last executing test programs: 2m49.977773673s ago: executing program 3 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000c40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80040}, 0x40c0080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) ptrace(0x4208, r3) ptrace(0x11, r3) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x7fe, 0x0, &(0x7f0000000040)=0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0xf0, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/191, 0xbf, 0x2, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x29}, @fda={0x66646185, 0xa, 0x1, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/43, 0x2b, 0x2, 0x38}}, &(0x7f0000000280)={0x0, 0x1c, 0x38}}}, @decrefs={0x40046307, 0x3}, @acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x1182016943993805, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @exit_looper, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) r5 = getpid() setxattr$incfs_size(&(0x7f0000000380)='./file1/file0\x00', &(0x7f0000000680), &(0x7f00000006c0)=0x2, 0x8, 0x1) ioprio_set$pid(0x2, r5, 0x6000) 2m48.130448505s ago: executing program 3 (id=207): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2m45.559174349s ago: executing program 3 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 2m44.742455586s ago: executing program 3 (id=214): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x2, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m43.109305328s ago: executing program 3 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xb8, 0x7, 0xfffffffe}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2m42.874418468s ago: executing program 3 (id=221): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000000240)=0x47ee917f) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c808efc0b800800020001000000a0000880"], 0xd0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x1f0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c0922db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb456}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64ec}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2192}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c6b1491}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8693}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750c1cca}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6228c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345e6bd6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75d05030}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d698e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b16d317}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74dbd7f1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e2ad7f2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2114c784}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40020c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5809bf5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a5940ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd20f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55d8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa83c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3246}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeefd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3043f17f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x216b0f9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72fbd2ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7423c207}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dac0ad9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3653}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2613}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27dc3366}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x552}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2224bfd4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0xe}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x841}, 0x20000040) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r6 = getpid() sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m26.233412596s ago: executing program 32 (id=221): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000000240)=0x47ee917f) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c808efc0b800800020001000000a0000880"], 0xd0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x1f0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c0922db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb456}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64ec}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2192}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c6b1491}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8693}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750c1cca}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6228c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345e6bd6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75d05030}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d698e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b16d317}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74dbd7f1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e2ad7f2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2114c784}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40020c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5809bf5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a5940ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd20f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55d8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa83c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3246}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeefd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3043f17f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x216b0f9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72fbd2ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7423c207}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dac0ad9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3653}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2613}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27dc3366}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x552}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2224bfd4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0xe}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x841}, 0x20000040) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r6 = getpid() sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m2.606754434s ago: executing program 1 (id=595): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m2.46757344s ago: executing program 1 (id=596): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @msi={0x170b73a1, 0xdf52, 0x4, 0x9}}]}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 1m2.339748456s ago: executing program 1 (id=597): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000340)={{0xc, 0x6, 0x9, 0xa, 'syz1\x00', 0x5}, 0x0, [0x7f, 0x412, 0x9684, 0x7, 0x5, 0xfffffffe, 0x3, 0x40, 0x7444, 0x0, 0x4, 0xe, 0x3, 0x0, 0xe, 0x2, 0xfffffffa, 0x5, 0x4, 0x405, 0x81, 0x1007, 0x80000000, 0x400, 0x2, 0x8, 0x8, 0x60, 0xffffffff, 0x8ac, 0x7, 0xbee, 0x4, 0x5b9, 0xd3ab, 0x3, 0x6000000, 0x65000000, 0x1975b0f2, 0x5, 0x54, 0x5, 0x8, 0x2, 0xd, 0x0, 0x780, 0x5, 0x81d9, 0x7, 0x10000, 0x1527, 0x8, 0x4, 0xfffffff9, 0x101, 0x9, 0x4, 0x83, 0xb, 0x3, 0x40, 0x403, 0x2, 0x6, 0x9, 0x3, 0x9, 0x9, 0x8, 0x0, 0xc, 0xe, 0x71b, 0x2, 0x800, 0x4, 0x6, 0x401, 0x401, 0xc, 0x4, 0x3, 0x9c8, 0x5, 0x100004, 0x3ff, 0x3ee0, 0xffb, 0x4000, 0x0, 0x0, 0xf46, 0x1, 0x3, 0x7ff, 0x0, 0xb, 0x0, 