last executing test programs: 1m55.219670723s ago: executing program 1 (id=113): socket(0x28, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/265, 0x0, 0x3000}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) r9 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000000c0)={0x0, r9}) 1m52.316993926s ago: executing program 1 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmmsg(r0, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="0d652c1aa3b2a80e6e0136deb7e056acc530d75d3ff6047bfaff9d56065225e6f1124189009742b84c33acf28d600bc129e5f5f093b6b767df119493db9cbef9526086969356aefcc1543676b03d9911dae25107c76338db86b81524226a760775934d1a61294123716f100037d8971f1ebe3707cac31a9e1cfa0a12471443eb0376392c7191f9ae7b73638b6a8b15a7677beb474ed7f57071425af733f70950e1e7638e84dd59f5565d9554be80a192e2f5cf5a", 0xb4}, {&(0x7f0000001a80)="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", 0x4e2}, {0x0}, {0x0}], 0x4, &(0x7f0000002a80)}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a40)="7eed0a7bb91d102d29c5e0", 0xb}], 0x1}}], 0x2, 0x44080) 1m51.55767137s ago: executing program 1 (id=119): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x67f) 1m46.164705095s ago: executing program 1 (id=140): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b84bbd3dac3e930a9415896c6df263d03fc564e4176752b545ce4359511759539782eee8b86ec3639639e5e4f3210e37938858872f670"}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 1m45.28613158s ago: executing program 32 (id=140): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b84bbd3dac3e930a9415896c6df263d03fc564e4176752b545ce4359511759539782eee8b86ec3639639e5e4f3210e37938858872f670"}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 15.947759217s ago: executing program 5 (id=373): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="009d0e609c62517a68813f6b578e2fd2b349823558145159a317949dcbd54be4c36b6f14857fbb1963983b808b676663bb5e55330899648c7f63eb159926f6b541adc762bfd60e00247eda5373d9d7c8084d4bc2aab5abcea10f3526dac0abdf5e6ff7d4bec8b703be45c710eadcc7d384775276a3ce3e043e0fa4b684f56e8a4a5c628e25393cf7883c90532fe96490a3cf734421991574c1bd33ae90f20fddb872101a0de2e9689df0fe1295d3946fdd6a9c91"], 0x1, 0x483, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r1, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 14.656286033s ago: executing program 5 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x9, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1}) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 11.779304163s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) lseek(0xffffffffffffffff, 0x0, 0x3) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 11.321879788s ago: executing program 5 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r6, &(0x7f00000007c0)=""/29, 0x1d, 0x9) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b84bbd3dac3e930a9415896c6df263d03fc564e4176752b545ce4359511759539782eee8b86ec3639639e5e4f3210e37938858872f670"}, 0x42) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="6e02c49f365031924ea6699facb1a3bb72dde352b13f67fc75cce90c802f06a53b75f5b4649c005296d43efc5b6c6281d208125615fff674d9e0cb48a20244e970c4e5838f749d092f704de87680ca884ff071bf5c", 0x55}, {&(0x7f0000000700)="dcbb2ec18acf2ae030d6a84ba8ddf8e1bfa6e999b2", 0x15}], 0x2, 0x0, 0x0, 0x6000004}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 9.213071993s ago: executing program 4 (id=386): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000840)={0x1, 0x100, 0x4, 0x7fff, 0x8}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 9.148774029s ago: executing program 5 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xca, &(0x7f0000000300)=""/202}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x0) open(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x20000023892) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfd6577c64122d8c, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xc, 0x5, 0x80, 0x7}, {0x1, 0x5, 0x6c, 0x60}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, {0xa, 0x4, @random="7bfc5917dd62"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) 8.993996454s ago: executing program 2 (id=389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x5fb5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) io_setup(0x409, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f00000000c0)="01", 0x1}]) 8.993836925s ago: executing program 4 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)) 7.238860965s ago: executing program 3 (id=393): r0 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000840)=[{0x0, 0x0, 0x0, 0x0}, {0x800, 0x11, 0x0, 0x0}], 0x2}) 7.149542314s ago: executing program 3 (id=394): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00010, 0x1f, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.769994811s ago: executing program 4 (id=395): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) listen(r5, 0x3) 6.693083509s ago: executing program 0 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) lseek(0xffffffffffffffff, 0x0, 0x3) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 6.555357862s ago: executing program 3 (id=397): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r1 = timerfd_create(0x0, 0x0) r2 = dup(r1) read$eventfd(r2, &(0x7f0000001280), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.41429979s ago: executing program 0 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r6, &(0x7f00000007c0)=""/29, 0x1d, 0x9) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b84bbd3dac3e930a9415896c6df263d03fc564e4176752b545ce4359511759539782eee8b86ec3639639e5e4f3210e37938858872f670"}, 0x42) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="6e02c49f365031924ea6699facb1a3bb72dde352b13f67fc75cce90c802f06a53b75f5b4649c005296d43efc5b6c6281d208125615fff674d9e0cb48a20244e970c4e5838f749d092f704de87680ca884ff071bf5c", 0x55}, {&(0x7f0000000700)="dcbb2ec18acf2ae030d6a84ba8ddf8e1bfa6e999b2", 0x15}], 0x2, 0x0, 0x0, 0x6000004}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 4.41384721s ago: executing program 4 (id=399): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x20}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0xfffffffffffffffe) unshare(0x20040600) pwritev(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xab, &(0x7f0000000000), &(0x7f0000000240)=0x4) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x80000001, 0x4) ioctl$PPPIOCGUNIT(r2, 0x80047456, 0x0) 4.31453002s ago: executing program 4 (id=400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000340)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.219440089s ago: executing program 3 (id=401): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001"], 0xdc}}, 0x0) 3.985924932s ago: executing program 3 (id=402): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x2, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0x8, "ee0dd9de36ed"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_PROPBIT(r4, 0x5501, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r5, 0x0, &(0x7f0000000940)) 3.384429031s ago: executing program 0 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) syz_open_pts(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.197343209s ago: executing program 2 (id=404): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x38}}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='c', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000001400)=""/86, 0x56, &(0x7f0000000140)={&(0x7f0000000100)={'hmac(sha256)\x00'}}) 3.149297174s ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 2.958016822s ago: executing program 5 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) r0 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0xfffffffd, 0x3ca}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r1, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 2.957730002s ago: executing program 2 (id=407): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00010, 0x1f, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.1624361s ago: executing program 0 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) lseek(0xffffffffffffffff, 0x0, 0x3) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1.616878443s ago: executing program 2 (id=409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1ffb}]}) pipe(&(0x7f0000000440)) 1.117053631s ago: executing program 0 (id=410): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) listen(r5, 0x3) 1.013993291s ago: executing program 5 (id=411): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r1 = timerfd_create(0x0, 0x0) r2 = dup(r1) read$eventfd(r2, &(0x7f0000001280), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.006501822s ago: executing program 2 (id=412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x8d}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 101.97012ms ago: executing program 2 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r6, &(0x7f00000007c0)=""/29, 0x1d, 0x9) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b84bbd3dac3e930a9415896c6df263d03fc564e4176752b545ce4359511759539782eee8b86ec3639639e5e4f3210e37938858872f670"}, 0x42) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="6e02c49f365031924ea6699facb1a3bb72dde352b13f67fc75cce90c802f06a53b75f5b4649c005296d43efc5b6c6281d208125615fff674d9e0cb48a20244e970c4e5838f749d092f704de87680ca884ff071bf5c", 0x55}, {&(0x7f0000000700)="dcbb2ec18acf2ae030d6a84ba8ddf8e1bfa6e999b2", 0x15}], 0x2, 0x0, 0x0, 0x6000004}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 0s ago: executing program 0 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x5fb5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) io_setup(0x409, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f00000000c0)="01", 0x1}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. syzkaller login: [ 58.966056][ T4154] cgroup: Unknown subsys name 'net' [ 59.113929][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.571879][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.908535][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 61.994486][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 62.088866][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 