb 3-1: Using ep0 maxpacket: 32 [ 153.599856][ T1326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.249920][ T1326] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 154.345865][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.509645][ T1326] usb 3-1: Product: syz [ 154.530447][ T1326] usb 3-1: Manufacturer: syz [ 154.969614][ T1326] usb 3-1: SerialNumber: syz [ 155.000365][ T1326] usb 3-1: config 0 descriptor?? [ 155.062118][ T1326] usb 3-1: bad CDC descriptors [ 155.067991][ T1326] usb 3-1: unsupported MDLM descriptors [ 155.182275][ T4242] usb 4-1: USB disconnect, device number 3 [ 155.250230][ T21] usb 3-1: USB disconnect, device number 4 [ 155.780628][ T4957] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.224895][ T4963] capability: warning: `syz.1.180' uses deprecated v2 capabilities in a way that may be insecure [ 157.880088][ T4242] Bluetooth: hci2: command 0x0401 tx timeout [ 161.161315][ T4998] affs: No valid root block on device nullb0 [ 162.353435][ T1326] Bluetooth: hci2: command 0x0401 tx timeout [ 166.843682][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.853227][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.860786][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.309634][ T4317] Bluetooth: hci2: command 0x0401 tx timeout [ 169.505729][ T5064] netlink: 'syz.1.207': attribute type 2 has an invalid length. [ 171.632414][ T5080] tipc: Started in network mode [ 171.663003][ T5080] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 171.696135][ T5080] tipc: Enabled bearer , priority 10 [ 172.945423][ T4266] tipc: Node number set to 4269801494 [ 174.569609][ T4266] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.002183][ T4266] usb 3-1: Using ep0 maxpacket: 8 [ 176.042765][ T4266] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 176.056626][ T4266] usb 3-1: can't read configurations, error -71 [ 176.580392][ T5137] affs: No valid root block on device nullb0 [ 180.909900][ T4663] Bluetooth: hci2: command 0x0401 tx timeout [ 181.090305][ T5164] mmap: syz.0.238 (5164) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 181.268478][ T5178] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.309615][ T1111] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 181.650175][ T5189] netlink: 'syz.0.245': attribute type 2 has an invalid length. [ 182.740002][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.393070][ T1111] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 183.401862][ T1111] usb 3-1: can't read configurations, error -71 [ 184.022146][ T5211] netlink: 277 bytes leftover after parsing attributes in process `syz.2.250'. [ 186.558701][ T5224] sp0: Synchronizing with TNC [ 187.616623][ T5233] netlink: 'syz.3.258': attribute type 2 has an invalid length. [ 189.312511][ T5248] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[5248] [ 190.044188][ T5256] ksmbd: Unknown IPC event: 6, ignore. [ 191.149639][ T4738] Bluetooth: hci1: command 0x0406 tx timeout [ 191.169467][ T4663] Bluetooth: hci0: command 0x0406 tx timeout [ 191.194035][ T4738] Bluetooth: hci3: command 0x0406 tx timeout [ 191.223230][ T4738] Bluetooth: hci2: command 0x0406 tx timeout [ 192.709020][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 194.265096][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271510][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.325754][ T5270] team0: Port device team_slave_0 removed [ 194.540541][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.562222][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.600483][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.621695][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.635671][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.646640][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.657038][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.670062][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.681049][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.691965][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.704949][ T5288] batman_adv: batadv0: Adding interface: vlan2 [ 194.715571][ T5288] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.746968][ T5288] batman_adv: batadv0: Interface activated: vlan2 [ 198.383905][ T4266] kernel write not supported for file /sysvipc/msg (pid: 4266 comm: kworker/0:7) [ 198.769393][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.786619][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.794894][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.807866][ T5332] device bridge_slave_0 left promiscuous mode [ 198.815976][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.649594][ T5332] device bridge_slave_1 left promiscuous mode [ 199.657253][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.864298][ T5332] bond0: (slave bond_slave_0): Releasing backup interface [ 200.643509][ T5332] bond0: (slave bond_slave_1): Releasing backup interface [ 201.302690][ T5332] team0: Port device team_slave_0 removed [ 201.421414][ T5332] team0: Port device team_slave_1 removed [ 201.428541][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.438697][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.496803][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.506901][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.794451][ T4266] Bluetooth: hci5: command 0x0409 tx timeout [ 201.969668][ T5347] lo speed is unknown, defaulting to 1000 [ 202.843415][ T5372] 9pnet: Insufficient options for proto=fd [ 202.850621][ T4377] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.174308][ T4377] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.252443][ T5379] affs: No valid root block on device nullb0 [ 203.870156][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 204.525219][ T4377] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.629726][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 205.950396][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 206.410357][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 206.512949][ T4377] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.180393][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 207.427157][ T5399] device team1 entered promiscuous mode [ 207.448916][ T5399] Zero length message leads to an empty skb [ 208.029936][ T4242] Bluetooth: hci5: command 0x0419 tx timeout [ 208.633054][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.657861][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.684183][ T5347] device bridge_slave_0 entered promiscuous mode [ 208.746759][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.803646][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.837424][ T5347] device bridge_slave_1 entered promiscuous mode [ 209.606175][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.738361][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.949317][ T5347] team0: Port device team_slave_0 added [ 209.990562][ T5347] team0: Port device team_slave_1 added [ 210.187762][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.198346][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.294713][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.432761][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.480311][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.519560][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.588852][ T5347] device hsr_slave_0 entered promiscuous mode [ 211.620670][ T5347] device hsr_slave_1 entered promiscuous mode [ 211.658950][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.687918][ T5347] Cannot create hsr debugfs directory [ 213.181351][ T5347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.469751][ T1111] Bluetooth: hci2: command 0x0401 tx timeout [ 213.686879][ T5347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.953690][ T5347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.820751][ T5347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.591538][ T5480] input: syz0 as /devices/virtual/input/input6 [ 217.362954][ T4377] device hsr_slave_0 left promiscuous mode [ 217.402154][ T4377] device hsr_slave_1 left promiscuous mode [ 217.440890][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.528874][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.626690][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.687985][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.798995][ T4377] device bridge_slave_1 left promiscuous mode [ 217.878819][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.141937][ T4377] device bridge_slave_0 left promiscuous mode [ 218.193470][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.475104][ T5504] overlayfs: missing 'lowerdir' [ 220.515379][ T4377] device veth1_macvtap left promiscuous mode [ 220.551789][ T4377] device veth0_macvtap left promiscuous mode [ 220.634731][ T4377] device veth1_vlan left promiscuous mode [ 220.724336][ T4377] device veth0_vlan left promiscuous mode [ 222.019448][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 222.037071][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 222.052659][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.070502][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.147626][ T4377] bond0 (unregistering): Released all slaves [ 222.508806][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.103563][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.624553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.635542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.643946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.652922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.662044][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.669136][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.871214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.880187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.888678][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.895899][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.903765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.912739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.254010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.273010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.829784][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 