last executing test programs: 12m18.488911375s ago: executing program 2 (id=269): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) sendmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x2, 0x3, 0x9) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 12m15.99140739s ago: executing program 2 (id=277): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0xfc, 0x8000008, 0xffff8001, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r1, &(0x7f0000000380)=""/168, 0xa8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x408c0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x200, 0x724f, 0x0, 0x558}) read$FUSE(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4089, 0xff9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 12m15.396855864s ago: executing program 2 (id=280): socket$inet_dccp(0x2, 0x6, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x8804) recvmsg(r1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f00000004c0)="5a697dda4bc2befd55609f0ec0a98e3f2397537b63ba6efae7afa3d77a6bfbad1fabe6c891733bded89641d27b04484955eefbaf4d22c9b5de66f159f3279a865724848d06db62ed0638c8246b868c1136cb3b56b9e4207006b82349123cd0eecf8b9d65261e78be33b72d224af2c000c30fe6406f5b2e65da9da98d4881fb16a60d80f06bf5e6348a24fb260113a0278a1b024c94a1128ca4337a0f68f190dd12d93d1b7e63cae3b74ef42eabac3c0cd8a66f8c1ff2591314f93619266a0643653606cfc6a5af"}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev, 0x9}, 0x1c) getrandom(&(0x7f00000005c0)=""/10, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m12.494674425s ago: executing program 2 (id=284): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12m11.051308762s ago: executing program 2 (id=287): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x40043d14, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getuid() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) 12m8.523738934s ago: executing program 2 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000540)={0xbe, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m7.70087976s ago: executing program 32 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000540)={0xbe, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m4.946134099s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 5m17.607361631s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 4m29.570421926s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 3m35.342832332s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 1m21.694491715s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 21.425964105s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 15.732797557s ago: executing program 5 (id=1527): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) msgsnd(0x0, 0x0, 0x4000, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68060200) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x7, 0x7, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x7ff, 0x5], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x50, 0x5e9d252172e48d3a, @fd_index, 0x1000000000, 0x9, 0xfffffffe}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 13.393037183s ago: executing program 0 (id=1532): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65", 0x34, 0x850, 0x0, 0x0) 11.963646292s ago: executing program 0 (id=1535): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0xc000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 10.135457578s ago: executing program 5 (id=1540): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000002cc0)={0x10, 0xfffffff2, {0x53, 0x7, 0x7, {0x4bb, 0xfff}, {0x4, 0xe}, @const={0x8, {0xfffc, 0x7}}}, {0x55, 0xc, 0x94b, {0x313, 0x8d}, {0xfe00, 0x5b1}, @cond=[{0x4, 0x1, 0x8001, 0x0, 0x6, 0x3}, {0x57, 0x3d, 0xfff, 0x2, 0xfff, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x1, @local, 0xd0}}, 0x0, 0x0, 0x5, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd5c, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200000, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 10.078106235s ago: executing program 0 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_wait(0xffffffffffffffff, 0xfffffffffffffffc, 0x27, 0xbf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) restart_syscall() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc1a, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x38}}, 0x0) 10.077564456s ago: executing program 3 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r6, &(0x7f0000000240), 0x0, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000040)=0x10000) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 7.894641648s ago: executing program 5 (id=1543): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$audio(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1de}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x83, 0x20, 0x0, 0x2b, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x10, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5c, 0x0, r8, 0x0, r0, 0x3, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.742824203s ago: executing program 0 (id=1544): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r4, 0x40204706, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 6.960132508s ago: executing program 3 (id=1545): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)={0x8001, 0x11, &(0x7f0000000300)}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x101) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) 6.14583923s ago: executing program 4 (id=1546): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) 6.049272419s ago: executing program 3 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0xc58d, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x44, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000150a010800000000000000001d0000020073797a3200"/40], 0x28}, 0x1, 0x0, 0x0, 0x24008809}, 0x400c4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17}, 0x1c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x2, "340b788cced679000000dd34e3f58fad9987ffe93bbabd18cf50190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"3c431304000020570000e4ff0343b400", r3, 0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r4, 0x860a}, {r3, 0x8001}], 0x2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0xff80) 5.932748237s ago: executing program 4 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100000001"], 0x260040) 5.586747945s ago: executing program 5 (id=1549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x2, 0x9, 0x9, 0x0, 0x6, 0xb7, 0x3, 0x80, 0x2, 0x5, 0xf, 0x9, 0x9}, {0x129, 0x5, 0x2, 0x90, 0x3, 0x5, 0x4, 0xa7, 0xe, 0xe5, 0x4, 0x5, 0x4}, {0x9, 0x5, 0x0, 0xa, 0x7f, 0x1, 0xfb, 0x7f, 0x3, 0x7, 0x8, 0x3, 0x2}], 0xff}) 4.602373044s ago: executing program 4 (id=1551): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) creat(0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x30}, 0x1, 0x2000000, 0x0, 0x24044836}, 0xc094) 4.560810225s ago: executing program 0 (id=1552): open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfe55, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_resend\x00', r3, 0x0, 0xfffffffffffffffe}, 0x41) pipe2$watch_queue(0x0, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x49, 0xc9, "7f968122973e5c93"}}}, 0xe) sendmmsg$inet(r4, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x2e, 0x3, 0x7}, @ra={0x94, 0x4, 0x1100}]}}}], 0x18}}], 0x1, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xbc, 0x9, 0xc, @private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x7, 0x5}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 3.0776671s ago: executing program 0 (id=1554): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioperm(0x0, 0x7fff, 0x15f9) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) keyctl$clear(0x5, 0xfffffffffffffffe) unshare(0x22020600) 3.027896445s ago: executing program 4 (id=1555): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000010400)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.241570297s ago: executing program 5 (id=1556): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000009301000000002e5f615f"], 0x0, 0x2a, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.194413976s ago: executing program 3 (id=1557): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000010400)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.910150873s ago: executing program 4 (id=1558): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, 0x0, 0x0, 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121300000000009500000000000000c91f49b5e4acf8c3d9551580e663b0a81157"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@my=0x0}) r5 = syz_io_uring_setup(0x2fdf, &(0x7f0000000340)={0x0, 0x74a0, 0x10100, 0x0, 0x1f6}, &(0x7f0000000500), 0x0) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 935.759826ms ago: executing program 5 (id=1559): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$isdn(0x22, 0x2, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x1, 0x1, "c7a3044aa73f0e2148b8a036ec1adec8b3bfc3868f4bbb72e523ce15de8fd1ed", 0x32314142}) 935.27324ms ago: executing program 3 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) creat(&(0x7f0000000300)='./bus\x00', 0x15d) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 0s ago: executing program 4 (id=1561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 429.596058][ T8523] geneve2: entered allmulticast mode [ 430.861047][ T8641] syz.5.634: attempt to access beyond end of device [ 430.861047][ T8641] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 432.075578][ T8534] lo speed is unknown, defaulting to 1000 [ 432.962666][ T55] Bluetooth: hci2: command tx timeout [ 434.492911][ T5944] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 434.761630][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 434.837528][ T5944] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 434.880524][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.902285][ T8534] lo speed is unknown, defaulting to 1000 [ 434.947788][ T5944] usb 5-1: Product: syz [ 434.952040][ T5944] usb 5-1: Manufacturer: syz [ 434.983505][ T5944] usb 5-1: SerialNumber: syz [ 435.056162][ T8667] openvswitch: netlink: IP tunnel dst address not specified [ 435.293501][ T5944] usb 5-1: config 0 descriptor?? [ 435.756934][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 435.787339][ T5944] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 437.107956][ T8688] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 437.107956][ T8688] The task syz.3.646 (8688) triggered the difference, watch for misbehavior. [ 437.147714][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.166136][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.185851][ T8534] bridge_slave_0: entered allmulticast mode [ 437.232652][ T8534] bridge_slave_0: entered promiscuous mode [ 437.243765][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.251984][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.259243][ T8534] bridge_slave_1: entered allmulticast mode [ 437.266916][ T8534] bridge_slave_1: entered promiscuous mode [ 437.809027][ T5944] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 437.948003][ T5944] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 438.649381][ T5944] usb 5-1: media controller created [ 438.786669][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.831219][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.931690][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.429288][ T8534] team0: Port device team_slave_0 added [ 441.452450][ T8534] team0: Port device team_slave_1 added [ 441.656033][ T5944] i2c i2c-1: Added multiplexed i2c bus 2 [ 441.662036][ T5944] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 441.686903][ T5944] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 441.707373][ T5944] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 442.027916][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 443.285438][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.845531][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.424615][ T8534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.523093][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.530458][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.575526][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.210120][ T5944] DVB: Unable to find symbol mxl5005s_attach() [ 445.821114][ T8738] Cannot find add_set index 0 as target [ 447.094880][ T8534] hsr_slave_0: entered promiscuous mode [ 447.177374][ T8534] hsr_slave_1: entered promiscuous mode [ 447.284815][ T8534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.332838][ T5944] usb 5-1: USB disconnect, device number 3 [ 447.465018][ T8534] Cannot create hsr debugfs directory [ 447.941619][ T59] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 449.019478][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.096059][ T59] usb 1-1: Using ep0 maxpacket: 32 [ 449.129417][ T59] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 449.162255][ T59] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 449.276317][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.212910][ T59] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 450.257344][ T59] usb 1-1: Product: syz [ 450.268155][ T59] usb 1-1: Manufacturer: syz [ 450.349479][ T59] usb 1-1: SerialNumber: syz [ 450.396786][ T59] usb 1-1: config 0 descriptor?? [ 450.408867][ T8749] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 452.361704][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.378895][ T5882] usb 1-1: USB disconnect, device number 7 [ 452.410402][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.969517][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 453.999378][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.010402][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.336304][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.356031][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.416456][ T8786] lo speed is unknown, defaulting to 1000 [ 454.530550][ T8786] lo speed is unknown, defaulting to 1000 [ 455.639615][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.451492][ T8534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.732241][ T8534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.760129][ T8534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.998295][ T8534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 459.055829][ T8811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.929590][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.962830][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.798056][ T8534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.816609][ T8534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.834807][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 460.862050][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.869283][ T8594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.900423][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.907613][ T8594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.049303][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.070045][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.143283][ T5881] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 461.168292][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.335369][ T5881] usb 5-1: config 0 descriptor?? [ 462.440615][ T8838] IPVS: length: 24 != 3221225496 [ 462.565437][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.888566][ T8534] veth0_vlan: entered promiscuous mode [ 462.911574][ T8534] veth1_vlan: entered promiscuous mode [ 462.961975][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 462.969896][ T8534] veth0_macvtap: entered promiscuous mode [ 463.007807][ T8534] veth1_macvtap: entered promiscuous mode [ 463.068085][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.082867][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.092818][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.104453][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.118262][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.130172][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.150998][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 463.155568][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.161652][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 463.167806][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.183248][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 