62.099238][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.106321][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.114953][ T4165] device bridge_slave_0 entered promiscuous mode [ 62.152022][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.159416][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.167670][ T4165] device bridge_slave_1 entered promiscuous mode [ 62.218020][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 62.230823][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.238340][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.247018][ T4172] device bridge_slave_0 entered promiscuous mode [ 62.273488][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.287038][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.296952][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.305106][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.313129][ T4172] device bridge_slave_1 entered promiscuous mode [ 62.336025][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 62.398538][ T4165] team0: Port device team_slave_0 added [ 62.418579][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.441559][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.448819][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.456961][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.466639][ T4165] team0: Port device team_slave_1 added [ 62.477135][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.499109][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.506324][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.514658][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.578250][ T4172] team0: Port device team_slave_0 added [ 62.584387][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.591851][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.600227][ T4174] device bridge_slave_0 entered promiscuous mode [ 62.615707][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.622868][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.649174][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.670641][ T4172] team0: Port device team_slave_1 added [ 62.676612][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.683796][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.691802][ T4174] device bridge_slave_1 entered promiscuous mode [ 62.701224][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.710975][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.717985][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.744082][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.779891][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.800180][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.807499][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.815409][ T4176] device bridge_slave_0 entered promiscuous mode [ 62.841388][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.853124][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.863798][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.871303][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.879608][ T4176] device bridge_slave_1 entered promiscuous mode [ 62.887432][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.894475][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.921024][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.970896][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.978194][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.004363][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.019199][ T4169] team0: Port device team_slave_0 added [ 63.039363][ T4174] team0: Port device team_slave_0 added [ 63.070474][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.083791][ T4169] team0: Port device team_slave_1 added [ 63.090835][ T4174] team0: Port device team_slave_1 added [ 63.101295][ T4165] device hsr_slave_0 entered promiscuous mode [ 63.108309][ T4165] device hsr_slave_1 entered promiscuous mode [ 63.125693][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.200932][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.208224][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.235813][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.250487][ T4172] device hsr_slave_0 entered promiscuous mode [ 63.257433][ T4172] device hsr_slave_1 entered promiscuous mode [ 63.264126][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.272324][ T4172] Cannot create hsr debugfs directory [ 63.280753][ T4176] team0: Port device team_slave_0 added [ 63.288089][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.295071][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.321536][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.341687][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.348871][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.376207][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.390393][ T4176] team0: Port device team_slave_1 added [ 63.401198][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.408723][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.435176][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.499670][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.506846][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.535958][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.541499][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 63.549391][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.559954][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.586395][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.607423][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.627409][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.660370][ T4174] device hsr_slave_0 entered promiscuous mode [ 63.668670][ T4174] device hsr_slave_1 entered promiscuous mode [ 63.675253][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.682972][ T4174] Cannot create hsr debugfs directory [ 63.688583][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.698467][ T4156] Bluetooth: hci4: command 0x0409 tx timeout [ 63.710262][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.717205][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.724760][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.732462][ T4169] Cannot create hsr debugfs directory [ 63.764380][ T4176] device hsr_slave_0 entered promiscuous mode [ 63.771399][ T4176] device hsr_slave_1 entered promiscuous mode [ 63.778906][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.786481][ T4176] Cannot create hsr debugfs directory [ 64.067542][ T4165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.082146][ T4165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.103004][ T4165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.120148][ T4165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.141767][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.166442][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.189939][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.209044][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.274415][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.308683][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.321717][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.349976][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.361103][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.393659][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.403802][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.418549][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.440369][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.449954][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.460144][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.467486][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.476310][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.486232][ T4176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.500625][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.523256][ T4176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.542356][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.551569][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.570078][ T4176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.580444][ T4176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.603753][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.612484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.622255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.631920][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.639308][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.648559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.690359][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.703311][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.718566][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.729597][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.739094][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.748022][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.755250][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.764715][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.775501][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.785045][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.794258][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.806496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.818792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.828206][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.835678][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.848715][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.878275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.889807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.903414][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.913370][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.924914][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.966529][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.978776][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.016414][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.030