225.017074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.026342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.041294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.085265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.028693][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.248329][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.328617][ T5561] tipc: Started in network mode [ 226.345642][ T5561] tipc: Node identity ca419eb474a, cluster identity 4711 [ 226.371469][ T5561] tipc: Enabled bearer , priority 0 [ 226.421749][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.439067][ T5560] overlayfs: missing 'lowerdir' [ 226.458834][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.563617][ T5564] device syzkaller0 entered promiscuous mode [ 226.597988][ T5564] tipc: Resetting bearer [ 226.666515][ T5559] tipc: Resetting bearer [ 226.713856][ T5559] tipc: Disabling bearer [ 226.806240][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.405384][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.793261][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.822035][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.511959][ T1109] Bluetooth: hci2: command 0x0401 tx timeout [ 231.128322][ T5636] 9pnet: Insufficient options for proto=fd [ 231.259405][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.302995][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.460763][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.515724][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.576721][ T5347] device veth0_vlan entered promiscuous mode [ 231.595704][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.620862][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.692193][ T5347] device veth1_vlan entered promiscuous mode [ 232.469227][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.509355][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.930891][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.978753][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.019425][ T5347] device veth0_macvtap entered promiscuous mode [ 233.073969][ T5347] device veth1_macvtap entered promiscuous mode [ 233.147615][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.170671][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.204739][ T5627] syz.1.346 (5627): drop_caches: 2 [ 233.211553][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.229204][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.246958][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.283075][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.327069][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.463255][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.487669][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.900279][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.920526][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.067628][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.114118][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.155793][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.213113][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.278839][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.334179][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.396293][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: vlan2 [ 234.446882][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.548219][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.577059][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.602912][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.696982][ T5347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.746053][ T5347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.807613][ T5347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.845517][ T5347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.161678][ T4318] Bluetooth: hci2: command 0x0401 tx timeout [ 237.876619][ T4703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.259367][ T4703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.363412][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.436315][ T4703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.470172][ T4703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.554448][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.039566][ T5719] netlink: 'syz.5.286': attribute type 2 has an invalid length. [ 239.892178][ T5721] tipc: Failed to remove unknown binding: 66,1,1/0:1632568973/1632568975 [ 239.905234][ T5721] tipc: Failed to remove unknown binding: 66,1,1/0:1632568973/1632568975 [ 239.914061][ T5721] tipc: Failed to remove unknown binding: 66,1,1/0:1632568973/1632568975 [ 242.989645][ T1326] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.691624][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 244.009756][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.089788][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.123955][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 245.156965][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.187655][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.359813][ T23] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 245.378054][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.433165][ T23] usb 4-1: Product: syz [ 245.454861][ T23] usb 4-1: Manufacturer: syz [ 245.485880][ T23] usb 4-1: SerialNumber: syz [ 245.514658][ T23] usb 4-1: config 0 descriptor?? [ 245.601457][ T23] adutux 4-1:0.0: interrupt endpoints not found [ 245.647931][ T5840] affs: No valid root block on device nullb0 [ 245.785594][ T23] usb 4-1: USB disconnect, device number 4 [ 247.079184][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.126877][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.151090][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.402281][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.129249][ T5893] netlink: set zone limit has 8 unknown bytes [ 249.093626][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.159546][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.173602][ T4318] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.202356][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.279106][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.349571][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.397870][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.439618][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 249.454549][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: vlan2 [ 249.489612][ T5901] affs: No valid root block on device nullb0 [ 249.496446][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.530545][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.580562][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.600842][ T4318] usb 6-1: config 0 has an invalid interface number: 53 but max is 0 [ 249.627459][ T4318] usb 6-1: config 0 has no interface number 0 [ 249.668496][ T4318] usb 6-1: config 0 interface 53 has no altsetting 0 [ 249.978498][ T4318] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030c, bcdDevice=18.43 [ 249.999585][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.009368][ T4318] usb 6-1: Product: syz [ 250.014090][ T4318] usb 6-1: Manufacturer: syz [ 250.018724][ T4318] usb 6-1: SerialNumber: syz [ 250.224572][ T4318] usb 6-1: config 0 descriptor?? [ 251.021537][ T4318] option 6-1:0.53: GSM modem (1-port) converter detected [ 251.102728][ T4318] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 251.141625][ T4318] usb 6-1: USB disconnect, device number 2 [ 251.241041][ T4318] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 251.249951][ T5920] ODEBUG: Out of memory. ODEBUG disabled [ 251.317331][ T4318] option 6-1:0.53: device disconnected [ 251.915890][ T5933] affs: No valid root block on device nullb0 [ 254.283882][ T5957] netlink: 'syz.5.410': attribute type 1 has an invalid length. [ 255.049653][ T1326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 255.349572][ T1326] usb 1-1: Using ep0 maxpacket: 16 [ 255.469648][ T1326] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.527417][ T1326] usb 1-1: config 0 has no interface number 0 [ 255.631968][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.639348][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.849653][ T1326] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 255.862300][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.908131][ T1326] usb 1-1: Product: syz [ 255.923339][ T1326] usb 1-1: Manufacturer: syz [ 255.942954][ T1326] usb 1-1: SerialNumber: syz [ 255.980203][ T1326] usb 1-1: config 0 descriptor?? [ 256.053814][ T1326] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 256.737282][ T5994] ALSA: mixer_oss: invalid OSS volume 'DI' [ 257.897033][ T4318] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 258.231637][ T6015] affs: No valid root block on device nullb0 [ 258.501263][ T4318] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.536172][ T1326] gspca_spca1528: reg_r err -71 [ 258.549105][ T4318] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.565123][ T1326] spca1528: probe of 1-1:0.1 failed with error -71 [ 258.575923][ T1326] usb 1-1: USB disconnect, device number 2 [ 258.597113][ T4318] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.617522][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.683039][ T6001] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 260.803885][ T4663] Bluetooth: hci5: command 0x0405 tx timeout [ 261.685581][ T4663] usb 6-1: USB disconnect, device number 3 [ 264.861226][ T6096] input: syz1 as /devices/virtual/input/input7 [ 265.683200][ T4317] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 265.713434][ T6104] affs: No valid root block on device nullb0 [ 265.984536][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 266.134411][ T4317] usb 4-1: config index 0 descriptor too short (expected 29970, got 18) [ 266.152730][ T4317] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 266.162277][ T4317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 266.348839][ T4317] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 266.371886][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.381975][ T4317] usb 4-1: Product: syz [ 266.386210][ T4317] usb 4-1: Manufacturer: syz [ 266.433353][ T4317] usb 4-1: SerialNumber: syz [ 266.496051][ T4317] usb 4-1: config 0 descriptor?? [ 266.617335][ T4317] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 266.777398][ T4317] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 266.859514][ T6102] udc-core: couldn't find an available UDC or it's busy [ 266.866932][ T6102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.048827][ T7] usb 4-1: USB disconnect, device number 5 [ 268.628292][ T4266] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 269.214706][ T4266] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.531047][ T4266] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 277.320553][ T6196] tipc: Started in network mode [ 277.325769][ T6196] tipc: Node identity 4, cluster identity 4711 [ 277.332391][ T6196] tipc: Node number set to 4 [ 278.569239][ T4266] usb 1-1: device not accepting address 3, error -71 [ 280.467756][ T6242] affs: No valid root block on device nullb0 [ 280.621351][ T6244] tipc: Enabled bearer , priority 0 [ 280.686492][ T6248] device syzkaller0 entered promiscuous mode [ 280.767519][ T6244] tipc: Resetting bearer [ 280.816009][ T6243] tipc: Resetting bearer [ 280.885571][ T6243] tipc: Disabling bearer [ 282.310095][ T6266] program syz.5.