last executing test programs: 18m21.049505439s ago: executing program 32 (id=216): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090400000000000000001b00000008000100", @ANYRES32=0x0, @ANYBLOB="040019080000000000f25aaa415df1bbfd00000000"], 0x28}}, 0x0) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x1) r7 = socket$alg(0x26, 0x5, 0x0) ppoll(&(0x7f0000000480)=[{r7, 0x120}], 0x1, &(0x7f00000004c0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) 17m56.43847089s ago: executing program 33 (id=258): r0 = semget$private(0x0, 0x2, 0x608) semctl$GETVAL(r0, 0x6, 0xc, &(0x7f0000000000)=""/54) r1 = semget$private(0x0, 0x3, 0x800) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x1, 0x0}, &(0x7f00000064c0)=0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 17m0.568134445s ago: executing program 34 (id=351): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)}, 0x10040) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0/file0'}, 0x11) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) 16m49.014954438s ago: executing program 35 (id=369): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x6, &(0x7f0000000080)=[{0x59, 0x1, 0x1, 0x200}, {0x9, 0x1, 0x5, 0x2}, {0xfff7, 0x10, 0xff, 0xe5}, {0x401, 0x80, 0xc, 0x40000000}, {0x5, 0x0, 0x61, 0xf}, {0x7, 0x90, 0x6, 0x2}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "a08d78a244c24d14", "b4e91068bf22767d4a6c56cf4bc745b3", '\x00', "0002b3d353dd00"}, 0x28) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000280)=""/246, 0x3}) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) 16m47.136942096s ago: executing program 36 (id=372): r0 = semget$private(0x0, 0x2, 0x608) semctl$GETVAL(r0, 0x6, 0xc, &(0x7f0000000000)=""/54) r1 = semget$private(0x0, 0x3, 0x800) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x1, 0x0}, &(0x7f00000064c0)=0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) 11m56.868116534s ago: executing program 9 (id=906): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11m54.790776975s ago: executing program 9 (id=910): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @dev, 0x7}, 0x1c) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000020c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @local, 0xffff0000}}, 0x9, 0x5, 0x8, 0x0, 0x80, 0x6, 0x7}, &(0x7f0000002180)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000021c0)={r4, @in={{0x2, 0x4e20, @broadcast}}, 0x9, 0x1, 0x159, 0x3}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x20000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 11m52.281543624s ago: executing program 9 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x9) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r6, 0x0, 0x80, 0x8, 0x4, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@end, @generic={0x43, 0xa, "226687d476089b22"}, @end, @lsrr={0x83, 0xb, 0x5c, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @ssrr={0x89, 0x7, 0x8e, [@multicast2]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x5, [{@local, 0x3}]}]}}}}}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xe9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) 11m50.933268052s ago: executing program 9 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x42) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="197702000000000002000800000014000180060024004e210000080005000300000078229d4b0e2c24ae397f57f0c2b3553188"], 0x28}}, 0x2004c080) 11m49.155122446s ago: executing program 9 (id=919): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0), 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000240)={0x3, [0x10, 0x4, 0x6]}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x810) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)}, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x15) 11m47.473879228s ago: executing program 9 (id=922): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r2, 0x0, 0x0) 11m31.42546912s ago: executing program 37 (id=922): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r2, 0x0, 0x0) 10m47.6232258s ago: executing program 7 (id=1026): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000009a4b31a179207cd9f5d86825697649e9dfc991c192dbc0e13f37dd84ea2387b8082217617f9e4869a07ea6c1274bc168d88034de696d6bcf819f1d4ba583dc61429c2da0fc37aa42fd7f05f5834b03a688be0bb575e6db59efec65b00e62386a00e0599f17940afc1a94bdf0983edcc7fa2b189cf7ab86fb209f9ad836b31855b8c0220ce38ac8510f6651"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44854) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x8) fdatasync(r5) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r6, 0x0) connect$vsock_stream(r6, &(0x7f0000000540)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 10m45.897130951s ago: executing program 7 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = io_uring_setup(0x177f, &(0x7f0000000140)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) 10m43.910156509s ago: executing program 7 (id=1034): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="ff02040002", 0x5) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0xb, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 10m42.338708472s ago: executing program 7 (id=1035): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x48852) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x7, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x42, 0x0) io_submit(r5, 0x0, &(0x7f0000000500)) 10m30.394532693s ago: executing program 7 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lseek(r2, 0x400, 0x3) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) 10m27.104934591s ago: executing program 7 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) lseek(r1, 0x1003ff, 0x4) getpid() 10m11.587512878s ago: executing program 38 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) lseek(r1, 0x1003ff, 0x4) getpid() 9m58.174775398s ago: executing program 0 (id=1101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="01000000000000000000250000000e0001006e65746465f67369"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) msgget(0x2, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_addrs=@rc={0x1f, @any, 0x9}}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9m57.166422059s ago: executing program 0 (id=1102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) semget(0x1, 0xdf9d981d985f570c, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a00000008000740000000003c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400ff0100000000000000000000000000013c0001802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb0c0002800500010000000000100005", @ANYRES8=r0], 0xa4}}, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m56.641995821s ago: executing program 0 (id=1103): r0 = epoll_create1(0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80882) syz_io_uring_setup(0x607d, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x0, 0x0, 0x20000000, 0x73}) 9m53.204386764s ago: executing program 0 (id=1108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@host}) close_range(r0, 0xffffffffffffffff, 0x0) 9m51.625760127s ago: executing program 0 (id=1110): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r6, &(0x7f0000000200), 0x18) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 9m49.137972792s ago: executing program 0 (id=1114): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_io_uring_setup(0x1b75, &(0x7f0000007640)={0x0, 0x1fd, 0x2a}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x20000) unshare(0x40000000) 9m33.414498381s ago: executing program 39 (id=1114): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_io_uring_setup(0x1b75, &(0x7f0000007640)={0x0, 0x1fd, 0x2a}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x20000) unshare(0x40000000) 5m20.445341356s ago: executing program 8 (id=1566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 5m17.78840494s ago: executing program 8 (id=1571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6}) mmap$binder(&(0x7f00001d8000/0x10000)=nil, 0x10000, 0x1, 0x11, r4, 0x100000000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000000c0)=0x33) 5m15.77558973s ago: executing program 8 (id=1574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 5m11.829097422s ago: executing program 8 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) splice(r4, 0x0, r8, 0x0, 0x80, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffff01, 0x1, &(0x7f0000006680)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) syz_io_uring_setup(0x7ce, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x30, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) sendmmsg(0xffffffffffffffff, &(0x7f000000ac00), 0x0, 0x804) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5m8.521112545s ago: executing program 8 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x38ba00, 0x144) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x6}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x140, 0x12) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r7, &(0x7f0000002140)=""/245, 0xf5) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) madvise(&(0x7f00006d2000/0x2000)=nil, 0x2000, 0xc) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000300)='1\x00', 0xffffff4a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) 5m4.776040053s ago: executing program 8 (id=1588): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2}) 4m48.412708788s ago: executing program 40 (id=1588): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2}) 2m58.959934336s ago: executing program 6 (id=1835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000080)={@host}) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.870942507s ago: executing program 6 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0) 2m50.051554044s ago: executing program 6 (id=1850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x9) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r6, 0x0, 0x80, 0x8, 0x4, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@end, @generic={0x43, 0xa, "226687d476089b22"}, @end, @lsrr={0x83, 0xb, 0x5c, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @ssrr={0x89, 0x7, 0x8e, [@multicast2]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x5, [{@local, 0x3}]}]}}}}}) ioctl$TIOCSTI(r7, 0x5412, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) 2m47.35086685s ago: executing program 6 (id=1855): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68e07da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67769470f7188cb020e21254760000000000", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c40)="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", 0x178}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="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", 0x115}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m46.08680368s ago: executing program 6 (id=1858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r5 = socket(0x5, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7, 0x10000}, &(0x7f00000010c0)=0x8) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x51, 0x303}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m41.633913463s ago: executing program 6 (id=1865): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000002240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000007b00)=[{}]}) 2m25.872524222s ago: executing program 41 (id=1865): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000002240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000007b00)=[{}]}) 1m20.818548158s ago: executing program 2 (id=1985): r0 = socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) preadv(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x1f2, 0x0) 1m19.254920305s ago: executing program 2 (id=1987): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000fffffffbfdff000020030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68e07da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67769470f7188cb020e21254760000000000", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="8068f632f12243f377789fb5964247c38e85832a73c8988478f3276ed99e6d4165d2c84f0179db736b47b21477b5067fc764e085eac004fed0034e22ce3afb780a51494dcdd04b4f5e068133ca95a64c353cb599145ce704b8e3b108744a0f7b7165b7942cbb95a4af630928b5d3959a4764d01a14637d43b3394d9747eeb4ec98d4c84fbe978e1e9e065592a2c1510f2d4873010476c19e194d1bea0707ae71c43e6eaa90681ddfd9f97a813c606392ce675ce2e286e326b05fcd816e2e72112c5048d106cf0565913e26d8045e38bd29b83b514f062dfdad860ae37730204ee0598f01e3ea86efb534f4c1eabd0e5b772d272fb3fc109ac327c58e7858331a4398724d0aa8756b5789ba3382ca0c8a435647c115", 0x115}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m17.151150038s ago: executing program 2 (id=1994): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6db}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m8.620023702s ago: executing program 2 (id=2002): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000fffffffbfdff000020030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68e07da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67769470f7188cb020e21254760000000000", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c40)="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", 0x149}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="8068f632f12243f377789fb5964247c38e85832a73c8988478f3276ed99e6d4165d2c84f0179db736b47b21477b5067fc764e085eac004fed0034e22ce3afb780a51494dcdd04b4f5e068133ca95a64c353cb599145ce704b8e3b108744a0f7b7165b7942cbb95a4af630928b5d3959a4764d01a14637d43b3394d9747eeb4ec98d4c84fbe978e1e9e065592a2c1510f2d4873010476c19e194d1bea0707ae71c43e6eaa90681ddfd9f97a813c606392ce675ce2e286e326b05fcd816e2e72112c5048d106cf0565913e26d8045e38bd29b83b514f062dfdad860ae37730204ee0598f01e3ea86efb534f4c1eabd0e5b772d272fb3fc109ac327c58e7858331a4398724d0aa8756b5789ba3382ca0c8a435647c115", 0x115}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m7.463654234s ago: executing program 2 (id=2006): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000700)=&(0x7f0000000680)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x122, &(0x7f0000000540)=""/195}]}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000740)=""/82}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 1m3.806028383s ago: executing program 2 (id=2011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x800) 48.053290336s ago: executing program 42 (id=2011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x800) 19.37267935s ago: executing program 5 (id=2075): epoll_create(0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x2a, 0x1}}) 18.395720962s ago: executing program 5 (id=2077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) 11.954334823s ago: executing program 3 (id=2084): unshare(0x22020600) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) 10.684828158s ago: executing program 4 (id=2087): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000061000000000000006926000000000000bf67000000000000150600000fff07e03406000043fe0000070600000ee60000bf050000000000003d6500000000000065070000020000e3260700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad350100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792138e042ce31c2b7ae994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe3614e887ffffff7f381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b197baf8ebb7c11a8df40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1f9ae5de8923b27a6fdc20441018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be00000082018f5f4b2c00000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc6273786b5bba17e9b8f1c2af8e23c411a4d1124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722d98cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6e312bdb8261d0dc10cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e009000000000000002eb85073720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f3e9004468cf1aba4a6f22ed0eb3681c6963205eefc072ab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd2294320fad0d814f230f954eec844f6b658ee04eb1c6d655a3383928d6e0307a7097b0a5fa5040958d2b7ad0eb7605a7de7ce9cf0e6b472d764976fbf7edd83dac8b9273976bfd6090de0a73cf8a9b2c23500a4054703e2df18d8498356e3c1cd6418e149f8a22e95da26221d8a69b642915471f4917571357aa9df385c0532d6e70263ec616f88dc8f93c886ede7743c53d738b9c7021f0032970eabd2808c53128b3eb600f2614256184c506454980e542ce450029aa6de147a8c81e6f701a4b9b278b08e4b02710907923f0797f96413054f2d1b5f2ba0c49567b53db5d862acf2c42faa37c4a8738f64ed7fef9ffba58a3c1ca52b55aef071e4f11334e3a70918e5b18dab84decde74d616b5b05c96378acc79375a7ebdb54b01d512de48184950f5cac97f0a6dcc6d12c48c6e3b925fee7974ca8f3009188bbecc30e1adbc290ac99555ec069636a8079f8ca80343ff84e896dda2d4148f982feff6b38699fb57aab5596479f84b59daa9a4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x38}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d526ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca6", 0x5f}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000002040)={0xff, "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"}) listen(r7, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x96) close(r7) read$FUSE(0xffffffffffffffff, &(0x7f0000004440)={0x2020}, 0x2020) open$dir(0x0, 0x5c1, 0x0) lstat(0x0, 0x0) mprotect(&(0x7f000037c000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.086019612s ago: executing program 3 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) unshare(0x8000480) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x4, 0x20000000, 0x4) 10.074737676s ago: executing program 5 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x38ba00, 