225][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.044865][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.054196][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.071208][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.085720][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.095032][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.106341][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.115304][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.125217][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.139401][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.161031][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.193974][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.203921][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.231460][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.243718][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.253300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.261446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.271368][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.300851][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.312256][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.322442][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.336871][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.350789][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.366169][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.379288][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.390863][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.401768][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.408927][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.438360][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.451720][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.460878][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.472936][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.482601][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.489734][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.499816][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.508916][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.518707][ T1432] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.525779][ T1432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.533784][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.543659][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.552671][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.561715][ T1432] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.569010][ T1432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.578719][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.607590][ T4207] Bluetooth: hci0: command 0x041b tx timeout [ 65.612616][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.633964][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.663212][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.674472][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.684295][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.687829][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 65.692599][ T4206] Bluetooth: hci1: command 0x041b tx timeout [ 65.705795][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.713921][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.722341][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.731905][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.742600][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.750510][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.758476][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.767166][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.767646][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 65.775707][ T4206] Bluetooth: hci4: command 0x041b tx timeout [ 65.788395][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.796729][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.805417][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.816473][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.837760][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.849972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.861185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.870744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.880712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.890047][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.897167][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.932908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.966750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.981489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.998609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.008083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.017079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.026140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.046334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.055911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.064856][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.071979][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.082926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.101127][ T4165] device veth0_vlan entered promiscuous mode [ 66.124539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.133321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.143148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.155562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.173843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.182829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.193069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.202145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.211924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.220854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.230523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.239471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.247651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.255481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.264694][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.286221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.296456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.306668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.318811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.343027][ T4165] device veth1_vlan entered promiscuous mode [ 66.355747][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.369209][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.382065][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.393475][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.403942][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.413588][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.423248][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.437130][ T4172] device veth0_vlan entered promiscuous mode [ 66.454668][ T4172] device veth1_vlan entered promiscuous mode [ 66.469453][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.480529][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.493083][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.503760][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.513837][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.524553][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.535387][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.557175][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.586368][ T4165] device veth0_macvtap entered promiscuous mode [ 66.625939][ T4165] device veth1_macvtap entered promiscuous mode [ 66.640407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.654627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.665047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.673948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.717804][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.727766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.735513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.748085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.757214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.773895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.785819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.799939][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.823233][ T4172] device veth0_macvtap entered promiscuous mode [ 66.840605][ T4172] device veth1_macvtap entered promiscuous mode [ 66.849116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.859847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.868023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.876999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.892379][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.917961][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.927746][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.941091][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.951399][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.961381][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.971380][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.982334][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.993057][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.003707][ T4176] device veth0_vlan entered promiscuous mode [ 67.015006][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.027055][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.042395][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.058852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.068755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.084051][ T4176] device veth1_vlan entered promiscuous mode [ 67.094474][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.105322][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.117425][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.125994][ T4165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.136494][ T4165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.145622][ T4165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.155010][ T4165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.172726][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.183306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.192624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.204137][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.213084][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222624][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231715][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.273002][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.282410][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.339117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.351659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.369215][ T4169] device veth0_vlan entered promiscuous mode [ 67.397153][ T4176] device veth0_macvtap entered promiscuous mode [ 67.414417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.423909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.435267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.444566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.455952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.474112][ T4169] device veth1_vlan entered promiscuous mode [ 67.515989][ T4176] device veth1_macvtap entered promiscuous mode [ 67.552043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.566199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.574886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.583780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.592900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.653732][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.665673][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.676472][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.687793][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 67.691769][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.705380][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.714222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.723024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.731640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.740887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.754137][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.761864][ T4169] device veth0_macvtap entered promiscuous mode [ 67.764082][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.776864][ T4209] Bluetooth: hci2: command 0x040f tx timeout [ 67.778078][ T4206] Bluetooth: hci1: command 0x040f tx timeout [ 67.783338][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.790269][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.809966][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.823103][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.833789][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.844550][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.854881][ T4209] Bluetooth: hci3: command 0x040f tx timeout [ 67.858682][ T4204] Bluetooth: hci4: command 0x040f tx timeout [ 67.863280][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.881726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.890852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.899520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.908182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.916910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.926062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.936200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.954410][ T4174] device veth0_vlan entered promiscuous mode [ 67.964939][ T4169] device veth1_macvtap entered promiscuous mode [ 67.982000][ T4176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.991923][ T4176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.001182][ T4176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.012028][ T4176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.023542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.033586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.042744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.059969][ T4174] device veth1_vlan entered promiscuous mode [ 68.069975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.125882][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.129391][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.143662][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.154450][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.185351][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.196788][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.207777][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.222247][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.235603][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.251123][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.271593][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.292532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.304036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.315081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.331471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.373259][ T4174] device veth0_macvtap entered promiscuous mode [ 68.395632][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.428415][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.447411][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.470540][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.484367][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.500086][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.513903][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.522907][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.533103][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.542889][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.552491][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.562392][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.584455][ T4174] device veth1_macvtap entered promiscuous mode [ 68.661466][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.699825][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.716936][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.745094][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.784374][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.857949][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.893026][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.921594][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.925404][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.953593][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.966494][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.980130][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.994283][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.180207][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.590078][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.798974][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.812254][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.831156][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.844513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.853390][ T1106] Bluetooth: hci1: command 0x0419 tx timeout [ 69.854447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.863003][ T1106] Bluetooth: hci2: command 0x0419 tx timeout [ 69.876992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.885813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.900927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.967617][ T4207] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.981568][ T1106] Bluetooth: hci4: command 0x0419 tx timeout [ 69.984458][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.989657][ T1106] Bluetooth: hci3: command 0x0419 tx timeout [ 70.020473][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.031109][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.042584][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.052509][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.063657][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.073758][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.084718][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.099614][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.125099][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.154606][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.385670][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.405455][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.428413][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.467805][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110610][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.153195][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.210936][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.329021][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.337043][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.109091][ T4207] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 72.114260][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.118756][ T4207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.135543][ T4207] usb 5-1: Product: syz [ 72.142186][ T4207] usb 5-1: Manufacturer: syz [ 72.206027][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.265587][ T4207] usb 5-1: config 0 descriptor?? [ 72.421927][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.642517][ T4207] usb 5-1: can't set config #0, error -71 [ 72.750870][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.028245][ T4207] usb 5-1: USB disconnect, device number 2 [ 73.066198][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.082323][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.301303][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.345224][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.377854][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.394417][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.430545][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.657321][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 