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.394404][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.790488][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.035913][ T4317] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 283.073518][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.169211][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 283.893849][ T4317] usb 2-1: config 0 descriptor?? [ 283.936129][ T4317] pwc: Askey VC010 type 2 USB webcam detected. [ 285.471435][ T4317] pwc: recv_control_msg error -71 req 02 val 2700 [ 285.867385][ T4317] pwc: recv_control_msg error -71 req 02 val 2c00 [ 286.050687][ T4317] pwc: recv_control_msg error -71 req 04 val 1000 [ 286.072650][ T4317] pwc: recv_control_msg error -71 req 04 val 1300 [ 286.093436][ T4317] pwc: recv_control_msg error -71 req 04 val 1400 [ 286.114814][ T4317] pwc: recv_control_msg error -71 req 02 val 2000 [ 286.141435][ T6304] 9pnet: p9_fd_create_unix (6304): problem connecting socket: ./file0: -5 [ 286.150260][ T4317] pwc: recv_control_msg error -71 req 02 val 2100 [ 286.189783][ T4317] pwc: recv_control_msg error -71 req 04 val 1500 [ 286.232385][ T4317] pwc: recv_control_msg error -71 req 02 val 2500 [ 286.289984][ T4317] pwc: recv_control_msg error -71 req 02 val 2400 [ 286.371564][ T4317] pwc: recv_control_msg error -71 req 02 val 2600 [ 286.435050][ T4317] pwc: recv_control_msg error -71 req 02 val 2900 [ 286.628275][ T4317] pwc: recv_control_msg error -71 req 02 val 2800 [ 286.842003][ T4317] pwc: recv_control_msg error -71 req 04 val 1100 [ 287.044957][ T4317] pwc: recv_control_msg error -71 req 04 val 1200 [ 287.269999][ T4317] pwc: Registered as video103. [ 287.276402][ T4317] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 287.326700][ T4317] usb 2-1: USB disconnect, device number 2 [ 288.090455][ T6349] program syz.3.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.930460][ T6350] affs: No valid root block on device nullb0 [ 294.543733][ T4245] kernel write not supported for file /sysvipc/msg (pid: 4245 comm: kworker/0:6) [ 296.698561][ T6405] program syz.0.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.825161][ T6433] affs: No valid root block on device nullb0 [ 302.239668][ T6437] netlink: 'syz.1.512': attribute type 3 has an invalid length. [ 302.247488][ T6437] netlink: 3 bytes leftover after parsing attributes in process `syz.1.512'. [ 302.354509][ T6446] 9pnet: Insufficient options for proto=fd [ 304.165640][ T6454] o2cb: This node has not been configured. [ 304.171825][ T6454] o2cb: Cluster check failed. Fix errors before retrying. [ 304.178993][ T6454] (syz.5.517,6454,1):user_dlm_register:675 ERROR: status = -22 [ 304.187006][ T6454] (syz.5.517,6454,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "bus" [ 304.547732][ T6467] netlink: set zone limit has 8 unknown bytes [ 305.921654][ T1109] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 306.930609][ T7] kernel write not supported for file /sysvipc/msg (pid: 7 comm: kworker/0:0) [ 307.083493][ T1326] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 307.187566][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.198944][ T1109] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.208126][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.218993][ T1109] usb 6-1: config 0 descriptor?? [ 307.495273][ T6495] affs: No valid root block on device nullb0 [ 308.228512][ T3578] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 308.281620][ T1109] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 308.315323][ T1109] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input10 [ 308.383462][ T1326] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 308.398558][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.421980][ T1326] usb 1-1: config 0 descriptor?? [ 308.460928][ T1109] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 308.674412][ T3578] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 308.684099][ T3578] usb 4-1: config 0 has no interface number 0 [ 308.690329][ T3578] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 308.721571][ T3578] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.950863][ T3578] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 308.966900][ T3578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.975704][ T3578] usb 4-1: Product: syz [ 308.980290][ T3578] usb 4-1: Manufacturer: syz [ 308.996749][ T3578] usb 4-1: SerialNumber: syz [ 309.020163][ T3578] usb 4-1: config 0 descriptor?? [ 309.042968][ T4245] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 309.072247][ T4266] usb 6-1: USB disconnect, device number 4 [ 309.078702][ T6499] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 309.112955][ T3578] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 309.132709][ T3578] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 309.356403][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 309.431435][ T4245] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 309.452997][ T4245] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 309.462762][ T4245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.502114][ T6512] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 309.569684][ T4266] usb 4-1: USB disconnect, device number 6 [ 309.597919][ T4266] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 309.616055][ T4245] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 309.625415][ T4266] cyberjack 4-1:0.69: device disconnected [ 310.913085][ T6534] 9pnet: Insufficient options for proto=fd [ 310.974264][ T1326] pegasus 1-1:0.0: can't reset MAC [ 310.984539][ T1326] pegasus: probe of 1-1:0.0 failed with error -5 [ 311.401838][ T1326] usb 1-1: USB disconnect, device number 5 [ 313.431710][ T6545] affs: No valid root block on device nullb0 [ 313.456907][ T4245] usb 2-1: USB disconnect, device number 3 [ 313.869112][ T6556] affs: No valid root block on device nullb0 [ 314.195679][ T6569] 9pnet: Insufficient options for proto=fd [ 314.836273][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 318.805107][ T6614] ======================================================= [ 318.805107][ T6614] WARNING: The mand mount option has been deprecated and [ 318.805107][ T6614] and is ignored by this kernel. Remove the mand [ 318.805107][ T6614] option from the mount to silence this warning. [ 318.805107][ T6614] ======================================================= [ 318.840173][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.991160][ T6612] affs: No valid root block on device nullb0 [ 321.246198][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.252570][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.610054][ T6670] affs: No valid root block on device nullb0 [ 324.670650][ T6675] netlink: 100 bytes leftover after parsing attributes in process `syz.3.573'. [ 325.797167][ T6700] affs: No valid root block on device nullb0 [ 327.907954][ T6734] netlink: 165 bytes leftover after parsing attributes in process `syz.5.583'. [ 329.358584][ T4259] Bluetooth: hci5: command 0x0406 tx timeout [ 331.407753][ T6774] affs: No valid root block on device nullb0 [ 334.638624][ T6803] affs: No valid root block on device nullb0 [ 334.870450][ T6811] tipc: Enabled bearer , priority 0 [ 334.889795][ T6811] device syzkaller0 entered promiscuous mode [ 335.217044][ T6810] tipc: Resetting bearer [ 335.279134][ T6810] tipc: Disabling bearer [ 335.808687][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 336.137110][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 336.776098][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 336.874102][ T6824] infiniband syz2: set active [ 336.879152][ T6824] infiniband syz2: added vxcan1 [ 336.890378][ T6824] infiniband syz2: Couldn't open port 1 [ 336.944114][ T6824] RDS/IB: syz2: added [ 336.949196][ T6824] smc: adding ib device syz2 with port count 1 [ 336.955629][ T6824] smc: ib device syz2 port 1 has pnetid [ 336.964588][ T7] vxcan1 speed is unknown, defaulting to 1000 [ 336.990872][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 337.095620][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 337.201063][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 337.214307][ T6834] affs: No valid root block on device nullb0 [ 337.218851][ T1326] vxcan1 speed is unknown, defaulting to 1000 [ 337.363579][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 337.467390][ T6824] vxcan1 speed is unknown, defaulting to 1000 [ 337.994825][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.244875][ T6840] lo speed is unknown, defaulting to 1000 [ 338.312313][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.502490][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 338.564368][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.677715][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.741669][ T6863] tipc: Enabled bearer , priority 0 [ 339.862196][ T6863] device syzkaller0 entered promiscuous mode [ 339.956017][ T9] tipc: Left network mode [ 