463.188602][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.200246][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.200317][ T5881] usb 5-1: USB disconnect, device number 4 [ 463.211604][ T5877] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 463.226372][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.236828][ T5877] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 463.248949][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.270770][ T5877] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 463.280672][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.286944][ T5877] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 463.301309][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.306271][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 463.335082][ T8534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.354504][ T8534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.365868][ T8534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.376275][ T8534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.388048][ T5877] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 463.404592][ T5877] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 463.424188][ T5877] usb 6-1: Product: syz [ 463.434178][ T5877] usb 6-1: Manufacturer: syz [ 463.443479][ T5877] usb 6-1: SerialNumber: syz [ 463.465421][ T5877] usb 6-1: config 0 descriptor?? [ 463.485198][ T5877] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 463.545856][ T5877] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 463.852018][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.859678][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.509917][ T8589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.518376][ T8589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.735179][ T5882] usb 6-1: USB disconnect, device number 2 [ 465.741145][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 466.943003][ T5882] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 468.831059][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 469.190683][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 469.206353][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.057706][ T5827] usb 5-1: config 0 descriptor?? [ 470.363604][ T8896] syz.5.699: attempt to access beyond end of device [ 470.363604][ T8896] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 470.413363][ T8896] syz.5.699: attempt to access beyond end of device [ 470.413363][ T8896] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 470.583813][ T8896] syz.5.699: attempt to access beyond end of device [ 470.583813][ T8896] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 470.598400][ T8896] syz.5.699: attempt to access beyond end of device [ 470.598400][ T8896] nbd5: rw=0, sector=18, nr_sectors = 2 limit=0 [ 470.612923][ T8896] syz.5.699: attempt to access beyond end of device [ 470.612923][ T8896] nbd5: rw=0, sector=30, nr_sectors = 2 limit=0 [ 470.639205][ T8896] syz.5.699: attempt to access beyond end of device [ 470.639205][ T8896] nbd5: rw=0, sector=36, nr_sectors = 2 limit=0 [ 471.086571][ C1] hrtimer: interrupt took 20910 ns [ 471.571902][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.656594][ T8893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.710448][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.185560][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.582131][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 473.248466][ T5827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 473.317765][ T5827] usb 5-1: USB disconnect, device number 5 [ 473.888174][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.931395][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.957962][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.966598][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.975448][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.082398][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 476.092149][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.261425][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.708'. [ 476.271410][ T35] bridge_slave_1: left allmulticast mode [ 476.279343][ T35] bridge_slave_1: left promiscuous mode [ 476.289716][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.092443][ T35] bridge_slave_0: left allmulticast mode [ 477.098265][ T35] bridge_slave_0: left promiscuous mode [ 477.104121][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.302988][ T5837] Bluetooth: hci2: command tx timeout [ 480.538705][ T5837] Bluetooth: hci2: command tx timeout [ 482.752104][ T5837] Bluetooth: hci2: command tx timeout [ 483.174584][ T25] IPVS: starting estimator thread 0... [ 483.205807][ T8966] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.479250][ T8973] IPVS: using max 20 ests per chain, 48000 per kthread [ 484.026303][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.072392][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.097621][ T35] bond0 (unregistering): Released all slaves [ 484.197414][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.718'. [ 484.231788][ T8927] lo speed is unknown, defaulting to 1000 [ 484.973786][ T55] Bluetooth: hci2: command tx timeout [ 486.347880][ T8927] lo speed is unknown, defaulting to 1000 [ 486.754120][ T9011] netlink: 'syz.5.727': attribute type 39 has an invalid length. [ 489.078354][ T35] hsr_slave_0: left promiscuous mode [ 489.107343][ T35] hsr_slave_1: left promiscuous mode [ 489.143824][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.207422][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.238781][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.264978][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.397092][ T35] veth1_macvtap: left promiscuous mode [ 490.432160][ T35] veth0_macvtap: left promiscuous mode [ 490.471809][ T35] veth1_vlan: left promiscuous mode [ 490.497318][ T35] veth0_vlan: left promiscuous mode [ 490.574330][ T9051] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 492.100812][ T29] audit: type=1326 audit(1738650258.978:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7fc00000 [ 492.876160][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 492.885985][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 495.944849][ T35] team0 (unregistering): Port device team_slave_1 removed [ 496.278886][ T35] team0 (unregistering): Port device team_slave_0 removed [ 496.755045][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 497.690096][ T8927] chnl_net:caif_netlink_parms(): no params data found [ 497.701326][ T9075] netlink: 'syz.5.737': attribute type 4 has an invalid length. [ 499.986106][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.006614][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.989475][ T8927] bridge_slave_0: entered allmulticast mode [ 501.036277][ T8927] bridge_slave_0: entered promiscuous mode [ 501.077174][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.085915][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.093215][ T8927] bridge_slave_1: entered allmulticast mode [ 501.335742][ T8927] bridge_slave_1: entered promiscuous mode [ 504.236017][ T8927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.277652][ T8927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.204511][ T8927] team0: Port device team_slave_0 added [ 507.240211][ T8927] team0: Port device team_slave_1 added [ 507.260855][ T9168] delete_channel: no stack [ 510.522435][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.535643][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.644862][ T8927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.720430][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.758736][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.792126][ T8927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.180017][ T8927] hsr_slave_0: entered promiscuous mode [ 512.727766][ T9210] program syz.5.767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.227197][ T8927] hsr_slave_1: entered promiscuous mode [ 513.240357][ T8927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.247984][ T8927] Cannot create hsr debugfs directory [ 513.624328][ T9216] capability: warning: `syz.3.771' uses deprecated v2 capabilities in a way that may be insecure [ 516.677521][ T9245] input: syz0 as /devices/virtual/input/input6 [ 516.890150][ T9245] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.775' sets config #0 [ 517.101085][ C0] Unknown status report in ack skb [ 517.414394][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 521.867702][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.514786][ T9288] netdevsim netdevsim3 : renamed from netdevsim0 [ 522.776767][ T9288] netdevsim netdevsim3 : left allmulticast mode [ 523.474430][ T8927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 524.234150][ T8927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 524.256220][ T9297] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 524.369190][ T8927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 524.692133][ T8927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.378996][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.404769][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.417419][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.424625][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.468904][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.476135][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.665752][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 532.915056][ T9377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.800'. [ 534.209024][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.826327][ T9392] befs: (nullb0): No write support. Marking filesystem read-only [ 534.837449][ T9392] befs: (nullb0): invalid magic header [ 535.393073][ T8927] veth0_vlan: entered promiscuous mode [ 535.416341][ T8927] veth1_vlan: entered promiscuous mode [ 536.253436][ T8927] veth0_macvtap: entered promiscuous mode [ 536.303425][ T8927] veth1_macvtap: entered promiscuous mode [ 541.746899][ T9429] block nbd4: NBD_DISCONNECT [ 541.775360][ T9429] block nbd4: Disconnected due to user request. [ 541.783743][ T9429] block nbd4: shutting down sockets [ 543.915492][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 543.932840][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 544.566308][ T9461] overlayfs: failed to clone lowerpath [ 544.860153][ T9460] overlayfs: missing 'lowerdir' [ 544.955535][ T9462] netlink: 'syz.4.819': attribute type 21 has an invalid length. [ 544.979964][ T9462] netlink: 'syz.4.819': attribute type 6 has an invalid length. [ 545.048562][ T9462] netlink: 132 bytes leftover after parsing attributes in process `syz.4.819'. [ 545.117829][ T9468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.270810][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 545.282033][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 545.290839][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 545.315601][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 545.327771][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 545.338955][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.028235][ T9472] lo speed is unknown, defaulting to 1000 [ 547.594955][ T55] Bluetooth: hci2: command tx timeout [ 548.124515][ T9472] lo speed is unknown, defaulting to 1000 [ 549.031923][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 549.235006][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 549.260312][ T5881] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 549.317936][ T5881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.338438][ T8136] bridge_slave_1: left allmulticast mode [ 549.358436][ T8136] bridge_slave_1: left promiscuous mode [ 549.379984][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.390365][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.412618][ T8136] bridge_slave_0: left allmulticast mode [ 549.427467][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.437748][ T8136] bridge_slave_0: left promiscuous mode [ 549.452500][ T5881] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.466822][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.477371][ T5881] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 549.497805][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.802507][ T55] Bluetooth: hci2: command tx timeout [ 552.112674][ T55] Bluetooth: hci2: command tx timeout [ 553.798796][ T5881] usb 6-1: usb_control_msg returned -32 [ 554.880337][ T5881] usbtmc 6-1:16.0: can't read capabilities [ 556.454515][ T5881] usb 6-1: USB disconnect, device number 3 [ 558.373893][ T5837] Bluetooth: hci2: command tx timeout [ 561.886237][ T8136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.909258][ T8136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.960513][ T8136] bond0 (unregistering): Released all slaves [ 562.003802][ T9566] netlink: 'syz.5.840': attribute type 21 has an invalid length. [ 563.302741][ T9472] chnl_net:caif_netlink_parms(): no params data found [ 563.367654][ T9614] syz_tun: entered allmulticast mode [ 563.460099][ T8136] hsr_slave_0: left promiscuous mode [ 563.484679][ T9619] befs: (nullb0): No write support. Marking filesystem read-only [ 563.508731][ T9619] befs: (nullb0): invalid magic header [ 563.689795][ T9619] 9pnet_virtio: no channels available for device syz [ 563.785189][ T8136] hsr_slave_1: left promiscuous mode [ 563.923063][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.396335][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.516869][ T8136] veth1_macvtap: left promiscuous mode [ 564.541646][ T8136] veth0_macvtap: left promiscuous mode [ 564.556097][ T8136] veth1_vlan: left promiscuous mode [ 564.567637][ T8136] veth0_vlan: left promiscuous mode [ 566.963342][ T8136] team0 (unregistering): Port device team_slave_1 removed [ 567.023196][ T8136] team0 (unregistering): Port device team_slave_0 removed [ 569.355140][ T9608] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 569.687589][ T9622] syz_tun: left allmulticast mode [ 569.835409][ T9608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.998551][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 570.888686][ T29] audit: type=1804 audit(1738650332.061:102): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.857" name="file0" dev="ramfs" ino=22390 res=1 errno=0 [ 571.228297][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.539221][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.714376][ T9472] bridge_slave_0: entered allmulticast mode [ 572.141074][ T9472] bridge_slave_0: entered promiscuous mode [ 572.307530][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.315384][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.367878][ T9472] bridge_slave_1: entered allmulticast mode [ 572.378886][ T9472] bridge_slave_1: entered promiscuous mode [ 574.120705][ T9472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.193253][ T9472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.481028][ T9718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'. [ 576.204055][ T9472] team0: Port device team_slave_0 added [ 576.213925][ T9472] team0: Port device team_slave_1 added [ 576.445272][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.452774][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.514728][ T9472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.528415][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.536885][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.566612][ T9472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.737560][ T9730] netlink: 'syz.0.868': attribute type 10 has an invalid length. [ 577.067165][ T9730] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 578.173288][ T9732] netlink: 164 bytes leftover after parsing attributes in process `syz.0.868'. [ 578.189272][ T55] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 578.574488][ T9472] hsr_slave_0: entered promiscuous mode [ 579.013690][ T9472] hsr_slave_1: entered promiscuous mode [ 579.415510][ T9472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.514578][ T9472] Cannot create hsr debugfs directory [ 580.083074][ T9769] smc: net device bond0 erased user defined pnetid SYZ [ 580.555824][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 