0x144) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x6}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x140, 0x12) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r7, &(0x7f0000002140)=""/245, 0xf5) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r8, 0x0, 0x20000000}, 0x20) madvise(&(0x7f00006d2000/0x2000)=nil, 0x2000, 0xc) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r9, &(0x7f0000000000)='2\x00', 0x2) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) 9.93596292s ago: executing program 4 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0) 8.535583561s ago: executing program 3 (id=2092): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x6, 0x4, 0xfffffff8, 0x400}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 8.126994289s ago: executing program 1 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 7.114005813s ago: executing program 4 (id=2094): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010826bd70000000000000000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c00168018000180140005"], 0x44}}, 0x0) 5.910815107s ago: executing program 3 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x3e, 0x2, 0x0, 0x3}, 0xfffffef7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001780)=ANY=[], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000001600)=""/4099, 0x1003) 5.844430453s ago: executing program 1 (id=2096): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r1, 0xd2a67000) msync(&(0x7f000032e000/0x1000)=nil, 0x1000, 0x6) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 5.730262658s ago: executing program 4 (id=2097): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 5.474847446s ago: executing program 4 (id=2098): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r1, 0xd2a67000) msync(&(0x7f000032e000/0x1000)=nil, 0x1000, 0x6) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 4.772049592s ago: executing program 1 (id=2099): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x3e, 0x2, 0x0, 0x3}, 0xfffffef7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001780)=ANY=[], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001600)=""/4099, 0x1003) 2.082120104s ago: executing program 5 (id=2100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) 2.04989827s ago: executing program 1 (id=2101): write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x1, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000a00), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 1.89558859s ago: executing program 4 (id=2102): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x6, 0x4, 0xfffffff8, 0x400}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.804074111s ago: executing program 3 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) fsopen(0x0, 0x0) unshare(0x8000480) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x4, 0x20000000, 0x4) 1.774427437s ago: executing program 5 (id=2104): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 420.345026ms ago: executing program 1 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 419.428904ms ago: executing program 3 (id=2106): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='binder\x00', 0x0, 0x0) 28.045898ms ago: executing program 5 (id=2107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x8000480) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x4, 0x20000000, 0x4) 0s ago: executing program 1 (id=2108): r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10543, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000400000003200000090000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="030000000100"/15, @ANYRES32=r0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x4, &(0x7f00000001c0), 0x82}, {0x7, &(0x7f0000000200)=0x66, 0x2}, {0x10000, 0x0}, {0x5, &(0x7f00000002c0)=0x2, 0x2}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x6, &(0x7f0000000380)=0x12b6, 0x82}, {0xe1b, 0x0, 0x82}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x9, &(0x7f00000004c0)=0x69b, 0x82}, {0x0, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x17528411, 0x0, 0x82}, {0x4, &(0x7f0000000600)=0x200, 0x82}, {0xfff, &(0x7f00000006c0)=0x10000, 0x2}, {0xd55e, &(0x7f0000000740)=0xc, 0x82}, {0x252dedf0, 0x0}, {0xf61b, 0x0, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xb, 0x0, 0x82}, {0x80, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x1, 0x0, 0x2}], 0x18, 0x0, &(0x7f0000001f40)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c522c1c472772ccf1b49d2187857a15d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080b92932ee83a850d8b6"], 0x119) r4 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x38}, 0x1, 0x0, 0x0, 0x34e65b1d502f5960}, 0x20000000) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): mode [ 773.012720][T11734] bridge_slave_1: entered promiscuous mode [ 774.281168][T11734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.406737][T12004] serio: Serial port ptm0 [ 774.513354][T11553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 774.653883][T11734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.971458][T11553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 775.217464][T11553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 775.670158][T11734] team0: Port device team_slave_0 added [ 775.692184][T11734] team0: Port device team_slave_1 added [ 775.703131][ T11] IPVS: stop unused estimator thread 0... [ 775.920364][T11553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 775.982274][T11734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.047232][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.660254][T11734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.801692][T11734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.809484][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.860294][T11734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.153149][T11734] hsr_slave_0: entered promiscuous mode [ 777.693504][T11734] hsr_slave_1: entered promiscuous mode [ 777.715039][T11734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.870262][T11734] Cannot create hsr debugfs directory [ 777.898645][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.073168][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.090206][ T973] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 778.121468][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.175385][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.182612][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.286170][ T973] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 778.300182][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.312121][T12042] RDS: rds_bind could not find a transport for fe80::11, load rds_tcp or rds_rdma? [ 778.362417][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.362473][ T973] usb 5-1: config 0 descriptor?? [ 778.409198][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.416425][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.436570][ T973] usb 5-1: Invalid firmware size=18. [ 778.561325][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.692639][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.529457][T10544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.549885][T10544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.582743][T10544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.603558][T10544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.612211][T10544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 780.619551][T10544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.629824][T12037] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 780.636526][T12037] PKCS7: Only support pkcs7_signedData type [ 781.668803][ T5870] usb 5-1: USB disconnect, device number 4 [ 781.749900][ T11] bridge_slave_1: left allmulticast mode [ 781.756922][ T11] bridge_slave_1: left promiscuous mode [ 781.771140][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.784223][ T11] bridge_slave_0: left allmulticast mode [ 781.789951][ T11] bridge_slave_0: left promiscuous mode [ 781.806198][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.253239][T10544] Bluetooth: hci2: command tx timeout [ 785.320205][T11596] Bluetooth: hci2: command tx timeout [ 785.348258][T12113] RDS: rds_bind could not find a transport for fe80::11, load rds_tcp or rds_rdma? [ 785.400864][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.416946][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.428823][ T11] bond0 (unregistering): Released all slaves [ 785.581810][ T11] hsr_slave_0: left promiscuous mode [ 785.588076][ T11] hsr_slave_1: left promiscuous mode [ 785.595556][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.603656][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.624904][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.632679][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.668744][ T11] veth1_macvtap: left promiscuous mode [ 785.674523][ T11] veth0_macvtap: left promiscuous mode [ 785.681965][ T11] veth1_vlan: left promiscuous mode [ 785.687424][ T11] veth0_vlan: left promiscuous mode [ 787.653929][T11596] Bluetooth: hci2: command tx timeout [ 789.721390][T10544] Bluetooth: hci2: command tx timeout [ 790.565999][T12145] bio_check_eod: 2 callbacks suppressed [ 790.566021][T12145] syz.5.1244: attempt to access beyond end of device [ 790.566021][T12145] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 790.788459][T12145] syz.5.1244: attempt to access beyond end of device [ 790.788459][T12145] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 790.902371][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 790.939900][T12145] syz.5.1244: attempt to access beyond end of device [ 790.939900][T12145] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 791.002501][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 791.170860][T12145] syz.5.1244: attempt to access beyond end of device [ 791.170860][T12145] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 791.213859][T12145] syz.5.1244: attempt to access beyond end of device [ 791.213859][T12145] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 791.239258][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 791.259711][T12145] syz.5.1244: attempt to access beyond end of device [ 791.259711][T12145] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 791.468283][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 791.797882][T12145] syz.5.1244: attempt to access beyond end of device [ 791.797882][T12145] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 791.848739][T12145] syz.5.1244: attempt to access beyond end of device [ 791.848739][T12145] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 791.931300][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 791.954193][T12145] syz.5.1244: attempt to access beyond end of device [ 791.954193][T12145] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 791.985973][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 792.005923][T12145] syz.5.1244: attempt to access beyond end of device [ 792.005923][T12145] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 792.025870][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 792.085116][T12145] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 792.221045][ T11] team0 (unregistering): Port device team_slave_1 removed [ 792.585327][ T11] team0 (unregistering): Port device team_slave_0 removed [ 793.090254][T12145] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 794.081229][T12173] ALSA: mixer_oss: invalid OSS volume '0000000000' [ 799.958413][T12200] ax25_connect(): syz.8.1257 uses autobind, please contact jreuter@yaina.de [ 800.442926][T12066] chnl_net:caif_netlink_parms(): no params data found [ 801.647324][T12221] sctp: [Deprecated]: syz.4.1261 (pid 12221) Use of int in max_burst socket option. [ 801.647324][T12221] Use struct sctp_assoc_value instead [ 801.829949][T12222] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1260'. [ 802.678582][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1263'. [ 802.794522][T12229] bio_check_eod: 2 callbacks suppressed [ 802.794542][T12229] syz.8.1263: attempt to access beyond end of device [ 802.794542][T12229] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 803.513594][T12238] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 803.520167][T12238] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 803.527840][T12238] vhci_hcd vhci_hcd.0: Device attached [ 803.544145][T12239] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 803.680830][ T12] vhci_hcd: stop threads [ 803.705587][ T12] vhci_hcd: release socket [ 803.810138][ T5870] vhci_hcd: vhci_device speed not set [ 803.816208][ T12] vhci_hcd: disconnect device [ 804.790120][ T5870] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 804.797679][ T5870] usb 43-1: enqueue for inactive port 0 [ 805.621933][ T5870] vhci_hcd: vhci_device speed not set [ 805.664637][T11596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.768853][T11596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.964452][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.985679][T11596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.991757][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.002848][T11596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 806.270660][T12066] bridge_slave_0: entered allmulticast mode [ 806.292860][T12252] syz.8.1266: attempt to access beyond end of device [ 806.292860][T12252] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 806.306925][T12252] syz.8.1266: attempt to access beyond end of device [ 806.306925][T12252] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 806.320774][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 806.330783][T12252] syz.8.1266: attempt to access beyond end of device [ 806.330783][T12252] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 806.343794][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 806.354003][T12252] syz.8.1266: attempt to access beyond end of device [ 806.354003][T12252] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 806.367514][T12252] syz.8.1266: attempt to access beyond end of device [ 806.367514][T12252] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 806.380722][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 806.390366][T12252] syz.8.1266: attempt to access beyond end of device [ 806.390366][T12252] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 806.403865][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 806.414205][T12252] syz.8.1266: attempt to access beyond end of device [ 806.414205][T12252] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 806.427186][T12252] syz.8.1266: attempt to access beyond end of device [ 806.427186][T12252] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 806.440269][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 806.449836][T12252] syz.8.1266: attempt to access beyond end of device [ 806.449836][T12252] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 806.462845][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 806.472730][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 806.482364][T12252] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 806.491854][T12252] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 806.504291][T12066] bridge_slave_0: entered promiscuous mode [ 806.521741][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.535498][T11596] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 806.541165][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.555756][T11596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 806.571807][T12066] bridge_slave_1: entered allmulticast mode [ 806.609497][T12066] bridge_slave_1: entered promiscuous mode [ 806.941495][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.783766][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.160965][ T5871] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 808.335004][T12066] team0: Port device team_slave_0 added [ 808.404933][T12066] team0: Port device team_slave_1 added [ 808.545518][T12269] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 808.764575][T10544] Bluetooth: hci1: command tx timeout [ 808.990683][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.997039][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.046645][T12066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.075079][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.153305][ T5871] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 809.168418][T12066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.170187][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.262861][T12066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.277262][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.277499][ T5871] usb 6-1: config 0 descriptor?? [ 809.303383][T12066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.333457][ T5871] usb 6-1: Invalid firmware size=18. [ 809.438565][T12276] bio_check_eod: 3 callbacks suppressed [ 809.438583][T12276] syz.4.1272: attempt to access beyond end of device [ 809.438583][T12276] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 809.457842][T12276] syz.4.1272: attempt to access beyond end of device [ 809.457842][T12276] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 809.471899][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 809.495182][T12276] syz.4.1272: attempt to access beyond end of device [ 809.495182][T12276] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 809.508668][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 809.523706][T12276] syz.4.1272: attempt to access beyond end of device [ 809.523706][T12276] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 809.538023][T12276] syz.4.1272: attempt to access beyond end of device [ 809.538023][T12276] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 809.551654][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 809.562432][T12276] syz.4.1272: attempt to access beyond end of device [ 809.562432][T12276] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 809.578013][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 809.590181][T12276] syz.4.1272: attempt to access beyond end of device [ 809.590181][T12276] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 809.604317][T12276] syz.4.1272: attempt to access beyond end of device [ 809.604317][T12276] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 809.620098][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 809.630754][T12276] syz.4.1272: attempt to access beyond end of device [ 809.630754][T12276] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 809.644350][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 809.658216][T12276] syz.4.1272: attempt to access beyond end of device [ 809.658216][T12276] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 809.672926][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 809.685551][T12276] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 809.700110][T12276] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 810.162392][T12278] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 810.169189][T12278] PKCS7: Only support pkcs7_signedData type [ 810.949535][T12275] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1273'. [ 811.452732][T10544] Bluetooth: hci1: command tx timeout [ 811.601020][ T5871] usb 6-1: USB disconnect, device number 13 [ 811.695273][ T11] bridge_slave_1: left allmulticast mode [ 811.817132][ T11] bridge_slave_1: left promiscuous mode [ 811.823967][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.834899][ T11] bridge_slave_0: left allmulticast mode [ 811.842776][ T11] bridge_slave_0: left promiscuous mode [ 811.858733][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.593058][T10544] Bluetooth: hci1: command tx timeout [ 814.740712][T12296] bio_check_eod: 2 callbacks suppressed [ 814.740726][T12296] syz.5.1276: attempt to access beyond end of device [ 814.740726][T12296] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 814.759315][T12296] syz.5.1276: attempt to access beyond end of device [ 814.759315][T12296] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 814.772273][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 814.781976][T12296] syz.5.1276: attempt to access beyond end of device [ 814.781976][T12296] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 814.794923][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 814.805671][T12296] syz.5.1276: attempt to access beyond end of device [ 814.805671][T12296] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 814.818653][T12296] syz.5.1276: attempt to access beyond end of device [ 814.818653][T12296] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 814.831585][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 814.841179][T12296] syz.5.1276: attempt to access beyond end of device [ 814.841179][T12296] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 814.854174][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 814.863977][T12296] syz.5.1276: attempt to access beyond end of device [ 814.863977][T12296] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 814.876906][T12296] syz.5.1276: attempt to access beyond end of device [ 814.876906][T12296] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 814.889889][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 814.900356][T12296] syz.5.1276: attempt to access beyond end of device [ 814.900356][T12296] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 814.913387][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 814.923150][T12296] syz.5.1276: attempt to access beyond end of device [ 814.923150][T12296] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 814.936113][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 814.945700][T12296] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 814.955193][T12296] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 816.015066][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 816.080207][T10544] Bluetooth: hci1: command tx timeout [ 816.196093][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 816.231904][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 817.060506][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 817.072485][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 817.084421][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 817.114165][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 817.128557][T12308] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 818.440385][T12317] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 818.737862][T12308] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 818.959341][T12324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1283'. [ 820.529315][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.593312][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.126400][ T11] bond0 (unregistering): Released all slaves [ 821.288854][T12066] hsr_slave_0: entered promiscuous mode [ 821.314437][T12066] hsr_slave_1: entered promiscuous mode [ 821.346465][T12066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.354722][T12066] Cannot create hsr debugfs directory [ 821.430840][ T11] hsr_slave_0: left promiscuous mode [ 821.442619][ T11] hsr_slave_1: left promiscuous mode [ 821.451469][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.474029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.490582][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 821.635606][T12347] bio_check_eod: 15 callbacks suppressed [ 821.635647][T12347] syz.8.1289: attempt to access beyond end of device [ 821.635647][T12347] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 821.657541][T12347] syz.8.1289: attempt to access beyond end of device [ 821.657541][T12347] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 821.675302][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 821.680705][ T5868] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 821.692326][T12347] syz.8.1289: attempt to access beyond end of device [ 821.692326][T12347] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 821.708706][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 821.716968][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.728912][T12347] syz.8.1289: attempt to access beyond end of device [ 821.728912][T12347] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 821.745188][T12347] syz.8.1289: attempt to access beyond end of device [ 821.745188][T12347] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 821.759008][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 821.774395][T12347] syz.8.1289: attempt to access beyond end of device [ 821.774395][T12347] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 821.787774][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 821.812399][T12347] syz.8.1289: attempt to access beyond end of device [ 821.812399][T12347] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 821.827889][T12347] syz.8.1289: attempt to access beyond end of device [ 821.827889][T12347] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 821.841633][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 821.852781][T12347] syz.8.1289: attempt to access beyond end of device [ 821.852781][T12347] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 821.868899][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 821.886711][T12347] syz.8.1289: attempt to access beyond end of device [ 821.886711][T12347] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 821.901636][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 821.913104][T12347] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 821.923436][T12347] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 822.232885][ T5868] usb 6-1: config 0 descriptor?? [ 822.243128][ T5868] usb 6-1: Invalid firmware size=18. [ 822.857994][T12357] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 823.718201][ T11] team0 (unregistering): Port device team_slave_1 removed [ 823.883635][ T11] team0 (unregistering): Port device team_slave_0 removed [ 824.422298][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 824.442507][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 824.462545][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 824.473716][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 824.489897][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 824.500727][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 824.514520][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 824.524525][T12362] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 824.536499][T12362] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 824.780816][T12340] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 824.787452][T12340] PKCS7: Only support pkcs7_signedData type [ 824.843008][ T5871] usb 6-1: USB disconnect, device number 14 [ 824.943116][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 825.365627][T12246] chnl_net:caif_netlink_parms(): no params data found [ 825.440362][ T5868] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 825.617896][ T5868] usb 9-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 825.627182][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.642489][ T5868] usb 9-1: config 0 descriptor?? [ 825.658949][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.676093][ T5868] usb 9-1: Invalid firmware size=18. [ 825.680771][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.688718][T12246] bridge_slave_0: entered allmulticast mode [ 825.701470][T12246] bridge_slave_0: entered promiscuous mode [ 825.714801][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.722669][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.729977][T12246] bridge_slave_1: entered allmulticast mode [ 825.752059][T12246] bridge_slave_1: entered promiscuous mode [ 825.800596][T11881] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 825.834785][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.847163][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.970158][T11881] usb 6-1: Using ep0 maxpacket: 8 [ 825.980169][T11881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 826.063610][T12379] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 826.080143][T12379] PKCS7: Only support pkcs7_signedData type [ 826.082423][T11881] usb 6-1: config 0 has no interface number 0 [ 826.092839][T11881] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.104101][T11881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 826.113416][T11881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.223572][T12380] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 826.711171][T11881] usb 6-1: config 0 descriptor?? [ 826.955178][T11881] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 826.986100][T12246] team0: Port device team_slave_0 added [ 827.056187][ T5871] usb 9-1: USB disconnect, device number 7 [ 827.074515][T12246] team0: Port device team_slave_1 added [ 827.118845][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.126181][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.167364][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.216846][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.233768][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.260993][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.436959][T12246] hsr_slave_0: entered promiscuous mode [ 827.463496][T12246] hsr_slave_1: entered promiscuous mode [ 827.486062][T12246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.498078][T12246] Cannot create hsr debugfs directory [ 827.673679][T12066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 827.852010][T12066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 827.883207][T12066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 827.955103][T12066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 828.313846][ T5871] usb 6-1: USB disconnect, device number 15 [ 828.887328][ T11] bridge_slave_1: left allmulticast mode [ 828.898701][ T11] bridge_slave_1: left promiscuous mode [ 828.941927][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.135357][ T11] bridge_slave_0: left allmulticast mode [ 829.154931][ T11] bridge_slave_0: left promiscuous mode [ 829.165899][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.860887][T12406] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 829.881525][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.909222][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.061983][T12407] sctp: [Deprecated]: syz.8.1302 (pid 12407) Use of int in max_burst socket option. [ 830.061983][T12407] Use struct sctp_assoc_value instead [ 830.455074][ T11] bond0 (unregistering): Released all slaves [ 831.041450][ T11] hsr_slave_0: left promiscuous mode [ 831.265819][ T11] hsr_slave_1: left promiscuous mode [ 831.536042][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.562322][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.157593][ T11] team0 (unregistering): Port device team_slave_1 removed [ 833.384960][ T11] team0 (unregistering): Port device team_slave_0 removed [ 834.541171][ T5868] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 835.261765][ T5868] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 835.271345][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.335689][ T5868] usb 5-1: config 0 descriptor?? [ 835.356559][ T5868] usb 5-1: Invalid firmware size=18. [ 835.387849][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.422011][T12443] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 835.428593][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 835.496326][T12443] vhci_hcd vhci_hcd.0: Device attached [ 835.501568][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.562210][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.569344][ T6655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.617338][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.624538][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.678273][ T8] vhci_hcd: vhci_device speed not set [ 835.731927][T12448] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 835.738501][T12448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 835.746192][T12448] vhci_hcd vhci_hcd.0: Device attached [ 835.754837][T12449] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 835.761181][ T8] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 835.936794][ T81] vhci_hcd: stop threads [ 835.941308][ T5868] vhci_hcd: vhci_device speed not set [ 835.946807][ T81] vhci_hcd: release socket [ 836.011484][ T5868] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 836.744561][ T81] vhci_hcd: disconnect device [ 837.281734][T12066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 837.302481][T12066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.313372][T12436] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 837.320179][T12436] PKCS7: Only support pkcs7_signedData type [ 837.331500][T11881] usb 5-1: USB disconnect, device number 5 [ 837.397935][T12246] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 837.431504][T12246] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 837.453897][T12246] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 837.473453][T12246] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 837.656090][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.688694][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.711036][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.738166][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.745366][ T6655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.783750][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.790930][ T8552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.921155][T12066] veth0_vlan: entered promiscuous mode [ 837.990598][T12066] veth1_vlan: entered promiscuous mode [ 838.094776][T12066] veth0_macvtap: entered promiscuous mode [ 838.119715][T12066] veth1_macvtap: entered promiscuous mode [ 838.152543][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.163613][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.174227][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.210408][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.231698][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.256817][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.287674][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.354555][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.377263][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.418103][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.476093][T12465] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 