340.050656][ T1326] Bluetooth: hci1: command 0x0409 tx timeout [ 340.508257][ T6859] tipc: Resetting bearer [ 340.548805][ T6859] tipc: Disabling bearer [ 340.860881][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 341.670782][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.686315][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.698786][ T6840] device bridge_slave_0 entered promiscuous mode [ 341.707770][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.714929][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.745836][ T6840] device bridge_slave_1 entered promiscuous mode [ 341.856014][ T6896] affs: No valid root block on device nullb0 [ 342.292411][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.336258][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.418888][ T6840] team0: Port device team_slave_0 added [ 342.443286][ T6840] team0: Port device team_slave_1 added [ 342.576199][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.604156][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.630607][ T1326] Bluetooth: hci1: command 0x041b tx timeout [ 342.656538][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.679901][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.686885][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.712859][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.730394][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.898321][ T6840] device hsr_slave_0 entered promiscuous mode [ 342.925677][ T6840] device hsr_slave_1 entered promiscuous mode [ 342.946133][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.953734][ T6840] Cannot create hsr debugfs directory [ 342.990489][ T9] device hsr_slave_0 left promiscuous mode [ 343.010296][ T9] device hsr_slave_1 left promiscuous mode [ 343.076202][ T9] device veth1_macvtap left promiscuous mode [ 343.082335][ T9] device veth0_macvtap left promiscuous mode [ 344.614955][ T9] bond0 (unregistering): Released all slaves [ 344.865300][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 345.073253][ T6937] tipc: Started in network mode [ 345.079880][ T6937] tipc: Node identity a2494dc63d9b, cluster identity 4711 [ 345.131614][ T6937] tipc: Enabled bearer , priority 0 [ 345.155815][ T6945] device syzkaller0 entered promiscuous mode [ 345.251739][ T6936] tipc: Resetting bearer [ 345.288540][ T6936] tipc: Disabling bearer [ 345.378637][ T6840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.439611][ T6840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.450803][ T6840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.471664][ T6840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.699016][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 348.069064][ T6980] affs: No valid root block on device nullb0 [ 348.520887][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.606337][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.634336][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.693064][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.748367][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.793251][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.844354][ T4577] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.851755][ T4577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.884557][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.405691][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.428313][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.476402][ T4577] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.483578][ T4577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.541659][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.578706][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.601784][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.634082][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.700314][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.730973][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.759606][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.785297][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.818560][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.860488][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.903014][ T6840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.946254][ T6985] lo speed is unknown, defaulting to 1000 [ 349.954039][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.979158][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.018314][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 350.064153][ T7010] tipc: Enabled bearer , priority 0 [ 350.088296][ T7010] device syzkaller0 entered promiscuous mode [ 350.124173][ T7008] tipc: Resetting bearer [ 350.228402][ T7008] tipc: Disabling bearer [ 351.577963][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 351.622816][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.648991][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.680843][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.047262][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 353.912238][ T1326] Bluetooth: hci2: command 0x041b tx timeout [ 354.736850][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.768158][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.834294][ T6985] device bridge_slave_0 entered promiscuous mode [ 355.019153][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.046326][ T7071] affs: No valid root block on device nullb0 [ 355.074270][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.101791][ T6985] device bridge_slave_1 entered promiscuous mode [ 355.242077][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.279838][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.330863][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.334674][ T7076] affs: No valid root block on device nullb0 [ 355.360509][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.427030][ T6985] team0: Port device team_slave_0 added [ 355.442536][ T6985] team0: Port device team_slave_1 added [ 355.508971][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.528942][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.571985][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.589811][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.605281][ T6840] device veth0_vlan entered promiscuous mode [ 355.622754][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.633148][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.668955][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.700382][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.709361][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.751563][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.781535][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.797233][ T6840] device veth1_vlan entered promiscuous mode [ 355.846443][ T6985] device hsr_slave_0 entered promiscuous mode [ 355.854579][ T6985] device hsr_slave_1 entered promiscuous mode [ 355.905238][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.986407][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.035875][ T6840] device veth0_macvtap entered promiscuous mode [ 356.064489][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 356.076089][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 356.098924][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 356.119179][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.128334][ T1326] Bluetooth: hci2: command 0x040f tx timeout [ 356.149421][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.167901][ T6840] device veth1_macvtap entered promiscuous mode [ 356.195726][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.339239][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.364043][ T7085] tipc: Enabled bearer , priority 0 [ 356.396996][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.417586][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.428008][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.438861][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.449238][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.581457][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.592019][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.603159][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.684739][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.222635][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.244701][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.272730][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.311421][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.324219][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.335567][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.345471][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.356653][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.367191][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: vlan2 [ 357.377575][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.392799][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.407714][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.428413][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.454855][ T7092] tipc: Disabling bearer [ 357.479978][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.492957][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.525179][ T6840] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.543245][ T6840] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.557909][ T6840] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.569406][ T6840] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.487253][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 360.967757][ T6985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 361.187793][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.196511][ T6985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 361.424614][ T6985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 361.431794][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.479176][ T6985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 361.514307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.588825][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.626101][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.661154][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.769635][ T7123] affs: No valid root block on device nullb0 [ 361.914929][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.016043][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.035322][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.053429][ T6985] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.092126][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.108979][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.128644][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.135809][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.166094][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.215787][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.262057][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.271864][ T4577] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.279040][ T4577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.298866][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.327506][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.348325][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.412030][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.451968][ T6985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.476429][ T6985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.502869][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.518636][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.528364][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.551945][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.569599][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.580352][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.599130][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.640846][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.111114][ T9] device hsr_slave_0 left promiscuous mode [ 363.141005][ T9] device hsr_slave_1 left promiscuous mode [ 363.174570][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.556837][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.602752][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.611792][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.626610][ T9] batman_adv: batadv0: Interface deactivated: vlan2 [ 363.634355][ T9] batman_adv: batadv0: Removing interface: vlan2 [ 363.790291][ T9] device bridge_slave_1 left promiscuous mode [ 363.799560][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.834441][ T9] device bridge_slave_0 left promiscuous mode [ 363.841092][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.907733][ T9] device veth1_macvtap left promiscuous mode [ 363.936249][ T9] device veth0_macvtap left promiscuous mode [ 363.953623][ T9] device veth1_vlan left promiscuous mode [ 363.959472][ T9] device veth0_vlan left promiscuous mode [ 365.543636][ T9] team0 (unregistering): Port device team_slave_1 removed [ 365.570748][ T9] team0 (unregistering): Port device team_slave_0 removed [ 365.598375][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.624651][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.102511][ T9] bond0 (unregistering): Released all slaves [ 366.735526][ T7164] tipc: Started in network mode [ 366.740851][ T7164] tipc: Node identity 02cb8ba80886, cluster identity 4711 [ 366.807561][ T7164] tipc: Enabled bearer , priority 0 [ 366.833585][ T7175] netlink: 'syz.0.660': attribute type 2 has an invalid length. [ 366.843260][ T7179] tipc: Resetting bearer [ 366.851443][ T7175] netlink: 'syz.0.660': attribute type 2 has an invalid length. [ 366.892648][ T7163] tipc: Disabling bearer [ 366.989830][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.046663][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.228690][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.954497][ T7228] affs: No valid root block on device nullb0 [ 370.408096][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.436024][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.564083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.590602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.650338][ T6985] device veth0_vlan entered promiscuous mode [ 370.673914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.703601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.738446][ T7270] tipc: Enabled bearer , priority 0 [ 370.758266][ T6985] device veth1_vlan entered promiscuous mode [ 371.412761][ T7270] tipc: Resetting bearer [ 371.468233][ T7265] tipc: Disabling bearer [ 371.531466][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.550689][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.589181][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.598019][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.610419][ T6985] device veth0_macvtap entered promiscuous mode [ 372.234177][ T6985] device veth1_macvtap entered promiscuous mode [ 373.005896][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.009793][ T7300] affs: No valid root block on device nullb0 [ 373.145885][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.201702][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.224338][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.248937][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.275770][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.328763][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.488472][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.499883][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.512172][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.522120][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.539347][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.404351][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.446919][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.550048][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.714405][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.740853][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.751595][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.761958][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.772609][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.783954][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.792796][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.812772][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.914737][ T6985] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.923913][ T6985] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.936597][ T6985] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.617225][ T1326] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 375.627359][ T6985] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.258525][ T1326] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 376.335009][ T1326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.493984][ T1326] usb 7-1: Product: syz [ 376.608141][ T1326] usb 7-1: Manufacturer: syz [ 376.642757][ T1326] usb 7-1: SerialNumber: syz [ 376.697257][ T1326] usb 7-1: config 0 descriptor?? [ 376.750756][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.813569][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.844225][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.869039][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.888062][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.928885][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.086435][ T7333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 379.115477][ T7382] affs: No valid root block on device nullb0 [ 380.471767][ T4259] usb 7-1: USB disconnect, device number 2 [ 380.512942][ T4266] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 380.687819][ T7401] binder: 7397:7401 ioctl c0306201 200000000080 returned -14 [ 381.556731][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 381.935437][ T4266] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 381.980143][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.192982][ T4266] usb 4-1: Product: syz [ 382.282801][ T4266] usb 4-1: Manufacturer: syz [ 382.371213][ T4266] usb 4-1: SerialNumber: syz [ 383.118602][ T4266] usb 4-1: config 0 descriptor?? [ 383.178301][ T4266] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 383.220852][ T7429] binder: 7426:7429 ioctl c0306201 200000000080 returned -14 [ 383.553134][ T7419] lo speed is unknown, defaulting to 1000 [ 384.328560][ T4266] gspca_ov534_9: reg_w failed -110 [ 384.351636][ T7419] vxcan1 speed is unknown, defaulting to 1000 [ 384.659310][ T7445] affs: No valid root block on device nullb0 [ 386.378468][ T4266] gspca_ov534_9: Unknown sensor 0000 [ 386.394501][ T4266] ov534_9: probe of 4-1:0.0 failed with error -22 [ 386.491473][ T4266] usb 4-1: USB disconnect, device number 7 [ 387.109696][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.116298][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.304508][ T26] audit: type=1326 audit(1757139497.163:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f50830be9 code=0x0 [ 390.138192][ T7503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.718'. [ 392.644383][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.723'. [ 392.897632][ T7534] affs: No valid root block on device nullb0 [ 395.434644][ T7548] sp0: Synchronizing with TNC [ 396.923386][ T1326] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 397.222230][ T1326] usb 4-1: Using ep0 maxpacket: 16 [ 397.425654][ T1326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.447335][ T1326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.500556][ T1326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 397.628740][ T1326] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 397.693831][ T1326] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 397.701874][ T1326] usb 4-1: Manufacturer: syz [ 398.553621][ T1326] usb 4-1: config 0 descriptor?? [ 398.944376][ T7591] affs: No valid root block on device nullb0 [ 400.596178][ T1326] usb 4-1: USB disconnect, device number 8 [ 401.183514][ T7602] sp0: Synchronizing with TNC [ 403.701908][ T7633] tmpfs: Unknown parameter 'usrquota' [ 405.150326][ T7649] affs: No valid root block on device nullb0 [ 407.466253][ T1326] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 407.590707][ T26] audit: type=1326 