582.428041][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 586.161464][ T9817] netlink: 'syz.3.887': attribute type 21 has an invalid length. [ 586.169366][ T9817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.887'. [ 586.351624][ T9472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.562797][ T9472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 586.570186][ T9823] futex_wake_op: syz.0.888 tries to shift op by -1; fix this program [ 587.418439][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.483456][ T9472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 587.787408][ T9472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.902470][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.980324][ T9472] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.030836][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.038087][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.090710][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.097887][ T8594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.946232][ T9853] Process accounting resumed [ 590.613440][ T9472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.397263][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.584474][ T9472] veth0_vlan: entered promiscuous mode [ 592.620919][ T9472] veth1_vlan: entered promiscuous mode [ 593.018360][ T9472] veth0_macvtap: entered promiscuous mode [ 593.038015][ T9472] veth1_macvtap: entered promiscuous mode [ 593.102103][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.353072][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.546257][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.581443][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.602298][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.613172][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.624984][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.688622][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.736339][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.772052][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.782548][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.823217][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.875157][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.426879][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.463977][ T9472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.504026][ T9472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.561254][ T9472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.592103][ T9472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.851463][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.894805][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.514762][ T8589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.555568][ T8589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.288771][ T55] Bluetooth: hci1: unexpected event for opcode 0x041c [ 600.000109][ T8589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.235891][ T8589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.425255][ T8589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.532162][ T8589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.606416][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 600.615219][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 600.626116][ T55] Bluetooth: hci1: hardware error 0x00 [ 601.038461][ T8589] bridge_slave_1: left allmulticast mode [ 601.058481][ T8589] bridge_slave_1: left promiscuous mode [ 601.102400][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.206750][ T8589] bridge_slave_0: left allmulticast mode [ 601.233062][ T8589] bridge_slave_0: left promiscuous mode [ 601.266708][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.503740][ T9959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 601.514880][ T9959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 601.526354][ T9959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.535588][ T9959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 601.555090][ T9959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 601.565144][ T9959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.487074][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 604.897206][ T55] Bluetooth: hci2: command tx timeout [ 605.615262][ T9907] Set syz1 is full, maxelem 65536 reached [ 605.756477][ T59] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 605.869132][ T8589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.885712][ T8589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.903260][ T8589] bond0 (unregistering): Released all slaves [ 605.925544][ T9951] veth1_macvtap: left promiscuous mode [ 605.932178][ T9951] macsec0: entered promiscuous mode [ 605.977441][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 606.153029][ T59] usb 1-1: config 1 interface 0 has no altsetting 0 [ 606.168008][ T59] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 606.280537][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.409544][ T59] usb 1-1: Product: 퓬 [ 606.585153][ T59] usb 1-1: SerialNumber: à°š [ 606.608462][ T9956] lo speed is unknown, defaulting to 1000 [ 607.104240][ T59] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 607.107102][ T55] Bluetooth: hci2: command tx timeout [ 607.126052][ T5183] bcm5974 1-1:1.0: could not read from device [ 607.241020][ T5183] bcm5974 1-1:1.0: could not read from device [ 607.257721][ T59] usb 1-1: USB disconnect, device number 8 [ 607.325917][ T9956] lo speed is unknown, defaulting to 1000 [ 609.327135][ T55] Bluetooth: hci2: command tx timeout [ 610.630032][ T8589] hsr_slave_0: left promiscuous mode [ 611.651213][ T55] Bluetooth: hci2: command tx timeout [ 612.395265][ T8589] hsr_slave_1: left promiscuous mode [ 612.401240][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.431959][ T8589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.441451][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.454152][ T8589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.496874][ T8589] veth1_macvtap: left promiscuous mode [ 612.502653][ T8589] veth0_macvtap: left promiscuous mode [ 612.508409][ T8589] veth1_vlan: left promiscuous mode [ 612.514328][ T8589] veth0_vlan: left promiscuous mode [ 612.656978][T10040] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 612.677925][T10040] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 616.267736][ T8589] team0 (unregistering): Port device team_slave_1 removed [ 616.318336][ T8589] team0 (unregistering): Port device team_slave_0 removed [ 616.837139][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 617.343039][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.977941][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.985487][ T9956] bridge_slave_0: entered allmulticast mode [ 617.993184][ T9956] bridge_slave_0: entered promiscuous mode [ 618.018183][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.047213][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.083489][ T9956] bridge_slave_1: entered allmulticast mode [ 618.245124][ T9956] bridge_slave_1: entered promiscuous mode [ 619.711480][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.804367][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.519714][ T9956] team0: Port device team_slave_0 added [ 621.602495][ T9956] team0: Port device team_slave_1 added [ 622.604399][T10100] syz.0.948 (10100): drop_caches: 2 [ 622.868822][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.906767][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.247557][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.307436][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.351489][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.501342][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.754974][ T9956] hsr_slave_0: entered promiscuous mode [ 623.768912][ T9956] hsr_slave_1: entered promiscuous mode [ 623.938673][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.946615][ T9956] Cannot create hsr debugfs directory [ 624.257645][T10128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.954'. [ 624.974721][T10135] befs: (nullb0): No write support. Marking filesystem read-only [ 624.988719][T10135] befs: (nullb0): invalid magic header [ 628.823072][ T9956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 628.882006][ T9956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 628.908279][ T9956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 629.051880][ T9956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 629.833272][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.717414][T10186] ipvlan2: entered allmulticast mode [ 630.723807][T10186] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 630.735201][T10186] batman_adv: batadv0: Adding interface: ipvlan2 [ 630.741639][T10186] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.767589][T10186] batman_adv: batadv0: Interface activated: ipvlan2 [ 630.804301][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.893230][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.900369][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.077037][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.084285][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.039924][T10212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 634.783556][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.918821][ T9956] veth0_vlan: entered promiscuous mode [ 635.115526][ T9956] veth1_vlan: entered promiscuous mode [ 636.239727][ T9956] veth0_macvtap: entered promiscuous mode [ 636.259249][ T9956] veth1_macvtap: entered promiscuous mode [ 636.355453][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.416886][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.476016][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.486973][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.500021][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.781156][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 637.504186][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.515733][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.533362][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.390481][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.638174][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.672285][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 638.683296][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.695327][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.706769][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 638.718810][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.710954][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.788962][ T9956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.139919][T10282] overlayfs: failed to clone upperpath [ 640.814949][ T5944] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 640.827723][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.835920][ T9956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.844723][ T5944] usb 6-1: Product: syz [ 640.848935][ T5944] usb 6-1: Manufacturer: syz [ 640.853642][ T9956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.862351][ T9956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.033711][ T5944] usb 6-1: config 0 descriptor?? [ 641.495604][ T5944] usb 6-1: can't set config #0, error -71 [ 641.718750][ T5944] usb 6-1: USB disconnect, device number 4 [ 642.323509][ T9956] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 642.361166][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.129099][ T8594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.203487][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 643.215210][ T8594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.245004][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.279149][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 643.285876][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.867798][T10343] Process accounting resumed [ 647.943875][ T8137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.109418][ T8137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.311181][ T8137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.457563][ T8137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.783769][ T8137] bridge_slave_1: left allmulticast mode [ 648.815244][ T8137] bridge_slave_1: left promiscuous mode [ 648.830555][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.879380][ T8137] bridge_slave_0: left allmulticast mode [ 649.096364][ T8137] bridge_slave_0: left promiscuous mode [ 649.102228][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.144582][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.155543][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.165477][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.173545][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.188709][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 652.199679][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.434581][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.771429][ T8137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.958719][ T8137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.970921][ T8137] bond0 (unregistering): Released all slaves [ 653.091276][T10438] netlink: 'syz.5.1006': attribute type 3 has an invalid length. [ 653.765656][T10411] lo speed is unknown, defaulting to 1000 [ 654.404455][ T55] Bluetooth: hci2: command tx timeout [ 656.533749][T10463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.569700][T10411] lo speed is unknown, defaulting to 1000 [ 656.632994][ T55] Bluetooth: hci2: command tx timeout [ 658.856541][ T55] Bluetooth: hci2: command tx timeout [ 661.636212][ T55] Bluetooth: hci2: command tx timeout [ 661.775255][ T8575] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 662.364210][ T8137] hsr_slave_0: left promiscuous mode [ 662.411857][ T8137] hsr_slave_1: left promiscuous mode [ 662.425204][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.457822][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.727309][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.756678][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.857919][ T8137] veth1_macvtap: left promiscuous mode [ 663.948061][ T8137] veth0_macvtap: left promiscuous mode [ 663.955027][ T8137] veth1_vlan: left promiscuous mode [ 664.048522][ T8137] veth0_vlan: left promiscuous mode [ 668.513300][T10545] tty tty30: ldisc open failed (-12), clearing slot 29 [ 670.696779][ T8137] team0 (unregistering): Port device team_slave_1 removed [ 671.999483][ T8137] team0 (unregistering): Port device team_slave_0 removed [ 672.943684][T10570] input: syz1 as /devices/virtual/input/input9 [ 673.154502][T10523] netlink: 'syz.4.1023': attribute type 21 has an invalid length. [ 673.162580][T10523] netlink: 'syz.4.1023': attribute type 6 has an invalid length. [ 673.170409][T10523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1023'. [ 673.539549][T10411] chnl_net:caif_netlink_parms(): no params data found [ 675.560253][T10599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.608842][T10411] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.647958][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.276121][T10411] bridge_slave_0: entered allmulticast mode [ 676.311741][T10411] bridge_slave_0: entered promiscuous mode [ 676.369781][T10411] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.376918][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.413011][T10411] bridge_slave_1: entered allmulticast mode [ 676.420153][T10411] bridge_slave_1: entered promiscuous mode [ 677.376601][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.571052][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.774968][T10411] team0: Port device team_slave_0 added [ 677.819673][T10411] team0: Port device team_slave_1 added [ 678.023455][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.046420][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.072861][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.153136][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.200811][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.350882][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.197974][T10411] hsr_slave_0: entered promiscuous mode [ 680.291927][T10411] hsr_slave_1: entered promiscuous mode [ 