last executing test programs: 5m54.28338598s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) 5m52.783644079s ago: executing program 3 (id=20): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) writev(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) 5m48.723201713s ago: executing program 3 (id=27): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x400000002, 0x0) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 5m47.425220062s ago: executing program 3 (id=29): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x9, 0x800091f5, 0x8001, 0x0, 0x7fffffff}) dup3(r0, r1, 0x6700000000000000) 5m45.645996157s ago: executing program 3 (id=31): r0 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)={0x4, [0x1, 0x6], 0x7}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) unshare(0x2010000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 5m41.134198993s ago: executing program 5 (id=38): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x2, 0x800, 0x100, 0x4, 0x2, 0x6, 0xffff, 0x1}}) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket(0x2b, 0x1, 0x1) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5m38.329082461s ago: executing program 5 (id=41): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) close_range(r0, 0xffffffffffffffff, 0x0) 5m36.530480596s ago: executing program 5 (id=46): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000001a2dc2a04e5d88cc34b500000000000000"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000010007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m35.110043595s ago: executing program 5 (id=48): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 5m33.850595338s ago: executing program 5 (id=52): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsmount(r1, 0x0, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") mount$nfs(&(0x7f0000000100)='\xd2\xa6.', 0x0, 0x0, 0x44, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x100) syz_open_dev$sg(&(0x7f0000000100), 0xfffc, 0x111500) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m30.307763539s ago: executing program 32 (id=31): r0 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)={0x4, [0x1, 0x6], 0x7}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) unshare(0x2010000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 5m29.507304154s ago: executing program 5 (id=56): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 5m13.957869126s ago: executing program 33 (id=56): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 18.394756929s ago: executing program 0 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)={0x24, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 18.119715076s ago: executing program 2 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 16.360485269s ago: executing program 0 (id=503): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) close_range(r0, 0xffffffffffffffff, 0x0) 14.679422092s ago: executing program 2 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x20004800) syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000008c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x0, 0x0, 0x3, 0x20, 0x8}, 0xef, &(0x7f0000000600)={0x5, 0xf, 0xef, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x8, 0x11, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x80, 0x7, 0xff, 0x14}, @generic={0xb6, 0x10, 0xb, "55b6342aab233055c4dac73fa53bd02e6769fbfade4bb3a2d0a9fc13f64192f8754f2611fdc4c700aa7569715e169e6d3e959f0993a2298df6aa4207b4cd77db8a1cf39b5d0ac304d287d0ed98b69289650d18b01d284a7f54ab44c3fe3fb5b0661ce1ce45ef8623fa9aa5295d0f891f2f9800464ac538c685c7b0047ec222fff3e2f83fb7a44c7f21da022e5f205e680ac8469cb4590ae5442ee2d2b412627e661c36ef9bdbba84788e5092381f1ab6fe8d26"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x4, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "04b156dfad5fe2d762d85874b971756c"}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1809}}, {0x7c, &(0x7f0000000740)=@string={0x7c, 0x3, "5e325f76fc17d2711ac74aff67b80abe13b3b673499d9d218f5b35c5438d4c465c4a9a4f20dc858569f2d520866177d1190b6d511ad902e88b1a7b30f819505acce9d49c1541016e252fbcdf4bd7e2e8be24ba027a32d9d5a50eb59cb8d3ecde064a3df2fd1bc713c869269891d4c10e2d3a36031ea1c3742fee"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x808}}, {0x59, 0x0}, {0x0, 0x0}]}) 11.787490201s ago: executing program 4 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000002240)=0x40, 0x9, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0xa, 0x3}, {0x0, 0x2, 0x5}, {0x1, 0x1, 0xe, 0x9}], 0x10, 0x2, @void, @value}, 0x94) sendmmsg$inet6(r2, &(0x7f00000002c0), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0)}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 9.345186189s ago: executing program 0 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000002240)=0x40, 0x9, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0xa, 0x3}, {0x0, 0x2, 0x5}, {0x1, 0x1, 0xe, 0x9}], 0x10, 0x2, @void, @value}, 0x94) sendmmsg$inet6(r2, &(0x7f00000002c0), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0)}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 9.343801296s ago: executing program 1 (id=509): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) preadv(r0, &(0x7f0000000000)=[{0x0, 0x5600}, {&(0x7f0000000240)=""/86, 0x56}], 0x2, 0x7ffffff, 0x0) 9.342262224s ago: executing program 2 (id=510): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x7, 0x5, 0xb, 0x40, 0x8}, @tail_call, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x6, 0x7, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x3, 0x2, 0x9, 0xc}, {0x4, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x4, 0x6}, {0x0, 0x4, 0x8, 0x3}, {0x4, 0x3, 0x9}, {0x4, 0x4, 0x7, 0x8}, {0x1, 0x3, 0xb, 0x9}, {0x1, 0x5, 0x2, 0x7}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r2, 0x0, 0x4e, 0xd3, &(0x7f0000001680)="52e9736c8860fb41b414ddbb685698245b8698f55217f5260f7531cea94faebf8585a30951158a91652f1426ae6cd0f347d24d5cffdefc196748323c0c3709ab43ea4c85904f4901003e0c88b428", &(0x7f0000001700)=""/211, 0x8000, 0x0, 0x0, 0x74, 0x0, &(0x7f0000001880)="2c2ec80b7aff4ee712a4f76aa494ec0a7d8aaed030626027a83f9948a466527cb81680dd95e9889665f4eceb32e2a393999d391487d098fa0b884d574f70244f29edd24554d9dbd56183e2865e36bd3c273b3447b55907e2a760263aa4e3e0faf7f9561a823dfe5e9b2d45ba0cb5db8c22364211", 0x1, 0x0, 0x1c}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000003c0)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001980)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x0, 0xbc, 0x55, 0x4, 0x8000, 0x7}, &(0x7f0000001a40)=0x9c) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 9.340598846s ago: executing program 4 (id=511): prlimit64(0x0, 0x1, &(0x7f0000000540)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000004, 0x10048484, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141001, 0x0) pwritev2(r2, &(0x7f0000000140)=[{}], 0x1, 0x81, 0x0, 0x2) 7.98093678s ago: executing program 1 (id=512): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000200000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0xc59675d6409bfaec, 0x50, '\x00', 0x0, @fallback=0x9bb4de75d30699c4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x8957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) close_range(r1, 0xffffffffffffffff, 0x0) 7.799341466s ago: executing program 2 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)={0x54, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044040) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000040), 0x4) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, 0x0, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.183063799s ago: executing program 0 (id=514): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000002240)=0x40, 0x9, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 7.131426516s ago: executing program 1 (id=515): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000002240)=0x40, 0x9, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0xa, 0x3}, {0x0, 0x2, 0x5}, {0x1, 0x1, 0xe, 0x9}], 0x10, 0x2, @void, @value}, 0x94) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r5}}, 0x18) 5.597588343s ago: executing program 0 (id=516): r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x4800, 0xc3) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'\x00', 0x400}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) unshare(0x26020480) 5.555421932s ago: executing program 1 (id=517): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@loopback, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) getpid() 5.502555138s ago: executing program 4 (id=518): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="140001000000000000"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4.518613895s ago: executing program 1 (id=519): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) close_range(r0, 0xffffffffffffffff, 0x0) 3.767358577s ago: executing program 0 (id=520): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) 3.689608866s ago: executing program 4 (id=521): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}}, 0x2000) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ppoll(&(0x7f0000000040)=[{r3, 0x80db}], 0x1, 0x0, 0x0, 0x0) 3.532554974s ago: executing program 2 (id=522): ioperm(0x284, 0x7f, 0xe3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom$packet(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.412972906s ago: executing program 1 (id=523): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x7, 0x5, 0xb, 0x40, 0x8}, @tail_call, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x6, 0x7, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x3, 0x2, 0x9, 0xc}, {0x4, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x4, 0x6}, {0x0, 0x4, 0x8, 0x3}, {0x4, 0x3, 0x9}, {0x4, 0x4, 0x7, 0x8}, {0x1, 0x3, 0xb, 0x9}, {0x1, 0x5, 0x2, 0x7}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r2, 0x0, 0x4e, 0xd3, &(0x7f0000001680)="52e9736c8860fb41b414ddbb685698245b8698f55217f5260f7531cea94faebf8585a30951158a91652f1426ae6cd0f347d24d5cffdefc196748323c0c3709ab43ea4c85904f4901003e0c88b428", &(0x7f0000001700)=""/211, 0x8000, 0x0, 0x0, 0x74, 0x0, &(0x7f0000001880)="2c2ec80b7aff4ee712a4f76aa494ec0a7d8aaed030626027a83f9948a466527cb81680dd95e9889665f4eceb32e2a393999d391487d098fa0b884d574f70244f29edd24554d9dbd56183e2865e36bd3c273b3447b55907e2a760263aa4e3e0faf7f9561a823dfe5e9b2d45ba0cb5db8c22364211", 0x1, 0x0, 0x1c}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001980)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x0, 0xbc, 0x55, 0x4, 0x8000, 0x7}, &(0x7f0000001a40)=0x9c) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 1.828602982s ago: executing program 2 (id=524): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x18e64680a4f2fbed, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x0, 0x0, &(0x7f0000000140)=""/240, &(0x7f0000000240)=""/38, 0x8000000}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_dev$loop(0x0, 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r6, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) close_range(r4, 0xffffffffffffffff, 0x0) 1.79688248s ago: executing program 4 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xc07, 0x200400) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xcab) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) shutdown(0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) r6 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b 1 [ 137.048113][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.057914][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.068967][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.331865][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.332699][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.361937][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.369230][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.545201][ T6240] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 140.834256][ T5142] Bluetooth: hci3: command tx timeout [ 141.022979][ T5899] IPVS: starting estimator thread 0... [ 141.033101][ T6243] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.114756][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.160480][ T6244] IPVS: using max 17 ests per chain, 40800 per kthread [ 141.199326][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.324784][ T9] usb 2-1: device descriptor read/64, error -71 [ 142.277037][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.361895][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.531898][ T9] usb 2-1: device descriptor read/64, error -71 [ 142.588169][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.652442][ T9] usb usb2-port1: attempt power cycle [ 143.141315][ T6254] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 143.404826][ T5142] Bluetooth: hci3: command tx timeout [ 143.823610][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.947986][ T6218] chnl_net:caif_netlink_parms(): no params data found [ 145.149993][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.178237][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.252127][ T6218] bridge_slave_0: entered allmulticast mode [ 145.277274][ T6218] bridge_slave_0: entered promiscuous mode [ 145.342870][ T6270] ax25_connect(): syz.1.76 uses autobind, please contact jreuter@yaina.de [ 145.382880][ T12] bridge_slave_1: left allmulticast mode [ 145.391991][ T12] bridge_slave_1: left promiscuous mode [ 145.399949][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.432414][ T5142] Bluetooth: hci3: command tx timeout [ 145.524214][ T12] bridge_slave_0: left allmulticast mode [ 145.529980][ T12] bridge_slave_0: left promiscuous mode [ 145.573461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.280640][ T6280] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 147.085779][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.095092][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.823305][ T5839] Bluetooth: hci3: command tx timeout [ 147.834871][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.853560][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.866550][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.882595][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.182860][ T6292] random: crng reseeded on