73.798685][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.823509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.881676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.935382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.945818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.973759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.992037][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.017908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.026925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.086900][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.662817][ T4301] sched: RT throttling activated [ 77.555155][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 77.577399][ T7] usb 1-1: can't read configurations, error -71 [ 78.647130][ T4317] device syz_tun entered promiscuous mode [ 78.663474][ T4317] device macsec1 entered promiscuous mode [ 78.684506][ T4317] device syz_tun left promiscuous mode [ 80.681646][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 81.569951][ T1323] cfg80211: failed to load regulatory.db [ 82.625373][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 84.002226][ T4385] Zero length message leads to an empty skb [ 85.597726][ T4404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.616534][ T4405] loop2: detected capacity change from 0 to 16 [ 86.645653][ T4405] erofs: (device loop2): mounted with root inode @ nid 36. [ 86.706374][ T4412] loop4: detected capacity change from 0 to 2048 [ 87.065805][ T4418] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 87.076735][ T4418] attempt to access beyond end of device [ 87.076735][ T4418] loop2: rw=524288, want=34359740336, limit=16 [ 87.289301][ T4416] loop1: detected capacity change from 0 to 4096 [ 87.325411][ T4412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.036050][ T4427] netlink: 288 bytes leftover after parsing attributes in process `syz.2.52'. [ 88.758952][ T4432] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 92.777441][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.134314][ T4519] QAT: Device 8 not found [ 97.670078][ T4529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 99.565388][ T4533] loop2: detected capacity change from 0 to 32768 [ 99.585479][ T4562] [U] [ 99.588484][ T4562] [U] [ 99.604076][ T4562] [U] B-lrj[ќ6}%4 h@k-YLeU@f%Peze,9F* [ 99.608134][ T4533] ======================================================= [ 99.608134][ T4533] WARNING: The mand mount option has been deprecated and [ 99.608134][ T4533] and is ignored by this kernel. Remove the mand [ 99.608134][ T4533] option from the mount to silence this warning. [ 99.608134][ T4533] ======================================================= [ 99.656700][ T4562] [U] Cw* 9JQ#esWCv1! GpX [ 99.855792][ T4562] [U] n%9C_nBc$4( [ 99.861412][ T4562] [U] h q؛toRI#TNBs_R櫰:t 0W_[Hn% [ 100.209927][ T4562] [U] 4RЛ<)6jG؃K^R\ [ 100.216601][ T4562] [U] 7R:j37 [ 100.240144][ T4562] [U] yPDyj>|h0=TXZY֦ʢĚ4i5Az~Za~k^tGsJI:OD!M2KWR>KC?x8H*@Qeۻu .j9ȓ~{`'r)-Ǭ=5֝JLy CB;+LP,fnY%3p&)][ȋ4l㶣!J> [ 100.284191][ T4533] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.383307][ T4562] [U] .CeJj@KJ605RxUTTO&XO\&N%y176`Iw [ 100.408217][ T26] audit: type=1800 audit(1730513671.725:2): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 100.434133][ T4562] [U] M<@nkJ(6))Vlr [ 100.605938][ T4174] ocfs2: Unmounting device (7,2) on (node local) [ 100.997339][ T4268] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.630938][ T4268] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 102.177816][ T4268] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.436691][ T4268] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.451041][ T4268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.774555][ T4268] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.921456][ T4268] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.933276][ T4268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.017496][ T4268] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.026418][ T4268] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.046829][ T4268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.153230][ T4268] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.193577][ T4268] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.266520][ T4268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.258648][ T4268] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.296280][ T4268] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.383563][ T4621] loop4: detected capacity change from 0 to 256 [ 104.580060][ T4268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.600667][ T4621] FAT-fs (loop4): Unrecognized mount option "uni_xl" or missing value [ 104.924603][ T4268] usb 4-1: unable to read config index 5 descriptor/start: -71 [ 104.932567][ T4268] usb 4-1: can't read configurations, error -71 [ 108.409287][ T4658] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 110.185539][ T4668] loop1: detected capacity change from 0 to 512 [ 110.272099][ T4668] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.149949][ T4668] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.478190][ T4668] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.013097][ T4668] EXT4-fs (loop1): 1 truncate cleaned up [ 112.094337][ T4668] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,noquota,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: none. [ 114.210766][ T1181] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.629783][ T1181] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.747418][ T4208] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.840367][ T1181] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.037532][ T4208] usb 3-1: Using ep0 maxpacket: 16 [ 115.125027][ T1181] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.188010][ T4208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.188161][ T4208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.188419][ T4208] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 115.188558][ T4208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.267062][ T4208] usb 3-1: config 0 descriptor?? [ 117.760531][ T4733] loop3: detected capacity change from 0 to 4096 [ 117.773831][ T4204] Bluetooth: hci4: command 0x0409 tx timeout [ 119.038923][ T4208] usbhid 3-1:0.0: can't add hid device: -71 [ 119.045257][ T4208] usbhid: probe of 3-1:0.0 failed with error -71 [ 119.113308][ T4208] usb 3-1: USB disconnect, device number 2 [ 119.807130][ T4728] chnl_net:caif_netlink_parms(): no params data found [ 119.944463][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 120.095513][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.115199][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.131517][ T4728] device bridge_slave_0 entered promiscuous mode [ 121.136888][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.144157][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.152374][ T4728] device bridge_slave_1 entered promiscuous mode [ 121.180189][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.191910][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.223083][ T4728] team0: Port device team_slave_0 added [ 121.232232][ T4728] team0: Port device team_slave_1 added [ 121.327530][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.356373][ T4796] syz.2.153 uses obsolete (PF_INET,SOCK_PACKET) [ 121.379002][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.506322][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.599424][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.606491][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.745980][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.445924][ T4821] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 122.533394][ T4822] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 122.593706][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 122.608803][ T4822] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 122.629732][ T4822] bond1: (slave xfrm1): making interface the new active one [ 122.676106][ T4822] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 122.721132][ T4728] device hsr_slave_0 entered promiscuous mode [ 122.729737][ T4728] device hsr_slave_1 entered promiscuous mode [ 122.791219][ T4728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.808701][ T4728] Cannot create hsr debugfs directory [ 124.755698][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 124.829382][ T4859] loop2: detected capacity change from 0 to 512 [ 125.337147][ T1181] device hsr_slave_0 left promiscuous mode [ 125.409877][ T1181] device hsr_slave_1 left promiscuous mode [ 125.501204][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.574874][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.742080][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.777431][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.878172][ T1181] device bridge_slave_1 left promiscuous mode [ 125.896242][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.021934][ T1181] device bridge_slave_0 left promiscuous mode [ 126.059740][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.138487][ T4877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.194196][ T1181] device veth1_macvtap left promiscuous mode [ 126.201022][ T1181] device veth0_macvtap left promiscuous mode [ 126.207151][ T1181] device veth1_vlan left promiscuous mode [ 126.213384][ T1181] device veth0_vlan left promiscuous mode [ 129.515012][ T4907] loop0: detected capacity change from 0 to 1024 [ 129.776882][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 130.931828][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 130.980111][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 131.150751][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.317148][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.726571][ T1181] bond0 (unregistering): Released all slaves [ 131.793486][ T4913] loop3: detected capacity change from 0 to 32768 [ 131.894612][ T4728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.951940][ T4728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.983957][ T4924] loop2: detected capacity change from 0 to 256 [ 132.043575][ T4728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.094387][ T4913] XFS (loop3): Mounting V5 Filesystem [ 132.726655][ T4728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.743534][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768199][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.020069][ T4913] XFS (loop3): log mount failed [ 133.719920][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.782357][ T4938] loop0: detected capacity change from 0 to 16 [ 133.805954][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.838573][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.871376][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.882588][ T4938] erofs: (device loop0): mounted with root inode @ nid 36. [ 133.951417][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.962686][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.971942][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.979073][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.987806][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.996740][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.006728][ T1432] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.013898][ T1432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.147989][ T4938] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 134.158351][ T4938] attempt to access beyond end of device [ 134.158351][ T4938] loop0: rw=524288, want=34359740336, limit=16 [ 134.264786][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.276467][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.696618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.985893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.034891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.074287][ T4209] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.087312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.124293][ T4728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.154622][ T4957] loop2: detected capacity change from 0 to 256 [ 135.185453][ T4728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.379933][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.394294][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.403149][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.419706][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.709915][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.884490][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.002381][ T4958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.107085][ T4958] device batadv_slave_0 entered promiscuous mode [ 136.257577][ T4209] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 136.275932][ T4209] usb 5-1: config 0 has no interface number 0 [ 136.282382][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.451389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.457875][ T4209] usb 5-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=c2.95 [ 136.466630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.499378][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.505283][ T4984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.524199][ T4209] usb 5-1: Product: syz [ 136.525734][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.543639][ T4209] usb 5-1: Manufacturer: syz [ 136.573795][ T4209] usb 5-1: SerialNumber: syz [ 136.603522][ T4209] usb 5-1: config 0 descriptor?? [ 136.659553][ T4208] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 136.669618][ T4209] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 136.672834][ T4208] Bluetooth: hci3: Injecting HCI hardware error event [ 136.719239][ T4166] Bluetooth: hci3: hardware error 0x00 [ 137.188911][ T4209] gspca_vc032x: reg_r err -110 [ 137.193928][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.219186][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.248566][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.278064][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.307874][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.341272][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.371018][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.400089][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.430175][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.460274][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.489332][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.519744][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.548480][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.599868][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.605595][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.634345][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.661944][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.689739][ T4209] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.695231][ T4209] gspca_vc032x: Unknown sensor... [ 137.725351][ T4209] vc032x: probe of 5-1:0.6 failed with error -22 [ 137.863156][ T4209] usb 5-1: USB disconnect, device number 3 [ 138.019124][ T5003] loop4: detected capacity change from 0 to 16 [ 140.183116][ T5003] erofs: (device loop4): mounted with root inode @ nid 36. [ 140.199670][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.243468][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.774993][ T5003] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 140.775058][ T5003] attempt to access beyond end of device [ 140.775058][ T5003] loop4: rw=524288, want=34359740336, limit=16 [ 141.008791][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.009626][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.010472][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.011081][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.030839][ T4728] device veth0_vlan entered promiscuous mode [ 141.108294][ T4728] device veth1_vlan entered promiscuous mode [ 141.187909][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.278225][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.337695][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.346735][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.574319][ T4728] device veth0_macvtap entered promiscuous mode [ 142.677364][ T5042] process 'syz.0.211' launched './file0' with NULL argv: empty string added [ 143.556527][ T4728] device veth1_macvtap entered promiscuous mode [ 143.826145][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.955754][ T5053] use of bytesused == 0 is deprecated and will be removed in the future, [ 143.964766][ T5053] use the actual size instead. [ 144.192869][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.094913][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.187265][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.257238][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.349387][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.389106][ T5063] loop0: detected capacity change from 0 to 16 [ 145.407080][ T5061] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 145.443325][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.480580][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.624011][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.679802][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.691039][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.701728][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.712819][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.722702][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.733495][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.900466][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.076155][ T5063] erofs: (device loop0): mounted with root inode @ nid 36. [ 146.114443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.212712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.510295][ T5063] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 146.517540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.520710][ T5063] attempt to access beyond end of device [ 146.520710][ T5063] loop0: rw=524288, want=34359740336, limit=16 [ 146.725132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.780855][ T4728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.807254][ T4728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.815993][ T4728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.882105][ T4728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.171835][ T4719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.198484][ T4719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.216976][ T5084] loop4: detected capacity change from 0 to 1024 [ 147.284889][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.329213][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.357579][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.391215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.527642][ T4310] Bluetooth: hci5: command 0x1003 tx timeout [ 147.533846][ T4166] Bluetooth: hci5: sending frame failed (-49) [ 147.564134][ T5084] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.575634][ T5084] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.587585][ T5084] EXT4-fs (loop4): Ignoring removed orlov option [ 147.627772][ T5084] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 149.771146][ T4237] Bluetooth: hci5: command 0x1001 tx timeout [ 149.778282][ T4166] Bluetooth: hci5: sending frame failed (-49) [ 149.858614][ T5084] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 150.209343][ T5084] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 151.675511][ T5151] netlink: 84 bytes leftover after parsing attributes in process `syz.0.237'. [ 151.863936][ T4204] Bluetooth: hci5: command 0x1009 tx timeout [ 151.963079][ T5170] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 153.100503][ T5175] loop5: detected capacity change from 0 to 4096 [ 153.644698][ T5175] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 159.215471][ T5220] loop4: detected capacity change from 0 to 512 [ 159.216227][ T5175] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 159.244418][ T5175] ntfs3: loop5: Failed to load $Extend. [ 159.265257][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 159.414646][ T5232] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 159.747412][ T5220] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.095534][ T5220] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.318462][ T5241] loop2: detected capacity change from 0 to 1024 [ 160.484479][ T5241] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.636308][ T5241] EXT4-fs (loop2): Ignoring removed orlov option [ 160.709046][ T5241] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 161.603920][ T5257] device ipvlan2 entered promiscuous mode [ 161.688534][ T5241] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 161.718327][ T5257] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 161.756881][ T5257] team0: Device ipvlan2 is already an upper device of the team interface [ 161.817713][ T5259] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 164.678540][ T5283] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 166.611315][ T5309] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 168.320985][ T5323] loop4: detected capacity change from 0 to 1024 [ 168.697472][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.543795][ T5353] loop0: detected capacity change from 0 to 128 [ 170.723656][ T5353] EXT4-fs (loop0): Test dummy encryption mode enabled [ 170.747339][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.753338][ T5360] loop3: detected capacity change from 0 to 1024 [ 170.757336][ T4310] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.822509][ T5353] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 170.838084][ T5360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.845074][ T5360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.873110][ T5353] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.911848][ T5360] EXT4-fs (loop3): Ignoring removed orlov option [ 170.972508][ T5360] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 171.147749][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 171.158785][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 171.168303][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.220687][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.240166][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.254151][ T21] usb 3-1: config 0 descriptor?? [ 171.278248][ T4310] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.302665][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.382980][ T5381] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 171.867878][ T5383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 172.181696][ T4310] usb 5-1: config 0 descriptor?? [ 172.383549][ T21] ath6kl: Failed to submit usb control message: -71 [ 172.400649][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 172.440743][ T21] ath6kl: Unable to send get target info: -71 [ 173.723706][ T4310] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 173.924846][ T21] ath6kl: Failed to init ath6kl core: -71 [ 174.359084][ T4310] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 [ 174.785561][ T4310] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 176.870454][ T4310] usb 5-1: USB disconnect, device number 4 [ 176.885155][ T21] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 176.896837][ T21] usb 3-1: USB disconnect, device number 3 [ 176.925910][ T5421] loop2: detected capacity change from 0 to 128 [ 177.042217][ T5421] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.072882][ T5421] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 177.095138][ T5421] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.307553][ T4207] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.388229][ T5488] loop3: detected capacity change from 0 to 1024 [ 181.472493][ T4206] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.577378][ T5497] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 181.827368][ T4206] usb 3-1: Using ep0 maxpacket: 8 [ 181.965905][ T5488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.978795][ T4206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.232176][ T4206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.369057][ T4207] usb 1-1: device not accepting address 4, error -71 [ 182.422030][ T4206] usb 3-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 182.456375][ T5508] loop4: detected capacity change from 0 to 128 [ 182.501943][ T4206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.513475][ T4206] usb 3-1: config 0 descriptor?? [ 182.531624][ T5508] EXT4-fs (loop4): Test dummy encryption mode enabled [ 182.594360][ T5488] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 182.620031][ T5508] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 182.638342][ T5508] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.037855][ T4206] wacom 0003:056A:00E5.0002: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.2-1/input0 [ 183.975291][ T4310] usb 3-1: USB disconnect, device number 4 [ 184.129531][ T5538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.196046][ T5541] loop5: detected capacity change from 0 to 16 [ 184.286057][ T5541] erofs: (device loop5): mounted with root inode @ nid 36. [ 184.457529][ T4209] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.731853][ T4206] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.876512][ T4209] usb 5-1: Using ep0 maxpacket: 8 [ 186.220716][ T4207] Bluetooth: hci0: command 0x0406 tx timeout [ 186.234528][ T4207] Bluetooth: hci2: command 0x0406 tx timeout [ 186.247692][ T4207] Bluetooth: hci1: command 0x0406 tx timeout [ 186.287590][ T4209] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 186.306234][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.330409][ T4209] usb 5-1: Product: syz [ 186.335619][ T4209] usb 5-1: Manufacturer: syz [ 186.353105][ T5556] loop3: detected capacity change from 0 to 512 [ 186.372487][ T4209] usb 5-1: SerialNumber: syz [ 186.403960][ T4209] usb 5-1: config 0 descriptor?? [ 186.483685][ T5556] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 186.497629][ T4206] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 186.505250][ T4209] usb 5-1: selecting invalid altsetting 3 [ 186.506909][ T4206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.703157][ T4206] usb 6-1: config 0 descriptor?? [ 187.207476][ T4206] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 187.226539][ T4206] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 187.299208][ T4209] comedi comedi0: could not set alternate setting 3 in high speed [ 187.307564][ T4209] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 187.315284][ T4206] [drm:udl_init] *ERROR* Selecting channel failed [ 187.329529][ T4209] usbdux: probe of 5-1:0.0 failed with error -22 [ 187.350019][ T4209] usb 5-1: USB disconnect, device number 5 [ 187.443971][ T4206] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 187.467284][ T4206] [drm] Initialized udl on minor 2 [ 187.522105][ T4206] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.558892][ T4206] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 187.629198][ T4206] usb 6-1: USB disconnect, device number 2 [ 187.666206][ T5585] loop3: detected capacity change from 0 to 16 [ 187.712584][ T5585] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.809505][ T5601] loop2: detected capacity change from 0 to 128 [ 188.930747][ T5601] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.138573][ T5601] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 189.170220][ T5601] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.270607][ T5648] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 191.377520][ T4204] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.848389][ T4204] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.928357][ T4204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.131132][ T4204] usb 3-1: config 0 descriptor?? [ 192.437386][ T4204] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 192.455279][ T4204] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 192.504582][ T4204] [drm:udl_init] *ERROR* Selecting channel failed [ 192.544285][ T4204] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 192.562457][ T4204] [drm] Initialized udl on minor 2 [ 192.600363][ T4204] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.622118][ T4204] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 192.679211][ T4204] usb 3-1: USB disconnect, device number 5 [ 194.772418][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.812496][ T5653] loop4: detected capacity change from 0 to 32768 [ 196.741034][ T5708] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 198.126921][ T5726] loop0: detected capacity change from 0 to 128 [ 198.226698][ T5726] EXT4-fs (loop0): Test dummy encryption mode enabled [ 198.283615][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 198.338128][ T5726] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.816916][ T5748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 198.896775][ T5748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 198.922906][ T5748] device erspan0 entered promiscuous mode [ 199.104757][ T5748] device batadv_slave_1 entered promiscuous mode [ 200.681370][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 200.845781][ T5748] syz.0.359 (5748) used greatest stack depth: 19864 bytes left [ 203.811773][ T5793] loop5: detected capacity change from 0 to 128 [ 203.870323][ T5793] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 203.919526][ T5793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.039267][ T5773] input: syz0 as /devices/virtual/input/input10 [ 204.766060][ T5811] program syz.2.