680.529404][T10411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.801924][T10411] Cannot create hsr debugfs directory [ 683.678290][T10664] xt_CT: No such helper "pptp" [ 686.170170][T10411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 686.218723][T10411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 686.327949][T10700] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 686.392575][T10411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 686.528611][T10411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 687.146659][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.679905][T10411] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.700279][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.707471][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.742078][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.749282][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.285772][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.475835][T10411] veth0_vlan: entered promiscuous mode [ 689.721327][T10411] veth1_vlan: entered promiscuous mode [ 690.694246][T10411] veth0_macvtap: entered promiscuous mode [ 690.757061][T10411] veth1_macvtap: entered promiscuous mode [ 690.836341][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.024748][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.034723][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.067542][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.096095][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.608728][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.888483][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.921923][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.933349][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.943211][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.116740][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.168509][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.179023][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.225801][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.279362][T10411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.305195][T10411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.325433][T10411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.349416][T10411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.541287][T10411] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 692.567141][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.614373][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.660618][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.754612][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.788666][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.927100][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1076'. [ 692.969376][T10779] dummy0: entered promiscuous mode [ 692.996284][T10779] dummy0: left promiscuous mode [ 693.370176][ T29] audit: type=1326 audit(1738650447.228:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x0 [ 695.285621][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.491921][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.749470][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.824248][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.969184][ T1158] bridge_slave_1: left allmulticast mode [ 695.975494][ T1158] bridge_slave_1: left promiscuous mode [ 695.981216][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.990307][ T1158] bridge_slave_0: left allmulticast mode [ 695.997469][ T1158] bridge_slave_0: left promiscuous mode [ 696.003179][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.715013][ T5837] Bluetooth: hci3: Unable to find connection for big 0x00 [ 699.314468][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.419079][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.462069][ T1158] bond0 (unregistering): Released all slaves [ 699.672792][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.683490][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.692102][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.700862][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.709130][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 699.719880][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.329302][T10845] netlink: 'syz.0.1088': attribute type 4 has an invalid length. [ 700.629439][T10850] netlink: 'syz.5.1089': attribute type 3 has an invalid length. [ 700.638009][T10850] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1089'. [ 701.913000][ T29] audit: type=1326 audit(1738650455.244:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 701.955901][ T55] Bluetooth: hci2: command tx timeout [ 701.978172][T10837] lo speed is unknown, defaulting to 1000 [ 702.016213][ T29] audit: type=1326 audit(1738650455.263:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 702.218343][ T29] audit: type=1326 audit(1738650455.375:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 702.320484][ T29] audit: type=1326 audit(1738650455.384:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 702.469474][ T29] audit: type=1326 audit(1738650455.384:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 702.561753][ T29] audit: type=1326 audit(1738650455.403:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 702.615071][ T29] audit: type=1326 audit(1738650455.403:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 702.646221][ T29] audit: type=1326 audit(1738650455.413:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 703.105878][ T29] audit: type=1326 audit(1738650455.431:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 703.754738][T10837] lo speed is unknown, defaulting to 1000 [ 703.768633][ T29] audit: type=1326 audit(1738650455.431:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 704.174137][ T55] Bluetooth: hci2: command tx timeout [ 706.372859][ T1158] hsr_slave_0: left promiscuous mode [ 706.400628][ T55] Bluetooth: hci2: command tx timeout [ 706.428126][ T1158] hsr_slave_1: left promiscuous mode [ 706.567368][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.769476][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.986317][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.014280][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.317337][ T1158] veth1_macvtap: left promiscuous mode [ 707.323047][ T1158] veth0_macvtap: left promiscuous mode [ 707.331232][ T1158] veth1_vlan: left promiscuous mode [ 708.151112][ T1158] veth0_vlan: left promiscuous mode [ 708.302288][ T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 708.312174][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 708.312200][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 708.312214][ T55] Workqueue: hci3 hci_rx_work [ 708.312256][ T55] Call Trace: [ 708.312265][ T55] [ 708.312273][ T55] dump_stack_lvl+0x241/0x360 [ 708.312311][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.312343][ T55] ? __pfx__printk+0x10/0x10 [ 708.312376][ T55] ? __kmalloc_cache_noprof+0x243/0x390 [ 708.312401][ T55] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 708.312428][ T55] sysfs_create_dir_ns+0x2ce/0x3a0 [ 708.312451][ T55] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 708.312481][ T55] kobject_add_internal+0x435/0x8d0 [ 708.312521][ T55] kobject_add+0x152/0x220 [ 708.312549][ T55] ? do_raw_spin_unlock+0x13c/0x8b0 [ 708.312570][ T55] ? device_add+0x3e7/0xbf0 [ 708.312589][ T55] ? __pfx_kobject_add+0x10/0x10 [ 708.312618][ T55] ? _raw_spin_unlock+0x28/0x50 [ 708.312644][ T55] ? get_device_parent+0x165/0x410 [ 708.312666][ T55] device_add+0x4e5/0xbf0 [ 708.312691][ T55] hci_conn_add_sysfs+0xe8/0x200 [ 708.312722][ T55] le_conn_complete_evt+0xc9f/0x12e0 [ 708.312761][ T55] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 708.312785][ T55] ? __mutex_unlock_slowpath+0x227/0x800 [ 708.312821][ T55] ? skb_pull_data+0x112/0x230 [ 708.312850][ T55] hci_le_conn_complete_evt+0x18c/0x420 [ 708.312882][ T55] hci_event_packet+0xa55/0x1540 [ 708.312906][ T55] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 708.312936][ T55] ? __pfx_hci_event_packet+0x10/0x10 [ 708.312955][ T55] ? do_raw_spin_unlock+0x13c/0x8b0 [ 708.312982][ T55] ? hci_send_to_monitor+0xd8/0x7f0 [ 708.313008][ T55] ? kcov_remote_start+0x97/0x7d0 [ 708.313036][ T55] hci_rx_work+0x3f3/0xdb0 [ 708.313064][ T55] ? process_scheduled_works+0x976/0x1840 [ 708.313087][ T55] process_scheduled_works+0xa66/0x1840 [ 708.313146][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 708.313177][ T55] ? assign_work+0x364/0x3d0 [ 708.313203][ T55] worker_thread+0x870/0xd30 [ 708.313240][ T55] ? __kthread_parkme+0x169/0x1d0 [ 708.313267][ T55] ? __pfx_worker_thread+0x10/0x10 [ 708.313289][ T55] kthread+0x7a9/0x920 [ 708.313312][ T55] ? __pfx_kthread+0x10/0x10 [ 708.313338][ T55] ? __pfx_worker_thread+0x10/0x10 [ 708.313360][ T55] ? __pfx_kthread+0x10/0x10 [ 708.313383][ T55] ? __pfx_kthread+0x10/0x10 [ 708.313411][ T55] ? __pfx_kthread+0x10/0x10 [ 708.313433][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 708.313455][ T55] ? lockdep_hardirqs_on+0x99/0x150 [ 708.313479][ T55] ? __pfx_kthread+0x10/0x10 [ 708.313505][ T55] ret_from_fork+0x4b/0x80 [ 708.313528][ T55] ? __pfx_kthread+0x10/0x10 [ 708.313553][ T55] ret_from_fork_asm+0x1a/0x30 [ 708.313590][ T55] [ 708.313614][ T55] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 708.601877][ T55] Bluetooth: hci3: failed to register connection device [ 708.623515][ T5837] Bluetooth: hci2: command tx timeout [ 711.710642][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 711.752361][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 712.214904][T10928] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 712.227301][T10928] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 713.756509][T10837] chnl_net:caif_netlink_parms(): no params data found [ 716.168328][T10837] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.201763][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.209062][T10837] bridge_slave_0: entered allmulticast mode [ 716.272099][T10837] bridge_slave_0: entered promiscuous mode [ 717.398785][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.419683][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.428177][T10837] bridge_slave_1: entered allmulticast mode [ 717.443311][T10837] bridge_slave_1: entered promiscuous mode [ 717.639376][T10837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.667695][T10837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.916307][T10837] team0: Port device team_slave_0 added [ 717.938270][T10837] team0: Port device team_slave_1 added [ 718.938559][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.205619][T11017] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1123'. [ 720.761902][T10837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.769161][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.959802][T10837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.986900][T11017] 0ªX¹¦À: renamed from caif0 [ 720.995051][T11017] 0ªX¹¦À: entered allmulticast mode [ 721.834877][T11017] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 721.910584][T10837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.928516][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.151813][T10837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.463810][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 723.600247][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 724.203554][T10837] hsr_slave_0: entered promiscuous mode [ 724.262723][T10837] hsr_slave_1: entered promiscuous mode [ 724.298629][T10837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.336538][T10837] Cannot create hsr debugfs directory [ 724.417900][T11055] syz_tun: entered allmulticast mode [ 724.858036][T11056] netlink: 'syz.5.1133': attribute type 16 has an invalid length. [ 724.867068][T11056] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1133'. [ 727.525863][T11082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.544277][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 731.553374][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 733.758721][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1151'. [ 733.879856][T10837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 733.906602][T10837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 733.923953][T10837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.952116][T10837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.076739][T11153] cgroup: Invalid name [ 734.195554][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.284415][T10837] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.349237][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.356434][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.475729][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.483040][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.665735][T10837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.708827][T10837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.999180][T11188] overlayfs: failed to clone lowerpath [ 737.652494][T11194] overlayfs: failed to clone upperpath [ 738.306362][T10837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.967695][T10837] veth0_vlan: entered promiscuous mode [ 739.032700][T10837] veth1_vlan: entered promiscuous mode [ 739.111222][T11204] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 739.145848][T10837] veth0_macvtap: entered promiscuous mode [ 739.169964][T10837] veth1_macvtap: entered promiscuous mode [ 739.707453][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.855167][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.934593][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.960960][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.983678][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.013909][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.064220][T10837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.075071][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.095049][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.104928][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.176694][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.211414][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.249445][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.282033][T10837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.325303][T10837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.980755][T10837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.990519][T10837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.999657][T10837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.908328][T11228] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 743.054652][T10837] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 743.318743][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.417628][T11250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 744.204094][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.275647][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.433740][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.488626][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.192730][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 747.202896][T11258] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 750.532193][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 750.532213][ T29] audit: type=1326 audit(1738650500.723:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 750.692577][ T3558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.694366][ T29] audit: type=1326 audit(1738650500.751:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.357814][ T29] audit: type=1326 audit(1738650500.751:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.421825][ T29] audit: type=1326 audit(1738650500.761:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.458539][ T29] audit: type=1326 audit(1738650500.761:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.490397][ T29] audit: type=1326 audit(1738650500.761:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.537734][ T29] audit: type=1326 audit(1738650500.761:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.597116][ T29] audit: type=1326 audit(1738650500.761:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.623762][ T3558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.642122][ T29] audit: type=1326 audit(1738650500.761:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.668478][ T29] audit: type=1326 audit(1738650500.854:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 751.744450][ T3558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.888629][ T3558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.166491][ T3558] bridge_slave_1: left allmulticast mode [ 752.172201][ T3558] bridge_slave_1: left promiscuous mode [ 752.220914][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.051915][ T3558] bridge_slave_0: left allmulticast mode [ 753.087589][ T3558] bridge_slave_0: left promiscuous mode [ 754.004052][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.630997][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 755.671297][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 755.682032][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 755.696958][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 755.708408][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 755.800279][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.233903][ T55] Bluetooth: hci2: command tx timeout [ 759.486983][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.524762][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.568248][ T3558] bond0 (unregistering): Released all slaves [ 760.124276][T11369] lo speed is unknown, defaulting to 1000 [ 761.345060][T11369] lo speed is unknown, defaulting to 1000 [ 761.486403][ T55] Bluetooth: hci2: command tx timeout [ 764.337618][ T55] Bluetooth: hci2: command tx timeout [ 766.611223][ T55] Bluetooth: hci2: command tx timeout [ 769.352010][ T3558] hsr_slave_0: left promiscuous mode [ 769.358641][ T3558] hsr_slave_1: left promiscuous mode [ 769.364549][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.372618][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.381244][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.389276][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.479682][ T3558] veth1_macvtap: left promiscuous mode [ 771.485599][ T3558] veth0_macvtap: left promiscuous mode [ 771.491254][ T3558] veth1_vlan: left promiscuous mode [ 771.503499][ T3558] veth0_vlan: left promiscuous mode [ 772.757004][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 772.757204][ T29] audit: type=1326 audit(1738650521.442:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 772.956595][ T29] audit: type=1326 audit(1738650521.442:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.376553][ T29] audit: type=1326 audit(1738650521.442:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.400071][ T29] audit: type=1326 audit(1738650521.442:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.424137][ T29] audit: type=1326 audit(1738650521.442:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.471509][ T29] audit: type=1326 audit(1738650521.442:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.669598][ T29] audit: type=1326 audit(1738650521.442:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.692193][ T29] audit: type=1326 audit(1738650521.442:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 773.952155][ T29] audit: type=1326 audit(1738650521.442:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 774.206917][ T29] audit: type=1326 audit(1738650521.452:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11488 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b8cda9 code=0x7ffc0000 [ 778.058432][T11506] xt_CT: No such helper "snmp" [ 778.159926][T11519] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 780.072255][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1225'. [ 784.100867][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.508365][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 784.650980][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 788.704991][T11369] chnl_net:caif_netlink_parms(): no params data found [ 790.114729][T11583] batadv_slave_0: left allmulticast mode [ 792.201330][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'. [ 793.824989][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.833217][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.844689][T11369] bridge_slave_0: entered allmulticast mode [ 794.417521][T11369] bridge_slave_0: entered promiscuous mode [ 794.676970][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.702658][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.709938][T11369] bridge_slave_1: entered allmulticast mode [ 794.726274][T11618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.774373][T11369] bridge_slave_1: entered promiscuous mode [ 794.946945][T11618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.008238][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 795.079380][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 795.314025][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.318885][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.728334][T11652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.758149][T11653] 9pnet_fd: Insufficient options for proto=fd [ 799.160108][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 799.388349][T11369] team0: Port device team_slave_0 added [ 799.563057][T11369] team0: Port device team_slave_1 added [ 799.831661][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 799.847977][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.865598][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.580972][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1256'. [ 800.645074][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 800.655942][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1256'. [ 800.795705][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.830954][T11643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.923697][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.109366][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.166440][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.019778][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 803.029229][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 803.200241][T11369] hsr_slave_0: entered promiscuous mode [ 803.251995][T11369] hsr_slave_1: entered promiscuous mode [ 803.379523][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.478715][T11369] Cannot create hsr debugfs directory [ 803.548632][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 803.558484][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 806.413630][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 806.413651][ T29] audit: type=1326 audit(1738650552.947:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 807.447694][ T29] audit: type=1326 audit(1738650552.947:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 807.527866][ T29] audit: type=1326 audit(1738650553.115:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 807.596031][ T29] audit: type=1326 audit(1738650553.115:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 807.648455][ T29] audit: type=1326 audit(1738650553.115:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 807.794979][ T29] audit: type=1326 audit(1738650553.209:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 807.860671][ T29] audit: type=1326 audit(1738650553.209:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 808.715229][ T29] audit: type=1326 audit(1738650553.209:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 808.900083][ T29] audit: type=1326 audit(1738650553.311:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 809.188507][ T29] audit: type=1326 audit(1738650553.311:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 813.918066][T11369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 813.983039][T11369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 814.040538][T11369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 814.056781][T11369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 815.546684][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.609868][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.928487][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.935681][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.454654][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.467485][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 820.481330][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 820.500415][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 820.511185][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 820.519683][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.178415][T11865] lo speed is unknown, defaulting to 1000 [ 822.713822][ T55] Bluetooth: hci2: command tx timeout [ 823.329590][T11865] lo speed is unknown, defaulting to 1000 [ 823.407047][T11891] process 'syz.0.1297' launched './file0' with NULL argv: empty string added [ 823.978688][T11896] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 824.064062][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 824.077779][T11900] netlink: 'syz.4.1300': attribute type 2 has an invalid length. [ 824.086076][T11900] netlink: 'syz.4.1300': attribute type 8 has an invalid length. [ 824.094176][T11900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1300'. [ 824.945996][ T55] Bluetooth: hci2: command tx timeout [ 825.319944][ T8594] bridge_slave_1: left allmulticast mode [ 825.325739][ T8594] bridge_slave_1: left promiscuous mode [ 825.338728][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.734677][ T8594] bridge_slave_0: left allmulticast mode [ 825.908256][ T8594] bridge_slave_0: left promiscuous mode [ 825.914021][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.185108][ T55] Bluetooth: hci2: command tx timeout [ 829.555102][ T55] Bluetooth: hci2: command tx timeout [ 830.408417][ T8594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.432164][ T8594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.444412][ T8594] bond0 (unregistering): Released all slaves [ 831.536700][T11865] chnl_net:caif_netlink_parms(): no params data found [ 832.073886][ T8594] hsr_slave_0: left promiscuous mode [ 832.433650][ T8594] hsr_slave_1: left promiscuous mode [ 832.556599][ T8594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.253329][ T8594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.407433][ T8594] team0 (unregistering): Port device team_slave_1 removed [ 838.531565][ T8594] team0 (unregistering): Port device team_slave_0 removed [ 841.075225][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 841.075242][ T29] audit: type=1326 audit(1738650585.414:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 841.106126][ T29] audit: type=1326 audit(1738650585.442:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 841.129783][ T29] audit: type=1326 audit(1738650585.442:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 841.152264][ T29] audit: type=1326 audit(1738650585.442:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 841.184026][ T29] audit: type=1326 audit(1738650585.442:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 841.207226][ T29] audit: type=1326 audit(1738650585.442:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 841.229919][ T29] audit: type=1326 audit(1738650585.442:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 842.493179][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.715570][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.952597][T11865] bridge_slave_0: entered allmulticast mode [ 843.143010][T11865] bridge_slave_0: entered promiscuous mode [ 843.194342][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.254221][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.287623][T11865] bridge_slave_1: entered allmulticast mode [ 843.314033][T11865] bridge_slave_1: entered promiscuous mode [ 843.646276][T12066] trusted_key: encrypted_key: insufficient parameters specified [ 844.435584][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1331'. [ 844.564846][T12069] netlink: 'syz.5.1331': attribute type 3 has an invalid length. [ 844.590754][T11865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.625516][T11865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.767589][T12081] input: syz0 as /devices/virtual/input/input12 [ 847.857896][T11865] team0: Port device team_slave_0 added [ 847.875749][T11865] team0: Port device team_slave_1 added [ 848.794956][ T55] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 849.883449][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.969117][T11865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.230731][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.259063][T11865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.307211][T11865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.358268][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.583516][T11865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.757082][T11865] hsr_slave_0: entered promiscuous mode [ 850.763456][T11865] hsr_slave_1: entered promiscuous mode [ 851.256366][T11865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.291070][T11865] Cannot create hsr debugfs directory [ 852.102024][T12128] sp0: Synchronizing with TNC [ 852.230811][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 853.302350][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 853.318718][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 853.329238][ T55] Bluetooth: hci3: hardware error 0x00 [ 856.280838][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 857.545675][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.100406][T11865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.263201][T11865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 864.301013][T11865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 864.346787][T11865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 866.826987][T11865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.856220][T11865] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.912145][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.919326][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.990518][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.997706][ T8594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.973962][T11865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 869.115610][ T29] audit: type=1326 audit(1738650611.606:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12242 comm="syz.3.1370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feae538cda9 code=0x0 [ 869.943601][ T55] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 871.130196][T12268] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 871.341028][T12261] autofs: Unknown parameter '™“D z •Ó»ŒóSýcňÿ£Ÿðüí ’~¤²¢GЂ$uX¾ö²²Íjÿìá³e&é8Œ4O·¬BžCLË0H<ªò–Ø!