838.907053][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.928179][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.001268][T12066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.066766][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.120101][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.129966][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.180176][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.210114][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.221230][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.231555][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.254289][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.269191][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.315733][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.330155][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.360174][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.381146][T12066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.438369][T12474] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 839.481359][T12066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.490671][T12066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.499390][T12066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.508721][T12066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.543386][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.572983][T12246] veth0_vlan: entered promiscuous mode [ 839.584195][T12246] veth1_vlan: entered promiscuous mode [ 839.606292][T12246] veth0_macvtap: entered promiscuous mode [ 839.615598][T12246] veth1_macvtap: entered promiscuous mode [ 839.629820][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.641316][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.651757][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.662435][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.672599][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.683323][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.694323][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.705417][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.715430][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.726328][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.736404][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.747102][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.757136][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.767807][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.778863][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.791521][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.802080][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.812010][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.822527][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.832469][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.843046][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.852944][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.863478][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.873370][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.884239][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.894735][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.905854][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.916013][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.926579][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.937550][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.040197][T12246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.076821][T12246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.090672][T12444] vhci_hcd: connection reset by peer [ 840.110176][T12246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.124455][ T8552] vhci_hcd: stop threads [ 840.128758][ T8552] vhci_hcd: release socket [ 840.130150][T12246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.160139][ T8552] vhci_hcd: disconnect device [ 841.150286][ T5868] vhci_hcd: vhci_device speed not set [ 841.200888][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.208760][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.360161][ T8] vhci_hcd: vhci_device speed not set [ 843.419337][T11596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.434604][T11596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.446316][T11596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.457096][T11596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.470414][T11596] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 843.486503][T11596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 843.715016][T12504] Set syz1 is full, maxelem 65536 reached [ 844.563196][ T6655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.639479][ T6655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.562779][T11596] Bluetooth: hci4: command tx timeout [ 845.633084][T12521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 845.639661][T12521] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 845.647391][T12521] vhci_hcd vhci_hcd.0: Device attached [ 845.837734][T12534] bio_check_eod: 15 callbacks suppressed [ 845.837761][T12534] syz.8.1324: attempt to access beyond end of device [ 845.837761][T12534] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 845.871056][T12526] netlink: zone id is out of range [ 845.876243][T12526] netlink: zone id is out of range [ 845.942676][T12522] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 846.059768][ T25] vhci_hcd: vhci_device speed not set [ 846.073738][ T8552] vhci_hcd: stop threads [ 846.078165][ T8552] vhci_hcd: release socket [ 846.851088][ T25] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 846.864782][T12534] syz.8.1324: attempt to access beyond end of device [ 846.864782][T12534] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 846.879870][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 846.896607][T12534] syz.8.1324: attempt to access beyond end of device [ 846.896607][T12534] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 846.900117][ T8552] vhci_hcd: disconnect device [ 846.953447][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 846.976625][T12534] syz.8.1324: attempt to access beyond end of device [ 846.976625][T12534] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 846.994681][T12534] syz.8.1324: attempt to access beyond end of device [ 846.994681][T12534] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 847.008153][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 847.020054][T12534] syz.8.1324: attempt to access beyond end of device [ 847.020054][T12534] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 847.033488][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 847.054276][T12534] syz.8.1324: attempt to access beyond end of device [ 847.054276][T12534] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 847.068044][T12534] syz.8.1324: attempt to access beyond end of device [ 847.068044][T12534] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 847.081736][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 847.092721][T12534] syz.8.1324: attempt to access beyond end of device [ 847.092721][T12534] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 847.106311][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 847.118712][T12534] syz.8.1324: attempt to access beyond end of device [ 847.118712][T12534] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 847.133082][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 847.144031][T12534] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 847.153741][T12534] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 847.543685][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.660822][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 847.680236][T11596] Bluetooth: hci4: command tx timeout [ 847.955761][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.005185][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.052409][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.062505][ T8] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 848.071753][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.287512][T12561] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 849.330687][ T8] usb 5-1: config 0 descriptor?? [ 849.416120][T12503] chnl_net:caif_netlink_parms(): no params data found [ 849.486078][ T8] usb 5-1: can't set config #0, error -71 [ 849.610212][ T8] usb 5-1: USB disconnect, device number 6 [ 849.965869][T11596] Bluetooth: hci4: command tx timeout [ 850.051132][T12573] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 851.942675][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.047342][T10544] Bluetooth: hci4: command tx timeout [ 852.390170][ T25] vhci_hcd: vhci_device speed not set [ 853.036384][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.296273][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.491292][T12603] bio_check_eod: 2 callbacks suppressed [ 853.491342][T12603] syz.8.1337: attempt to access beyond end of device [ 853.491342][T12603] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 853.521733][T12603] syz.8.1337: attempt to access beyond end of device [ 853.521733][T12603] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 853.540146][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 853.590047][T12603] syz.8.1337: attempt to access beyond end of device [ 853.590047][T12603] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 853.606975][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 853.610752][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.631610][T12603] syz.8.1337: attempt to access beyond end of device [ 853.631610][T12603] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 853.644823][T12503] bridge_slave_0: entered allmulticast mode [ 853.646621][T12503] bridge_slave_0: entered promiscuous mode [ 853.662663][T12603] syz.8.1337: attempt to access beyond end of device [ 853.662663][T12603] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 853.665036][T12605] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 853.684099][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 853.698368][T12603] syz.8.1337: attempt to access beyond end of device [ 853.698368][T12603] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 853.705048][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.720564][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 853.740404][T12603] syz.8.1337: attempt to access beyond end of device [ 853.740404][T12603] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 853.761097][T12603] syz.8.1337: attempt to access beyond end of device [ 853.761097][T12603] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 853.775833][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 853.789365][T12603] syz.8.1337: attempt to access beyond end of device [ 853.789365][T12603] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 853.793101][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.812160][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 853.830445][T12603] syz.8.1337: attempt to access beyond end of device [ 853.830445][T12603] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 853.847836][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 853.863539][T12603] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 853.874373][T12603] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 853.884592][T12503] bridge_slave_1: entered allmulticast mode [ 854.122211][T12503] bridge_slave_1: entered promiscuous mode [ 854.839096][T12614] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 854.845675][T12614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 854.853344][T12614] vhci_hcd vhci_hcd.0: Device attached [ 854.863348][T12615] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 855.140195][ T25] vhci_hcd: vhci_device speed not set [ 855.236244][ T25] usb 49-1: new full-speed USB device number 4 using vhci_hcd [ 855.802235][T12503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.820503][ T12] vhci_hcd: stop threads [ 855.824878][ T12] vhci_hcd: release socket [ 855.831581][ T12] vhci_hcd: disconnect device [ 855.853245][T12503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.019373][T12503] team0: Port device team_slave_0 added [ 856.132393][T12503] team0: Port device team_slave_1 added [ 857.856844][T12503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.866245][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.892310][T12503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.113039][ T81] bridge_slave_1: left allmulticast mode [ 858.118746][ T81] bridge_slave_1: left promiscuous mode [ 858.124823][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.181855][ T81] bridge_slave_0: left allmulticast mode [ 858.187567][ T81] bridge_slave_0: left promiscuous mode [ 858.195748][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.256407][T12646] netlink: zone id is out of range [ 858.694873][T12658] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 859.215451][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 859.396564][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.430394][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.456984][ T8] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 859.500438][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.542145][ T8] usb 4-1: config 0 descriptor?? [ 859.592953][T12668] serio: Serial port ptm0 [ 860.014874][ T8] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 860.195173][ T5868] usb 4-1: USB disconnect, device number 3 [ 860.296145][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.317545][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.342719][ T81] bond0 (unregistering): Released all slaves [ 860.369915][T12503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.377897][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.448775][T12503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.593651][ T25] vhci_hcd: vhci_device speed not set [ 860.683066][ T81] hsr_slave_0: left promiscuous mode [ 860.912846][ T81] hsr_slave_1: left promiscuous mode [ 860.919120][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.945679][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.020145][T12692] syz.8.1346[12692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.020630][T12692] syz.8.1346[12692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.033225][T12692] syz.8.1346[12692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.249240][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.328744][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.991783][ T81] veth1_macvtap: left promiscuous mode [ 861.997387][ T81] veth0_macvtap: left promiscuous mode [ 862.004115][ T81] veth1_vlan: left promiscuous mode [ 862.009443][ T81] veth0_vlan: left promiscuous mode [ 862.321009][T12704] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 863.011222][ T7667] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 863.056058][T12705] bio_check_eod: 2 callbacks suppressed [ 863.056113][T12705] syz.8.1350: attempt to access beyond end of device [ 863.056113][T12705] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 863.083426][T12705] syz.8.1350: attempt to access beyond end of device [ 863.083426][T12705] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 863.097915][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 863.110234][T12705] syz.8.1350: attempt to access beyond end of device [ 863.110234][T12705] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 863.123812][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 863.142605][T12705] syz.8.1350: attempt to access beyond end of device [ 863.142605][T12705] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 863.157137][T12705] syz.8.1350: attempt to access beyond end of device [ 863.157137][T12705] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 863.171853][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 863.186135][T12705] syz.8.1350: attempt to access beyond end of device [ 863.186135][T12705] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 863.201537][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 863.215399][T12705] syz.8.1350: attempt to access beyond end of device [ 863.215399][T12705] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 863.246613][T12705] syz.8.1350: attempt to access beyond end of device [ 863.246613][T12705] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 863.260724][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 863.272962][T12705] syz.8.1350: attempt to access beyond end of device [ 863.272962][T12705] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 863.288816][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 863.302237][T12705] syz.8.1350: attempt to access beyond end of device [ 863.302237][T12705] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 863.316006][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 863.330087][T12705] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 863.343086][T12705] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 863.640236][ T7667] usb 6-1: Using ep0 maxpacket: 8 [ 863.670513][ T7667] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 863.688490][ T7667] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.708428][ T7667] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 863.729277][ T7667] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 863.744696][ T7667] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.780101][ T7667] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 863.809796][ T7667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.048627][ T7667] usb 6-1: usb_control_msg returned -32 [ 864.056571][ T7667] usbtmc 6-1:16.0: can't read capabilities [ 864.136401][T12713] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 864.964976][ T81] team0 (unregistering): Port device team_slave_1 removed [ 865.020259][ T81] team0 (unregistering): Port device team_slave_0 removed [ 865.918657][T12723] serio: Serial port ptm0 [ 865.968020][T11881] usb 6-1: USB disconnect, device number 16 [ 866.322787][T12709] netlink: 'syz.8.1353': attribute type 21 has an invalid length. [ 866.376461][T12503] hsr_slave_0: entered promiscuous mode [ 866.400372][T12503] hsr_slave_1: entered promiscuous mode [ 866.420320][T12503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.427945][T12503] Cannot create hsr debugfs directory [ 868.541577][T12754] syz.8.1360[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.541676][T12754] syz.8.1360[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.553325][T12754] syz.8.1360[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.402439][T12760] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 870.371394][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.377892][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.627633][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 871.797091][ T25] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 871.808391][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.520582][T12798] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.529382][T12798] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.538198][T12798] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.547019][T12798] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.951431][ T25] usb 6-1: config 0 descriptor?? [ 873.961055][ T25] usb 6-1: Invalid firmware size=18. [ 874.187293][T12807] Bluetooth: MGMT ver 1.23 [ 874.227711][T12503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 874.303692][T12503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 874.600551][T12818] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 874.607221][T12818] PKCS7: Only support pkcs7_signedData type [ 874.621790][ T973] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 876.146029][T12503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 876.169298][T12503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 876.469375][T12503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.230140][ T973] usb 4-1: Using ep0 maxpacket: 8 [ 877.386602][T12503] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.450980][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.458114][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.479422][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.486644][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.876124][T12853] vivid-004: disconnect [ 877.882301][T12853] vivid-004: reconnect [ 878.667354][ T973] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 878.693519][T12503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.723616][ T973] usb 4-1: can't read configurations, error -71 [ 879.112209][T12861] ax25_connect(): syz.8.1379 uses autobind, please contact jreuter@yaina.de [ 881.740649][T12503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.079087][T12503] veth0_vlan: entered promiscuous mode [ 882.136429][T12503] veth1_vlan: entered promiscuous mode [ 882.275430][T12503] veth0_macvtap: entered promiscuous mode [ 882.330607][T12503] veth1_macvtap: entered promiscuous mode [ 882.406462][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.448628][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.478120][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.546658][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.599641][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.712593][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.741421][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.958290][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.020586][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.096468][T12908] syz.4.1385[12908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 883.097825][T12908] syz.4.1385[12908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 883.110907][T12908] syz.4.1385[12908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 883.810922][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.900160][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.950053][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.960555][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.990084][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.023882][T12503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.065682][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.112461][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.161249][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.210079][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.219946][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.276461][T11881] usb 6-1: USB disconnect, device number 17 [ 884.328262][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.412759][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.851477][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.884113][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.936976][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.998713][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.050664][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.092943][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.123708][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.188977][T12503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.232226][T12503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.271806][T12503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.288895][T12503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.298253][T12503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.791062][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.850098][T12952] vivid-004: disconnect [ 886.980240][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.373709][T12949] vivid-004: reconnect [ 887.391146][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.401440][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.312919][T12964] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 888.319489][T12964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 888.328479][T12964] vhci_hcd vhci_hcd.0: Device attached [ 890.304148][ T5868] vhci_hcd: vhci_device speed not set [ 890.363837][ T5868] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 890.551091][T12989] sctp: [Deprecated]: syz.5.1399 (pid 12989) Use of int in max_burst socket option. [ 890.551091][T12989] Use struct sctp_assoc_value instead [ 891.310754][T12965] vhci_hcd: connection reset by peer [ 891.627883][ T3505] vhci_hcd: stop threads [ 891.690626][ T3505] vhci_hcd: release socket [ 891.702434][ T3505] vhci_hcd: disconnect device [ 891.847889][T13002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 891.854464][T13002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 891.862195][T13002] vhci_hcd vhci_hcd.0: Device attached [ 892.050749][T11881] vhci_hcd: vhci_device speed not set [ 892.110867][T11881] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 892.510940][T13021] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 894.793281][T13006] vhci_hcd: connection reset by peer [ 895.240192][T13043] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 895.246857][T13043] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 895.254830][T13043] vhci_hcd vhci_hcd.0: Device attached [ 895.275799][ T3505] vhci_hcd: stop threads [ 895.466801][ T3505] vhci_hcd: release socket [ 895.548805][ T3505] vhci_hcd: disconnect device [ 895.618809][T13066] vivid-001: disconnect [ 895.625058][T13066] vivid-001: reconnect [ 895.824729][ T8] vhci_hcd: vhci_device speed not set [ 896.040647][ T8] usb 49-1: new full-speed USB device number 5 using vhci_hcd [ 896.087278][ T5868] vhci_hcd: vhci_device speed not set [ 896.830862][T13083] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1414'. [ 897.404195][T11881] vhci_hcd: vhci_device speed not set [ 898.204966][T13053] vhci_hcd: connection reset by peer [ 898.290301][ T3505] vhci_hcd: stop threads [ 898.294616][ T3505] vhci_hcd: release socket [ 898.317085][ T3505] vhci_hcd: disconnect device [ 900.861373][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 900.870727][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 900.879943][T13126] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1424'. [ 902.050204][ T8] vhci_hcd: vhci_device speed not set [ 903.787529][T13147] sctp: [Deprecated]: syz.8.1427 (pid 13147) Use of int in max_burst socket option. [ 903.787529][T13147] Use struct sctp_assoc_value instead [ 905.484618][T13164] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 907.863226][T13169] serio: Serial port ptm0 [ 911.551084][T13208] netlink: zone id is out of range [ 911.574864][T13208] netlink: zone id is out of range [ 912.608517][ T973] IPVS: starting estimator thread 0... [ 912.795789][T13218] IPVS: using max 22 ests per chain, 52800 per kthread [ 913.599803][T13226] block device autoloading is deprecated and will be removed. [ 913.660220][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 913.930507][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.950121][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.649642][ T25] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 914.658880][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.677903][ T25] usb 9-1: config 0 descriptor?? [ 916.315976][ T25] usb 9-1: can't set config #0, error -71 [ 916.340362][T13256] netlink: 'syz.2.1451': attribute type 21 has an invalid length. [ 916.360286][ T25] usb 9-1: USB disconnect, device number 8 [ 917.923213][T13271] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 920.657435][T13283] sctp: [Deprecated]: syz.2.1458 (pid 13283) Use of int in max_burst socket option. [ 920.657435][T13283] Use struct sctp_assoc_value instead [ 920.673616][T13283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1458'. [ 920.684276][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 920.693642][T13283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1458'. [ 922.307572][T13320] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 922.913744][T13317] sctp: [Deprecated]: syz.2.1463 (pid 13317) Use of int in max_burst socket option. [ 922.913744][T13317] Use struct sctp_assoc_value instead [ 925.736717][T13354] serio: Serial port ptm0 [ 926.120404][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 927.130314][ T8] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 927.153133][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.396415][ T8] usb 3-1: config 0 descriptor?? [ 927.421747][ T8] usb 3-1: Invalid firmware size=18. [ 929.467961][T11596] Bluetooth: hci1: command 0x0406 tx timeout [ 932.120689][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.127031][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.295436][ T8] usb 3-1: USB disconnect, device number 4 [ 935.326986][T13424] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 935.333564][T13424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 935.341161][T13424] vhci_hcd vhci_hcd.0: Device attached [ 935.420736][T12482] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 935.553208][ T25] vhci_hcd: vhci_device speed not set [ 935.732591][T12482] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 935.741891][T12482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.751982][T12482] usb 5-1: config 0 descriptor?? [ 935.760162][T12482] usb 5-1: Invalid firmware size=18. [ 936.717045][ T25] usb 43-1: new full-speed USB device number 6 using vhci_hcd [ 938.498666][ T5870] usb 5-1: USB disconnect, device number 7 [ 938.540135][T11881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 938.577986][T13464] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1492'. [ 938.739846][T11881] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 938.966798][T11881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.977901][T11881] usb 3-1: config 0 descriptor?? [ 938.988091][T11881] usb 3-1: Invalid firmware size=18. [ 939.840217][T13431] vhci_hcd: connection reset by peer [ 939.850350][ T11] vhci_hcd: stop threads [ 939.854645][ T11] vhci_hcd: release socket [ 939.900054][ T11] vhci_hcd: disconnect device [ 940.963684][T13486] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 940.970270][T13486] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 940.980284][T13486] vhci_hcd vhci_hcd.0: Device attached [ 940.989459][T13490] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 943.169434][ T8552] vhci_hcd: stop threads [ 943.174800][ T8552] vhci_hcd: release socket [ 943.179636][ T8552] vhci_hcd: disconnect device [ 944.330505][ T25] vhci_hcd: vhci_device speed not set [ 944.452510][ T5868] usb 3-1: USB disconnect, device number 5 [ 947.453904][T13551] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 948.930694][T13558] netlink: zone id is out of range [ 948.935909][T13558] netlink: zone id is out of range [ 949.037162][T13561] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 949.043745][T13561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 949.052775][T13561] vhci_hcd vhci_hcd.0: Device attached [ 949.909170][T13566] netlink: zone id is out of range [ 950.000302][T11881] vhci_hcd: vhci_device speed not set [ 950.070324][T11881] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 950.190139][ T5870] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 950.290165][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 950.346992][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.146634][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.157803][ T5870] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 951.168105][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.796161][ T5870] usb 5-1: config 0 descriptor?? [ 951.839277][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.851035][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.864237][ T25] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 951.902946][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 951.912122][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 951.937892][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.952799][ T5870] usb 5-1: USB disconnect, device number 8 [ 952.001349][ T25] usb 4-1: config 0 descriptor?? [ 952.054144][ T25] usb 4-1: can't set config #0, error -71 [ 952.061656][ T25] usb 4-1: USB disconnect, device number 6 [ 952.858005][T13618] ax25_connect(): syz.5.1519 uses autobind, please contact jreuter@yaina.de [ 953.543264][T13620] @: renamed from vlan0 (while UP) [ 953.641382][T13624] netlink: zone id is out of range [ 953.646893][T13624] netlink: zone id is out of range [ 953.826374][T13625] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 954.030604][ T8] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 954.241773][T13565] vhci_hcd: connection reset by peer [ 954.293269][ T12] vhci_hcd: stop threads [ 954.297539][ T12] vhci_hcd: release socket [ 954.361230][ T12] vhci_hcd: disconnect device [ 954.369800][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.428672][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.454637][ T8] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 954.489942][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.540245][ T8] usb 9-1: config 0 descriptor?? [ 955.220280][T11881] vhci_hcd: vhci_device speed not set [ 956.134185][ T8] cougar 0003:060B:700A.0008: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.8-1/input0 [ 956.193434][ T977] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 956.296822][ T25] usb 9-1: USB disconnect, device number 9 [ 956.501807][ T977] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 956.514021][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.525696][ T977] usb 4-1: config 0 descriptor?? [ 957.292219][ T977] usb 4-1: Invalid firmware size=18. [ 957.312100][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 957.323194][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 957.332458][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1532'. [ 958.655860][T13678] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 958.968257][T13678] PKCS7: Only support pkcs7_signedData type [ 959.672613][T13688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1535'. [ 959.699767][T12482] usb 4-1: USB disconnect, device number 7 [ 959.752833][T13688] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.761876][T13688] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.902722][T13758] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1551'. [ 967.082951][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.090385][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.708233][T13798] syz.5.1558[13798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.708695][T13798] syz.5.1558[13798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.720935][T13798] syz.5.1558[13798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.856205][T13860] ax25_connect(): syz.3.1569 uses