0x7519, 0x3, 0x8, 0x7ffe, 0x200010, 0x8, 0x9, 0x3, 0xd, 0x10004, 0x9, 0x54, 0x1, 0x2, 0x9777, 0x4, 0xffffffff, 0xf, 0x8, 0x7f, 0x10011, 0x1, 0xffffa421, 0x1, 0x4, 0xc, 0x4a, 0xfffffff9, 0x5]}) 1m1.78616937s ago: executing program 1 (id=598): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000d40)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000d40)={0x80000000, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='iocharset', 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, r8, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendto$inet6(r2, &(0x7f0000000880)="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", 0xff8, 0x4040081, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x7c, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4400}, 0x4000000) pwrite64(r0, &(0x7f0000000480)="d749768c56d2", 0x6, 0x1000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) 1m0.613300223s ago: executing program 1 (id=599): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESDEC, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1000, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m0.269262147s ago: executing program 1 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp', 0x1d) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000200000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x11}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 45.216141685s ago: executing program 33 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp', 0x1d) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000200000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x11}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 12.173560251s ago: executing program 4 (id=721): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, 0x0, 0x4cbe8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 11.808741237s ago: executing program 0 (id=722): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x8d, 0xc8, 0x31, 0x40, 0x830, 0x60, 0x132b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xde, 0x7b}}]}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x589001, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 9.267764229s ago: executing program 4 (id=727): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESDEC, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1000, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 7.514841327s ago: executing program 5 (id=731): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open$dir(0x0, 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 7.254639119s ago: executing program 0 (id=732): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40000007fff}]}, 0x30}}, 0x20000000) 7.010145259s ago: executing program 4 (id=733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000701000000000000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r4}, 0x38) 6.330730959s ago: executing program 5 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 6.197085655s ago: executing program 0 (id=735): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 6.027947993s ago: executing program 5 (id=736): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpriority(0x1, 0x0) 5.822076342s ago: executing program 5 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r5, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 4.246778082s ago: executing program 2 (id=740): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 4.245152212s ago: executing program 5 (id=741): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESDEC, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1000, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.224861617s ago: executing program 2 (id=742): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open$dir(0x0, 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 3.178355399s ago: executing program 5 (id=743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x8d, 0xc8, 0x31, 0x40, 0x830, 0x60, 0x132b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xde, 0x7b}}]}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x589001, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@empty, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.913836091s ago: executing program 0 (id=744): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x30, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40000007fff}]}, 0x30}}, 0x20000000) 2.523133959s ago: executing program 0 (id=745): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ptrace(0x10, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x1, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.922773535s ago: executing program 2 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 1.874470007s ago: executing program 4 (id=747): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) 1.849584088s ago: executing program 2 (id=748): syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0012000000000000000079759717"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000400)='bfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000890200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 341.110365ms ago: executing program 0 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r5, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 331.111715ms ago: executing program 4 (id=750): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpriority(0x1, 0x0) 182.807742ms ago: executing program 2 (id=751): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 182.369872ms ago: executing program 4 (id=752): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 0s ago: executing program 2 (id=753): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESDEC, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) unshare(0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1000, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 58.584955][ T5752] cgroup: Unknown subsys name 'net' [ 58.713848][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.017360][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.304367][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.328666][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.349608][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.357831][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.359683][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.365364][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.374884][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.379785][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.393987][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.396006][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.401418][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.409362][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.417012][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.423088][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.429903][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.436901][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.445101][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.457738][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.464978][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.474617][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.482173][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.489575][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.509667][ T5770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.523420][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.898265][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 62.971973][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 