Ž$' [ 871.661264][T11865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.253248][T11865] veth0_vlan: entered promiscuous mode [ 873.333439][T11865] veth1_vlan: entered promiscuous mode [ 873.452920][T11865] veth0_macvtap: entered promiscuous mode [ 873.496151][T11865] veth1_macvtap: entered promiscuous mode [ 874.344893][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.524098][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.535234][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.553252][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.589295][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.634618][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.674556][T11865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.728499][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.092845][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.412583][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.426260][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.444397][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.469914][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.555889][T11865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.589146][T11865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.752218][T11865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.782860][T11865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.340770][T11865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.589854][T11865] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 877.609551][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.735545][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.766508][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.398087][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.411175][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.619458][T12413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.640767][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.599652][T12439] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 884.683879][T12441] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 884.802533][T12439] team0: Port device netdevsim0 added [ 885.030153][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.383879][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.900077][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.090274][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 889.111935][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.119971][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 889.128409][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 889.139894][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 889.154875][T12478] Device name cannot be null; rc = [-22] [ 889.160970][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.210221][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.265261][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.962512][ T1158] bridge_slave_1: left allmulticast mode [ 890.014680][ T1158] bridge_slave_1: left promiscuous mode [ 890.063344][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.136924][ T1158] bridge_slave_0: left allmulticast mode [ 890.170268][ T1158] bridge_slave_0: left promiscuous mode [ 890.186849][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.933838][ T55] Bluetooth: hci2: command tx timeout [ 893.173290][T12510] syz.5.1424: attempt to access beyond end of device [ 893.173290][T12510] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 893.188311][T12510] syz.5.1424: attempt to access beyond end of device [ 893.188311][T12510] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 893.202650][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 893.218072][T12510] syz.5.1424: attempt to access beyond end of device [ 893.218072][T12510] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 893.231716][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 893.245628][T12510] syz.5.1424: attempt to access beyond end of device [ 893.245628][T12510] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 893.258990][T12510] syz.5.1424: attempt to access beyond end of device [ 893.258990][T12510] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 893.276030][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 893.286774][T12510] syz.5.1424: attempt to access beyond end of device [ 893.286774][T12510] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 893.301168][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 893.312546][T12510] syz.5.1424: attempt to access beyond end of device [ 893.312546][T12510] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 893.326402][T12510] syz.5.1424: attempt to access beyond end of device [ 893.326402][T12510] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 893.340569][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 893.351490][T12510] syz.5.1424: attempt to access beyond end of device [ 893.351490][T12510] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 893.365357][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 893.376710][T12510] syz.5.1424: attempt to access beyond end of device [ 893.376710][T12510] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 893.390887][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 893.401276][T12510] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 893.411104][T12510] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 894.125359][ T55] Bluetooth: hci2: command tx timeout [ 895.057691][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.217105][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.231156][ T1158] bond0 (unregistering): Released all slaves [ 896.227764][T12472] lo speed is unknown, defaulting to 1000 [ 896.333011][ T29] audit: type=1326 audit(1738650637.105:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 896.350390][ T55] Bluetooth: hci2: command tx timeout [ 896.393493][ T29] audit: type=1326 audit(1738650637.105:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 896.423625][ T29] audit: type=1326 audit(1738650637.142:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 896.985360][ T29] audit: type=1326 audit(1738650637.142:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 897.060602][T12543] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1429'. [ 897.220317][ T29] audit: type=1326 audit(1738650637.142:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 897.242497][ T29] audit: type=1326 audit(1738650637.142:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809698b710 code=0x7ffc0000 [ 898.104500][ T29] audit: type=1326 audit(1738650637.142:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f809698e5d7 code=0x7ffc0000 [ 898.241578][ T29] audit: type=1326 audit(1738650637.142:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 898.353044][ T29] audit: type=1326 audit(1738650637.142:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f809698e5d7 code=0x7ffc0000 [ 898.396635][ T29] audit: type=1326 audit(1738650637.142:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12540 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f809698ba0a code=0x7ffc0000 [ 898.626360][ T55] Bluetooth: hci2: command tx timeout [ 898.700915][T12472] lo speed is unknown, defaulting to 1000 [ 899.039586][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 899.587840][ T5944] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 899.792580][ T5944] usb 6-1: config 7 has an invalid interface number: 226 but max is 0 [ 899.958528][ T5944] usb 6-1: config 7 has no interface number 0 [ 900.752177][ T5944] usb 6-1: config 7 interface 226 has no altsetting 0 [ 900.762206][ T5944] usb 6-1: string descriptor 0 read error: -22 [ 900.768693][ T5944] usb 6-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=3a.31 [ 900.956367][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.132420][ T5944] usb 6-1: bad CDC descriptors [ 901.178759][ T5944] cdc_acm 6-1:7.226: Zero length descriptor references [ 901.242119][ T5944] cdc_acm 6-1:7.226: probe with driver cdc_acm failed with error -22 [ 902.675839][ T5827] lo speed is unknown, defaulting to 1000 [ 903.781225][T12472] chnl_net:caif_netlink_parms(): no params data found [ 903.937816][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 903.937864][ T29] audit: type=1800 audit(1738650643.531:206): pid=12601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1433" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 904.567655][T12602] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 904.570793][ T8575] usb 6-1: USB disconnect, device number 5 [ 905.334382][T12614] Invalid ELF header magic: != ELF [ 906.185661][ T1158] hsr_slave_0: left promiscuous mode [ 906.192212][ T1158] hsr_slave_1: left promiscuous mode [ 906.199654][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.291028][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.345847][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.366169][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.373729][ T29] audit: type=1326 audit(1738650646.477:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 906.451677][ T1158] veth1_macvtap: left promiscuous mode [ 906.457367][ T1158] veth0_macvtap: left promiscuous mode [ 906.475945][ T1158] veth1_vlan: left promiscuous mode [ 906.482926][ T1158] veth0_vlan: left promiscuous mode [ 906.688505][ T29] audit: type=1326 audit(1738650646.477:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 906.710430][ T29] audit: type=1326 audit(1738650646.515:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 906.745101][ T29] audit: type=1326 audit(1738650646.515:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 906.774876][ T29] audit: type=1326 audit(1738650646.515:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 907.264069][ T29] audit: type=1326 audit(1738650646.524:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 907.288635][ T29] audit: type=1326 audit(1738650646.524:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 907.311559][ T29] audit: type=1326 audit(1738650646.524:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 907.372905][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.388626][ T29] audit: type=1326 audit(1738650646.524:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12616 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffbd6b8cda9 code=0x7ffc0000 [ 907.610974][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.027581][T12648] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 909.817947][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 909.866601][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 910.309283][T12613] bridge1: entered promiscuous mode [ 910.315442][T12613] bridge1: entered allmulticast mode [ 910.506871][T12472] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.786492][T12472] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.793940][T12472] bridge_slave_0: entered allmulticast mode [ 910.801003][T12472] bridge_slave_0: entered promiscuous mode [ 910.809939][T12472] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.817626][T12472] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.827340][T12472] bridge_slave_1: entered allmulticast mode [ 910.835286][T12472] bridge_slave_1: entered promiscuous mode [ 911.558955][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 911.570540][ T29] audit: type=1326 audit(1738650651.304:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12658 comm="syz.4.1455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6b8cda9 code=0x0 [ 913.530336][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.653204][T12669] bridge_slave_1: left allmulticast mode [ 913.659484][T12669] bridge_slave_1: left promiscuous mode [ 913.665190][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.717883][T12669] bond0: (slave bond_slave_0): Releasing backup interface [ 913.729715][T12669] bond0: (slave bond_slave_1): Releasing backup interface [ 913.751633][T12669] team0: Port device team_slave_0 removed [ 913.762737][T12669] team0: Port device team_slave_1 removed [ 913.769745][T12669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.782477][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.791547][T12669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.815724][T12669] team0: Port device netdevsim0 removed [ 913.824510][T12669] bond0: (slave wlan1): Releasing backup interface [ 913.843509][T12669] bond1: (slave gretap1): Releasing backup interface [ 913.851560][T12669] bond1: (slave gretap1): the permanent HWaddr of slave - 1a:e5:6d:5a:99:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 913.879823][T12669] bond1: (slave macvlan2): Releasing backup interface [ 913.995912][T12472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.033263][T12472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.113654][ T29] audit: type=1326 audit(1738650653.727:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12679 comm="syz.0.1459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x0 [ 914.498635][T12472] team0: Port device team_slave_0 added [ 915.376950][T12472] team0: Port device team_slave_1 added [ 915.390007][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 915.586827][T12472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.812180][T12472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.855416][T12472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.868412][T12472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.991674][T12472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.145605][T12472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.058903][T12472] hsr_slave_0: entered promiscuous mode [ 917.097248][T12472] hsr_slave_1: entered promiscuous mode [ 917.112817][T12472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.129251][T12472] Cannot create hsr debugfs directory [ 917.361379][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.594172][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1467'. [ 917.642280][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.570574][T12721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.352860][T12797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.444477][T12797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.504669][T12799] hub 2-0:1.0: USB hub found [ 924.511631][T12799] hub 2-0:1.0: 1 port detected [ 925.099936][T12797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.593823][T12472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 926.168983][T12472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 927.010107][T12472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 927.051393][T12472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 928.944229][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 928.965575][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 931.148278][T12472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.208678][T12472] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.294990][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.302164][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.371082][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.378284][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.463787][T12852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.599153][ T29] audit: type=1326 audit(1738650671.022:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 932.677914][ T29] audit: type=1326 audit(1738650671.022:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 932.733022][ T29] audit: type=1326 audit(1738650671.022:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 933.083308][T12863] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 933.637316][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 933.835109][T12868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.856605][T12472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.915392][ T29] audit: type=1326 audit(1738650671.022:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 933.962036][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.991393][T12472] veth0_vlan: entered promiscuous mode [ 934.012443][ T29] audit: type=1326 audit(1738650671.022:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 934.055496][T12472] veth1_vlan: entered promiscuous mode [ 934.078778][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.128863][T12472] veth0_macvtap: entered promiscuous mode [ 934.135258][ T29] audit: type=1326 audit(1738650671.022:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 934.162807][T12472] veth1_macvtap: entered promiscuous mode [ 934.204344][ T29] audit: type=1326 audit(1738650671.022:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 934.245790][T12472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.278615][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.300543][ T29] audit: type=1326 audit(1738650671.022:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 934.322568][T12472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.358185][ T29] audit: type=1326 audit(1738650671.050:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 934.424341][ T29] audit: type=1326 audit(1738650671.050:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12850 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809698cda9 code=0x7ffc0000 [ 935.752633][T12472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.476799][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.486999][T12472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.497712][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.508940][T12472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.524801][T12472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.533528][T12472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.537610][T12897] random: crng reseeded on system resumption [ 936.542547][T12472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.624391][T12472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.755992][T12472] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 