autobind, please contact jreuter@yaina.de [ 976.996090][T13862] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 977.006479][T13862] PKCS7: Only support pkcs7_signedData type [ 977.252841][T13866] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 987.810546][T13931] syz.3.1587[13931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 987.810667][T13931] syz.3.1587[13931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 987.872172][T13931] syz.3.1587[13931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.083019][T13948] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 989.523111][T13939] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 989.553775][T13939] PKCS7: Only support pkcs7_signedData type [ 993.248234][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.268719][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 993.479038][ T8] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 993.578780][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.609563][ T8] usb 5-1: config 0 descriptor?? [ 993.632087][ T8] usb 5-1: Invalid firmware size=18. [ 994.038788][T13975] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 994.045897][T13975] PKCS7: Only support pkcs7_signedData type [ 994.566205][T14000] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1598'. [ 995.709663][ T8] usb 5-1: USB disconnect, device number 9 [ 995.939086][T14004] netlink: zone id is out of range [ 997.942972][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 998.120628][ T8] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 998.140111][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.192296][ T8] usb 5-1: config 0 descriptor?? [ 998.219023][ T8] usb 5-1: Invalid firmware size=18. [ 1000.758501][T14038] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 1002.367863][T14018] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1002.374526][T14018] PKCS7: Only support pkcs7_signedData type [ 1003.710635][T14056] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1004.005986][ T25] usb 5-1: USB disconnect, device number 10 [ 1004.450345][ T973] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1005.727611][ T973] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1005.935513][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.034070][T14092] vivid-000: disconnect [ 1006.040109][T14092] vivid-000: reconnect [ 1006.566218][ T973] usb 4-1: config 0 descriptor?? [ 1006.623158][ T973] usb 4-1: Invalid firmware size=18. [ 1007.297634][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1007.309364][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1007.318752][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1007.329461][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1007.337534][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1007.345612][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1007.406755][T14102] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 1007.412383][ T8] usb 4-1: USB disconnect, device number 8 [ 1007.991835][T14113] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1009.403226][ T5834] Bluetooth: hci2: command tx timeout [ 1011.151769][T14100] chnl_net:caif_netlink_parms(): no params data found [ 1011.550063][ T5834] Bluetooth: hci2: command tx timeout [ 1011.879309][T14158] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 1012.443026][T14172] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.452084][T14172] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.460977][T14172] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.469744][T14172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.132179][T14100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.173945][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.195725][T14100] bridge_slave_0: entered allmulticast mode [ 1013.211240][T14100] bridge_slave_0: entered promiscuous mode [ 1013.286800][T14100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.294542][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.312955][T14100] bridge_slave_1: entered allmulticast mode [ 1013.469120][T14100] bridge_slave_1: entered promiscuous mode [ 1013.640836][ T5834] Bluetooth: hci2: command tx timeout [ 1013.666083][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.722425][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.492763][T14100] team0: Port device team_slave_0 added [ 1014.523540][T14100] team0: Port device team_slave_1 added [ 1014.649104][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.672651][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.799135][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.440897][T14204] vivid-001: disconnect [ 1015.445847][T14204] vivid-001: reconnect [ 1015.986018][ T5834] Bluetooth: hci2: command tx timeout [ 1016.271248][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.278247][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.453354][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.312736][T14207] Driver unsupported XDP return value 0 on prog (id 399) dev N/A, expect packet loss! [ 1018.006582][T14100] hsr_slave_0: entered promiscuous mode [ 1018.045902][T14100] hsr_slave_1: entered promiscuous mode [ 1018.072495][T14100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.131990][T14100] Cannot create hsr debugfs directory [ 1021.015903][T14202] Set syz1 is full, maxelem 65536 reached [ 1023.630119][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1023.979536][T14282] syz.4.1648[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1023.979643][T14282] syz.4.1648[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1023.991742][T14282] syz.4.1648[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1024.300511][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 1024.508495][ T5870] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1024.540989][ T5870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1024.653004][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1024.784395][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1024.837391][ T5870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.876648][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1024.912593][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.274897][T14100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1025.282018][ T5870] usb 4-1: GET_CAPABILITIES returned 0 [ 1025.287539][ T5870] usbtmc 4-1:16.0: can't read capabilities [ 1025.351425][T14100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1025.386573][T14100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1025.446646][T14304] syz.5.1651[14304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.446750][T14304] syz.5.1651[14304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.459112][T14100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1025.502453][ T7667] usb 4-1: USB disconnect, device number 9 [ 1025.540563][T14304] syz.5.1651[14304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.607503][ T5834] Bluetooth: hci4: link tx timeout [ 1025.626981][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1025.672825][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 1025.778110][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.867892][T14100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.970961][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.978051][T12399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.222710][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.230113][T12399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.769626][T10544] Bluetooth: hci4: command 0x0406 tx timeout [ 1028.872085][T14100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.597169][T14364] serio: Serial port ptm0 [ 1031.757887][T14383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1031.764463][T14383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1031.772254][T14383] vhci_hcd vhci_hcd.0: Device attached [ 1031.835100][T14100] veth0_vlan: entered promiscuous mode [ 1031.870229][T14384] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 1031.900402][ T35] vhci_hcd: stop threads [ 1031.904695][ T35] vhci_hcd: release socket [ 1031.909253][ T35] vhci_hcd: disconnect device [ 1031.963885][T14100] veth1_vlan: entered promiscuous mode [ 1033.189508][T14100] veth0_macvtap: entered promiscuous mode [ 1033.223943][T14100] veth1_macvtap: entered promiscuous mode [ 1033.295807][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.319933][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.333927][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.398751][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.428254][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.475550][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.525002][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.576542][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.608224][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.618944][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.630906][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.644473][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.655092][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.666345][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.677193][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.688285][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.721813][T14100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.742819][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.766311][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.797946][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.832131][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.842702][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.855279][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.867131][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.878101][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.888543][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.899472][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.909828][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.921106][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.942744][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.964957][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.987958][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.009774][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.041127][T14100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.076646][T14100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.096041][T14100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.119684][T14100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.149399][T14100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.279078][T14415] serio: Serial port ptm0 [ 1036.329138][T14394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.374114][T14394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.440788][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.483402][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.230872][T14442] syz.4.1689[14442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1038.231057][T14442] syz.4.1689[14442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1038.245035][T14442] syz.4.1689[14442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.347883][ T7667] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1049.300259][ T7667] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1049.330296][ T7667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.357217][ T7667] usb 6-1: config 0 descriptor?? [ 1049.387543][ T7667] usb 6-1: Invalid firmware size=18. [ 1049.415244][T14551] netlink: zone id is out of range [ 1049.420543][T14551] netlink: zone id is out of range [ 1050.217388][ T7667] usb 6-1: USB disconnect, device number 18 [ 1050.760283][ T5868] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1050.935357][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.996952][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.739304][ T5868] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1051.748591][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.785823][ T5868] usb 5-1: config 0 descriptor?? [ 1052.406179][ T5868] cougar 0003:060B:700A.0009: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.4-1/input0 [ 1052.521021][T10544] Bluetooth: hci2: command 0x0405 tx timeout [ 1053.114290][T11881] usb 5-1: USB disconnect, device number 11 [ 1053.300115][ T5868] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1053.495617][ T5868] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1053.528237][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.549819][ T5868] usb 4-1: config 0 descriptor?? [ 1053.558875][ T5868] usb 4-1: Invalid firmware size=18. [ 1054.694966][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.543942][T14647] ax25_connect(): syz.4.1730 uses autobind, please contact jreuter@yaina.de [ 1060.260955][ T25] usb 4-1: USB disconnect, device number 10 [ 1066.792763][T14730] overlayfs: missing 'workdir' [ 1067.390557][ T973] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1070.341756][ T973] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1070.349491][ T973] usb 7-1: can't read configurations, error -71 [ 1083.371674][T14882] tty tty33: ldisc open failed (-12), clearing slot 32 [ 1084.950595][T14899] ALSA: mixer_oss: invalid OSS volume '' [ 1092.000117][ T7667] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1095.127582][ T7667] usb 5-1: device descriptor read/all, error -71 [ 1095.632465][T14980] ALSA: mixer_oss: invalid OSS volume '' [ 1097.082534][T15007] 9pnet_fd: Insufficient options for proto=fd [ 1100.846840][T15044] ALSA: mixer_oss: invalid OSS volume '' [ 1100.853033][T10544] Bluetooth: hci2: command 0x0405 tx timeout [ 1104.186867][T15070] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1104.193457][T15070] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1104.201471][T15070] vhci_hcd vhci_hcd.0: Device attached [ 1104.230878][T15073] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 1106.170161][ T6655] vhci_hcd: stop threads [ 1106.174840][ T6655] vhci_hcd: release socket [ 1106.179361][ T6655] vhci_hcd: disconnect device [ 1107.098523][T15087] 9pnet_fd: Insufficient options for proto=fd [ 1110.154482][T15126] pim6reg: entered allmulticast mode [ 1112.143879][T15125] pim6reg: left allmulticast mode [ 1112.304269][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1113.053872][ T29] audit: type=1326 audit(1733908935.913:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.075971][ T29] audit: type=1326 audit(1733908935.913:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.098054][ T29] audit: type=1326 audit(1733908935.933:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.120378][ T29] audit: type=1326 audit(1733908935.933:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.142114][ T29] audit: type=1326 audit(1733908935.933:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.163482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.169961][ T29] audit: type=1326 audit(1733908935.943:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.192898][ T29] audit: type=1326 audit(1733908935.943:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.214445][ T29] audit: type=1326 audit(1733908935.943:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.236633][ T29] audit: type=1326 audit(1733908935.943:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1113.259693][ T29] audit: type=1326 audit(1733908935.943:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757f77ff19 code=0x7ffc0000 [ 1116.943793][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.764919][T15344] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1866'. [ 1132.129769][T15349] pim6reg: entered allmulticast mode [ 1132.240247][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1132.440429][ T5870] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1132.479716][ T5868] usb 7-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1132.600873][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.642764][ T5868] usb 7-1: config 0 descriptor?? [ 1132.669390][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 1132.681621][ T5868] usb 7-1: Invalid firmware size=18. [ 1132.709496][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.727781][ T5870] usb 4-1: Product: syz [ 1132.740087][ T5870] usb 4-1: Manufacturer: syz [ 1132.751744][ T5870] usb 4-1: SerialNumber: syz [ 1132.767618][ T5870] usb 4-1: config 0 descriptor?? [ 1132.791223][ T5870] smsc75xx v1.0.0 [ 1132.794930][ T5870] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1132.821180][ T5870] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22 [ 1133.640415][T10544] Bluetooth: hci2: command 0x0405 tx timeout [ 1134.686670][T15349] pim6reg: left allmulticast mode [ 1135.018816][ T25] usb 4-1: USB disconnect, device number 12 [ 1135.891460][ T5868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1136.533536][T15396] 9pnet_fd: Insufficient options for proto=fd [ 1136.596167][ T5868] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1136.612064][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.623595][ T5868] usb 3-1: config 0 descriptor?? [ 1136.632924][ T5868] usb 3-1: Invalid firmware size=18. [ 1138.960341][T15416] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1879'. [ 