audit(1757139515.197:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.7.756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d8f2e3be9 code=0x0 [ 408.515421][ T7673] sp0: Synchronizing with TNC [ 408.580006][ T1326] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 408.612255][ T1326] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 408.657002][ T1326] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 408.701612][ T1326] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 408.716029][ T1326] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 410.069492][ T1326] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.094176][ T1326] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.182417][ T1326] usb 7-1: Product: syz [ 410.239815][ T1326] usb 7-1: Manufacturer: syz [ 410.756682][ T1326] usb 7-1: can't set config #1, error -71 [ 410.789475][ T1326] usb 7-1: USB disconnect, device number 3 [ 413.683733][ T7714] affs: No valid root block on device nullb0 [ 417.122848][ T7738] sp0: Synchronizing with TNC [ 419.632522][ T7764] affs: No valid root block on device nullb0 [ 419.972397][ T1326] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 420.529666][ T1326] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 420.613791][ T1326] usb 1-1: config 0 has no interface number 1 [ 420.659670][ T1326] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 420.700497][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.767693][ T1326] usb 1-1: config 0 descriptor?? [ 420.830857][ T1326] usb 1-1: MIDIStreaming interface descriptor not found [ 420.963478][ T1326] gspca_main: spca561-2.14.0 probing abcd:cdee [ 421.140450][ T1326] spca561: probe of 1-1:0.0 failed with error -22 [ 421.191004][ T1326] usb 1-1: USB disconnect, device number 6 [ 421.401836][ T7799] sp0: Synchronizing with TNC [ 426.151107][ T7859] sp0: Synchronizing with TNC [ 430.479359][ T7886] affs: No valid root block on device nullb0 [ 432.065196][ T7897] tipc: Enabled bearer , priority 0 [ 432.206044][ T7897] tipc: Resetting bearer [ 432.440789][ T7896] tipc: Disabling bearer [ 433.937494][ T7916] sp0: Synchronizing with TNC [ 434.217137][ T7925] loop3: detected capacity change from 0 to 256 [ 434.336295][ T7925] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 434.370279][ T7925] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 435.012988][ T7938] loop5: detected capacity change from 0 to 2048 [ 435.186521][ T7943] loop3: detected capacity change from 0 to 764 [ 435.213428][ T7938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 435.398955][ T7943] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 435.588932][ T7921] loop6: detected capacity change from 0 to 32768 [ 436.883188][ T7921] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 438.031008][ T6840] ocfs2: Unmounting device (7,6) on (node local) [ 439.251830][ T7980] loop7: detected capacity change from 0 to 1024 [ 439.436936][ T7989] sp0: Synchronizing with TNC [ 439.581990][ T7998] loop5: detected capacity change from 0 to 128 [ 439.692044][ T4577] hfsplus: b-tree write err: -5, ino 4 [ 439.806802][ T7998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 439.867177][ T7998] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 440.415957][ T8012] affs: No valid root block on device nullb0 [ 440.458517][ T8014] loop0: detected capacity change from 0 to 4096 [ 440.472711][ T8014] ntfs3: Unknown parameter 'nocase' [ 441.767989][ T8032] loop0: detected capacity change from 0 to 1024 [ 442.086223][ T8002] loop6: detected capacity change from 0 to 32768 [ 442.095004][ T4242] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 442.135094][ T8002] XFS: ikeep mount option is deprecated. [ 442.140786][ T8002] XFS: ikeep mount option is deprecated. [ 442.153823][ T8002] XFS: noikeep mount option is deprecated. [ 442.214679][ T8002] XFS (loop6): Mounting V5 Filesystem [ 442.293969][ T4266] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 442.399603][ T8002] XFS (loop6): Ending clean mount [ 442.545704][ T4242] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 442.566824][ T4242] usb 6-1: config 0 has no interface number 1 [ 442.588512][ T4242] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 442.598358][ T4242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.606743][ T4266] usb 1-1: Using ep0 maxpacket: 8 [ 442.634078][ T4242] usb 6-1: config 0 descriptor?? [ 442.692741][ T4242] usb 6-1: MIDIStreaming interface descriptor not found [ 442.747210][ T4242] gspca_main: spca561-2.14.0 probing abcd:cdee [ 442.766883][ T4266] usb 1-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.789480][ T4266] usb 1-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 442.834420][ T4266] usb 1-1: config 0 interface 0 has no altsetting 0 [ 442.852182][ T4266] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 442.861812][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.891291][ T4266] usb 1-1: config 0 descriptor?? [ 443.006434][ T6840] XFS (loop6): Unmounting Filesystem [ 443.138535][ T4242] spca561: probe of 6-1:0.0 failed with error -22 [ 443.904520][ T4242] usb 6-1: USB disconnect, device number 5 [ 444.048887][ T8067] loop7: detected capacity change from 0 to 4096 [ 444.080569][ T8062] sp0: Synchronizing with TNC [ 444.266563][ T8075] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.368348][ T26] audit: type=1800 audit(1757139549.582:4): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.840" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 444.549869][ T4266] usbhid 1-1:0.0: can't add hid device: -71 [ 444.555889][ T4266] usbhid: probe of 1-1:0.0 failed with error -71 [ 444.610925][ T4266] usb 1-1: USB disconnect, device number 7 [ 444.657678][ T8086] loop3: detected capacity change from 0 to 128 [ 444.795884][ T8086] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 444.848650][ T8086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.510163][ T8084] loop6: detected capacity change from 0 to 32768 [ 448.130173][ T8122] loop0: detected capacity change from 0 to 4096 [ 448.323723][ T8133] affs: No valid root block on device nullb0 [ 448.337940][ T8132] loop7: detected capacity change from 0 to 64 [ 448.428578][ T8122] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 448.470566][ T8122] ntfs3: loop0: Failed to load $Extend. [ 448.504408][ T8132] attempt to access beyond end of device [ 448.504408][ T8132] loop7: rw=0, want=1026, limit=64 [ 448.558990][ T8132] Buffer I/O error on dev loop7, logical block 512, async page read [ 448.578438][ T8132] attempt to access beyond end of device [ 448.578438][ T8132] loop7: rw=0, want=113154, limit=64 [ 448.654783][ T8132] Buffer I/O error on dev loop7, logical block 56576, async page read [ 448.840981][ T8125] loop6: detected capacity change from 0 to 32768 [ 448.952481][ T8125] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.850 (8125) [ 448.988170][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 449.035212][ T8148] sp0: Synchronizing with TNC [ 449.188983][ T8125] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 449.252324][ T8125] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 449.301176][ T8125] BTRFS info (device loop6): use zstd compression, level 3 [ 449.392471][ T8125] BTRFS info (device loop6): using free space tree [ 449.431596][ T8125] BTRFS info (device loop6): has skinny extents [ 449.450803][ T8153] loop0: detected capacity change from 0 to 4096 [ 450.473600][ T8145] loop5: detected capacity change from 0 to 32768 [ 450.520258][ T8145] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.854 (8145) [ 450.551892][ T8125] BTRFS info (device loop6): enabling ssd optimizations [ 450.699339][ T8125] fs-verity: sha512 using implementation "sha512-avx2" [ 450.892136][ T8125] fs-verity (loop6, inode 258): Error -4 building Merkle tree [ 451.037356][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 451.049547][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 451.061858][ T7381] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (7381) [ 452.009863][ T8203] loop0: detected capacity change from 0 to 1024 [ 452.286752][ T8212] loop3: detected capacity change from 0 to 256 [ 452.551746][ T8212] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 452.598240][ T8212] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 452.614420][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.620747][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.183843][ T8195] loop5: detected capacity change from 0 to 32768 [ 453.593032][ T8195] XFS: noikeep mount option is deprecated. [ 453.874902][ T8195] XFS: noikeep mount option is deprecated. [ 453.962619][ T8239] sp0: Synchronizing with TNC [ 455.473891][ T8261] loop3: detected capacity change from 0 to 4096 [ 455.923594][ T8276] loop0: detected capacity change from 0 to 256 [ 456.037047][ T8276] exfat: Deprecated parameter 'utf8' [ 456.272349][ T8276] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 456.891357][ T8286] loop6: detected capacity change from 0 to 128 [ 457.022198][ T8286] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 457.065668][ T8286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.215806][ T8283] loop5: detected capacity change from 0 to 8192 [ 457.253916][ T8283] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 457.641436][ T8300] loop7: detected capacity change from 0 to 4096 [ 458.259304][ T8296] loop0: detected capacity change from 0 to 4096 [ 458.290733][ T8300] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 458.408054][ T8300] ntfs3: loop7: Failed to load $Extend. [ 459.399606][ T4187] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 459.408662][ T8308] sp0: Synchronizing with TNC [ 459.432539][ T4187] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 459.452799][ T8315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.480715][ T26] audit: type=1800 audit(1757139563.744:5): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.878" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 459.483409][ T8317] loop5: detected capacity change from 0 to 128 [ 459.522154][ T6985] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 460.221173][ T8329] loop7: detected capacity change from 0 to 512 [ 460.271838][ T8317] EXT4-fs (loop5): Test dummy encryption mode enabled [ 460.316142][ T8317] EXT4-fs (loop5): Test dummy encryption mode enabled [ 460.355951][ T8317] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 460.367365][ T8329] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 460.402147][ T8329] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 460.414695][ T8317] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 460.483860][ T8317] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 460.518617][ T8329] EXT4-fs (loop7): 1 truncate cleaned up [ 460.557376][ T8329] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 460.625249][ T8329] fscrypt (loop7, inode 18): Unsupported encryption flags (0x10) [ 461.406950][ T8346] loop0: detected capacity change from 0 to 1764 [ 462.455065][ T5475] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.470594][ T8358] loop5: detected capacity change from 0 to 128 [ 462.518444][ T8358] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 462.716943][ T8358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.755696][ T4318] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 463.767242][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 464.670302][ T4663] Bluetooth: hci4: command 0x1003 tx timeout [ 464.712204][ T4318] usb 4-1: device descriptor read/all, error -71 [ 464.743574][ T8380] sp0: Synchronizing with TNC [ 464.947414][ T8380] binder: BINDER_SET_CONTEXT_MGR already set [ 464.954199][ T8380] binder: 8379:8380 ioctl 4018620d 200000000100 returned -16 [ 466.506115][ T8392] loop7: detected capacity change from 0 to 32768 [ 466.579906][ T8392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.897 (8392) [ 466.991039][ T8415] loop6: detected capacity change from 0 to 4096 [ 467.113057][ T8417] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.156924][ T23] Bluetooth: hci4: command 0x1001 tx timeout [ 467.164141][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 467.188420][ T8392] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 467.286336][ T26] audit: type=1800 audit(1757139571.041:6): pid=8415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.898" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 467.286553][ T8392] BTRFS info (device loop7): turning on sync discard [ 467.473049][ T8392] BTRFS info (device loop7): setting nodatacow, compression disabled [ 467.566486][ T8392] BTRFS info (device loop7): turning off barriers [ 467.605555][ T8392] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 467.670558][ T8392] BTRFS info (device loop7): trying to use backup root at mount time [ 467.714713][ T8392] BTRFS info (device loop7): metadata ratio 32769 [ 467.771919][ T8392] BTRFS info (device loop7): max_inline at 0 [ 467.820509][ T8392] BTRFS info (device loop7): using free space tree [ 467.854706][ T8392] BTRFS info (device loop7): has skinny extents [ 467.994655][ T8433] loop6: detected capacity change from 0 to 64 [ 468.066993][ T26] audit: type=1800 audit(1757139571.770:7): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.900" name="bus" dev="loop6" ino=21 res=0 errno=0 [ 468.202507][ T3080] BTRFS warning (device loop7): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 468.240010][ T8392] BTRFS warning (device loop7): failed to read root (objectid=2): -5 [ 468.345756][ T4377] BTRFS warning (device loop7): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 468.465790][ T8392] BTRFS warning (device loop7): couldn't read tree root [ 468.486338][ T8392] BTRFS error (device loop7): parent transid verify failed on 5255168 wanted 5 found 7 [ 468.541967][ T8392] BTRFS warning (device loop7): couldn't read tree root [ 469.402687][ T8465] loop6: detected capacity change from 0 to 1024 [ 469.514289][ T4259] Bluetooth: hci4: command 0x1009 tx timeout [ 469.515225][ T8465] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.555886][ T8392] BTRFS error (device loop7): open_ctree failed: -22 [ 469.701952][ T8465] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 469.804597][ T8457] loop5: detected capacity change from 0 to 32768 [ 469.843216][ T26] audit: type=1800 audit(1757139573.435:8): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.903" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 470.175272][ T8457] XFS (loop5): Mounting V5 Filesystem [ 470.294267][ T8457] XFS (loop5): Ending clean mount [ 470.317862][ T8457] XFS (loop5): Quotacheck needed: Please wait. [ 471.148545][ T8470] loop0: detected capacity change from 0 to 32768 [ 471.194228][ T8470] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.904 (8470) [ 471.234771][ T8457] XFS (loop5): Quotacheck: Done. [ 471.271805][ T8503] loop7: detected capacity change from 0 to 4096 [ 471.284037][ T8470] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 471.313825][ T8470] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 471.323704][ T8470] BTRFS info (device loop0): use zstd compression, level 3 [ 471.338461][ T8470] BTRFS info (device loop0): using free space tree [ 471.362413][ T8470] BTRFS info (device loop0): has skinny extents [ 471.375863][ T5347] XFS (loop5): Unmounting Filesystem [ 471.393333][ T8509] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 471.483295][ T26] audit: type=1800 audit(1757139574.969:9): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.907" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 471.505295][ T8473] Bluetooth: hci1: command 0x0406 tx timeout [ 471.597280][ T8506] loop6: detected capacity change from 0 to 4096 [ 471.844160][ T8503] NILFS (loop7): unrecognized mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ë(c—oö—ÈŽ‡Æl2vJËÿÿÿÿÿÿÿÿÿ" [ 471.894454][ T8470] BTRFS info (device loop0): enabling ssd optimizations [ 471.966020][ T8470] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 472.754454][ T8550] loop7: detected capacity change from 0 to 128 [ 472.909338][ T8550] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 472.958490][ T8550] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 473.264664][ T8550] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 473.457670][ T8550] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 475.305848][ T6840] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 475.323514][ T6840] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 475.348592][ T8580] loop0: detected capacity change from 0 to 4096 [ 476.690344][ T8593] ntfs3: loop0: ino=21, "file1" fallocate(0x20) is not supported [ 476.694483][ T8597] loop7: detected capacity change from 0 to 256 [ 477.235424][ T8604] loop5: detected capacity change from 0 to 128 [ 477.246124][ T8597] FAT-fs (loop7): Directory bread(block 64) failed [ 477.248886][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 477.259918][ T8597] FAT-fs (loop7): Directory bread(block 65) failed [ 477.274001][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 477.288900][ T8597] FAT-fs (loop7): Directory bread(block 66) failed [ 477.321541][ T8604] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 477.351391][ T8604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.360452][ T8597] FAT-fs (loop7): Directory bread(block 67) failed [ 477.373179][ T8597] FAT-fs (loop7): Directory bread(block 68) failed [ 477.430948][ T8597] FAT-fs (loop7): Directory bread(block 69) failed [ 477.466247][ T8597] FAT-fs (loop7): Directory bread(block 70) failed [ 477.616874][ T8597] FAT-fs (loop7): Directory bread(block 71) failed [ 477.647128][ T8597] FAT-fs (loop7): Directory bread(block 72) failed [ 477.709566][ T8597] FAT-fs (loop7): Directory bread(block 73) failed [ 478.136656][ T8594] loop3: detected capacity change from 0 to 32768 [ 479.403309][ T8612] loop5: detected capacity change from 0 to 32768 [ 480.615779][ T8618] loop0: detected capacity change from 0 to 32768 [ 480.907404][ T8612] (syz.5.923,8612,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 481.169533][ T8612] (syz.5.923,8612,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 483.188397][ T8223] Bluetooth: hci2: command 0x0406 tx timeout [ 483.415554][ T8673] loop7: detected capacity change from 0 to 1024 [ 484.634872][ T8673] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodiscard,acl,noinit_itable,,errors=continue. Quota mode: none. [ 484.773797][ T26] audit: type=1800 audit(1757139587.401:10): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.936" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 486.930100][ T8699] loop5: detected capacity change from 0 to 32768 [ 490.553202][ T8734] lo speed is unknown, defaulting to 1000 [ 490.560239][ T8734] vxcan1 speed is unknown, defaulting to 1000 [ 493.279213][ T8780] loop6: detected capacity change from 0 to 256 [ 493.378468][ T8780] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 493.454158][ T8780] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 493.657905][ T8787] loop7: detected capacity change from 0 to 512 [ 493.856173][ T8787] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 493.929684][ T8787] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 494.039616][ T8787] EXT4-fs error (device loop7): ext4_do_update_inode:5204: inode #2: comm syz.7.965: corrupted inode contents [ 494.117235][ T8787] EXT4-fs error (device loop7): ext4_dirty_inode:6040: inode #2: comm syz.7.965: mark_inode_dirty error [ 494.159367][ T8787] EXT4-fs error (device loop7): ext4_do_update_inode:5204: inode #2: comm syz.7.965: corrupted inode contents [ 494.196769][ T8787] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.965: mark_inode_dirty error [ 494.266838][ T8790] loop5: detected capacity change from 0 to 32768 [ 494.496943][ T8790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.967 (8790) [ 494.624353][ T8790] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 494.649345][ T8790] BTRFS info (device loop5): turning on sync discard [ 494.656092][ T8790] BTRFS info (device loop5): setting nodatacow, compression disabled [ 494.777518][ T8790] BTRFS info (device loop5): turning off barriers [ 494.830972][ T8790] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 495.113570][ T8790] BTRFS info (device loop5): trying to use backup root at mount time [ 495.143535][ T8790] BTRFS info (device loop5): metadata ratio 32769 [ 495.294167][ T8790] BTRFS info (device loop5): max_inline at 0 [ 495.393781][ T8790] BTRFS info (device loop5): using free space tree [ 495.656886][ T8790] BTRFS info (device loop5): has skinny extents [ 496.049112][ T8795] loop0: detected