938.777065][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.274006][ T8594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.310166][ T8594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.416183][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.425635][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.585045][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.660051][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.741078][T12950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.015613][T12952] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.1515'. [ 945.639525][ T8589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.741471][ T8589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.821333][ T8589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.927590][ T8589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.080397][ T8589] bridge_slave_1: left allmulticast mode [ 946.091111][ T8589] bridge_slave_1: left promiscuous mode [ 946.100368][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.109395][ T8589] bridge_slave_0: left allmulticast mode [ 946.115715][ T8589] bridge_slave_0: left promiscuous mode [ 946.121580][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.518952][ T8589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.535262][ T8589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.547328][ T8589] bond0 (unregistering): Released all slaves [ 948.580595][T13022] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 949.601910][T13021] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 949.827297][T13019] lo speed is unknown, defaulting to 1000 [ 949.928548][T13019] lo speed is unknown, defaulting to 1000 [ 950.121022][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 950.132956][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 950.141240][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 950.151372][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 950.263948][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 950.294211][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 950.490055][T13035] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1531'. [ 950.715834][T13026] lo speed is unknown, defaulting to 1000 [ 951.050368][ T8589] hsr_slave_0: left promiscuous mode [ 951.138127][ T8589] hsr_slave_1: left promiscuous mode [ 951.564195][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.618915][ T8589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.652054][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.712500][ T8589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.742552][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 951.760941][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 951.822847][ T8589] veth1_macvtap: left promiscuous mode [ 951.828415][ T8589] veth0_macvtap: left promiscuous mode [ 951.848960][ T8589] veth1_vlan: left promiscuous mode [ 951.868564][ T8589] veth0_vlan: left promiscuous mode [ 952.644247][ T8589] team0 (unregistering): Port device team_slave_1 removed [ 952.700708][ T8589] team0 (unregistering): Port device team_slave_0 removed [ 952.893884][ T5837] Bluetooth: hci2: command tx timeout [ 953.203778][T13044] batadv0: entered promiscuous mode [ 953.217591][T13044] batadv0: left promiscuous mode [ 953.257403][T13026] lo speed is unknown, defaulting to 1000 [ 954.085001][T13063] bridge0: port 1(erspan0) entered blocking state [ 954.092225][T13063] bridge0: port 1(erspan0) entered disabled state [ 954.099121][T13063] erspan0: entered allmulticast mode [ 954.107184][T13063] erspan0: entered promiscuous mode [ 954.115180][T13063] bridge0: port 1(erspan0) entered blocking state [ 954.124064][T13063] bridge0: port 1(erspan0) entered forwarding state [ 955.158083][ T5837] Bluetooth: hci2: command tx timeout [ 955.167515][T13026] chnl_net:caif_netlink_parms(): no params data found [ 957.192022][T13085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.341639][ T5837] Bluetooth: hci2: command tx timeout [ 957.513317][T13088] netlink: 'syz.3.1545': attribute type 3 has an invalid length. [ 957.521575][T13088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1545'. [ 957.609303][T13078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.719028][T13078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.751894][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 958.046168][T13026] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.062174][T13026] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.072319][T13026] bridge_slave_0: entered allmulticast mode [ 958.997482][T13026] bridge_slave_0: entered promiscuous mode [ 959.042455][T13026] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.051624][T13026] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.058971][T13026] bridge_slave_1: entered allmulticast mode [ 959.076351][T13026] bridge_slave_1: entered promiscuous mode [ 959.556922][ T5837] Bluetooth: hci2: command tx timeout [ 960.752870][T13026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.126721][T13026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.532687][T13026] team0: Port device team_slave_0 added [ 961.624054][T13026] team0: Port device team_slave_1 added [ 962.718982][T13026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.791815][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.222195][T13026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.685293][T13026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.697084][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.029732][T13153] delete_channel: no stack [ 972.284458][ T17] sched: DL replenish lagged too much [ 1075.982638][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1075.982673][ C1] rcu: 0-...0: (1 ticks this GP) idle=e5c4/1/0x4000000000000000 softirq=53141/53141 fqs=2098 [ 1075.983515][ C1] rcu: hardirqs softirqs csw/system [ 1075.983528][ C1] rcu: number: 0 0 0 [ 1075.983560][ C1] rcu: cputime: 0 0 0 ==> 52500(ms) [ 1075.983577][ C1] rcu: (detected by 1, t=10505 jiffies, g=46565, q=166 ncpus=2) [ 1075.983607][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1075.983643][ C0] NMI backtrace for cpu 0 [ 1075.983658][ C0] CPU: 0 UID: 0 PID: 13026 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 1075.983676][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1075.983688][ C0] RIP: 0010:__lock_acquire+0x1290/0x2100 [ 1075.983717][ C0] Code: 12 48 89 df e8 e1 9d 88 00 48 bf 00 00 00 00 00 fc ff df 48 83 3b 00 0f 84 b7 04 00 00 41 0f b6 04 3e 84 c0 0f 85 62 0a 00 00 <48> 8b 44 24 10 8b 18 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d [ 1075.983732][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00000046 [ 1075.983748][ C0] RAX: 0000000000000000 RBX: ffffffff93c3bfd8 RCX: ffffffff819acdf5 [ 1075.983761][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 1075.983772][ C0] RBP: ed14171d5a5ebe0f R08: ffffffff942c3847 R09: 1ffffffff2858708 [ 1075.983785][ C0] R10: dffffc0000000000 R11: fffffbfff2858709 R12: ffff88801df90000 [ 1075.983798][ C0] R13: ffff88801df90000 R14: 1ffff11003bf2171 R15: 0000000000000001 [ 1075.983810][ C0] FS: 0000555582484500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1075.983824][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.983835][ C0] CR2: 00007fcce5a57f98 CR3: 000000007dd0c000 CR4: 00000000003526f0 [ 1075.983850][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1075.983860][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1075.983871][ C0] Call Trace: [ 1075.983877][ C0] [ 1075.983886][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1075.983906][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1075.983928][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1075.983953][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1075.983972][ C0] ? nmi_handle+0x14f/0x5a0 [ 1075.983996][ C0] ? nmi_handle+0x2a/0x5a0 [ 1075.984019][ C0] ? __lock_acquire+0x1290/0x2100 [ 1075.984040][ C0] ? default_do_nmi+0x63/0x160 [ 1075.984057][ C0] ? exc_nmi+0x123/0x1f0 [ 1075.984072][ C0] ? end_repeat_nmi+0xf/0x53 [ 1075.984099][ C0] ? __lock_acquire+0xf55/0x2100 [ 1075.984129][ C0] ? __lock_acquire+0x1290/0x2100 [ 1075.984150][ C0] ? __lock_acquire+0x1290/0x2100 [ 1075.984172][ C0] ? __lock_acquire+0x1290/0x2100 [ 1075.984193][ C0] [ 1075.984199][ C0] [ 1075.984212][ C0] lock_acquire+0x1ed/0x550 [ 1075.984232][ C0] ? advance_sched+0xab/0xca0 [ 1075.984253][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1075.984275][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1075.984296][ C0] ? __hrtimer_run_queues+0x477/0xd30 [ 1075.984321][ C0] ? __pfx_lock_release+0x10/0x10 [ 1075.984345][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1075.984363][ C0] _raw_spin_lock+0x2e/0x40 [ 1075.984380][ C0] ? advance_sched+0xab/0xca0 [ 1075.984396][ C0] advance_sched+0xab/0xca0 [ 1075.984415][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1075.984435][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1075.984458][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1075.984476][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 1075.984508][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1075.984531][ C0] ? sched_clock+0x4a/0x70 [ 1075.984549][ C0] ? read_tsc+0x9/0x20 [ 1075.984565][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1075.984589][ C0] hrtimer_interrupt+0x403/0xa40 [ 1075.984623][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1075.984649][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1075.984670][ C0] [ 1075.984676][ C0] [ 1075.984682][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1075.984706][ C0] RIP: 0010:console_flush_all+0x996/0xeb0 [ 1075.984725][ C0] Code: 48 21 c3 0f 85 16 02 00 00 e8 06 8e 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 f7 8d 20 00 eb 06 e8 f0 8d 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 06 9f 84 00 4c 8b [ 1075.984740][ C0] RSP: 0018:ffffc9000460e900 EFLAGS: 00000293 [ 1075.984754][ C0] RAX: ffffffff819ecfd0 RBX: ffffffff8f172778 RCX: ffff88801df90000 [ 1075.984767][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1075.984777][ C0] RBP: ffffc9000460eab0 R08: ffffffff819ecfa7 R09: 1ffffffff2858708 [ 1075.984789][ C0] R10: dffffc0000000000 R11: fffffbfff2858709 R12: ffffffff8f172720 [ 1075.984802][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc9000460eb00 [ 1075.984817][ C0] ? console_flush_all+0x967/0xeb0 [ 1075.984834][ C0] ? console_flush_all+0x990/0xeb0 [ 1075.984856][ C0] ? console_flush_all+0x1a3/0xeb0 [ 1075.984876][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1075.984895][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1075.984920][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1075.984940][ C0] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 1075.984969][ C0] console_unlock+0x14f/0x3b0 [ 1075.984995][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1075.985023][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1075.985043][ C0] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 1075.985070][ C0] vprintk_emit+0x730/0xa10 [ 1075.985097][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1075.985137][ C0] _printk+0xd5/0x120 [ 1075.985161][ C0] ? batadv_hardif_enable_interface+0x566/0x9f0 [ 1075.985185][ C0] ? __pfx__printk+0x10/0x10 [ 1075.985210][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1075.985230][ C0] batadv_hardif_enable_interface+0x7d0/0x9f0 [ 1075.985257][ C0] batadv_softif_slave_add+0x79/0x100 [ 1075.985284][ C0] do_setlink+0xe40/0x4210 [ 1075.985313][ C0] ? mark_lock+0x9a/0x360 [ 1075.985336][ C0] ? __pfx_do_setlink+0x10/0x10 [ 1075.985356][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1075.985380][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1075.985403][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1075.985423][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1075.985444][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1075.985464][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1075.985486][ C0] ? rcu_is_watching+0x15/0xb0 [ 1075.985513][ C0] ? __mutex_lock+0xba3/0x1010 [ 1075.985536][ C0] ? __mutex_lock+0x602/0x1010 [ 1075.985561][ C0] ? rtnl_newlink+0xce2/0x2210 [ 1075.985580][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1075.985602][ C0] ? safesetid_security_capable+0xb2/0x1d0 [ 1075.985630][ C0] ? ns_capable+0x8a/0xf0 [ 1075.985646][ C0] ? rtnl_link_get_net_capable+0x168/0x340 [ 1075.985670][ C0] rtnl_newlink+0x1bb6/0x2210 [ 1075.985694][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1075.985713][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1075.985746][ C0] ? validate_chain+0x11e/0x5920 [ 1075.985770][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1075.985792][ C0] ? __pfx_lock_release+0x10/0x10 [ 1075.985814][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1075.985839][ C0] ? mark_lock+0x9a/0x360 [ 1075.985863][ C0] ? __lock_acquire+0x1397/0x2100 [ 1075.985898][ C0] ? __pfx_lock_release+0x10/0x10 [ 1075.985919][ C0] ? cap_capable+0x139/0x450 [ 1075.985946][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1075.985966][ C0] rtnetlink_rcv_msg+0x791/0xcf0 [ 1075.985985][ C0] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1075.986004][ C0] ? __lock_acquire+0x1397/0x2100 [ 1075.986025][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1075.986051][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1075.986078][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1075.986098][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1075.986139][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1075.986166][ C0] netlink_unicast+0x7f6/0x990 [ 1075.986193][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1075.986215][ C0] ? __virt_addr_valid+0x45f/0x530 [ 1075.986239][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 1075.986261][ C0] ? __check_object_size+0x47a/0x730 [ 1075.986284][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1075.986305][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.986326][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.986341][ C0] __sock_sendmsg+0x221/0x270 [ 1075.986364][ C0] __sys_sendto+0x363/0x4c0 [ 1075.986391][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1075.986426][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1075.986448][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1075.986472][ C0] __x64_sys_sendto+0xde/0x100 [ 1075.986499][ C0] do_syscall_64+0xf3/0x230 [ 1075.986522][ C0] ? clear_bhb_loop+0x35/0x90 [ 1075.986546][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.986569][ C0] RIP: 0033:0x7f1af5d8ec3c [ 1075.986591][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1075.986605][ C0] RSP: 002b:00007ffc371ce610 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1075.986621][ C0] RAX: ffffffffffffffda RBX: 00007f1af6ad4620 RCX: 00007f1af5d8ec3c [ 1075.986633][ C0] RDX: 0000000000000028 RSI: 00007f1af6ad4670 RDI: 0000000000000003 [ 1075.986644][ C0] RBP: 0000000000000000 R08: 00007ffc371ce664 R09: 000000000000000c [ 1075.986655][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1075.986665][ C0] R13: 0000000000000000 R14: 00007f1af6ad4670 R15: 0000000000000000 [ 1075.986682][ C0] [ 1081.595994][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 1120.456478][ T30] INFO: task syz.5.1559:13162 blocked for more than 143 seconds. [ 1120.456531][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 1120.456545][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1120.456557][ T30] task:syz.5.1559 state:D stack:25984 pid:13162 tgid:13153 ppid:7077 task_flags:0x400140 flags:0x00004006 [ 1120.456622][ T30] Call Trace: [ 1120.456631][ T30] [ 1120.456648][ T30] __schedule+0x18bc/0x4c40 [ 1120.456700][ T30] ? __pfx___schedule+0x10/0x10 [ 1120.456729][ T30] ? __pfx_lock_release+0x10/0x10 [ 1120.456759][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1120.456788][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1120.456814][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1120.456843][ T30] ? schedule+0x90/0x320 [ 1120.456866][ T30] schedule+0x14b/0x320 [ 1120.456893][ T30] schedule_preempt_disabled+0x13/0x30 [ 1120.456918][ T30] __mutex_lock+0x817/0x1010 [ 1120.456949][ T30] ? __mutex_lock+0x602/0x1010 [ 1120.456983][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 