1138.977413][ T25] usb 3-1: USB disconnect, device number 6 [ 1143.263763][T15449] netlink: 'syz.2.1885': attribute type 21 has an invalid length. [ 1143.341240][T15451] netlink: zone id is out of range [ 1143.346425][T15451] netlink: zone id is out of range [ 1144.660336][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1146.472908][T15484] 9pnet_fd: Insufficient options for proto=fd [ 1146.661166][ T5871] usb 5-1: device descriptor read/all, error -71 [ 1146.952276][T10544] Bluetooth: hci2: command 0x0405 tx timeout [ 1147.333837][T11596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1147.378477][T11596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1147.428753][T11596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1147.453491][T11596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1147.474367][T11596] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1147.506789][T11596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1151.441077][T15489] chnl_net:caif_netlink_parms(): no params data found [ 1152.760377][T11596] Bluetooth: hci3: command tx timeout [ 1153.076363][T15489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.104692][T15489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.134472][T15489] bridge_slave_0: entered allmulticast mode [ 1153.167337][T15489] bridge_slave_0: entered promiscuous mode [ 1153.245326][T15489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.260234][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.268079][T15489] bridge_slave_1: entered allmulticast mode [ 1154.276319][T15489] bridge_slave_1: entered promiscuous mode [ 1155.084857][T11596] Bluetooth: hci3: command tx timeout [ 1155.403090][T15489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.455774][T15556] 9pnet_fd: Insufficient options for proto=fd [ 1155.503037][T15489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.917588][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1907'. [ 1157.250383][T11596] Bluetooth: hci3: command tx timeout [ 1158.282534][T15489] team0: Port device team_slave_0 added [ 1158.958169][T15489] team0: Port device team_slave_1 added [ 1159.177814][T15489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.199003][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.240124][ T5870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1159.329333][T11596] Bluetooth: hci3: command tx timeout [ 1159.369250][T15489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.432677][ T5870] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1159.452516][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.478741][T15489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.552282][ T5870] usb 4-1: config 0 descriptor?? [ 1159.557449][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.602712][ T5870] usb 4-1: Invalid firmware size=18. [ 1159.699756][T15489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.779443][T15489] hsr_slave_0: entered promiscuous mode [ 1159.891791][T15489] hsr_slave_1: entered promiscuous mode [ 1159.920139][ T5870] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1159.948841][T15489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1159.979335][T15489] Cannot create hsr debugfs directory [ 1160.158922][ T5870] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1160.173324][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.330124][ T5870] usb 5-1: config 0 descriptor?? [ 1161.348542][ T5870] usb 5-1: Invalid firmware size=18. [ 1161.651411][T15489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.662223][T15489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.590634][ T7667] usb 5-1: USB disconnect, device number 16 [ 1166.725977][ T25] usb 4-1: USB disconnect, device number 13 [ 1166.777777][T15489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.864636][T15489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.164952][T15489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.273535][T15489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.548095][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 1172.927554][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1172.963387][T15489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.973888][T15489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.777174][T15668] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1927'. [ 1175.966562][ T25] usb 4-1: device descriptor read/all, error -71 [ 1176.005452][T15489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1176.127780][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.136715][T15668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.280626][T15489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1178.472520][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.530175][T12482] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1178.576379][T15489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1179.556728][T12482] usb 5-1: device descriptor read/all, error -71 [ 1179.620564][T15678] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1179.659352][T15489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1180.810176][T15678] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1180.882083][T15489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.983791][T15678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.057395][T15678] usb 3-1: config 0 descriptor?? [ 1181.093569][T15489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.132918][T15489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1181.143429][T15489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.164540][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.171742][T14394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.181271][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.188397][T14394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.300415][T15678] usb 3-1: Invalid firmware size=18. [ 1182.649693][T15706] netlink: 'syz.3.1938': attribute type 21 has an invalid length. [ 1183.079620][ T5868] usb 3-1: USB disconnect, device number 7 [ 1183.100200][ T977] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1183.249250][T15489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.291133][ T977] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1183.309949][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.356421][ T977] usb 6-1: config 0 descriptor?? [ 1183.411692][ T977] usb 6-1: Invalid firmware size=18. [ 1184.590183][T15489] veth0_vlan: entered promiscuous mode [ 1184.601644][T15489] veth1_vlan: entered promiscuous mode [ 1184.624290][T15489] veth0_macvtap: entered promiscuous mode [ 1184.634242][T15489] veth1_macvtap: entered promiscuous mode [ 1184.650598][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.661409][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.672207][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.683791][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.693846][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.827406][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.837448][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.848143][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.858093][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.868658][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.879419][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.890761][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.900736][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.911300][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.921250][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.931861][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.941736][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.952300][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.963459][T15489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.975094][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.985649][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.995511][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.006027][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.015886][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.026432][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.036313][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.046815][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.056679][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.067150][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.077913][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.089247][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.099142][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.109675][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.119542][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.130270][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.140490][T15489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.150976][T15489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.162225][T15489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.172162][T15489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.181892][T15489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.191456][T15489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.200215][T15489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.742690][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.768155][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.934260][T15678] usb 6-1: USB disconnect, device number 19 [ 1187.543726][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.551676][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.301900][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1194.312073][ T8] usb 5-1: device descriptor read/all, error -71 [ 1194.794610][T15817] vivid-000: disconnect [ 1195.170467][T15811] vivid-000: reconnect [ 1200.595344][T15850] veth0_vlan: entered allmulticast mode [ 1203.848318][T15885] fuse: Unknown parameter './file0' [ 1205.271039][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1205.467052][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 1205.479253][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.676698][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.837756][ T5870] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1205.857586][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.264878][T15908] veth0_vlan: entered allmulticast mode [ 1206.585472][ T5870] usb 4-1: config 0 descriptor?? [ 1207.878952][T15818] Set syz1 is full, maxelem 65536 reached [ 1207.920542][ T5870] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 1207.927654][ T5870] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 1207.934832][ T5870] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 1207.942009][ T5870] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 1207.949090][ T5870] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 1207.956822][ T5870] appleir 0003:05AC:8241.000A: No inputs registered, leaving [ 1207.970768][ T5870] appleir 0003:05AC:8241.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1211.204328][T15945] fuse: Unknown parameter './file0' [ 1213.247102][T12482] usb 4-1: USB disconnect, device number 16 [ 1214.108093][T15988] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1988'. [ 1228.568172][T16081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2012'. [ 1239.050483][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.817341][T16168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2024'. [ 1239.938730][T11596] Bluetooth: hci4: link tx timeout [ 1239.944257][T11596] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.060458][T10544] Bluetooth: hci4: command 0x0406 tx timeout [ 1246.000405][T10544] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1246.042846][T10544] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1246.063067][T10544] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1246.073740][T10544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1246.082161][T10544] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1246.089825][T10544] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1246.094007][T16225] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2038'. [ 1248.253590][T14394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.287085][T11596] Bluetooth: hci6: command tx timeout [ 1248.320185][T14394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.900554][T11596] Bluetooth: hci6: command tx timeout [ 1251.205447][T14394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.227780][T14394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.461796][T16282] ALSA: mixer_oss: invalid OSS volume '0000000000' [ 1251.661011][T14394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.707520][T14394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.883565][T14394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.924093][T14394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.991404][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1251.991421][ T29] audit: type=1326 audit(1733909074.883:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.070254][ T29] audit: type=1326 audit(1733909074.883:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.092135][ T29] audit: type=1326 audit(1733909074.883:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.113899][ T29] audit: type=1326 audit(1733909074.883:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.135698][ T29] audit: type=1326 audit(1733909074.883:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.199611][T16291] 9pnet_fd: Insufficient options for proto=fd [ 1252.260105][ T29] audit: type=1326 audit(1733909074.883:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.364148][ T29] audit: type=1326 audit(1733909075.133:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.462002][ T29] audit: type=1326 audit(1733909075.203:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.521352][T16211] chnl_net:caif_netlink_parms(): no params data found [ 1252.532774][ T29] audit: type=1326 audit(1733909075.203:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1252.613769][T14394] bridge_slave_1: left allmulticast mode [ 1252.625134][T14394] bridge_slave_1: left promiscuous mode [ 1252.720867][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.954449][T11596] Bluetooth: hci6: command tx timeout [ 1253.000441][ T29] audit: type=1326 audit(1733909075.203:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16287 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206ad7ff19 code=0x7ffc0000 [ 1253.258262][T14394] bridge_slave_0: left allmulticast mode [ 1253.267316][T14394] bridge_slave_0: left promiscuous mode [ 1253.333363][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.001180][T11596] Bluetooth: hci6: command tx timeout [ 1255.389559][T16330] syz.3.2047[16330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1255.390443][T16330] syz.3.2047[16330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1255.403052][T16330] syz.3.2047[16330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1261.162498][T16350] ALSA: mixer_oss: invalid OSS volume '00000000000000' [ 1264.780587][T16370] syz.4.2063[16370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1264.780687][T16370] syz.4.2063[16370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1266.058417][T14394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.147391][T14394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.166597][T14394] bond0 (unregistering): Released all slaves [ 1269.331541][T16211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.338689][T16211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.360369][T16211] bridge_slave_0: entered allmulticast mode [ 1269.398017][T16211] bridge_slave_0: entered promiscuous mode [ 1269.472088][T16211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.533689][T16211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.590933][T16211] bridge_slave_1: entered allmulticast mode [ 1269.633092][T16211] bridge_slave_1: entered promiscuous mode [ 1272.901054][T16211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.985769][T16211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.200389][T14394] hsr_slave_0: left promiscuous mode [ 1274.433430][T14394] hsr_slave_1: left promiscuous mode [ 1276.351807][T14394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.389869][T14394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.437769][T14394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.460837][T14394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.590330][T14394] veth1_macvtap: left promiscuous mode [ 1276.607585][T14394] veth0_macvtap: left promiscuous mode [ 1276.662641][T14394] veth1_vlan: left promiscuous mode [ 1278.280376][T11596] Bluetooth: hci3: command 0x0406 tx timeout [ 1281.076593][T14394] team0 (unregistering): Port device team_slave_1 removed [ 1281.492861][T14394] team0 (unregistering): Port device team_slave_0 removed [ 1282.120636][T16211] team0: Port device team_slave_0 added [ 1282.140216][T16448] tipc: Started in network mode [ 1282.145304][T16448] tipc: Node identity 101, cluster identity 4711 [ 1282.154610][T16448] tipc: Node number set to 257 [ 1282.184464][T16512] netlink: 'syz.4.2087': attribute type 21 has an invalid length. [ 1282.262113][T16211] team0: Port device team_slave_1 added [ 