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.844696][ T5813] loop4: detected capacity change from 0 to 512 [ 204.966895][ T5813] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 204.988367][ T5813] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 205.066744][ T5813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 205.207427][ T5813] System zones: 1-12 [ 205.235215][ T5813] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.374: corrupted in-inode xattr [ 205.449313][ T5813] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.374: couldn't read orphan inode 15 (err -117) [ 205.493924][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 205.780745][ T5825] overlayfs: missing 'workdir' [ 206.087401][ T4274] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 206.564407][ T4274] usb 5-1: Using ep0 maxpacket: 32 [ 207.057631][ T4274] usb 5-1: config 2 has an invalid interface number: 151 but max is 0 [ 207.075908][ T4274] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 207.116243][ T4274] usb 5-1: config 2 has no interface number 1 [ 207.237346][ T4274] usb 5-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 207.288647][ T4274] usb 5-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 207.309746][ T4274] usb 5-1: config 2 interface 0 has no altsetting 0 [ 207.596750][ T4274] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 207.627250][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.643709][ T4274] usb 5-1: Product: syz [ 207.712600][ T4274] usb 5-1: Manufacturer: syz [ 207.717658][ T4274] usb 5-1: SerialNumber: syz [ 207.883478][ T4274] usb 5-1: can't set config #2, error -71 [ 207.910956][ T4274] usb 5-1: USB disconnect, device number 6 [ 210.876498][ T5860] loop3: detected capacity change from 0 to 4096 [ 210.962281][ T5860] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 216.088115][ T5908] input: syz0 as /devices/virtual/input/input11 [ 218.634445][ T26] audit: type=1326 audit(1730513789.955:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0655188719 code=0x7ffc0000 [ 218.788827][ T26] audit: type=1326 audit(1730513789.995:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0655188719 code=0x7ffc0000 [ 324.727161][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 324.734187][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P154/1:b..l [ 324.742613][ C1] (detected by 1, t=10502 jiffies, g=14977, q=172) [ 324.749225][ C1] task:kworker/u4:2 state:R running task stack:21824 pid: 154 ppid: 2 flags:0x00004000 [ 324.761348][ C1] Workqueue: netns cleanup_net [ 324.766174][ C1] Call Trace: [ 324.769469][ C1] [ 324.772416][ C1] __schedule+0x12c4/0x45b0 [ 324.776938][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 324.782850][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 324.788769][ C1] ? mark_lock+0x98/0x340 [ 324.793121][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 324.799373][ C1] ? release_firmware_map_entry+0x190/0x190 [ 324.805452][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 324.810787][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 324.816109][ C1] ? __cond_resched+0x20/0x20 [ 324.820927][ C1] ? rcu_is_watching+0x11/0xa0 [ 324.825729][ C1] irqentry_exit+0x53/0x80 [ 324.830349][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 324.836235][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x13/0x80 [ 324.843222][ C1] Code: 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 49 ff c1 4c 89 09 c3 0f 1f 00 4c 8b 04 24 65 48 8b 15 94 f8 81 7e 65 8b 05 95 f8 81 7e <25> 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 34 16 00 00 00 74 [ 324.863014][ C1] RSP: 0018:ffffc90002067a58 EFLAGS: 00000246 [ 324.869285][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffff88801dc88000 [ 324.877619][ C1] RDX: ffff88801dc88000 RSI: 0000000000000001 RDI: 0000000000000000 [ 324.885620][ C1] RBP: ffffc90002067b70 R08: ffffffff88d353c9 R09: fffffbfff20ec621 [ 324.893609][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200040cf62 [ 324.901693][ C1] R13: 000000000005a602 R14: dffffc0000000000 R15: ffff88802c6d3018 [ 324.909890][ C1] ? inet_twsk_purge+0x139/0x9d0 [ 324.914860][ C1] ? rcu_lock_acquire+0x5/0x30 [ 324.919664][ C1] inet_twsk_purge+0x139/0x9d0 [ 324.924462][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 324.929851][ C1] ? iput+0x6f5/0x8b0 [ 324.933849][ C1] ? dccp_v6_exit_net+0x80/0x80 [ 324.938807][ C1] cleanup_net+0x763/0xb60 [ 324.943255][ C1] ? ops_free_list+0x340/0x340 [ 324.948044][ C1] process_one_work+0x8a1/0x10c0 [ 324.953104][ C1] ? worker_detach_from_pool+0x260/0x260 [ 324.958755][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 324.964330][ C1] ? kthread_data+0x4e/0xc0 [ 324.968858][ C1] ? wq_worker_running+0x97/0x170 [ 324.973899][ C1] worker_thread+0xaca/0x1280 [ 324.978618][ C1] kthread+0x3f6/0x4f0 [ 324.982701][ C1] ? rcu_lock_release+0x20/0x20 [ 324.987566][ C1] ? kthread_blkcg+0xd0/0xd0 [ 324.992196][ C1] ret_from_fork+0x1f/0x30 [ 324.996647][ C1] [ 324.999674][ C1] rcu: rcu_preempt kthread starved for 10344 jiffies! g14977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 325.010962][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 325.020967][ C1] rcu: RCU grace-period kthread stack dump: [ 325.026859][ C1] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 325.037652][ C1] Call Trace: [ 325.040938][ C1] [ 325.043880][ C1] __schedule+0x12c4/0x45b0 [ 325.048400][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 325.054334][ C1] ? release_firmware_map_entry+0x190/0x190 [ 325.060244][ C1] ? mod_timer_pending+0x20/0x20 [ 325.065295][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 325.070690][ C1] schedule+0x11b/0x1f0 [ 325.074868][ C1] schedule_timeout+0x1b9/0x300 [ 325.079733][ C1] ? console_conditional_schedule+0x40/0x40 [ 325.085640][ C1] ? update_process_times+0x200/0x200 [ 325.091062][ C1] ? prepare_to_swait_event+0x321/0x340 [ 325.096628][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 325.101607][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 325.107784][ C1] ? rcu_gp_init+0x1140/0x1140 [ 325.112568][ C1] ? finish_swait+0xc5/0x1d0 [ 325.117378][ C1] rcu_gp_kthread+0xa4/0x360 [ 325.121982][ C1] ? _raw_spin_unlock+0x40/0x40 [ 325.126854][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 325.131988][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 325.137920][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 325.142965][ C1] kthread+0x3f6/0x4f0 [ 325.147064][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 325.152196][ C1] ? kthread_blkcg+0xd0/0xd0 [ 325.156804][ C1] ret_from_fork+0x1f/0x30 [ 325.161248][ C1] [ 325.164275][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 325.170611][ C1] NMI backtrace for cpu 1 [ 325.174940][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.170-syzkaller #0 [ 325.182752][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.192812][ C1] Call Trace: [ 325.196098][ C1] [ 325.198954][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 325.203651][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 325.209305][ C1] ? panic+0x860/0x860 [ 325.213405][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 325.218362][ C1] ? __wake_up_klogd+0xd5/0x100 [ 325.223230][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 325.229395][ C1] ? _printk+0xd1/0x120 [ 325.233573][ C1] ? cpu_online+0x1f/0x40 [ 325.237917][ C1] ? panic+0x860/0x860 [ 325.242003][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 325.248081][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 325.254086][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 325.260270][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 325.265758][ C1] ? print_cpu_stall+0x600/0x600 [ 325.270707][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 325.275748][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 325.280968][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 325.286195][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 325.291063][ C1] ? hrtimer_run_queues+0x163/0x450 [ 325.296272][ C1] ? account_process_tick+0x232/0x3a0 [ 325.301664][ C1] update_process_times+0x196/0x200 [ 325.306882][ C1] tick_sched_timer+0x386/0x550 [ 325.311745][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 325.317312][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 325.322540][ C1] ? hrtimer_interrupt+0x980/0x980 [ 325.327664][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 325.333751][ C1] hrtimer_interrupt+0x392/0x980 [ 325.338726][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 325.344737][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 325.350478][ C1] [ 325.353432][ C1] [ 325.356476][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 325.362494][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 325.370594][ C1] Code: c9 42 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 44 44 49 f7 0f 1f 44 00 00 e8 ea c5 42 f7 0f 00 2d 63 92 a5 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 1b 91 8c f7 [ 325.390562][ C1] RSP: 0018:ffffc90000d67b00 EFLAGS: 000002d3 [ 325.396925][ C1] RAX: ffffffff8a3dadd6 RBX: 0000000000000000 RCX: ffff888017e58000 [ 325.404932][ C1] RDX: 0000000000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90480 [ 325.413039][ C1] RBP: ffffc90000d67b90 R08: ffffffff8186f240 R09: ffffed1002fcb001 [ 325.421129][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001acf60 [ 325.429310][ C1] R13: ffff8881468da004 R14: ffffc90000d67b20 R15: dffffc0000000000 [ 325.437482][ C1] ? trace_hardirqs_on+0x30/0x80 [ 325.442441][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 325.447670][ C1] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 325.452893][ C1] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 325.458470][ C1] ? rcu_qs+0x190/0x190 [ 325.462660][ C1] acpi_idle_enter+0x352/0x4f0 [ 325.467448][ C1] cpuidle_enter_state+0x521/0xef0 [ 325.472586][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 325.478193][ C1] ? can_stop_idle_tick+0x20d/0x2b0 [ 325.483410][ C1] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 325.489152][ C1] cpuidle_enter+0x59/0x90 [ 325.493595][ C1] do_idle+0x3e4/0x670 [ 325.497687][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 325.502902][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 325.509084][ C1] ? schedule_idle+0x57/0x90 [ 325.513701][ C1] cpu_startup_entry+0x14/0x20 [ 325.518484][ C1] start_secondary+0x371/0x500 [ 325.523266][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 325.528660][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 325.534581][ C1]