capacity change from 0 to 32768 [ 497.049096][ T8795] JBD2: recovery failed [ 497.053648][ T8795] (syz.0.968,8795,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 497.168734][ T8795] (syz.0.968,8795,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 497.215599][ T8795] (syz.0.968,8795,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 497.297026][ T8795] (syz.0.968,8795,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 497.372368][ T8795] (syz.0.968,8795,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 498.161099][ T8790] BTRFS error (device loop5): open_ctree failed: -12 [ 498.161554][ T7804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (7804) [ 498.566778][ T8870] sp0: Synchronizing with TNC [ 500.339502][ T8891] affs: No valid root block on device nullb0 [ 501.382412][ T8863] loop5: detected capacity change from 0 to 32768 [ 501.552642][ T8863] (syz.5.984,8863,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 501.560785][ T8863] (syz.5.984,8863,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 501.829231][ T8922] tipc: Enabling of bearer rejected, failed to enable media [ 503.571080][ T8941] affs: No valid root block on device nullb0 [ 506.789773][ T8970] tipc: Enabling of bearer rejected, failed to enable media [ 508.285333][ T8994] affs: No valid root block on device nullb0 [ 511.270961][ T9020] tipc: Enabling of bearer rejected, failed to enable media [ 514.533855][ T9072] tipc: Enabling of bearer rejected, failed to enable media [ 514.909924][ T9086] binder: 9085:9086 ioctl 4018620d 0 returned -22 [ 518.298762][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.305111][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.277553][ T9132] tipc: Enabling of bearer rejected, failed to enable media [ 524.595003][ T9180] tipc: Enabling of bearer rejected, failed to enable media [ 524.805047][ T9195] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 529.020747][ T9247] MPTCP: kernel_bind error, err=-98 [ 533.442737][ T9298] MPTCP: kernel_bind error, err=-98 [ 536.365104][ T9344] tap0: tun_chr_ioctl cmd 1074025677 [ 536.481713][ T9344] tap0: linktype set to 769 [ 539.366106][ T9394] MPTCP: kernel_bind error, err=-98 [ 541.530535][ T9423] bridge0: port 3(veth1_to_batadv) entered blocking state [ 541.648908][ T9423] bridge0: port 3(veth1_to_batadv) entered disabled state [ 541.755900][ T9423] device veth1_to_batadv entered promiscuous mode [ 541.764446][ T9423] bridge0: port 3(veth1_to_batadv) entered blocking state [ 541.772284][ T9423] bridge0: port 3(veth1_to_batadv) entered forwarding state [ 543.388374][ T9449] MPTCP: kernel_bind error, err=-98 [ 546.250233][ T9494] MPTCP: kernel_bind error, err=-98 [ 550.038277][ T9520] device syzkaller0 entered promiscuous mode [ 662.627238][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 662.634258][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9545/1:b..l [ 662.642893][ C1] (detected by 1, t=10502 jiffies, g=35045, q=71) [ 662.649413][ C1] task:syz.7.1200 state:R running task stack:27648 pid: 9545 ppid: 6985 flags:0x00004000 [ 662.661843][ C1] Call Trace: [ 662.665151][ C1] [ 662.668108][ C1] __schedule+0x11bb/0x4390 [ 662.672660][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 662.678678][ C1] ? release_firmware_map_entry+0x190/0x190 [ 662.684611][ C1] ? preempt_schedule+0xa7/0xb0 [ 662.689483][ C1] preempt_schedule_common+0x82/0xd0 [ 662.694794][ C1] preempt_schedule+0xa7/0xb0 [ 662.699494][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 662.705157][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 662.710213][ C1] preempt_schedule_thunk+0x16/0x18 [ 662.715445][ C1] _raw_spin_unlock+0x36/0x40 [ 662.720144][ C1] filemap_map_pages+0x1031/0x1390 [ 662.725333][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 662.730463][ C1] ? count_memcg_event_mm+0x311/0x360 [ 662.735861][ C1] ? verify_lock_unused+0x140/0x140 [ 662.741139][ C1] handle_mm_fault+0x2580/0x43c0 [ 662.746227][ C1] ? get_page+0xe0/0xe0 [ 662.750432][ C1] ? vmacache_find+0x238/0x590 [ 662.755222][ C1] ? find_vma+0xd2/0x230 [ 662.759494][ C1] do_user_addr_fault+0x489/0xc80 [ 662.764585][ C1] exc_page_fault+0x60/0x100 [ 662.769206][ C1] asm_exc_page_fault+0x22/0x30 [ 662.774095][ C1] RIP: 0033:0x7f4d8f1c3f0d [ 662.778533][ C1] RSP: 002b:00007ffdbd32e6c0 EFLAGS: 00010202 [ 662.784625][ C1] RAX: 000000110c340000 RBX: 00007f4d9004a720 RCX: 0000000000000004 [ 662.792618][ C1] RDX: 0000000000000024 RSI: 0000000000002e80 RDI: 0000000000000010 [ 662.800609][ C1] RBP: ffffffff812ba024 R08: 00007f4d8f51b038 R09: 00007f4d8f507000 [ 662.808606][ C1] R10: 00007f4d8ed54008 R11: 0000000000000000 R12: 0000000000000000 [ 662.816605][ C1] R13: 0000000000000000 R14: ffffffff812ba115 R15: 000000000000004d [ 662.824599][ C1] ? fpregs_assert_state_consistent+0x15/0xe0 [ 662.830697][ C1] ? switch_fpu_return+0xf4/0x1d0 [ 662.835767][ C1] [ 662.838816][ C1] rcu: rcu_preempt kthread starved for 10513 jiffies! g35045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 662.850035][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 662.860026][ C1] rcu: RCU grace-period kthread stack dump: [ 662.866154][ C1] task:rcu_preempt state:R running task stack:27584 pid: 15 ppid: 2 flags:0x00004000 [ 662.876972][ C1] Call Trace: [ 662.880273][ C1] [ 662.883230][ C1] __schedule+0x11bb/0x4390 [ 662.887870][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 662.893286][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 662.899212][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 662.905135][ C1] ? _raw_spin_unlock+0x40/0x40 [ 662.910021][ C1] ? rcu_is_watching+0x11/0xa0 [ 662.914812][ C1] ? release_firmware_map_entry+0x190/0x190 [ 662.920747][ C1] schedule+0x11b/0x1e0 [ 662.924930][ C1] schedule_timeout+0x15c/0x280 [ 662.929810][ C1] ? console_conditional_schedule+0x40/0x40 [ 662.935739][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 662.941920][ C1] ? update_process_times+0x200/0x200 [ 662.947334][ C1] ? prepare_to_swait_event+0x331/0x350 [ 662.952920][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 662.957817][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 662.964012][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 662.968812][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 662.974041][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 662.979266][ C1] rcu_gp_kthread+0x98/0x350 [ 662.983884][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 662.989025][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 662.994954][ C1] ? __kthread_parkme+0x157/0x1b0 [ 663.000024][ C1] kthread+0x436/0x520 [ 663.004138][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 663.009276][ C1] ? kthread_blkcg+0xd0/0xd0 [ 663.013897][ C1] ret_from_fork+0x1f/0x30 [ 663.018356][ C1] [ 663.021402][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 663.027737][ C1] Sending NMI from CPU 1 to CPUs 0: [ 663.032970][ C0] NMI backtrace for cpu 0 [ 663.032980][ C0] CPU: 0 PID: 9547 Comm: syz.5.1198 Not tainted syzkaller #0 [ 663.032997][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.033007][ C0] RIP: 0010:__lock_acquire+0xb70/0x7c60 [ 663.033031][ C0] Code: 48 c7 c0 88 c1 69 8d 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 bb 61 00 00 83 3d f3 b8 0d 0c 00 0f 84 95 0f 00 00 83 7c 24 68 00 <0f> 84 d4 01 00 00 48 8b 44 24 58 42 0f b6 04 00 84 c0 0f 85 ee 5c [ 663.033046][ C0] RSP: 0018:ffffc900033dfa40 EFLAGS: 00000046 [ 663.033061][ C0] RAX: 0000000000000000 RBX: ffff88802b01e428 RCX: 0000000000000001 [ 663.033073][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffbb0c0 [ 663.033084][ C0] RBP: ffffc900033dfc90 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 663.033097][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88802b01e450 [ 663.033110][ C0] R13: ffff88802b01d940 R14: 0000000000000000 R15: ffff88802b01e430 [ 663.033122][ C0] FS: 00007f66e13b06c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 663.033137][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.033148][ C0] CR2: 000000110c33e87b CR3: 0000000060e25000 CR4: 00000000003506f0 [ 663.033163][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 663.033173][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 663.033183][ C0] Call Trace: [ 663.033188][ C0] [ 663.033195][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 663.033232][ C0] ? verify_lock_unused+0x140/0x140 [ 663.033254][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 663.033271][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 663.033288][ C0] ? verify_lock_unused+0x140/0x140 [ 663.033306][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 663.033326][ C0] ? _local_bh_enable+0xa0/0xa0 [ 663.033340][ C0] ? rcu_is_watching+0x11/0xa0 [ 663.033359][ C0] lock_acquire+0x197/0x3f0 [ 663.033376][ C0] ? rcu_lock_acquire+0x5/0x30 [ 663.033391][ C0] ? _copy_from_user+0x111/0x170 [ 663.033416][ C0] ? read_lock_is_recursive+0x10/0x10 [ 663.033435][ C0] ? ___might_sleep+0x600/0x600 [ 663.033453][ C0] ? __context_tracking_exit+0x4c/0x80 [ 663.033474][ C0] rcu_lock_acquire+0x2a/0x30 [ 663.033488][ C0] ? rcu_lock_acquire+0x5/0x30 [ 663.033501][ C0] bpf_trace_run2+0x97/0x2d0 [ 663.033521][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 663.033539][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 663.033559][ C0] ? lock_chain_count+0x20/0x20 [ 663.033579][ C0] __bpf_trace_sys_enter+0x60/0x70 [ 663.033599][ C0] trace_sys_enter+0x65/0x80 [ 663.033616][ C0] syscall_trace_enter+0x115/0x180 [ 663.033636][ C0] do_syscall_64+0x24/0xa0 [ 663.033650][ C0] ? clear_bhb_loop+0x30/0x80 [ 663.033666][ C0] ? clear_bhb_loop+0x30/0x80 [ 663.033682][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.033699][ C0] RIP: 0033:0x7f66e3105db9 [ 663.033713][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 663.033727][ C0] RSP: 002b:00007f66e13afb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 663.033743][ C0] RAX: ffffffffffffffda RBX: 00007f66e33a1098 RCX: 00007f66e3105db9 [ 663.033755][ C0] RDX: 00007f66e13afb40 RSI: 00007f66e13afc70 RDI: 0000000000000011 [ 663.033766][ C0] RBP: 00007f66e33a1090 R08: 0000000000000000 R09: 0000000000000000 [ 663.033777][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.033787][ C0] R13: 00007f66e33a1128 R14: 00007fffb0609be0 R15: 00007fffb0609cc8 [ 663.033807][ C0]