1120.457012][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1120.457053][ T30] ? __nla_parse+0x40/0x60 [ 1120.457093][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 1120.457126][ T30] genl_rcv_msg+0xaaa/0xec0 [ 1120.457163][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1120.457217][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1120.457242][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1120.457267][ T30] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 1120.457294][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1120.457322][ T30] ? __pfx___might_resched+0x10/0x10 [ 1120.457356][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1120.457390][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1120.457418][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1120.457464][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 1120.457500][ T30] genl_rcv+0x28/0x40 [ 1120.457524][ T30] netlink_unicast+0x7f6/0x990 [ 1120.457563][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1120.457591][ T30] ? __virt_addr_valid+0x45f/0x530 [ 1120.457622][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 1120.457649][ T30] ? __check_object_size+0x47a/0x730 [ 1120.457681][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1120.457715][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.457750][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.457769][ T30] __sock_sendmsg+0x221/0x270 [ 1120.457800][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1120.457831][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.457851][ T30] ? __fget_files+0x2a/0x410 [ 1120.457883][ T30] ? __fget_files+0x2a/0x410 [ 1120.457920][ T30] __sys_sendmsg+0x269/0x350 [ 1120.457947][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1120.458013][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1120.458041][ T30] ? do_syscall_64+0x100/0x230 [ 1120.458079][ T30] ? do_syscall_64+0xb6/0x230 [ 1120.458110][ T30] do_syscall_64+0xf3/0x230 [ 1120.458139][ T30] ? clear_bhb_loop+0x35/0x90 [ 1120.458171][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.458200][ T30] RIP: 0033:0x7fcce4b8cda9 [ 1120.458219][ T30] RSP: 002b:00007fcce5a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.458242][ T30] RAX: ffffffffffffffda RBX: 00007fcce4da6160 RCX: 00007fcce4b8cda9 [ 1120.458259][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 1120.458273][ T30] RBP: 00007fcce4c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.458288][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.458302][ T30] R13: 0000000000000000 R14: 00007fcce4da6160 R15: 00007ffe2f762278 [ 1120.458333][ T30] [ 1120.458346][ T30] [ 1120.458346][ T30] Showing all locks held in the system: [ 1120.458360][ T30] 1 lock held by khungtaskd/30: [ 1120.458373][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1120.458444][ T30] 5 locks held by kworker/u9:0/55: [ 1120.458456][ T30] #0: ffff8880285d7948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1120.458518][ T30] #1: ffffc90000bf7c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1120.458580][ T30] #2: ffff88805a190d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1120.458645][ T30] #3: ffff88805a190078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 1120.458704][ T30] #4: ffffffff8e93dcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 1120.458766][ T30] 1 lock held by hwrng/763: [ 1120.458779][ T30] #0: ffffffff8f183ee8 (reading_mutex){+.+.}-{4:4}, at: hwrng_fillfn+0xe6/0x410 [ 1120.458847][ T30] 3 locks held by kworker/u8:6/1158: [ 1120.458875][ T30] 2 locks held by getty/5586: [ 1120.458888][ T30] #0: ffff8880316ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1120.458949][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1120.459024][ T30] 4 locks held by syz-executor/13026: [ 1120.459038][ T30] 1 lock held by syz.0.1554/13135: [ 1120.459051][ T30] 2 locks held by syz.5.1559/13162: [ 1120.459069][ T30] #0: ffffffff8fd11bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1120.459129][ T30] #1: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8b0 [ 1120.459192][ T30] 3 locks held by syz.4.1561/13157: [ 1120.459206][ T30] 1 lock held by sed/13161: [ 1120.459219][ T30] [ 1120.459226][ T30] ============================================= [ 1120.459226][ T30] [ 1120.459237][ T30] NMI backtrace for cpu 1 [ 1120.459247][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 1120.459267][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1120.459278][ T30] Call Trace: [ 1120.459284][ T30] [ 1120.459291][ T30] dump_stack_lvl+0x241/0x360 [ 1120.459324][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.459354][ T30] ? __pfx__printk+0x10/0x10 [ 1120.459392][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1120.459420][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1120.459439][ T30] ? _printk+0xd5/0x120 [ 1120.459465][ T30] ? __pfx__printk+0x10/0x10 [ 1120.459491][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1120.459513][ T30] ? __pfx__printk+0x10/0x10 [ 1120.459544][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1120.459567][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1120.459592][ T30] watchdog+0x1058/0x10a0 [ 1120.459617][ T30] ? watchdog+0x1ea/0x10a0 [ 1120.459644][ T30] ? __pfx_watchdog+0x10/0x10 [ 1120.459667][ T30] kthread+0x7a9/0x920 [ 1120.459690][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.459716][ T30] ? __pfx_watchdog+0x10/0x10 [ 1120.459740][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.459762][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.459789][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.459811][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1120.459832][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1120.459856][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.459882][ T30] ret_from_fork+0x4b/0x80 [ 1120.459904][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.459929][ T30] ret_from_fork_asm+0x1a/0x30 [ 1120.459963][ T30] [ 1120.459970][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1120.459997][ C0] NMI backtrace for cpu 0 [ 1120.460007][ C0] CPU: 0 UID: 0 PID: 13026 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 1120.460024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1120.460033][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 1120.460059][ C0] Code: 40 0f 74 03 eb cd 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 78 ba 5e 7e e8 db eb 48 0a 89 c3 83 f8 08 73 7a [ 1120.460073][ C0] RSP: 0018:ffffc90000007d30 EFLAGS: 00000002 [ 1120.460086][ C0] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffffffff81acc210 [ 1120.460097][ C0] RDX: ffff88801df90000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1120.460106][ C0] RBP: ffffc90000007ea0 R08: ffffffff81acc236 R09: 1ffffffff20344ee [ 1120.460118][ C0] R10: dffffc0000000000 R11: fffffbfff20344ef R12: 1ffff110170c58eb [ 1120.460129][ C0] R13: 0000000000000001 R14: ffff88805723d340 R15: 0000000000000001 [ 1120.460139][ C0] FS: 0000555582484500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1120.460152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1120.460163][ C0] CR2: 00007fcce5a57f98 CR3: 000000007dd0c000 CR4: 00000000003526f0 [ 1120.460176][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1120.460185][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1120.460195][ C0] Call Trace: [ 1120.460201][ C0] [ 1120.460207][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1120.460223][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1120.460244][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1120.460260][ C0] ? nmi_handle+0x2a/0x5a0 [ 1120.460289][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1120.460306][ C0] ? nmi_handle+0x14f/0x5a0 [ 1120.460326][ C0] ? nmi_handle+0x2a/0x5a0 [ 1120.460347][ C0] ? rcu_is_watching+0x6/0xb0 [ 1120.460369][ C0] ? __lock_acquire+0x1290/0x2100 [ 1120.460387][ C0] ? default_do_nmi+0x63/0x160 [ 1120.460403][ C0] ? exc_nmi+0x123/0x1f0 [ 1120.460417][ C0] ? end_repeat_nmi+0xf/0x53 [ 1120.460441][ C0] ? __hrtimer_run_queues+0x626/0xd30 [ 1120.460463][ C0] ? __hrtimer_run_queues+0x600/0xd30 [ 1120.460486][ C0] ? rcu_is_watching+0x6/0xb0 [ 1120.460508][ C0] ? rcu_is_watching+0x6/0xb0 [ 1120.460532][ C0] ? rcu_is_watching+0x6/0xb0 [ 1120.460554][ C0] [ 1120.460559][ C0] [ 1120.460564][ C0] __hrtimer_run_queues+0x630/0xd30 [ 1120.460596][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1120.460617][ C0] ? sched_clock+0x4a/0x70 [ 1120.460633][ C0] ? read_tsc+0x9/0x20 [ 1120.460648][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1120.460670][ C0] hrtimer_interrupt+0x403/0xa40 [ 1120.460707][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1120.460731][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1120.460772][ C0] [ 1120.460777][ C0] [ 1120.460783][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1120.460806][ C0] RIP: 0010:console_flush_all+0x996/0xeb0 [ 1120.460828][ C0] Code: 48 21 c3 0f 85 16 02 00 00 e8 06 8e 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 f7 8d 20 00 eb 06 e8 f0 8d 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 06 9f 84 00 4c 8b [ 1120.460842][ C0] RSP: 0018:ffffc9000460e900 EFLAGS: 00000293 [ 1120.460855][ C0] RAX: ffffffff819ecfd0 RBX: ffffffff8f172778 RCX: ffff88801df90000 [ 1120.460868][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1120.460877][ C0] RBP: ffffc9000460eab0 R08: ffffffff819ecfa7 R09: 1ffffffff2858708 [ 1120.460889][ C0] R10: dffffc0000000000 R11: fffffbfff2858709 R12: ffffffff8f172720 [ 1120.460910][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc9000460eb00 [ 1120.460925][ C0] ? console_flush_all+0x967/0xeb0 [ 1120.460941][ C0] ? console_flush_all+0x990/0xeb0 [ 1120.460964][ C0] ? console_flush_all+0x1a3/0xeb0 [ 1120.460984][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1120.461003][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.461028][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1120.461048][ C0] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 1120.461076][ C0] console_unlock+0x14f/0x3b0 [ 1120.461102][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1120.461130][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1120.461149][ C0] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 1120.461177][ C0] vprintk_emit+0x730/0xa10 [ 1120.461203][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1120.461238][ C0] _printk+0xd5/0x120 [ 1120.461260][ C0] ? batadv_hardif_enable_interface+0x566/0x9f0 [ 1120.461284][ C0] ? __pfx__printk+0x10/0x10 [ 1120.461309][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1120.461330][ C0] batadv_hardif_enable_interface+0x7d0/0x9f0 [ 1120.461357][ C0] batadv_softif_slave_add+0x79/0x100 [ 1120.461388][ C0] do_setlink+0xe40/0x4210 [ 1120.461417][ C0] ? mark_lock+0x9a/0x360 [ 1120.461440][ C0] ? __pfx_do_setlink+0x10/0x10 [ 1120.461459][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.461481][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1120.461505][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1120.461523][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1120.461544][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1120.461563][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1120.461585][ C0] ? rcu_is_watching+0x15/0xb0 [ 1120.461610][ C0] ? __mutex_lock+0xba3/0x1010 [ 1120.461632][ C0] ? __mutex_lock+0x602/0x1010 [ 1120.461656][ C0] ? rtnl_newlink+0xce2/0x2210 [ 1120.461675][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1120.461697][ C0] ? safesetid_security_capable+0xb2/0x1d0 [ 1120.461723][ C0] ? ns_capable+0x8a/0xf0 [ 1120.461739][ C0] ? rtnl_link_get_net_capable+0x168/0x340 [ 1120.461761][ C0] rtnl_newlink+0x1bb6/0x2210 [ 1120.461786][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1120.461805][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1120.461843][ C0] ? validate_chain+0x11e/0x5920 [ 1120.461866][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1120.461888][ C0] ? __pfx_lock_release+0x10/0x10 [ 1120.461910][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1120.461934][ C0] ? mark_lock+0x9a/0x360 [ 1120.461957][ C0] ? __lock_acquire+0x1397/0x2100 [ 1120.461993][ C0] ? __pfx_lock_release+0x10/0x10 [ 1120.462014][ C0] ? cap_capable+0x139/0x450 [ 1120.462041][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1120.462060][ C0] rtnetlink_rcv_msg+0x791/0xcf0 [ 1120.462079][ C0] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1120.462098][ C0] ? __lock_acquire+0x1397/0x2100 [ 1120.462119][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1120.462146][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1120.462171][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1120.462190][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1120.462227][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1120.462254][ C0] netlink_unicast+0x7f6/0x990 [ 1120.462297][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1120.462317][ C0] ? __virt_addr_valid+0x45f/0x530 [ 1120.462337][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 1120.462363][ C0] ? __check_object_size+0x47a/0x730 [ 1120.462383][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1120.462403][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.462424][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.462437][ C0] __sock_sendmsg+0x221/0x270 [ 1120.462457][ C0] __sys_sendto+0x363/0x4c0 [ 1120.462481][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1120.462515][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.462535][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1120.462557][ C0] __x64_sys_sendto+0xde/0x100 [ 1120.462581][ C0] do_syscall_64+0xf3/0x230 [ 1120.462601][ C0] ? clear_bhb_loop+0x35/0x90 [ 1120.462624][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.462644][ C0] RIP: 0033:0x7f1af5d8ec3c [ 1120.462657][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1120.462669][ C0] RSP: 002b:00007ffc371ce610 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1120.462684][ C0] RAX: ffffffffffffffda RBX: 00007f1af6ad4620 RCX: 00007f1af5d8ec3c [ 1120.462695][ C0] RDX: 0000000000000028 RSI: 00007f1af6ad4670 RDI: 0000000000000003 [ 1120.462704][ C0] RBP: 0000000000000000 R08: 00007ffc371ce664 R09: 000000000000000c [ 1120.462714][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1120.462723][ C0] R13: 0000000000000000 R14: 00007f1af6ad4670 R15: 0000000000000000 [ 1120.462740][ C0] [ 1120.463000][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1120.463013][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 1120.463035][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1120.463047][ T30] Call Trace: [ 1120.463055][ T30] [ 1120.463068][ T30] dump_stack_lvl+0x241/0x360 [ 1120.463100][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1120.463131][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.463162][ T30] ? __pfx__printk+0x10/0x10 [ 1120.463188][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.463220][ T30] ? vscnprintf+0x5d/0x90 [ 1120.463244][ T30] panic+0x349/0x880 [ 1120.463274][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1120.463298][ T30] ? __pfx_panic+0x10/0x10 [ 1120.463331][ T30] ? irq_work_queue+0xd1/0x150 [ 1120.463355][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1120.463379][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1120.463401][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1120.463423][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 1120.463449][ T30] watchdog+0x1097/0x10a0 [ 1120.463475][ T30] ? watchdog+0x1ea/0x10a0 [ 1120.463503][ T30] ? __pfx_watchdog+0x10/0x10 [ 1120.463528][ T30] kthread+0x7a9/0x920 [ 1120.463552][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.463580][ T30] ? __pfx_watchdog+0x10/0x10 [ 1120.463604][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.463628][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.463657][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.463681][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1120.463703][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1120.463728][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.463754][ T30] ret_from_fork+0x4b/0x80 [ 1120.463777][ T30] ? __pfx_kthread+0x10/0x10 [ 1120.463803][ T30] ret_from_fork_asm+0x1a/0x30 [ 1120.463838][ T30] [ 1121.612386][ T30] Shutting down cpus with NMI [ 1121.612737][ T30] Kernel Offset: disabled