system resumption [ 149.993814][ T5839] Bluetooth: hci5: command tx timeout [ 150.822518][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.850871][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.874373][ T12] bond0 (unregistering): Released all slaves [ 150.898156][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.954797][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.994575][ T6218] bridge_slave_1: entered allmulticast mode [ 151.061806][ T6218] bridge_slave_1: entered promiscuous mode [ 151.986785][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.040624][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.081934][ T5839] Bluetooth: hci5: command tx timeout [ 152.738091][ T6218] team0: Port device team_slave_0 added [ 152.821400][ T12] hsr_slave_0: left promiscuous mode [ 152.856079][ T12] hsr_slave_1: left promiscuous mode [ 152.879806][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.044658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.570458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.655076][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.019601][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.039955][ T12] veth1_macvtap: left promiscuous mode [ 154.197110][ T5839] Bluetooth: hci5: command tx timeout [ 154.299440][ T12] veth0_macvtap: left promiscuous mode [ 154.318082][ T12] veth1_vlan: left promiscuous mode [ 154.325019][ T12] veth0_vlan: left promiscuous mode [ 156.262248][ T5839] Bluetooth: hci5: command tx timeout [ 157.355893][ T6355] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 158.135833][ T12] team0 (unregistering): Port device team_slave_1 removed [ 158.215493][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.711065][ T6218] team0: Port device team_slave_1 added [ 159.192803][ T6368] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 162.887033][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 162.887100][ T30] audit: type=1326 audit(1742572916.136:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 163.068911][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.210585][ T30] audit: type=1326 audit(1742572916.136:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 163.503196][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.512004][ T30] audit: type=1326 audit(1742572916.236:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 163.642006][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.664316][ T30] audit: type=1326 audit(1742572916.236:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 163.697198][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.727451][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.758845][ T30] audit: type=1326 audit(1742572916.236:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 163.793744][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.043396][ T30] audit: type=1326 audit(1742572916.336:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 164.066470][ T30] audit: type=1326 audit(1742572916.336:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 164.090873][ T30] audit: type=1326 audit(1742572916.336:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 164.116577][ T30] audit: type=1326 audit(1742572916.536:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 165.089028][ T26] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 165.156759][ T30] audit: type=1326 audit(1742572916.536:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x7ffc0000 [ 165.443792][ T26] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 165.464758][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.477569][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.486954][ T6218] hsr_slave_0: entered promiscuous mode [ 165.493350][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.597864][ T6218] hsr_slave_1: entered promiscuous mode [ 165.602437][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.649130][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.649438][ T26] usb 5-1: Product: syz [ 165.649737][ T26] usb 5-1: Manufacturer: syz [ 165.650012][ T26] usb 5-1: SerialNumber: syz [ 165.790114][ T6218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.889247][ T26] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 165.892624][ T6218] Cannot create hsr debugfs directory [ 165.925050][ T26] cdc_ncm 5-1:1.0: bind() failure [ 166.661230][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.887754][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.102019][ T6024] usb 5-1: USB disconnect, device number 3 [ 167.269370][ T6386] netlink: 'syz.2.102': attribute type 10 has an invalid length. [ 167.436433][ T6386] hsr0: entered promiscuous mode [ 167.446445][ T6386] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 167.456865][ T6386] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 167.469405][ T6386] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 169.598943][ T6419] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.287384][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.370373][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 170.520158][ T6428] loop1: detected capacity change from 0 to 2048 [ 170.614943][ T6428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.644200][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.227225][ T5897] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 173.742388][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.175516][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.183294][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.337692][ T6463] netlink: 'syz.2.115': attribute type 4 has an invalid length. [ 174.345667][ T6463] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.115'. [ 177.187176][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.315364][ T5897] usb 1-1: device descriptor read/all, error -71 [ 177.696220][ T6486] dccp_close: ABORT with 124 bytes unread [ 177.700244][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.745848][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.928610][ T6278] bridge_slave_0: entered allmulticast mode [ 178.052497][ T6278] bridge_slave_0: entered promiscuous mode [ 178.103302][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.110632][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.168063][ T6278] bridge_slave_1: entered allmulticast mode [ 178.295594][ T6278] bridge_slave_1: entered promiscuous mode [ 179.063429][ T6495] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 179.746515][ T6495] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 180.563760][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.615605][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.708863][ T6519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.996559][ T6218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.553287][ T6218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.700329][ T6278] team0: Port device team_slave_0 added [ 183.780722][ T6278] team0: Port device team_slave_1 added [ 183.803275][ T12] bridge_slave_1: left allmulticast mode [ 183.819273][ T12] bridge_slave_1: left promiscuous mode [ 183.849941][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.898832][ T12] bridge_slave_0: left allmulticast mode [ 183.930757][ T12] bridge_slave_0: left promiscuous mode [ 184.005439][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.044953][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.799951][ T6545] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.473845][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.490069][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.501534][ T12] bond0 (unregistering): Released all slaves [ 187.517039][ T6218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.951927][ T6218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.408151][ T6561] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 190.056405][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.079755][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.162082][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.186538][ T6553] netlink: 'syz.0.132': attribute type 10 has an invalid length. [ 190.194027][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.201488][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.241538][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.271674][ T6555] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 191.711620][ T6561] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 192.017188][ T6553] hsr0: entered promiscuous mode [ 192.140292][ T6575] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.136' sets config #0 [ 192.178241][ T6575] loop4: detected capacity change from 0 to 256 [ 193.208516][ T6553] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 193.254606][ T6553] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 193.290709][ T6553] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 193.347762][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.541675][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.629819][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.634567][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 194.634589][ T30] audit: type=1326 audit(1742572947.996:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b44d8d169 code=0x0 [ 194.680822][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.712178][ T5142] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 194.719649][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.415982][ T6592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.167336][ T6278] hsr_slave_0: entered promiscuous mode [ 196.213188][ T6278] hsr_slave_1: entered promiscuous mode [ 196.220829][ T6278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.241411][ T6278] Cannot create hsr debugfs directory [ 196.372119][ T6596] loop1: detected capacity change from 0 to 4096 [ 196.852577][ T5839] Bluetooth: hci6: command tx timeout [ 198.808781][ T12] hsr_slave_0: left promiscuous mode [ 199.111632][ T5839] Bluetooth: hci6: command tx timeout [ 199.142650][ T12] hsr_slave_1: left promiscuous mode [ 199.196026][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.202593][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.385649][ T6614] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 199.839733][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.839841][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.243274][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.250960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.528214][ T12] veth1_macvtap: left promiscuous mode [ 200.692288][ T6630] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 201.191884][ T5839] Bluetooth: hci6: command tx timeout [ 201.297261][ T12] veth0_macvtap: left promiscuous mode [ 201.304347][ T12] veth1_vlan: left promiscuous mode [ 201.310060][ T12] veth0_vlan: left promiscuous mode [ 202.309898][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.378690][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.979368][ T6614] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 203.045738][ T6630] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 203.272223][ T5839] Bluetooth: hci6: command tx timeout [ 203.807676][ T6651] random: crng reseeded on system resumption [ 206.551029][ T6663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.428603][ T30] audit: type=1326 audit(1742572961.736:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.4.154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5572d8d169 code=0x0 [ 209.193048][ T6686] xt_bpf: check failed: parse error [ 209.448398][ T6686] input: syz1 as /devices/virtual/input/input5 [ 209.905488][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 211.516796][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 211.523205][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 211.529423][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 211.536381][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 211.765053][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 211.794431][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.806610][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.820764][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.830005][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.838852][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.847007][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.948275][ T6717] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 214.088008][ T5844] Bluetooth: hci3: command tx timeout [ 215.157884][ T6728] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 215.721940][ T6728] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 216.152446][ T5844] Bluetooth: hci3: command tx timeout [ 216.281981][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.567320][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 216.832948][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 216.918193][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.931937][ T10] usb 5-1: Product: syz [ 216.936141][ T10] usb 5-1: Manufacturer: syz [ 217.071992][ T10] usb 5-1: SerialNumber: syz [ 217.084254][ T10] usb 5-1: config 0 descriptor?? [ 217.124826][ T10] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 217.540180][ T6750] random: crng reseeded on system resumption [ 218.070009][ T6752] syz.4.163 uses obsolete (PF_INET,SOCK_PACKET) [ 218.175357][ T6743] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 218.239602][ T5844] Bluetooth: hci3: command tx timeout [ 218.989056][ T6743] hsr0: entered promiscuous mode [ 219.515632][ T6743] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 219.553824][ T6743] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 219.569637][ T6764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.582894][ T6743] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 219.589945][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.608117][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.632069][ T6578] bridge_slave_0: entered allmulticast mode [ 219.657161][ T6578] bridge_slave_0: entered promiscuous mode [ 219.690301][ T6752] syzkaller1: entered promiscuous mode [ 219.713989][ T6752] syzkaller1: entered allmulticast mode [ 219.825366][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.855863][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.875634][ T6578] bridge_slave_1: entered allmulticast mode [ 219.907939][ T6578] bridge_slave_1: entered promiscuous mode [ 219.934905][ T10] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 219.972400][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 220.314372][ T5844] Bluetooth: hci3: command tx timeout [ 221.565165][ T10] usb 5-1: USB disconnect, device number 4 [ 221.696883][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.905824][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.995318][ T6805] random: crng reseeded on system resumption [ 225.674987][ T6578] team0: Port device team_slave_0 added [ 226.413442][ T6578] team0: Port device team_slave_1 added [ 226.419904][ T12] bridge_slave_1: left allmulticast mode [ 226.445736][ T12] bridge_slave_1: left promiscuous mode [ 226.488782][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.566538][ T12] bridge_slave_0: left allmulticast mode [ 226.590150][ T12] bridge_slave_0: left promiscuous mode [ 226.613137][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.830363][ T6821] random: crng reseeded on system resumption [ 227.590321][ T5899] IPVS: starting estimator thread 0... [ 227.715882][ T6829] IPVS: using max 16 ests per chain, 38400 per kthread [ 228.484570][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.606062][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.671986][ T969] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 228.687005][ T12] bond0 (unregistering): Released all slaves [ 228.892287][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 228.900246][ T969] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.964543][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.323054][ T969] usb 2-1: config 0 descriptor?? [ 229.661568][ T12] hsr_slave_0: left promiscuous mode [ 229.671120][ T12] hsr_slave_1: left promiscuous mode [ 229.689640][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.718692][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.777380][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 229.792459][ T969] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 229.848521][ T969] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 229.882387][ T969] [drm:udl_init] *ERROR* Selecting channel failed [ 230.275992][ T969] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 230.306765][ T969] [drm] Initialized udl on minor 2 [ 230.329275][ T969] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 230.447281][ T969] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 230.573371][ T6024] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 230.605823][ T969] usb 2-1: USB disconnect, device number 5 [ 230.640965][ T6024] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 231.257928][ T12] team0 (unregistering): Port device team_slave_1 removed [ 231.392606][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 232.167007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.480976][ T6847] loop2: detected capacity change from 0 to 2048 [ 232.488465][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.496021][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.551694][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.567664][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 232.588156][ T6847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.683733][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.690765][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.994538][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.827351][ T6859] random: crng reseeded on system resumption [ 234.074901][ T6863] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 235.321479][ T6875] loop0: detected capacity change from 0 to 128 [ 235.344862][ T6875] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.014677][ T6875] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 236.338403][ T6578] hsr_slave_0: entered promiscuous mode [ 236.422442][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.592823][ T6578] hsr_slave_1: entered promiscuous mode [ 236.599926][ T6578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.607821][ T6578] Cannot create hsr debugfs directory [ 237.963714][ T6886] netlink: 'syz.4.190': attribute type 4 has an invalid length. [ 237.971459][ T6886] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.190'. [ 238.089827][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.137758][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.342635][ T6704] bridge_slave_0: entered allmulticast mode [ 238.423396][ T6704] bridge_slave_0: entered promiscuous mode [ 238.440141][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.463157][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.470667][ T6704] bridge_slave_1: entered allmulticast mode [ 238.501071][ T6704] bridge_slave_1: entered promiscuous mode [ 238.527226][ T6896] loop4: detected capacity change from 0 to 2048 [ 238.630099][ T6896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.942868][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.995253][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.186654][ T6704] team0: Port device team_slave_0 added [ 240.399312][ T6704] team0: Port device team_slave_1 added [ 240.418289][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.057594][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.075569][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.122261][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.252993][ T12] bridge_slave_1: left allmulticast mode [ 241.269836][ T12] bridge_slave_1: left promiscuous mode [ 241.312965][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.375352][ T12] bridge_slave_0: left allmulticast mode [ 241.391610][ T12] bridge_slave_0: left promiscuous mode [ 241.418380][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.753145][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 243.037846][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.292384][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.342685][ T12] bond0 (unregistering): Released all slaves [ 243.404542][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.414951][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.458579][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.563805][ T6940] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 244.532200][ T12] hsr_slave_0: left promiscuous mode [ 244.599559][ T12] hsr_slave_1: left promiscuous mode [ 244.617246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.631562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.889353][ T6948] random: crng reseeded on system resumption [ 247.422950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 247.553505][ T12] team0 (unregistering): Port device team_slave_0 removed [ 247.718020][ T6962] loop4: detected capacity change from 0 to 2048 [ 247.755515][ T6962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.966103][ T6704] hsr_slave_0: entered promiscuous mode [ 247.980662][ T6704] hsr_slave_1: entered promiscuous mode [ 247.989483][ T6704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.014119][ T6704] Cannot create hsr debugfs directory [ 249.382496][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.531208][ T6982] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.555518][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 249.814316][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 250.144852][ T5899] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 250.182023][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.215844][ T5899] usb 1-1: Product: syz [ 250.250714][ T5899] usb 1-1: Manufacturer: syz [ 250.291288][ T5899] usb 1-1: SerialNumber: syz [ 250.304271][ T5899] usb 1-1: config 0 descriptor?? [ 250.340392][ T5899] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 250.674083][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 250.883340][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 250.932566][ T6994] syzkaller1: entered promiscuous mode [ 250.938138][ T6994] syzkaller1: entered allmulticast mode [ 251.009987][ T7004] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 251.904660][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 251.915785][ T5899] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 251.927666][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.720449][ T5899] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 252.728519][ T10] usb 5-1: Product: syz [ 252.739940][ T10] usb 5-1: Manufacturer: syz [ 252.747251][ T5899] usb 1-1: USB disconnect, device number 6 [ 252.753171][ T10] usb 5-1: SerialNumber: syz [ 252.771118][ T6704] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 252.794062][ T10] usb 5-1: config 0 descriptor?? [ 252.835246][ T10] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 252.936777][ T6704] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.033774][ T6704] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.228624][ T6704] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.428783][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.439843][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.449840][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.674681][ T30] audit: type=1326 audit(1742573007.786:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.0.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcba578d169 code=0x0 [ 253.742897][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.761101][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 253.802468][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.324596][ T7022] syzkaller1: entered promiscuous mode [ 254.330169][ T7022] syzkaller1: entered allmulticast mode [ 254.343265][ T10] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 254.406967][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 254.564690][ T7037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.777607][ T10] usb 5-1: USB disconnect, device number 5 [ 256.347771][ T30] audit: type=1326 audit(1742573010.456:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.4.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5572d8d169 code=0x0 [ 256.371803][ T5849] Bluetooth: hci5: command tx timeout [ 257.104211][ T1398] bridge_slave_1: left allmulticast mode [ 257.110504][ T1398] bridge_slave_1: left promiscuous mode [ 257.122439][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.205127][ T1398] bridge_slave_0: left allmulticast mode [ 257.210881][ T1398] bridge_slave_0: left promiscuous mode [ 257.387731][ T7063] random: crng reseeded on system resumption [ 257.839621][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.310736][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.346155][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.392358][ T5849] Bluetooth: hci5: command tx timeout [ 258.991550][ T7083] random: crng reseeded on system resumption [ 259.404192][ T1398] bond0 (unregistering): Released all slaves [ 260.477050][ T5849] Bluetooth: hci5: command tx timeout [ 260.703946][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.710401][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.739805][ T7089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.864298][ T1398] hsr_slave_0: left promiscuous mode [ 260.870922][ T1398] hsr_slave_1: left promiscuous mode [ 260.893858][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.932748][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.439009][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.231'. [ 262.552486][ T5849] Bluetooth: hci5: command tx timeout [ 263.203767][ T6024] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 263.369059][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 263.414550][ T6024] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 263.435492][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.482872][ T6024] usb 2-1: config 0 descriptor?? [ 263.494073][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 263.543515][ T6024] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 264.015226][ T6024] gp8psk: usb in 137 operation failed. [ 264.043267][ T6024] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 264.076725][ T6024] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 264.108056][ T6024] usb 2-1: USB disconnect, device number 6 [ 264.462223][ T7111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.912467][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.329132][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 266.741344][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.768173][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.804696][ T7023] bridge_slave_0: entered allmulticast mode [ 266.829872][ T7023] bridge_slave_0: entered promiscuous mode [ 266.870379][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 267.032157][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.041536][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.064462][ T7023] bridge_slave_1: entered allmulticast mode [ 267.102344][ T7023] bridge_slave_1: entered promiscuous mode [ 267.378130][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.477773][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.583059][ T7154] xt_bpf: check failed: parse error [ 267.645701][ T5901] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 267.838941][ T5901] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 267.885113][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.992585][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.108205][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.200143][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.227468][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.263366][ T5901] usb 5-1: Product: syz [ 268.279966][ T5901] usb 5-1: Manufacturer: syz [ 268.300839][ T5901] usb 5-1: SerialNumber: syz [ 268.383443][ T5901] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 268.419351][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.432484][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.452376][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.462320][ T5901] cdc_ncm 5-1:1.0: bind() failure [ 268.473008][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.485857][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.493468][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.644341][ T7023] team0: Port device team_slave_0 added [ 268.668495][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.684349][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.806027][ T5899] usb 5-1: USB disconnect, device number 6 [ 269.402580][ T7165] xt_bpf: check failed: parse error [ 269.403817][ T7023] team0: Port device team_slave_1 added [ 269.502776][ T7165] input: syz1 as /devices/virtual/input/input7 [ 270.390631][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.416523][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.462153][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.592523][ T5849] Bluetooth: hci3: command tx timeout [ 272.185302][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.204446][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.231183][ T7177] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 272.288300][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.712350][ T5849] Bluetooth: hci3: command tx timeout [ 273.157623][ T7177] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 273.168665][ T7177] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 273.747131][ T7177] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 274.792080][ T5849] Bluetooth: hci3: command tx timeout [ 275.100985][ T7204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.561684][ T7023] hsr_slave_0: entered promiscuous mode [ 275.602878][ T7023] hsr_slave_1: entered promiscuous mode [ 275.610386][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.629870][ T7023] Cannot create hsr debugfs directory [ 275.920515][ T7210] loop2: detected capacity change from 0 to 2048 [ 276.145937][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.872521][ T5849] Bluetooth: hci3: command tx timeout [ 278.339605][ T7231] loop4: detected capacity change from 0 to 512 [ 278.340095][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.426948][ T7231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.537205][ T1439] bridge_slave_1: left allmulticast mode [ 278.564436][ T1439] bridge_slave_1: left promiscuous mode [ 278.570572][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.624097][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.637798][ T1439] bridge_slave_0: left allmulticast mode [ 278.664271][ T7231] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.667841][ T1439] bridge_slave_0: left promiscuous mode [ 278.694276][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.317966][ T7250] 9pnet_fd: Insufficient options for proto=fd [ 281.428537][ T7249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.417960][ T1439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.755297][ T1439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.846797][ T1439] bond0 (unregistering): Released all slaves [ 283.040731][ T7241] bridge0: port 3(gretap0) entered blocking state [ 283.047568][ T7241] bridge0: port 3(gretap0) entered disabled state [ 283.055220][ T7241] gretap0: entered allmulticast mode [ 283.063184][ T7241] gretap0: entered promiscuous mode [ 283.069831][ T7241] bridge0: port 3(gretap0) entered blocking state [ 283.076662][ T7241] bridge0: port 3(gretap0) entered forwarding state [ 283.266835][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.448037][ T1439] hsr_slave_0: left promiscuous mode [ 283.474801][ T1439] hsr_slave_1: left promiscuous mode [ 283.523249][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.759377][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.026151][ T7265] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 284.806511][ T7269] 9pnet_fd: Insufficient options for proto=fd [ 285.017586][ T7269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.769235][ T7274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.484320][ T7278] random: crng reseeded on system resumption [ 287.460203][ T1439] team0 (unregistering): Port device team_slave_1 removed [ 287.689167][ T1439] team0 (unregistering): Port device team_slave_0 removed [ 288.117892][ T7298] loop2: detected capacity change from 0 to 512 [ 288.149916][ T7298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.198801][ T7298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.215560][ T7298] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.237998][ T7159] chnl_net:caif_netlink_parms(): no params data found [ 288.631501][ T7303] bridge0: port 4(gretap0) entered blocking state [ 288.638726][ T7303] bridge0: port 4(gretap0) entered disabled state [ 288.648418][ T7303] gretap0: entered allmulticast mode [ 288.665867][ T7303] gretap0: entered promiscuous mode [ 288.676070][ T7303] bridge0: port 4(gretap0) entered blocking state [ 288.682734][ T7303] bridge0: port 4(gretap0) entered forwarding state [ 289.498026][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.682233][ T5899] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 289.881791][ T5899] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 289.919200][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.958295][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.973300][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.020164][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.040689][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.175588][ T7323] random: crng reseeded on system resumption [ 290.729442][ T7159] bridge_slave_0: entered allmulticast mode [ 290.946869][ T7159] bridge_slave_0: entered promiscuous mode [ 290.965891][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.973302][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.982619][ T2145] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 291.002374][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.009736][ T7159] bridge_slave_1: entered allmulticast mode [ 291.015980][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.036725][ T5899] usb 5-1: Product: syz [ 291.040995][ T5899] usb 5-1: Manufacturer: syz [ 291.047736][ T7159] bridge_slave_1: entered promiscuous mode [ 291.061849][ T5899] usb 5-1: SerialNumber: syz [ 291.091183][ T5899] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 291.109285][ T5899] cdc_ncm 5-1:1.0: bind() failure [ 291.206281][ T2145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.234575][ T7023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 291.236635][ T2145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.261972][ T2145] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 291.275546][ T2145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.322828][ T7023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 291.345935][ T2145] usb 1-1: config 0 descriptor?? [ 291.369639][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.407093][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.425115][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.471218][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.657467][ T7023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 291.732982][ T5899] usb 5-1: USB disconnect, device number 7 [ 292.498610][ T7023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 293.424544][ T7159] team0: Port device team_slave_0 added [ 293.440460][ T7321] ax25_connect(): syz.0.278 uses autobind, please contact jreuter@yaina.de [ 293.456106][ T7340] netlink: 'syz.2.280': attribute type 4 has an invalid length. [ 293.464034][ T7340] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.280'. [ 293.600004][ T2145] usbhid 1-1:0.0: can't add hid device: -71 [ 293.613084][ T7159] team0: Port device team_slave_1 added [ 293.619073][ T2145] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.686489][ T2145] usb 1-1: USB disconnect, device number 7 [ 293.784406][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.803144][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.993513][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.132726][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.281'. [ 294.142027][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 294.879598][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.959722][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.028838][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.443182][ T7159] hsr_slave_0: entered promiscuous mode [ 295.480659][ T7159] hsr_slave_1: entered promiscuous mode [ 295.498871][ T7159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.520660][ T7159] Cannot create hsr debugfs directory [ 295.707234][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 296.398071][ T10] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 296.434395][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.471044][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.493168][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 296.512862][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.543886][ T10] usb 1-1: config 0 descriptor?? [ 297.949751][ T7371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.361183][ T10] usb 1-1: USB disconnect, device number 8 [ 298.638326][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.534781][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.520607][ T7384] 9pnet_fd: Insufficient options for proto=fd [ 300.804426][ T7384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.110136][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.117399][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.166275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.173511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.328961][ T7395] loop0: detected capacity change from 0 to 2048 [ 301.408685][ T7395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.453960][ T7023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.425250][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.583551][ T7159] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.680720][ T7159] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 304.863315][ T7159] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 305.114943][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.158482][ T7159] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 306.934564][ T7444] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 307.856721][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.876412][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.940777][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.948151][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.035147][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.042414][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.595701][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.603586][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.639736][ T7458] loop4: detected capacity change from 0 to 512 [ 309.858770][ T7458] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 309.939642][ T7458] EXT4-fs (loop4): invalid journal inode [ 309.989754][ T7458] EXT4-fs (loop4): can't get journal size [ 310.078687][ T7458] EXT4-fs (loop4): 1 truncate cleaned up [ 310.086466][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.130181][ T7458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.417328][ T7458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.572093][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 311.603236][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 312.729671][ T7159] veth0_vlan: entered promiscuous mode [ 313.653640][ T7509] random: crng reseeded on system resumption [ 313.658015][ T7510] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 315.616593][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.635981][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.667276][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.741851][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.804130][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 315.828163][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.115533][ T7159] veth1_vlan: entered promiscuous mode [ 317.297655][ T7159] veth0_macvtap: entered promiscuous mode [ 318.313096][ T5844] Bluetooth: hci5: command tx timeout [ 318.928952][ T7159] veth1_macvtap: entered promiscuous mode [ 318.948238][ T7544] netlink: 'syz.1.318': attribute type 4 has an invalid length. [ 318.956135][ T7544] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.318'. [ 319.715948][ T7553] netlink: 'syz.4.321': attribute type 10 has an invalid length. [ 320.436965][ T5844] Bluetooth: hci5: command tx timeout [ 320.797417][ T7553] hsr0: entered promiscuous mode [ 320.827405][ T7553] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 320.859247][ T7553] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 320.882648][ T7553] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 320.922327][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 322.162879][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.169267][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.215239][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.226180][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.236274][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.246915][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.258529][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.387977][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.443219][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.468917][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.493998][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.510867][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.535035][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.552014][ T5844] Bluetooth: hci5: command tx timeout [ 322.555263][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.084724][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.181227][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.015398][ T7159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.032902][ T7159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.043498][ T7159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.054236][ T7159] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.279555][ T7589] random: crng reseeded on system resumption [ 324.932436][ T5844] Bluetooth: hci5: command tx timeout [ 325.479183][ T7595] netlink: 'syz.2.329': attribute type 4 has an invalid length. [ 325.487266][ T7595] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.329'. [ 326.229418][ T7520] chnl_net:caif_netlink_parms(): no params data found [ 326.559936][ T63] bridge_slave_1: left allmulticast mode [ 326.572019][ T63] bridge_slave_1: left promiscuous mode [ 326.577868][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.620650][ T7603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.809130][ T63] bridge_slave_0: left allmulticast mode [ 326.820955][ T63] bridge_slave_0: left promiscuous mode [ 326.829662][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.933954][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 329.028556][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.038094][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.046209][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.055535][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.064174][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 329.072795][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.139248][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.150550][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.164313][ T63] bond0 (unregistering): Released all slaves [ 329.601349][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 331.273687][ T5849] Bluetooth: hci6: command tx timeout [ 331.353963][ T7646] random: crng reseeded on system resumption [ 331.908487][ T63] hsr_slave_0: left promiscuous mode [ 331.957582][ T63] hsr_slave_1: left promiscuous mode [ 331.990477][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.048279][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.361907][ T5849] Bluetooth: hci6: command tx timeout [ 334.900297][ T63] team0 (unregistering): Port device team_slave_1 removed [ 335.174156][ T63] team0 (unregistering): Port device team_slave_0 removed [ 335.432078][ T5849] Bluetooth: hci6: command tx timeout [ 335.463788][ T7665] loop1: detected capacity change from 0 to 512 [ 335.490062][ T7665] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 335.529649][ T7665] EXT4-fs (loop1): invalid journal inode [ 335.538098][ T7665] EXT4-fs (loop1): can't get journal size [ 335.578808][ T7665] EXT4-fs (loop1): 1 truncate cleaned up [ 335.587018][ T7665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.613410][ T7665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.308834][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 336.939683][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.970732][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.033897][ T7520] bridge_slave_0: entered allmulticast mode [ 337.041253][ T7520] bridge_slave_0: entered promiscuous mode [ 337.081320][ T7686] dccp_close: ABORT with 64 bytes unread [ 337.099129][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.128455][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.157969][ T7520] bridge_slave_1: entered allmulticast mode [ 337.188984][ T7520] bridge_slave_1: entered promiscuous mode [ 337.541985][ T5849] Bluetooth: hci6: command tx timeout [ 338.063233][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.109018][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.764250][ T7698] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 339.757938][ T7520] team0: Port device team_slave_0 added [ 339.804441][ T7520] team0: Port device team_slave_1 added [ 339.843867][ T7698] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 340.118312][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 340.359729][ T7696] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 340.378634][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.399851][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.376537][ T7520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.388709][ T7696] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 341.403477][ T7696] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 341.416729][ T7696] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 341.719389][ T63] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.786419][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.805886][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.885301][ T7520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.233052][ T63] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.432389][ T7733] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 343.853942][ T63] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.882745][ T7740] loop4: detected capacity change from 0 to 512 [ 343.903614][ T7740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.671970][ T7740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.710770][ T7740] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.336748][ T7752] random: crng reseeded on system resumption [ 346.464425][ T63] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.787407][ T7520] hsr_slave_0: entered promiscuous mode [ 346.809585][ T7520] hsr_slave_1: entered promiscuous mode [ 346.940300][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 347.612582][ T7520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.620333][ T7520] Cannot create hsr debugfs directory [ 347.702345][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.721199][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.737048][ T7627] bridge_slave_0: entered allmulticast mode [ 347.757111][ T7627] bridge_slave_0: entered promiscuous mode [ 347.895492][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.905208][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.454212][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.528796][ T7627] bridge_slave_1: entered allmulticast mode [ 348.546808][ T7627] bridge_slave_1: entered promiscuous mode [ 348.603677][ T7768] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 348.690976][ T7768] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 348.764874][ T7768] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 348.777688][ T7768] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 349.473814][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.554484][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 349.763582][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 350.243671][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.092270][ T63] bridge_slave_1: left allmulticast mode [ 352.098043][ T63] bridge_slave_1: left promiscuous mode [ 352.123516][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.174199][ T7800] loop1: detected capacity change from 0 to 4096 [ 352.266127][ T63] bridge_slave_0: left allmulticast mode [ 352.291884][ T63] bridge_slave_0: left promiscuous mode [ 352.316501][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.367807][ T7831] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 356.845412][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.996069][ T7838] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 357.776819][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.788337][ T63] bond0 (unregistering): Released all slaves [ 357.816145][ T7627] team0: Port device team_slave_0 added [ 357.824737][ T7627] team0: Port device team_slave_1 added [ 357.836242][ T7831] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 359.358622][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 360.092223][ T63] hsr_slave_0: left promiscuous mode [ 360.263687][ T63] hsr_slave_1: left promiscuous mode [ 360.421724][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.429430][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.666350][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.929084][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.985581][ T63] veth1_macvtap: left promiscuous mode [ 360.991677][ T63] veth0_macvtap: left promiscuous mode [ 361.000683][ T63] veth1_vlan: left promiscuous mode [ 361.006373][ T63] veth0_vlan: left promiscuous mode [ 361.120665][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'. [ 362.682210][ T63] team0 (unregistering): Port device team_slave_1 removed [ 362.771054][ T63] team0 (unregistering): Port device team_slave_0 removed [ 363.668578][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.677174][ T969] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 363.678867][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.712731][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.845817][ T969] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 363.867332][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.891528][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.911599][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.939110][ T969] usb 5-1: config 0 descriptor?? [ 363.960927][ T969] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 363.993444][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.102327][ T7896] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 365.995320][ T969] gp8psk: usb in 128 operation failed. [ 366.001313][ T969] gp8psk: usb in 137 operation failed. [ 366.007126][ T969] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 366.057214][ T969] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 366.095470][ T969] usb 5-1: USB disconnect, device number 8 [ 366.348846][ T7903] random: crng reseeded on system resumption [ 367.359889][ T7627] hsr_slave_0: entered promiscuous mode [ 367.398747][ T7627] hsr_slave_1: entered promiscuous mode [ 367.405637][ T7627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.413759][ T7627] Cannot create hsr debugfs directory [ 369.558343][ T7935] random: crng reseeded on system resumption [ 370.642271][ T7932] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.651409][ T7932] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.660650][ T7932] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.669649][ T7932] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.064345][ T7932] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 371.101347][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 371.292527][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'. [ 373.831805][ T7956] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 375.262766][ T7956] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 375.969681][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.989188][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.998534][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.010069][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.021038][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 376.029640][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.971463][ T36] bridge_slave_1: left allmulticast mode [ 377.034156][ T7982] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 377.052433][ T36] bridge_slave_1: left promiscuous mode [ 377.058220][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.119663][ T7982] Error validating options; rc = [-22] [ 377.153188][ T36] bridge_slave_0: left allmulticast mode [ 377.193455][ T36] bridge_slave_0: left promiscuous mode [ 377.226416][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.178811][ T5844] Bluetooth: hci3: command tx timeout [ 378.622323][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.722610][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.774027][ T36] bond0 (unregistering): Released all slaves [ 378.871549][ T8001] random: crng reseeded on system resumption [ 379.952907][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 380.241976][ T5844] Bluetooth: hci3: command tx timeout [ 380.624538][ T36] hsr_slave_0: left promiscuous mode [ 380.968108][ T36] hsr_slave_1: left promiscuous mode [ 381.199493][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.482576][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.513261][ T8016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.369436][ T5844] Bluetooth: hci3: command tx timeout [ 383.612757][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.619175][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.392093][ T5844] Bluetooth: hci3: command tx timeout [ 384.430574][ T36] team0 (unregistering): Port device team_slave_1 removed [ 384.529856][ T36] team0 (unregistering): Port device team_slave_0 removed [ 384.953006][ T5900] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 385.185818][ T5900] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 385.211962][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.365213][ T5900] usb 3-1: config 0 descriptor?? [ 385.464538][ T5900] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 385.564141][ T7627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 385.731922][ T7627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 385.828790][ T5900] gp8psk: usb in 137 operation failed. [ 385.844105][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 385.845189][ T7627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 385.891486][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 385.898662][ T7627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 386.494502][ T5900] usb 3-1: USB disconnect, device number 2 [ 387.413789][ T8061] input: syz1 as /devices/virtual/input/input9 [ 388.076229][ T7974] chnl_net:caif_netlink_parms(): no params data found [ 388.305619][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.327377][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.338916][ T7974] bridge_slave_0: entered allmulticast mode [ 388.350031][ T7974] bridge_slave_0: entered promiscuous mode [ 388.382788][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.392016][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.399361][ T7974] bridge_slave_1: entered allmulticast mode [ 388.416309][ T7974] bridge_slave_1: entered promiscuous mode [ 388.477144][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.490161][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.646221][ T7974] team0: Port device team_slave_0 added [ 391.852964][ T7974] team0: Port device team_slave_1 added [ 392.798323][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.817414][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.862659][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.879974][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.893355][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.900356][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.927098][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.984252][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.993711][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.004015][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.013623][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 393.021347][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.121727][ T8090] loop4: detected capacity change from 0 to 4096 [ 393.972206][ T5849] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 394.085112][ T7974] hsr_slave_0: entered promiscuous mode [ 394.091682][ T7974] hsr_slave_1: entered promiscuous mode [ 394.167616][ T7974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.191868][ T7974] Cannot create hsr debugfs directory [ 394.310253][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 394.320523][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/u9:5 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 394.320560][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.320580][ T5849] Workqueue: hci2 hci_rx_work [ 394.320619][ T5849] Call Trace: [ 394.320628][ T5849] [ 394.320641][ T5849] dump_stack_lvl+0x241/0x360 [ 394.320678][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.320715][ T5849] ? __pfx__printk+0x10/0x10 [ 394.320744][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.320798][ T5849] ? __kmalloc_cache_noprof+0x243/0x390 [ 394.320844][ T5849] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 394.320891][ T5849] sysfs_create_dir_ns+0x2ce/0x3a0 [ 394.320935][ T5849] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 394.320971][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.321021][ T5849] kobject_add_internal+0x435/0x8d0 [ 394.321066][ T5849] kobject_add+0x152/0x220 [ 394.321097][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.321148][ T5849] ? preempt_schedule_thunk+0x1a/0x30 [ 394.321194][ T5849] ? device_add+0x3e7/0xbf0 [ 394.321226][ T5849] ? __pfx_kobject_add+0x10/0x10 [ 394.321256][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.321345][ T5849] ? _raw_spin_unlock+0x3e/0x50 [ 394.321393][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.321452][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.321503][ T5849] ? get_device_parent+0x165/0x410 [ 394.321540][ T5849] device_add+0x4e5/0xbf0 [ 394.321581][ T5849] hci_conn_add_sysfs+0xe8/0x200 [ 394.321622][ T5849] le_conn_complete_evt+0xd1a/0x1360 [ 394.321694][ T5849] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 394.321746][ T5849] ? __mutex_unlock_slowpath+0x227/0x800 [ 394.321809][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.321858][ T5849] ? skb_pull_data+0x112/0x230 [ 394.321909][ T5849] hci_le_enh_conn_complete_evt+0x185/0x420 [ 394.321960][ T5849] hci_event_packet+0xa56/0x1540 [ 394.321998][ T5849] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 394.322043][ T5849] ? __pfx_hci_event_packet+0x10/0x10 [ 394.322080][ T5849] ? mark_lock+0x9a/0x360 [ 394.322108][ T5849] ? kcov_remote_start+0x2e/0x7d0 [ 394.322152][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.322193][ T5849] ? hci_send_to_monitor+0xdc/0x530 [ 394.322239][ T5849] hci_rx_work+0x3f3/0xdb0 [ 394.322284][ T5849] ? process_scheduled_works+0x9c6/0x18e0 [ 394.322320][ T5849] process_scheduled_works+0xac0/0x18e0 [ 394.322399][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.322447][ T5849] ? assign_work+0x364/0x3d0 [ 394.322490][ T5849] worker_thread+0x870/0xd30 [ 394.322545][ T5849] ? __kthread_parkme+0x169/0x1d0 [ 394.322589][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 394.322626][ T5849] kthread+0x7ab/0x920 [ 394.322665][ T5849] ? __pfx_kthread+0x10/0x10 [ 394.322710][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 394.322747][ T5849] ? __pfx_kthread+0x10/0x10 [ 394.322787][ T5849] ? __pfx_kthread+0x10/0x10 [ 394.322834][ T5849] ? __pfx_kthread+0x10/0x10 [ 394.322873][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.322907][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.322947][ T5849] ? lockdep_hardirqs_on+0x99/0x150 [ 394.322986][ T5849] ? __pfx_kthread+0x10/0x10 [ 394.323029][ T5849] ret_from_fork+0x4d/0x80 [ 394.323064][ T5849] ? __pfx_kthread+0x10/0x10 [ 394.323106][ T5849] ret_from_fork_asm+0x1a/0x30 [ 394.323157][ T5849] [ 394.673260][ T5849] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 394.687671][ T5849] Bluetooth: hci2: failed to register connection device [ 395.172104][ T5849] Bluetooth: hci5: command tx timeout [ 396.241910][ T5901] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 396.603898][ T5901] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 396.623240][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.692182][ T5901] usb 5-1: config 0 descriptor?? [ 396.750285][ T5901] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 397.204013][ T5849] Bluetooth: hci5: command tx timeout [ 397.802477][ T8117] ipt_rpfilter: unknown options [ 398.778892][ T5901] gp8psk: usb in 137 operation failed. [ 398.807643][ T5901] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 398.868119][ T5901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 399.084044][ T5901] usb 5-1: USB disconnect, device number 9 [ 399.292039][ T5849] Bluetooth: hci5: command tx timeout [ 400.430669][ T1398] bridge_slave_1: left allmulticast mode [ 400.479032][ T1398] bridge_slave_1: left promiscuous mode [ 400.502306][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.544271][ T1398] bridge_slave_0: left allmulticast mode [ 400.550052][ T1398] bridge_slave_0: left promiscuous mode [ 400.556357][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.362166][ T5849] Bluetooth: hci5: command tx timeout [ 403.018769][ T8146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.310065][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.345064][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.369122][ T8148] netlink: 'syz.4.440': attribute type 10 has an invalid length. [ 404.442095][ T1398] bond0 (unregistering): Released all slaves [ 404.557039][ T8148] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 404.567544][ T8148] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 404.580095][ T8148] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 404.985878][ T1398] hsr_slave_0: left promiscuous mode [ 405.345846][ T1398] hsr_slave_1: left promiscuous mode [ 405.672183][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.783601][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.793229][ T8160] dccp_close: ABORT with 104 bytes unread [ 407.570764][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 407.753218][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 409.370165][ T7974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.521689][ T8186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.685751][ T7974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 410.169912][ T8192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.191938][ T7974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 410.805900][ T7974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.041245][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 414.322227][ T5901] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 415.033156][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.051260][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.073481][ T8091] bridge_slave_0: entered allmulticast mode [ 415.081432][ T8091] bridge_slave_0: entered promiscuous mode [ 415.110426][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.121513][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.137278][ T8091] bridge_slave_1: entered allmulticast mode [ 415.189909][ T8091] bridge_slave_1: entered promiscuous mode [ 415.202152][ T5901] usb 2-1: device descriptor read/64, error -71 [ 415.600680][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.618878][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.652092][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 415.792121][ T5901] usb 2-1: device descriptor read/64, error -71 [ 416.585176][ T5901] usb usb2-port1: attempt power cycle [ 416.608594][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.719948][ T5849] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 416.742864][ T8240] netlink: 'syz.4.460': attribute type 4 has an invalid length. [ 416.776443][ T7974] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.801468][ T8091] team0: Port device team_slave_0 added [ 416.854110][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.861337][ T7242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.923231][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.930512][ T7242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.944267][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 416.955471][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/u9:5 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 416.955505][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 416.955521][ T5849] Workqueue: hci1 hci_rx_work [ 416.955554][ T5849] Call Trace: [ 416.955564][ T5849] [ 416.955576][ T5849] dump_stack_lvl+0x241/0x360 [ 416.955608][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.955637][ T5849] ? __pfx__printk+0x10/0x10 [ 416.955662][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.955707][ T5849] ? __kmalloc_cache_noprof+0x243/0x390 [ 416.955743][ T5849] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 416.955781][ T5849] sysfs_create_dir_ns+0x2ce/0x3a0 [ 416.955816][ T5849] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 416.955846][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.955898][ T5849] kobject_add_internal+0x435/0x8d0 [ 416.955935][ T5849] kobject_add+0x152/0x220 [ 416.955958][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.955997][ T5849] ? do_raw_spin_unlock+0x13c/0x8b0 [ 416.956033][ T5849] ? device_add+0x3e7/0xbf0 [ 416.956061][ T5849] ? __pfx_kobject_add+0x10/0x10 [ 416.956087][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.956138][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 416.956175][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.956228][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.956276][ T5849] ? get_device_parent+0x165/0x410 [ 416.956310][ T5849] device_add+0x4e5/0xbf0 [ 416.956346][ T5849] hci_conn_add_sysfs+0xe8/0x200 [ 416.956390][ T5849] le_conn_complete_evt+0xd1a/0x1360 [ 416.956465][ T5849] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 416.956531][ T5849] ? __mutex_unlock_slowpath+0x227/0x800 [ 416.956604][ T5849] ? __skb_clone+0x5c/0x6c0 [ 416.956641][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.956689][ T5849] ? skb_pull_data+0x112/0x230 [ 416.956736][ T5849] hci_le_enh_conn_complete_evt+0x185/0x420 [ 416.956793][ T5849] hci_event_packet+0xa56/0x1540 [ 416.956835][ T5849] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 416.956885][ T5849] ? __pfx_hci_event_packet+0x10/0x10 [ 416.956921][ T5849] ? do_raw_spin_unlock+0x13c/0x8b0 [ 416.956964][ T5849] ? kcov_remote_start+0x470/0x7d0 [ 416.957008][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.957056][ T5849] ? insn_decode_mmio+0x2c0/0x580 [ 416.957106][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.957153][ T5849] ? hci_send_to_monitor+0xdc/0x530 [ 416.957197][ T5849] hci_rx_work+0x3f3/0xdb0 [ 416.957238][ T5849] ? process_scheduled_works+0x9c6/0x18e0 [ 416.957271][ T5849] process_scheduled_works+0xac0/0x18e0 [ 416.957337][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.957391][ T5849] ? assign_work+0x364/0x3d0 [ 416.957429][ T5849] worker_thread+0x870/0xd30 [ 416.957482][ T5849] ? __kthread_parkme+0x169/0x1d0 [ 416.957522][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 416.957567][ T5849] kthread+0x7ab/0x920 [ 416.957624][ T5849] ? __pfx_kthread+0x10/0x10 [ 416.957681][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 416.957716][ T5849] ? __pfx_kthread+0x10/0x10 [ 416.957754][ T5849] ? __pfx_kthread+0x10/0x10 [ 416.957799][ T5849] ? __pfx_kthread+0x10/0x10 [ 416.957837][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.957870][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 416.957910][ T5849] ? lockdep_hardirqs_on+0x99/0x150 [ 416.957948][ T5849] ? __pfx_kthread+0x10/0x10 [ 416.957990][ T5849] ret_from_fork+0x4d/0x80 [ 416.958024][ T5849] ? __pfx_kthread+0x10/0x10 [ 416.958066][ T5849] ret_from_fork_asm+0x1a/0x30 [ 416.958115][ T5849] [ 416.958157][ T5849] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 417.312377][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 417.319938][ T5849] Bluetooth: hci1: failed to register connection device [ 417.352847][ T5901] usb 2-1: device descriptor read/8, error -71 [ 417.736112][ T8091] team0: Port device team_slave_1 added [ 417.751960][ T5901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 418.690531][ T5901] usb 2-1: device descriptor read/8, error -71 [ 418.802019][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.834118][ T5901] usb usb2-port1: unable to enumerate USB device [ 418.853142][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.923533][ T8251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.032838][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.110144][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.160679][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.210495][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.461425][ T8091] hsr_slave_0: entered promiscuous mode [ 419.491161][ T8091] hsr_slave_1: entered promiscuous mode [ 419.511674][ T8091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.525471][ T8091] Cannot create hsr debugfs directory [ 423.886650][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.044974][ T8091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 425.487307][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 425.563206][ T8091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 425.605245][ T8091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 425.617693][ T8299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.732244][ T8091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.001316][ T8305] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 426.149725][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.465265][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.477'. [ 427.158196][ T7974] veth0_vlan: entered promiscuous mode [ 427.202189][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.252237][ T7974] veth1_vlan: entered promiscuous mode [ 427.291436][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.299020][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.357068][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.364419][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.736925][ T7974] veth0_macvtap: entered promiscuous mode [ 428.805607][ T7974] veth1_macvtap: entered promiscuous mode [ 428.838025][ T8091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.935737][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'. [ 429.035982][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.081730][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.159092][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.212133][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.253904][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.325666][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.369417][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.403264][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.420312][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.460055][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.177720][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.251404][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.293805][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.353654][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.449863][ T7974] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.499150][ T7974] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.534978][ T7974] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.582362][ T7974] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.760902][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.854800][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 434.231667][ T8371] loop0: detected capacity change from 0 to 512 [ 434.325430][ T8371] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 434.387127][ T8091] veth0_vlan: entered promiscuous mode [ 434.401103][ T8371] EXT4-fs (loop0): invalid journal inode [ 434.429969][ T8371] EXT4-fs (loop0): can't get journal size [ 434.584503][ T8371] EXT4-fs (loop0): 1 truncate cleaned up [ 434.630581][ T8371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.705574][ T8371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.725429][ T6007] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.937549][ T8091] veth1_vlan: entered promiscuous mode [ 435.110630][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.142541][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.157768][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.167421][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.176757][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 435.180301][ T6007] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.195065][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.489058][ T6007] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.352429][ T5849] Bluetooth: hci3: command tx timeout [ 437.352930][ T8417] 9pnet_fd: Insufficient options for proto=fd [ 437.480714][ T8417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.034770][ T6007] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.121633][ T8091] veth0_macvtap: entered promiscuous mode [ 438.231718][ T8091] veth1_macvtap: entered promiscuous mode [ 438.449705][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.492395][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.685052][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.697373][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.708689][ T8425] 9pnet_fd: Insufficient options for proto=fd [ 438.794020][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.811533][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.894745][ T8424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.059024][ T8421] loop1: detected capacity change from 0 to 4096 [ 439.073515][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.114955][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.165209][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.176277][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.188136][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.202861][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.220037][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.230295][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.327281][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.359504][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.371313][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.391617][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.512222][ T5849] Bluetooth: hci3: command tx timeout [ 440.144662][ T8091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.202014][ T8091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.210927][ T8091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.268103][ T8091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.406252][ T8434] loop4: detected capacity change from 0 to 512 [ 440.446539][ T8434] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 440.525189][ T8434] EXT4-fs (loop4): invalid journal inode [ 440.549482][ T6007] bridge_slave_1: left allmulticast mode [ 440.572792][ T8434] EXT4-fs (loop4): can't get journal size [ 440.587147][ T6007] bridge_slave_1: left promiscuous mode [ 440.605588][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.622627][ T8434] EXT4-fs (loop4): 1 truncate cleaned up [ 440.633605][ T8434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.659454][ T8434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.700150][ T6007] bridge_slave_0: left allmulticast mode [ 440.731548][ T6007] bridge_slave_0: left promiscuous mode [ 440.752308][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.592014][ T5849] Bluetooth: hci3: command tx timeout [ 442.068556][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.099002][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.129178][ T6007] bond0 (unregistering): Released all slaves [ 443.752105][ T5849] Bluetooth: hci3: command tx timeout [ 444.216398][ T6007] hsr_slave_0: left promiscuous mode [ 444.267889][ T6007] hsr_slave_1: left promiscuous mode [ 444.485868][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.494152][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.520496][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.533167][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.954633][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.961131][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.529324][ T6007] veth1_macvtap: left promiscuous mode [ 445.542782][ T6007] veth0_macvtap: left promiscuous mode [ 445.554352][ T6007] veth1_vlan: left promiscuous mode [ 445.663047][ T6007] veth0_vlan: left promiscuous mode [ 445.702096][ T969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 445.852138][ T969] usb 3-1: device descriptor read/64, error -71 [ 446.151977][ T969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 446.312907][ T969] usb 3-1: device descriptor read/64, error -71 [ 446.545805][ T969] usb usb3-port1: attempt power cycle [ 446.992107][ T969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 447.013941][ T969] usb 3-1: device descriptor read/8, error -71 [ 447.262412][ T969] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 448.130002][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 448.171045][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 448.752806][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.760757][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.959004][ T969] usb 3-1: device descriptor read/8, error -71 [ 449.081459][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 449.084951][ T969] usb usb3-port1: unable to enumerate USB device [ 449.443434][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.450664][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.502095][ T8392] bridge_slave_0: entered allmulticast mode [ 449.522203][ T8392] bridge_slave_0: entered promiscuous mode [ 449.551668][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.578710][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.603173][ T8392] bridge_slave_1: entered allmulticast mode [ 449.630725][ T8497] misc userio: No port type given on /dev/userio [ 449.632835][ T8392] bridge_slave_1: entered promiscuous mode [ 451.169197][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.237889][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.700182][ T8392] team0: Port device team_slave_0 added [ 451.722718][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.734968][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.743530][ T8392] team0: Port device team_slave_1 added [ 451.754505][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.762830][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.772325][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 451.779857][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.674033][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.704312][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.109417][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.350994][ T6007] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.286489][ T5844] Bluetooth: hci5: command tx timeout [ 454.325102][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.447031][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.872013][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.950043][ T8546] netlink: 'syz.4.518': attribute type 4 has an invalid length. [ 455.000495][ T6007] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.285943][ T8552] loop0: detected capacity change from 0 to 2048 [ 455.334277][ T6007] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.480820][ T8552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.463634][ T5844] Bluetooth: hci5: command tx timeout [ 458.871238][ T5849] Bluetooth: hci5: command tx timeout [ 459.321392][ T8566] ------------[ cut here ]------------ [ 459.326921][ T8566] DEBUG_LOCKS_WARN_ON(1) [ 459.327051][ T8566] WARNING: CPU: 0 PID: 8566 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 [ 459.341043][ T8566] Modules linked in: [ 459.344952][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.1.523 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 459.355599][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.365676][ T8566] RIP: 0010:__lock_acquire+0x564/0x2100 [ 459.371308][ T8566] Code: 00 00 83 3d 01 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 97 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 459.390937][ T8566] RSP: 0018:ffffc90003926670 EFLAGS: 00010046 [ 459.397039][ T8566] RAX: d01d5edc3376ee00 RBX: 0000000000001b20 RCX: 0000000000080000 [ 459.405018][ T8566] RDX: dffffc0000000000 RSI: 0000000000004206 RDI: 0000000000004207 [ 459.412994][ T8566] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170c519a [ 459.420967][ T8566] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88801f7f64d4 [ 459.428969][ T8566] R13: 0000000000000005 R14: 1ffff11003efeca7 R15: ffff88801f7f6538 [ 459.437121][ T8566] FS: 00007f93dbb6d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 459.446168][ T8566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.452754][ T8566] CR2: 0000001b3040cff8 CR3: 0000000056466000 CR4: 0000000000350ef0 [ 459.460732][ T8566] Call Trace: [ 459.464011][ T8566] [ 459.466941][ T8566] ? __warn+0x165/0x4d0 [ 459.471117][ T8566] ? __lock_acquire+0x564/0x2100 [ 459.476078][ T8566] ? report_bug+0x2b3/0x500 [ 459.480615][ T8566] ? __lock_acquire+0x564/0x2100 [ 459.485580][ T8566] ? handle_bug+0x60/0x90 [ 459.489910][ T8566] ? exc_invalid_op+0x1a/0x50 [ 459.494613][ T8566] ? asm_exc_invalid_op+0x1a/0x20 [ 459.499659][ T8566] ? __warn_printk+0x292/0x360 [ 459.504442][ T8566] ? __lock_acquire+0x564/0x2100 [ 459.509398][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.515051][ T8566] lock_acquire+0x1ed/0x550 [ 459.519570][ T8566] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 459.525154][ T8566] ? __pfx_lock_acquire+0x10/0x10 [ 459.530197][ T8566] ? rcu_note_context_switch+0xd44/0x1060 [ 459.535933][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.541592][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.547258][ T8566] _raw_spin_lock_nested+0x31/0x40 [ 459.552389][ T8566] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 459.557949][ T8566] raw_spin_rq_lock_nested+0xb0/0x140 [ 459.563357][ T8566] __schedule+0x357/0x4c90 [ 459.567788][ T8566] ? lockdep_hardirqs_on+0x99/0x150 [ 459.573008][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.578658][ T8566] ? finish_task_switch+0x1e5/0x870 [ 459.583867][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.589526][ T8566] ? __pfx___schedule+0x10/0x10 [ 459.594393][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.600048][ T8566] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.606050][ T8566] ? mark_lock+0x9a/0x360 [ 459.610388][ T8566] ? __lock_acquire+0x1397/0x2100 [ 459.615435][ T8566] ? preempt_schedule_irq+0xf0/0x1c0 [ 459.620736][ T8566] preempt_schedule_irq+0xfb/0x1c0 [ 459.625867][ T8566] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 459.631611][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.637297][ T8566] irqentry_exit+0x5e/0x90 [ 459.641777][ T8566] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 459.647288][ T8566] RIP: 0010:unwind_next_frame+0x18ed/0x22d0 [ 459.653224][ T8566] Code: 0c 01 75 40 80 3d 52 04 d8 11 00 75 37 c6 05 49 04 d8 11 01 e9 21 fa ff ff bf 01 00 00 00 e8 0a 36 22 00 65 8b 0d fb 88 96 7e 01 85 c9 75 73 e8 e8 f1 bc ff eb 6c 80 3d d4 bc b9 0e 00 0f 84 [ 459.672983][ T8566] RSP: 0018:ffffc90003926c90 EFLAGS: 00000297 [ 459.679070][ T8566] RAX: 0000000080000001 RBX: ffffc90003926d70 RCX: 0000000080000000 [ 459.687073][ T8566] RDX: dffffc0000000000 RSI: ffffc90003920000 RDI: 0000000000000001 [ 459.695114][ T8566] RBP: ffffc90003926d60 R08: ffffc90003927e10 R09: ffffc90003926db0 [ 459.703105][ T8566] R10: dffffc0000000000 R11: fffff52000724db8 R12: dffffc0000000000 [ 459.711095][ T8566] R13: ffffc90003926d60 R14: ffffc90003920000 R15: ffffc90003927e20 [ 459.719110][ T8566] ? do_sys_openat2+0x13e/0x1d0 [ 459.724001][ T8566] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.730186][ T8566] arch_stack_walk+0x11c/0x150 [ 459.735065][ T8566] ? __x64_sys_openat+0x247/0x2a0 [ 459.740144][ T8566] stack_trace_save+0x118/0x1d0 [ 459.745026][ T8566] ? __pfx_stack_trace_save+0x10/0x10 [ 459.750430][ T8566] ? stack_trace_save+0x118/0x1d0 [ 459.755482][ T8566] ? __pfx_stack_trace_save+0x10/0x10 [ 459.760881][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.766552][ T8566] ? mark_lock+0x9a/0x360 [ 459.770893][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.776597][ T8566] kasan_save_track+0x3f/0x80 [ 459.781305][ T8566] ? kasan_save_track+0x3f/0x80 [ 459.786167][ T8566] ? __kasan_kmalloc+0x98/0xb0 [ 459.790982][ T8566] ? __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 459.797618][ T8566] ? kmemdup_noprof+0x2b/0x70 [ 459.802327][ T8566] ? key_alloc+0x388/0xff0 [ 459.806807][ T8566] ? keyring_alloc+0x44/0xb0 [ 459.811412][ T8566] ? call_sbin_request_key+0x30e/0xc80 [ 459.816902][ T8566] ? request_key_and_link+0x11b2/0x19c0 [ 459.822488][ T8566] ? request_key_tag+0x52/0x190 [ 459.827382][ T8566] ? dns_query+0x31d/0x740 [ 459.831832][ T8566] ? afs_try_auto_mntpt+0x210/0x590 [ 459.837086][ T8566] ? afs_dynroot_lookup+0xc8/0x160 [ 459.842221][ T8566] ? path_openat+0x11b6/0x3590 [ 459.846988][ T8566] ? do_filp_open+0x27f/0x4e0 [ 459.851661][ T8566] ? do_sys_openat2+0x13e/0x1d0 [ 459.856591][ T8566] __kasan_kmalloc+0x98/0xb0 [ 459.861189][ T8566] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 459.867827][ T8566] ? key_alloc+0x388/0xff0 [ 459.872277][ T8566] kmemdup_noprof+0x2b/0x70 [ 459.876803][ T8566] key_alloc+0x388/0xff0 [ 459.881075][ T8566] keyring_alloc+0x44/0xb0 [ 459.885513][ T8566] call_sbin_request_key+0x30e/0xc80 [ 459.890819][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.896487][ T8566] ? __pfx_call_sbin_request_key+0x10/0x10 [ 459.902380][ T8566] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 459.908488][ T8566] ? __pfx_request_key_auth_new+0x10/0x10 [ 459.914286][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.919971][ T8566] request_key_and_link+0x11b2/0x19c0 [ 459.925389][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.931051][ T8566] ? request_key_and_link+0x49a/0x19c0 [ 459.936542][ T8566] ? __pfx_request_key_and_link+0x10/0x10 [ 459.942322][ T8566] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.948403][ T8566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.954772][ T8566] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 459.960164][ T8566] ? __pfx_keyring_search_iterator+0x10/0x10 [ 459.966263][ T8566] request_key_tag+0x52/0x190 [ 459.970972][ T8566] dns_query+0x31d/0x740 [ 459.975248][ T8566] afs_try_auto_mntpt+0x210/0x590 [ 459.980295][ T8566] ? irqentry_exit+0x63/0x90 [ 459.984914][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.990595][ T8566] ? __pfx_afs_try_auto_mntpt+0x10/0x10 [ 459.996169][ T8566] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 460.001728][ T8566] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 460.007298][ T8566] afs_dynroot_lookup+0xc8/0x160 [ 460.012253][ T8566] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 460.017814][ T8566] path_openat+0x11b6/0x3590 [ 460.022446][ T8566] ? __pfx_path_openat+0x10/0x10 [ 460.027416][ T8566] do_filp_open+0x27f/0x4e0 [ 460.031940][ T8566] ? __pfx_do_filp_open+0x10/0x10 [ 460.037102][ T8566] do_sys_openat2+0x13e/0x1d0 [ 460.041802][ T8566] ? lockdep_hardirqs_on+0x99/0x150 [ 460.047037][ T8566] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.052265][ T8566] __x64_sys_openat+0x247/0x2a0 [ 460.057138][ T8566] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.062548][ T8566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.068925][ T8566] ? do_syscall_64+0xb6/0x230 [ 460.073617][ T8566] do_syscall_64+0xf3/0x230 [ 460.078143][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.083811][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.089756][ T8566] RIP: 0033:0x7f93dad8d169 [ 460.094183][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.113927][ T8566] RSP: 002b:00007f93dbb6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.122397][ T8566] RAX: ffffffffffffffda RBX: 00007f93dafa5fa0 RCX: 00007f93dad8d169 [ 460.130382][ T8566] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 460.138372][ T8566] RBP: 00007f93dae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 460.146363][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.154347][ T8566] R13: 0000000000000000 R14: 00007f93dafa5fa0 R15: 00007ffc7ce757e8 [ 460.162430][ T8566] [ 460.165449][ T8566] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 460.172817][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.1.523 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 460.183409][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.193470][ T8566] Call Trace: [ 460.196760][ T8566] [ 460.199690][ T8566] dump_stack_lvl+0x241/0x360 [ 460.204384][ T8566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.209592][ T8566] ? __pfx__printk+0x10/0x10 [ 460.214193][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.219847][ T8566] ? vscnprintf+0x5d/0x90 [ 460.224200][ T8566] panic+0x349/0x880 [ 460.228141][ T8566] ? __warn+0x174/0x4d0 [ 460.232362][ T8566] ? __pfx_panic+0x10/0x10 [ 460.236838][ T8566] __warn+0x344/0x4d0 [ 460.240877][ T8566] ? __lock_acquire+0x564/0x2100 [ 460.245844][ T8566] report_bug+0x2b3/0x500 [ 460.250197][ T8566] ? __lock_acquire+0x564/0x2100 [ 460.255163][ T8566] handle_bug+0x60/0x90 [ 460.259338][ T8566] exc_invalid_op+0x1a/0x50 [ 460.263923][ T8566] asm_exc_invalid_op+0x1a/0x20 [ 460.268796][ T8566] RIP: 0010:__lock_acquire+0x564/0x2100 [ 460.274380][ T8566] Code: 00 00 83 3d 01 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 97 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 460.294008][ T8566] RSP: 0018:ffffc90003926670 EFLAGS: 00010046 [ 460.300090][ T8566] RAX: d01d5edc3376ee00 RBX: 0000000000001b20 RCX: 0000000000080000 [ 460.308073][ T8566] RDX: dffffc0000000000 RSI: 0000000000004206 RDI: 0000000000004207 [ 460.316054][ T8566] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170c519a [ 460.324046][ T8566] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88801f7f64d4 [ 460.332057][ T8566] R13: 0000000000000005 R14: 1ffff11003efeca7 R15: ffff88801f7f6538 [ 460.340072][ T8566] ? __warn_printk+0x292/0x360 [ 460.344892][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.350566][ T8566] lock_acquire+0x1ed/0x550 [ 460.355102][ T8566] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 460.360670][ T8566] ? __pfx_lock_acquire+0x10/0x10 [ 460.365723][ T8566] ? rcu_note_context_switch+0xd44/0x1060 [ 460.371468][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.377139][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.382819][ T8566] _raw_spin_lock_nested+0x31/0x40 [ 460.387960][ T8566] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 460.393529][ T8566] raw_spin_rq_lock_nested+0xb0/0x140 [ 460.398926][ T8566] __schedule+0x357/0x4c90 [ 460.403377][ T8566] ? lockdep_hardirqs_on+0x99/0x150 [ 460.408604][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.414270][ T8566] ? finish_task_switch+0x1e5/0x870 [ 460.419539][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.425232][ T8566] ? __pfx___schedule+0x10/0x10 [ 460.430119][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.435789][ T8566] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.441797][ T8566] ? mark_lock+0x9a/0x360 [ 460.446134][ T8566] ? __lock_acquire+0x1397/0x2100 [ 460.451179][ T8566] ? preempt_schedule_irq+0xf0/0x1c0 [ 460.456485][ T8566] preempt_schedule_irq+0xfb/0x1c0 [ 460.461624][ T8566] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 460.467365][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.473032][ T8566] irqentry_exit+0x5e/0x90 [ 460.477471][ T8566] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 460.482948][ T8566] RIP: 0010:unwind_next_frame+0x18ed/0x22d0 [ 460.488858][ T8566] Code: 0c 01 75 40 80 3d 52 04 d8 11 00 75 37 c6 05 49 04 d8 11 01 e9 21 fa ff ff bf 01 00 00 00 e8 0a 36 22 00 65 8b 0d fb 88 96 7e 01 85 c9 75 73 e8 e8 f1 bc ff eb 6c 80 3d d4 bc b9 0e 00 0f 84 [ 460.508519][ T8566] RSP: 0018:ffffc90003926c90 EFLAGS: 00000297 [ 460.514605][ T8566] RAX: 0000000080000001 RBX: ffffc90003926d70 RCX: 0000000080000000 [ 460.522590][ T8566] RDX: dffffc0000000000 RSI: ffffc90003920000 RDI: 0000000000000001 [ 460.530566][ T8566] RBP: ffffc90003926d60 R08: ffffc90003927e10 R09: ffffc90003926db0 [ 460.538556][ T8566] R10: dffffc0000000000 R11: fffff52000724db8 R12: dffffc0000000000 [ 460.546546][ T8566] R13: ffffc90003926d60 R14: ffffc90003920000 R15: ffffc90003927e20 [ 460.554554][ T8566] ? do_sys_openat2+0x13e/0x1d0 [ 460.559433][ T8566] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.565613][ T8566] arch_stack_walk+0x11c/0x150 [ 460.570397][ T8566] ? __x64_sys_openat+0x247/0x2a0 [ 460.575448][ T8566] stack_trace_save+0x118/0x1d0 [ 460.580322][ T8566] ? __pfx_stack_trace_save+0x10/0x10 [ 460.585725][ T8566] ? stack_trace_save+0x118/0x1d0 [ 460.590773][ T8566] ? __pfx_stack_trace_save+0x10/0x10 [ 460.596163][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.601828][ T8566] ? mark_lock+0x9a/0x360 [ 460.606167][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.611820][ T8566] kasan_save_track+0x3f/0x80 [ 460.616506][ T8566] ? kasan_save_track+0x3f/0x80 [ 460.621360][ T8566] ? __kasan_kmalloc+0x98/0xb0 [ 460.626147][ T8566] ? __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 460.632761][ T8566] ? kmemdup_noprof+0x2b/0x70 [ 460.637478][ T8566] ? key_alloc+0x388/0xff0 [ 460.641918][ T8566] ? keyring_alloc+0x44/0xb0 [ 460.646516][ T8566] ? call_sbin_request_key+0x30e/0xc80 [ 460.652000][ T8566] ? request_key_and_link+0x11b2/0x19c0 [ 460.657562][ T8566] ? request_key_tag+0x52/0x190 [ 460.662437][ T8566] ? dns_query+0x31d/0x740 [ 460.666864][ T8566] ? afs_try_auto_mntpt+0x210/0x590 [ 460.672074][ T8566] ? afs_dynroot_lookup+0xc8/0x160 [ 460.677225][ T8566] ? path_openat+0x11b6/0x3590 [ 460.682007][ T8566] ? do_filp_open+0x27f/0x4e0 [ 460.686699][ T8566] ? do_sys_openat2+0x13e/0x1d0 [ 460.691599][ T8566] __kasan_kmalloc+0x98/0xb0 [ 460.696217][ T8566] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 460.702661][ T8566] ? key_alloc+0x388/0xff0 [ 460.707105][ T8566] kmemdup_noprof+0x2b/0x70 [ 460.711630][ T8566] key_alloc+0x388/0xff0 [ 460.715907][ T8566] keyring_alloc+0x44/0xb0 [ 460.720342][ T8566] call_sbin_request_key+0x30e/0xc80 [ 460.725670][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.731342][ T8566] ? __pfx_call_sbin_request_key+0x10/0x10 [ 460.737205][ T8566] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 460.743373][ T8566] ? __pfx_request_key_auth_new+0x10/0x10 [ 460.749128][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.754797][ T8566] request_key_and_link+0x11b2/0x19c0 [ 460.760205][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.765873][ T8566] ? request_key_and_link+0x49a/0x19c0 [ 460.771379][ T8566] ? __pfx_request_key_and_link+0x10/0x10 [ 460.777137][ T8566] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.783238][ T8566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.789592][ T8566] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 460.794999][ T8566] ? __pfx_keyring_search_iterator+0x10/0x10 [ 460.801032][ T8566] request_key_tag+0x52/0x190 [ 460.805768][ T8566] dns_query+0x31d/0x740 [ 460.810124][ T8566] afs_try_auto_mntpt+0x210/0x590 [ 460.815168][ T8566] ? irqentry_exit+0x63/0x90 [ 460.819792][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.825469][ T8566] ? __pfx_afs_try_auto_mntpt+0x10/0x10 [ 460.831075][ T8566] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 460.836649][ T8566] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 460.842218][ T8566] afs_dynroot_lookup+0xc8/0x160 [ 460.847178][ T8566] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 460.852746][ T8566] path_openat+0x11b6/0x3590 [ 460.857382][ T8566] ? __pfx_path_openat+0x10/0x10 [ 460.862353][ T8566] do_filp_open+0x27f/0x4e0 [ 460.866881][ T8566] ? __pfx_do_filp_open+0x10/0x10 [ 460.871940][ T8566] do_sys_openat2+0x13e/0x1d0 [ 460.876648][ T8566] ? lockdep_hardirqs_on+0x99/0x150 [ 460.881875][ T8566] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.887111][ T8566] __x64_sys_openat+0x247/0x2a0 [ 460.891996][ T8566] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.897399][ T8566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.903759][ T8566] ? do_syscall_64+0xb6/0x230 [ 460.908457][ T8566] do_syscall_64+0xf3/0x230 [ 460.914018][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.919703][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.925738][ T8566] RIP: 0033:0x7f93dad8d169 [ 460.930183][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.949851][ T8566] RSP: 002b:00007f93dbb6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.958296][ T8566] RAX: ffffffffffffffda RBX: 00007f93dafa5fa0 RCX: 00007f93dad8d169 [ 460.966288][ T8566] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 460.974278][ T8566] RBP: 00007f93dae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 460.982267][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.990248][ T8566] R13: 0000000000000000 R14: 00007f93dafa5fa0 R15: 00007ffc7ce757e8 [ 460.998245][ T8566] [ 461.001564][ T8566] Kernel Offset: disabled [ 461.005910][ T8566] Rebooting in 86400 seconds..