1282.643350][T16211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.548773][T16211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.058349][T16211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.130278][T16211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.137487][T16211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.175902][T16211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.393190][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 1286.556306][T16211] hsr_slave_0: entered promiscuous mode [ 1286.690721][T16211] hsr_slave_1: entered promiscuous mode [ 1286.720213][T16211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1286.727828][T16211] Cannot create hsr debugfs directory [ 1287.208941][T14394] IPVS: stop unused estimator thread 0... [ 1287.456632][T16211] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1287.540474][T16211] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.492369][T16211] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.530070][T16211] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.186249][T16211] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.284084][T16211] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.881030][ T30] INFO: task syz.6.1865:15339 blocked for more than 144 seconds. [ 1292.888843][ T30] Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1292.992167][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1293.080432][ T30] task:syz.6.1865 state:D stack:24248 pid:15339 tgid:15338 ppid:14100 flags:0x00004004 [ 1293.130072][ T30] Call Trace: [ 1293.133416][ T30] [ 1293.150063][ T30] __schedule+0x17fb/0x4be0 [ 1293.297486][ T30] ? __pfx___schedule+0x10/0x10 [ 1293.539291][ T30] ? __pfx_lock_release+0x10/0x10 [ 1293.720777][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1293.740197][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1293.746591][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1293.760058][ T30] ? schedule+0x90/0x320 [ 1293.774928][ T30] schedule+0x14b/0x320 [ 1293.779145][ T30] ? down_read+0x6a5/0xa40 [ 1293.795140][ T30] schedule_preempt_disabled+0x13/0x30 [ 1293.800747][ T30] down_read+0x705/0xa40 [ 1293.805030][ T30] ? __pfx_down_read+0x10/0x10 [ 1293.809843][ T30] ? folio_mapping+0x17f/0x250 [ 1293.830129][ T30] rmap_walk_file+0x69c/0x780 [ 1293.834871][ T30] migrate_pages+0xd26/0x3380 [ 1293.839600][ T30] ? __pfx_alloc_migration_target+0x10/0x10 [ 1293.874313][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 1293.879483][ T30] ? find_vma+0xf9/0x170 [ 1293.884322][ T30] ? __pfx_find_vma+0x10/0x10 [ 1293.889046][ T30] ? __pfx_remove_migration_pte+0x10/0x10 [ 1293.940051][ T30] ? __pfx___up_read+0x10/0x10 [ 1293.944888][ T30] ? bitmap_bitremap+0x295/0x2c0 [ 1293.949870][ T30] do_migrate_pages+0x7fc/0xa80 [ 1293.957481][ T30] ? __pfx_do_migrate_pages+0x10/0x10 [ 1293.973677][ T30] ? irqentry_exit+0x63/0x90 [ 1293.978281][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1293.994068][ T30] ? __se_sys_migrate_pages+0x132/0x740 [ 1293.999635][ T30] ? cap_capable+0x1b4/0x250 [ 1294.005391][ T30] ? __se_sys_migrate_pages+0x132/0x740 [ 1294.020147][ T30] __se_sys_migrate_pages+0x6c4/0x740 [ 1294.025530][ T30] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 1294.049580][ T30] ? do_syscall_64+0x100/0x230 [ 1294.071921][ T30] ? do_syscall_64+0xb6/0x230 [ 1294.076631][ T30] do_syscall_64+0xf3/0x230 [ 1294.086402][ T30] ? clear_bhb_loop+0x35/0x90 [ 1294.091466][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.097383][ T30] RIP: 0033:0x7facfbd7ff19 [ 1294.101859][ T30] RSP: 002b:00007facfcb3f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 1294.110360][ T30] RAX: ffffffffffffffda RBX: 00007facfbf45fa0 RCX: 00007facfbd7ff19 [ 1294.118341][ T30] RDX: 00000000200002c0 RSI: 0000000000000003 RDI: 0000000000000000 [ 1294.127004][ T30] RBP: 00007facfbdf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1294.135928][ T30] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000000 [ 1294.143968][ T30] R13: 0000000000000000 R14: 00007facfbf45fa0 R15: 00007ffe2aade838 [ 1294.152066][ T30] [ 1294.159467][ T30] INFO: task syz.6.1865:15362 blocked for more than 145 seconds. [ 1294.220081][ T30] Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 1294.227762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1294.300415][ T30] task:syz.6.1865 state:D stack:25688 pid:15362 tgid:15338 ppid:14100 flags:0x00004004 [ 1294.350516][ T30] Call Trace: [ 1294.353859][ T30] [ 1294.356813][ T30] __schedule+0x17fb/0x4be0 [ 1294.401430][ T30] ? __pfx___schedule+0x10/0x10 [ 1294.406349][ T30] ? __blk_flush_plug+0x449/0x500 [ 1294.430109][ T30] ? __pfx_lock_release+0x10/0x10 [ 1294.435194][ T30] ? __blk_flush_plug+0x449/0x500 [ 1294.460066][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1294.480056][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1294.485487][ T30] ? schedule+0x90/0x320 [ 1294.489748][ T30] schedule+0x14b/0x320 [ 1294.533987][ T30] io_schedule+0x8d/0x110 [ 1294.538379][ T30] ? folio_wait_bit_common+0x850/0xee0 [ 1294.548283][ T30] folio_wait_bit_common+0x839/0xee0 [ 1294.553907][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1294.559745][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1294.565954][ T30] ? up_write+0x1a9/0x590 [ 1294.570649][ T30] __filemap_get_folio+0x14c/0x940 [ 1294.575793][ T30] ? down_write+0x18c/0x220 [ 1294.580819][ T30] hugetlbfs_zero_partial_page+0xb0/0x590 [ 1294.586683][ T30] hugetlbfs_fallocate+0xbdd/0x11a0 [ 1294.600268][ T30] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1294.605979][ T30] vfs_fallocate+0x569/0x6e0 [ 1294.620193][ T30] do_madvise+0x23c1/0x4d10 [ 1294.624758][ T30] ? schedule+0x90/0x320 [ 1294.629021][ T30] ? futex_wait_queue+0x14e/0x1d0 [ 1294.660200][ T30] ? __pfx_do_madvise+0x10/0x10 [ 1294.665108][ T30] ? __pfx___futex_wait+0x10/0x10 [ 1294.674760][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1294.680630][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1294.690310][ T30] ? wake_up_q+0xdc/0x120 [ 1294.694692][ T30] ? futex_wait+0x285/0x360 [ 1294.699223][ T30] ? __pfx_futex_wait+0x10/0x10 [ 1294.710063][ T30] ? do_futex+0x33b/0x560 [ 1294.714446][ T30] ? __pfx_do_futex+0x10/0x10 [ 1294.719177][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1294.726185][ T30] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 1294.733015][ T30] __x64_sys_madvise+0xa6/0xc0 [ 1294.737811][ T30] do_syscall_64+0xf3/0x230 [ 1294.749434][ T30] ? clear_bhb_loop+0x35/0x90 [ 1294.764261][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.771424][ T30] RIP: 0033:0x7facfbd7ff19 [ 1294.775873][ T30] RSP: 002b:00007facfcb1e058 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1294.790034][ T30] RAX: ffffffffffffffda RBX: 00007facfbf46080 RCX: 00007facfbd7ff19 [ 1294.798047][ T30] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000000020000000 [ 1294.806217][ T30] RBP: 00007facfbdf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1294.814339][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.822545][ T30] R13: 0000000000000000 R14: 00007facfbf46080 R15: 00007ffe2aade838 [ 1294.830637][ T30] [ 1294.833782][ T30] [ 1294.833782][ T30] Showing all locks held in the system: [ 1294.842309][ T30] 2 locks held by kworker/0:0/8: [ 1294.847268][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1294.900173][ T30] #1: ffffc900000d7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1294.920136][ T30] 1 lock held by khungtaskd/30: [ 1294.925032][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1294.954029][ T30] 2 locks held by kworker/u8:3/52: [ 1294.959242][ T30] 2 locks held by getty/5576: [ 1294.980171][ T30] #0: ffff888035c020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1295.008573][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1295.030066][ T30] 1 lock held by syz.6.1865/15339: [ 1295.035230][ T30] #0: ffff888022ec2788 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: rmap_walk_file+0x69c/0x780 [ 1295.060127][ T30] 3 locks held by syz.6.1865/15362: [ 1295.065367][ T30] #0: ffff888022ebc420 (sb_writers#18){.+.+}-{0:0}, at: vfs_fallocate+0x4fe/0x6e0 [ 1295.075207][ T30] #1: ffff888022ec24b8 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: hugetlbfs_fallocate+0x407/0x11a0 [ 1295.086885][ T30] #2: ffff888022ec2788 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: hugetlbfs_fallocate+0x4cd/0x11a0 [ 1295.098177][ T30] 3 locks held by syz-executor/15489: [ 1295.103687][ T30] #0: ffff88807c3d8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 1295.113870][ T30] #1: ffff88807c3d8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 1295.123630][ T30] #2: ffffffff8fdff968 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 1295.133774][ T30] 7 locks held by syz-executor/16211: [ 1295.139160][ T30] #0: ffff888035f3a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1295.148183][ T30] #1: ffff888060d60888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1295.158804][ T30] #2: ffff888142f27c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1295.169958][ T30] #3: ffffffff8f54b168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 1295.180452][ T30] #4: ffff888035b9a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 1295.191129][ T30] #5: ffff888035b9f250 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1295.201350][ T30] #6: ffffffff8fc9f008 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x71/0x5c0 [ 1295.210357][ T30] 2 locks held by syz.4.2102/16599: [ 1295.215571][ T30] #0: ffff88806d1a8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 1295.225632][ T30] #1: ffff88806d1a8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 1295.235461][ T30] 2 locks held by syz.5.2107/16620: [ 1295.240906][ T30] #0: ffffffff8fc9f008 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1295.249919][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1295.262737][ T30] [ 1295.265122][ T30] ============================================= [ 1295.265122][ T30] [ 1295.306591][ T30] NMI backtrace for cpu 1 [ 1295.310976][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 1295.321495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1295.331561][ T30] Call Trace: [ 1295.334843][ T30] [ 1295.337770][ T30] dump_stack_lvl+0x241/0x360 [ 1295.342460][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.347655][ T30] ? __pfx__printk+0x10/0x10 [ 1295.352249][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1295.357187][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1295.362647][ T30] ? _printk+0xd5/0x120 [ 1295.366805][ T30] ? __pfx__printk+0x10/0x10 [ 1295.371566][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1295.376441][ T30] ? __pfx__printk+0x10/0x10 [ 1295.381060][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1295.386080][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1295.392062][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1295.398040][ T30] watchdog+0xff6/0x1040 [ 1295.402279][ T30] ? watchdog+0x1ea/0x1040 [ 1295.406696][ T30] ? __pfx_watchdog+0x10/0x10 [ 1295.411371][ T30] kthread+0x2f0/0x390 [ 1295.415442][ T30] ? __pfx_watchdog+0x10/0x10 [ 1295.420124][ T30] ? __pfx_kthread+0x10/0x10 [ 1295.424712][ T30] ret_from_fork+0x4b/0x80 [ 1295.429121][ T30] ? __pfx_kthread+0x10/0x10 [ 1295.433706][ T30] ret_from_fork_asm+0x1a/0x30 [ 1295.438477][ T30] [ 1295.443223][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1295.448503][ C0] NMI backtrace for cpu 0 [ 1295.448516][ C0] CPU: 0 UID: 0 PID: 5182 Comm: klogd Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 1295.448536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1295.448545][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 1295.448568][ C0] Code: 14 25 80 d4 03 00 65 8b 05 40 72 64 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 1295.448583][ C0] RSP: 0018:ffffc900030d76d8 EFLAGS: 00000246 [ 1295.448598][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88807b373c00 [ 1295.448610][ C0] RDX: ffff88807b373c00 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1295.448621][ C0] RBP: ffffc900030d77f0 R08: ffffffff8bbc4d4a R09: 0000000000000000 [ 1295.448633][ C0] R10: ffffc900030d7760 R11: fffff5200061aeef R12: 0000000000000004 [ 1295.448644][ C0] R13: 00000000ffff0a00 R14: 0000000000000004 R15: ffffc900030d7b84 [ 1295.448661][ C0] FS: 00007f60ea7ad380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1295.448676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.448687][ C0] CR2: 00007ffc135c1108 CR3: 000000007ad2e000 CR4: 00000000003526f0 [ 1295.448702][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1295.448713][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1295.448723][ C0] Call Trace: [ 1295.448729][ C0] [ 1295.448736][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1295.448755][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1295.448773][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1295.448789][ C0] ? nmi_handle+0x2a/0x5a0 [ 1295.448813][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1295.448835][ C0] ? nmi_handle+0x14f/0x5a0 [ 1295.448851][ C0] ? nmi_handle+0x2a/0x5a0 [ 1295.448867][ C0] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 1295.448884][ C0] ? default_do_nmi+0x63/0x160 [ 1295.448902][ C0] ? exc_nmi+0x123/0x1f0 [ 1295.448917][ C0] ? end_repeat_nmi+0xf/0x53 [ 1295.448940][ C0] ? number+0x4ea/0xf90 [ 1295.448957][ C0] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 1295.448974][ C0] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 1295.448991][ C0] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 1295.449007][ C0] [ 1295.449012][ C0] [ 1295.449017][ C0] number+0x4ea/0xf90 [ 1295.449038][ C0] ? __pfx_number+0x10/0x10 [ 1295.449056][ C0] ? vsnprintf+0x948/0x1da0 [ 1295.449074][ C0] vsnprintf+0x1542/0x1da0 [ 1295.449094][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 1295.449114][ C0] sprintf+0xda/0x120 [ 1295.449130][ C0] ? __mutex_lock+0x37f/0xee0 [ 1295.449149][ C0] ? vsnprintf+0x1cc3/0x1da0 [ 1295.449165][ C0] ? __pfx_sprintf+0x10/0x10 [ 1295.449182][ C0] ? __might_fault+0xaa/0x120 [ 1295.449199][ C0] ? syslog_print+0x7d9/0x9c0 [ 1295.449219][ C0] info_print_prefix+0x16b/0x310 [ 1295.449237][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 1295.449252][ C0] ? __might_fault+0xaa/0x120 [ 1295.449268][ C0] ? __might_fault+0xc6/0x120 [ 1295.449288][ C0] syslog_print+0x4b7/0x9c0 [ 1295.449312][ C0] ? __pfx_syslog_print+0x10/0x10 [ 1295.449332][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1295.449355][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1295.449371][ C0] ? __sock_sendmsg+0x113/0x270 [ 1295.449392][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1295.449409][ C0] ? smack_privileged_cred+0x341/0x380 [ 1295.449431][ C0] ? smack_syslog+0x96/0xf0 [ 1295.449451][ C0] do_syslog+0x3c2/0x820 [ 1295.449471][ C0] ? __pfx_do_syslog+0x10/0x10 [ 1295.449497][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1295.449514][ C0] ? do_syscall_64+0x100/0x230 [ 1295.449536][ C0] __x64_sys_syslog+0x7c/0x90 [ 1295.449554][ C0] do_syscall_64+0xf3/0x230 [ 1295.449573][ C0] ? clear_bhb_loop+0x35/0x90 [ 1295.449594][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.449614][ C0] RIP: 0033:0x7f60ea90efa7 [ 1295.449627][ C0] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 1295.449640][ C0] RSP: 002b:00007ffdc03d6c88 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 1295.449663][ C0] RAX: ffffffffffffffda RBX: 00007f60eaaad4a0 RCX: 00007f60ea90efa7 [ 1295.449675][ C0] RDX: 00000000000003ff RSI: 00007f60eaaad4a0 RDI: 0000000000000002 [ 1295.449685][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 16c279ad32c23cce [ 1295.449696][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f60eaaad4a0 [ 1295.449707][ C0] R13: 00007f60eaa9d212 R14: 00007f60eaaad550 R15: 00007f60eaaad550 [ 1295.449726][ C0] [ 1295.478935][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1295.478953][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 1295.478975][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1295.478987][ T30] Call Trace: [ 1295.478994][ T30] [ 1295.479002][ T30] dump_stack_lvl+0x241/0x360 [ 1295.479032][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.479054][ T30] ? __pfx__printk+0x10/0x10 [ 1295.479072][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1295.479099][ T30] ? vscnprintf+0x5d/0x90 [ 1295.479120][ T30] panic+0x349/0x880 [ 1295.479142][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1295.479164][ T30] ? __pfx_panic+0x10/0x10 [ 1295.479181][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1295.479205][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1295.479226][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1295.479245][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1295.479264][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1295.479286][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1295.479309][ T30] watchdog+0x1035/0x1040 [ 1295.479329][ T30] ? watchdog+0x1ea/0x1040 [ 1295.479353][ T30] ? __pfx_watchdog+0x10/0x10 [ 1295.479371][ T30] kthread+0x2f0/0x390 [ 1295.479391][ T30] ? __pfx_watchdog+0x10/0x10 [ 1295.479443][ T30] ? __pfx_kthread+0x10/0x10 [ 1295.479463][ T30] ret_from_fork+0x4b/0x80 [ 1295.479479][ T30] ? __pfx_kthread+0x10/0x10 [ 1295.479499][ T30] ret_from_fork_asm+0x1a/0x30 [ 1295.479534][ T30] [ 1296.049599][ T30] Kernel Offset: disabled [ 1296.053914][ T30] Rebooting in 86400 seconds..