63.050079][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 63.114273][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 63.133782][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.141806][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.149531][ T5762] bridge_slave_0: entered allmulticast mode [ 63.156654][ T5762] bridge_slave_0: entered promiscuous mode [ 63.189578][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.196773][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.204258][ T5762] bridge_slave_1: entered allmulticast mode [ 63.211034][ T5762] bridge_slave_1: entered promiscuous mode [ 63.251715][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.260971][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.269266][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.276423][ T5765] bridge_slave_0: entered allmulticast mode [ 63.283585][ T5765] bridge_slave_0: entered promiscuous mode [ 63.303208][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.322789][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.330629][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.338203][ T5765] bridge_slave_1: entered allmulticast mode [ 63.344854][ T5765] bridge_slave_1: entered promiscuous mode [ 63.412207][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.419957][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.428197][ T5763] bridge_slave_0: entered allmulticast mode [ 63.434878][ T5763] bridge_slave_0: entered promiscuous mode [ 63.444258][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.456318][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.476580][ T5762] team0: Port device team_slave_0 added [ 63.485948][ T5762] team0: Port device team_slave_1 added [ 63.492044][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.500386][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.507576][ T5763] bridge_slave_1: entered allmulticast mode [ 63.514215][ T5763] bridge_slave_1: entered promiscuous mode [ 63.590840][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.598169][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.605316][ T5767] bridge_slave_0: entered allmulticast mode [ 63.612411][ T5767] bridge_slave_0: entered promiscuous mode [ 63.620268][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.627440][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.654163][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.668616][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.680438][ T5765] team0: Port device team_slave_0 added [ 63.686639][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.694167][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.701429][ T5767] bridge_slave_1: entered allmulticast mode [ 63.708346][ T5767] bridge_slave_1: entered promiscuous mode [ 63.715265][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.722472][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.748903][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.761850][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.781162][ T5765] team0: Port device team_slave_1 added [ 63.833847][ T5763] team0: Port device team_slave_0 added [ 63.844201][ T5763] team0: Port device team_slave_1 added [ 63.850712][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.857801][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.884173][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.929866][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.936851][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.962944][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.976693][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.003661][ T5762] hsr_slave_0: entered promiscuous mode [ 64.010280][ T5762] hsr_slave_1: entered promiscuous mode [ 64.033677][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.070247][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.077308][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.103303][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.115327][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.122400][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.148682][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.189057][ T5767] team0: Port device team_slave_0 added [ 64.197424][ T5767] team0: Port device team_slave_1 added [ 64.264236][ T5765] hsr_slave_0: entered promiscuous mode [ 64.270945][ T5765] hsr_slave_1: entered promiscuous mode [ 64.277779][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.285583][ T5765] Cannot create hsr debugfs directory [ 64.306395][ T5763] hsr_slave_0: entered promiscuous mode [ 64.312716][ T5763] hsr_slave_1: entered promiscuous mode [ 64.319250][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.326837][ T5763] Cannot create hsr debugfs directory [ 64.333077][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.340311][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.366355][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.379125][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.386090][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.412106][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.457696][ T5085] Bluetooth: hci1: command tx timeout [ 64.537707][ T5085] Bluetooth: hci0: command tx timeout [ 64.557617][ T5085] Bluetooth: hci2: command tx timeout [ 64.593536][ T5767] hsr_slave_0: entered promiscuous mode [ 64.603462][ T5767] hsr_slave_1: entered promiscuous mode [ 64.609693][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.617954][ T5767] Cannot create hsr debugfs directory [ 64.627124][ T5085] Bluetooth: hci3: command tx timeout [ 64.793074][ T5762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.815354][ T5762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.841206][ T5762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.851640][ T5762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.934525][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.958605][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.980362][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.990815][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.045248][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.056071][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.066664][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.079472][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.191844][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.202480][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.214964][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.224691][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.314760][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.335633][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.361781][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.386276][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.408859][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.416160][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.431125][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.438310][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.453574][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.476703][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.502510][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.509652][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.523025][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.530280][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.569227][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.576339][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.607938][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.616817][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.623981][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.713517][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.752508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.759674][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.781877][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.809323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.816406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.068619][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.166049][ T5763] veth0_vlan: entered promiscuous mode [ 66.205284][ T5763] veth1_vlan: entered promiscuous mode [ 66.284549][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.293414][ T5763] veth0_macvtap: entered promiscuous mode [ 66.312171][ T5763] veth1_macvtap: entered promiscuous mode [ 66.342215][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.365338][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.394525][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.413623][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.449601][ T5762] veth0_vlan: entered promiscuous mode [ 66.466554][ T5763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.475998][ T5763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.484988][ T5763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.494038][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.515936][ T5762] veth1_vlan: entered promiscuous mode [ 66.540333][ T5085] Bluetooth: hci1: command tx timeout [ 66.565415][ T5765] veth0_vlan: entered promiscuous mode [ 66.590021][ T5765] veth1_vlan: entered promiscuous mode [ 66.617507][ T5776] Bluetooth: hci0: command tx timeout [ 66.623042][ T5085] Bluetooth: hci2: command tx timeout [ 66.623937][ T5767] veth0_vlan: entered promiscuous mode [ 66.654360][ T5762] veth0_macvtap: entered promiscuous mode [ 66.687555][ T5767] veth1_vlan: entered promiscuous mode [ 66.694675][ T5762] veth1_macvtap: entered promiscuous mode [ 66.700784][ T5085] Bluetooth: hci3: command tx timeout [ 66.730389][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.743086][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.793838][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.796154][ T5765] veth0_macvtap: entered promiscuous mode [ 66.807729][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.830333][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.842260][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.859477][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.880021][ T5765] veth1_macvtap: entered promiscuous mode [ 66.904997][ T5767] veth0_macvtap: entered promiscuous mode [ 66.912845][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.925520][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.937652][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.960263][ T5762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.974028][ T5762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.993234][ T5762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.003249][ T5762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.030006][ T5767] veth1_macvtap: entered promiscuous mode [ 67.045291][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.055933][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.071238][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.082030][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.094559][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.125623][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.136442][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.146799][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.158073][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.170283][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.186599][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.198461][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.209684][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.220613][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.230574][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.242286][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.253863][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.266731][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275912][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.286380][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.296422][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.321682][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.332307][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.342910][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.353840][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.363790][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.374336][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.386221][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.414763][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423915][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.433006][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.442076][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.470690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.482874][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.560591][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.572440][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.624450][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.636100][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.680924][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.708505][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.735185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.778567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.838693][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.000682][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.008655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.385645][ T5856] block nbd0: server does not support multiple connections per device. [ 68.397481][ T5856] block nbd0: shutting down sockets [ 68.624241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.835660][ T5776] Bluetooth: hci2: command tx timeout [ 68.841280][ T5770] Bluetooth: hci0: command tx timeout [ 68.846707][ T5770] Bluetooth: hci3: command tx timeout [ 68.852802][ T5085] Bluetooth: hci1: command tx timeout [ 68.961413][ T5862] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.027338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.036299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 69.045030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.178480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.187357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 69.197396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.206004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.214686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.952118][ T5864] ubi31: attaching mtd0 [ 69.958399][ T5864] ubi31: scanning is finished [ 69.963096][ T5864] ubi31: empty MTD device detected [ 69.995019][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.020899][ T5864] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 70.028593][ T5864] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 70.035894][ T5864] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 70.043006][ T5864] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 70.050494][ T5864] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 70.058145][ T5864] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 70.066231][ T5864] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 899569609 [ 70.076220][ T5864] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 70.098172][ T5876] ubi31: background thread "ubi_bgt31d" started, PID 5876 [ 70.137170][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 70.241820][ T5878] Bluetooth: MGMT ver 1.22 [ 70.543470][ T5085] block nbd0: Receive control failed (result -1) [ 70.839694][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 70.877076][ T5085] Bluetooth: hci0: command tx timeout [ 70.937348][ T5085] Bluetooth: hci1: command tx timeout [ 70.942849][ T5085] Bluetooth: hci3: command tx timeout [ 70.948324][ T5085] Bluetooth: hci2: command tx timeout [ 71.271880][ T5902] syz.0.11[5902]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.664253][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.670928][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.673319][ T5911] process 'syz.1.12' launched './file2' with NULL argv: empty string added [ 72.512623][ T5926] 9pnet_virtio: no channels available for device syz [ 74.202313][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 74.300632][ T5770] block nbd1: Receive control failed (result -1) [ 74.359441][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.118160][ T5962] ubi: mtd0 is already attached to ubi31 [ 75.124851][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 75.536031][ T5979] netlink: 7 bytes leftover after parsing attributes in process `syz.2.24'. [ 75.611478][ T5979] netlink: 7 bytes leftover after parsing attributes in process `syz.2.24'. [ 75.977308][ T5771] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.058152][ T5770] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 76.068613][ T5770] Bluetooth: hci3: Injecting HCI hardware error event [ 76.076567][ T5085] Bluetooth: hci3: hardware error 0x00 [ 76.187057][ T5771] usb 4-1: Using ep0 maxpacket: 8 [ 76.221785][ T5771] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.273763][ T5771] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.307040][ T5771] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.330186][ T5771] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.357022][ T5771] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.376388][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.635835][ T5771] usb 4-1: GET_CAPABILITIES returned 0 [ 76.649506][ T5771] usbtmc 4-1:16.0: can't read capabilities [ 76.859849][ T5977] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 77.199770][ T5831] usb 4-1: USB disconnect, device number 2 [ 77.950556][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 78.047400][ T5770] block nbd2: Receive control failed (result -1) [ 78.137523][ T5085] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 81.513675][ T5915] Set syz1 is full, maxelem 65536 reached [ 81.899860][ T9] cfg80211: failed to load regulatory.db [ 82.117307][ T6027] ubi: mtd0 is already attached to ubi31 [ 82.157251][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 83.338371][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 83.476015][ T6048] syzkaller1: entered promiscuous mode [ 83.482842][ T6048] syzkaller1: entered allmulticast mode [ 83.647464][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.694707][ T6056] program syz.0.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.740900][ T6052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.47'. [ 83.859071][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.869292][ T5831] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.906122][ T5831] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.908857][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 83.908882][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 83.908900][ T5831] usb 4-1: Product: syz [ 83.908913][ T5831] usb 4-1: Manufacturer: syz [ 83.908924][ T5831] usb 4-1: SerialNumber: syz [ 84.139128][ T5831] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.170448][ T5831] usb 4-1: USB disconnect, device number 3 [ 84.226002][ T5831] usblp0: removed [ 85.010960][ T6081] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 85.697144][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 85.965189][ T6093] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 86.531489][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.954237][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.157767][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 87.189130][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.214451][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.247413][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.307204][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.322652][ T6103] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 87.343663][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.356911][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.709931][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 87.995226][ T9] usbtmc 1-1:16.0: can't read capabilities [ 88.296301][ T9] usb 1-1: USB disconnect, device number 2 [ 88.814279][ T6132] mmap: syz.0.72 (6132) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.962917][ T6157] tipc: Can't bind to reserved service type 0 [ 92.496163][ T6169] team_slave_0: entered promiscuous mode [ 92.502188][ T6169] team_slave_1: entered promiscuous mode [ 92.538221][ T6169] netlink: 'syz.2.82': attribute type 10 has an invalid length. [ 92.560940][ T6169] team_slave_0: left promiscuous mode [ 92.588463][ T6169] team_slave_1: left promiscuous mode [ 93.628955][ T6173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.706546][ T6169] team0 (unregistering): Port device team_slave_0 removed [ 93.747931][ T6169] team0 (unregistering): Port device team_slave_1 removed [ 94.000020][ T6183] ======================================================= [ 94.000020][ T6183] WARNING: The mand mount option has been deprecated and [ 94.000020][ T6183] and is ignored by this kernel. Remove the mand [ 94.000020][ T6183] option from the mount to silence this warning. [ 94.000020][ T6183] ======================================================= [ 94.049998][ T6184] overlayfs: overlapping lowerdir path [ 97.023179][ T6197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 97.030001][ T6197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.043394][ T6197] vhci_hcd vhci_hcd.0: Device attached [ 97.239086][ T6198] vhci_hcd: connection closed [ 97.749835][ T2978] vhci_hcd: stop threads [ 97.774699][ T2978] vhci_hcd: release socket [ 97.780671][ T2978] vhci_hcd: disconnect device [ 97.809709][ T5950] vhci_hcd: vhci_device speed not set [ 99.077138][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.178757][ T5085] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 99.187347][ T5085] Bluetooth: hci0: Injecting HCI hardware error event [ 99.195193][ T5085] Bluetooth: hci0: hardware error 0x00 [ 99.277813][ T789] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 99.296302][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.314997][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.349704][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.369961][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.379839][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.406734][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.423460][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.450500][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.475758][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.497479][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.527225][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.547648][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.565880][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.582236][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.609755][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.627100][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.636363][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.662351][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.677767][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.695679][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.722247][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.744227][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.766201][ T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.805589][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.850109][ T789] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 99.866295][ T789] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 99.878336][ T789] usb 4-1: Product: syz [ 99.882808][ T789] usb 4-1: Manufacturer: syz [ 99.890025][ T789] usb 4-1: SerialNumber: syz [ 99.918284][ T789] usb 4-1: config 0 descriptor?? [ 99.947247][ T789] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.247241][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 100.256148][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 100.270228][ T789] usb 4-1: USB disconnect, device number 4 [ 100.296017][ T789] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 100.908656][ T6242] Zero length message leads to an empty skb [ 101.257202][ T5085] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 102.449374][ T6260] binder: 6259:6260 unknown command 1074553619 [ 102.496329][ T6260] binder: 6259:6260 ioctl c0306201 200000004a40 returned -22 [ 102.688480][ T6268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.695560][ T6270] hub 8-0:1.0: USB hub found [ 105.191612][ T6270] hub 8-0:1.0: 1 port detected [ 105.458911][ T6278] C: renamed from team_slave_0 (while UP) [ 105.552965][ T6278] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 105.611422][ T6278] netlink: 128 bytes leftover after parsing attributes in process `syz.1.117'. [ 105.642784][ T6278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 105.713022][ T6281] netlink: 'syz.3.118': attribute type 13 has an invalid length. [ 107.270502][ T6286] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢' [ 107.567189][ T6297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 107.573755][ T6297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.581927][ T6297] vhci_hcd vhci_hcd.0: Device attached [ 108.184065][ T9] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 108.708147][ T6298] vhci_hcd: connection reset by peer [ 109.031738][ T2955] vhci_hcd: stop threads [ 109.036012][ T2955] vhci_hcd: release socket [ 109.047617][ T2955] vhci_hcd: disconnect device [ 109.237133][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.430972][ T8] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 110.313367][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.332701][ T8] usb 2-1: Product: syz [ 110.336882][ T8] usb 2-1: Manufacturer: syz [ 110.341804][ T8] usb 2-1: SerialNumber: syz [ 110.403816][ T8] usb 2-1: config 0 descriptor?? [ 110.509682][ T8] usb-storage 2-1:0.0: USB Mass Storage device detected [ 110.633151][ T8] usb 2-1: USB disconnect, device number 2 [ 110.843015][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.853264][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.861192][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.878014][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.886108][ T5770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.893648][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.227835][ T6325] netlink: 332 bytes leftover after parsing attributes in process `syz.1.131'. [ 111.509161][ T6329] binder: 6328:6329 ioctl 50009401 200000001700 returned -22 [ 111.521931][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 112.593268][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.605669][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.658363][ T6322] bridge_slave_0: entered allmulticast mode [ 112.667987][ T6322] bridge_slave_0: entered promiscuous mode [ 112.680643][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.688072][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.698106][ T6322] bridge_slave_1: entered allmulticast mode [ 112.753366][ T6322] bridge_slave_1: entered promiscuous mode [ 112.858896][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.891177][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.938011][ T5085] Bluetooth: hci3: command tx timeout [ 112.986760][ T6322] team0: Port device team_slave_0 added [ 112.991059][ T6322] team0: Port device team_slave_1 added [ 113.031238][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.031266][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.031278][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.039566][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.039581][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.039601][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.090459][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.102733][ T6353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 113.140677][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.264938][ T6322] hsr_slave_0: entered promiscuous mode [ 113.289589][ T6322] hsr_slave_1: entered promiscuous mode [ 113.306508][ T6322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.322506][ T6322] Cannot create hsr debugfs directory [ 113.352417][ T6358] bridge_slave_0: left allmulticast mode [ 113.359879][ T6358] bridge_slave_0: left promiscuous mode [ 113.376140][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.417200][ T9] vhci_hcd: vhci_device speed not set [ 113.551527][ T6358] bridge_slave_1: left allmulticast mode [ 113.602411][ T6358] bridge_slave_1: left promiscuous mode [ 113.641902][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.769107][ T6358] bond0: (slave bond_slave_0): Releasing backup interface [ 113.972440][ T6358] bond0: (slave bond_slave_1): Releasing backup interface [ 114.360999][ T6358] team0: Port device C removed [ 114.375231][ T6358] team0: Port device team_slave_1 removed [ 114.387333][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.395271][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.411182][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.430215][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.970821][ T6373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.017300][ T5085] Bluetooth: hci3: command tx timeout [ 115.206172][ T6322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.332345][ T6322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.470301][ T6322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.628511][ T6322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.992841][ T6388] sched: RT throttling activated [ 117.098385][ T5085] Bluetooth: hci3: command tx timeout [ 117.261283][ T6322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.320678][ T6322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.356333][ T6322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.013976][ T6322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.829040][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 119.190286][ T5085] Bluetooth: hci3: command tx timeout [ 119.829215][ T6421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.902982][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.910693][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.285107][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.319274][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.625455][ T6415] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.634852][ T6415] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.644407][ T6415] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.653557][ T6415] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.743666][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.800641][ T6322] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.820562][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.827682][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.850829][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.858033][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.380138][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.951593][ T6322] veth0_vlan: entered promiscuous mode [ 121.964881][ T6322] veth1_vlan: entered promiscuous mode [ 122.070984][ T6322] veth0_macvtap: entered promiscuous mode [ 122.104723][ T6322] veth1_macvtap: entered promiscuous mode [ 122.123589][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.158490][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.251006][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.888183][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.997849][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.048897][ T6450] lo speed is unknown, defaulting to 1000 [ 123.055131][ T6450] lo speed is unknown, defaulting to 1000 [ 123.068733][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.105410][ T5831] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5831 comm: kworker/0:6) [ 123.118120][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.148159][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.158802][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.169991][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.179425][ T6450] lo speed is unknown, defaulting to 1000 [ 123.194522][ T6450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.211677][ T6322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.230735][ T6322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.251477][ T6322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.252441][ T6450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.292378][ T6322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.440234][ T6450] lo speed is unknown, defaulting to 1000 [ 123.514527][ T6450] lo speed is unknown, defaulting to 1000 [ 123.541454][ T6450] lo speed is unknown, defaulting to 1000 [ 123.590589][ T6450] lo speed is unknown, defaulting to 1000 [ 123.612216][ T6450] lo speed is unknown, defaulting to 1000 [ 123.629217][ T6454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.637697][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.667976][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.720076][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.728981][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.923131][ T1114] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.952696][ T6461] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 124.215016][ T6465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.343453][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 125.056408][ T6480] syzkaller1: entered promiscuous mode [ 125.096187][ T6480] syzkaller1: entered allmulticast mode [ 125.977413][ T5770] Bluetooth: hci4: command 0x1003 tx timeout [ 127.037982][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.032656][ T6504] batadv_slave_0: entered promiscuous mode [ 129.538199][ T6521] nbd3: detected capacity change from 0 to 8589934655 [ 129.662086][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.730389][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.977116][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 130.236432][ T5085] block nbd3: Receive control failed (result -104) [ 132.031836][ T6539] syzkaller0: entered promiscuous mode [ 132.081474][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 132.100067][ T6539] syzkaller0: entered allmulticast mode [ 132.109698][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 132.161193][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.174346][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.231536][ T9] usb 2-1: Product:   [ 132.267083][ T9] usb 2-1: Manufacturer: †[ 132.271751][ T9] usb 2-1: SerialNumber: syz [ 132.770234][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 132.803086][ T9] usb 2-1: USB disconnect, device number 3 [ 132.819646][ T9] usblp0: removed [ 132.825024][ T6548] 9pnet_virtio: no channels available for device syz [ 132.873741][ T6546] 9pnet_virtio: no channels available for device syz [ 132.880224][ T6551] sctp: [Deprecated]: syz.1.200 (pid 6551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.880224][ T6551] Use struct sctp_sack_info instead [ 133.057233][ T6553] warning: `syz.2.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.102133][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.374632][ T6564] NILFS (nbd0): device size too small [ 133.623854][ T6568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.671129][ T6585] netlink: 'syz.1.205': attribute type 16 has an invalid length. [ 134.705871][ T6585] netlink: 'syz.1.205': attribute type 17 has an invalid length. [ 135.005534][ T6585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.715420][ T1128] Bluetooth: hci4: Frame reassembly failed (-84) [ 137.745271][ T6600] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 137.755585][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.795718][ T6610] netlink: 284 bytes leftover after parsing attributes in process `syz.2.210'. [ 139.832925][ T5770] Bluetooth: hci4: command 0x1003 tx timeout [ 139.843189][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 140.077199][ T6652] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 140.105204][ T6655] capability: warning: `syz.0.220' uses 32-bit capabilities (legacy support in use) [ 141.934773][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.995163][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.257343][ T6666] netlink: 'syz.2.217': attribute type 16 has an invalid length. [ 142.265209][ T6666] netlink: 'syz.2.217': attribute type 17 has an invalid length. [ 142.485002][ T6666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.722053][ T6682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.223'. [ 142.830681][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.838164][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.118954][ T6687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.127265][ T6687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.155148][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 143.233141][ T6687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.259994][ T6687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.276799][ T6687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.300697][ T6687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.329249][ T6687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.351886][ T6687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.406114][ T6693] 9pnet_virtio: no channels available for device syz [ 143.408746][ T6687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.177127][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.337172][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.346700][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.346715][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.486082][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 145.567182][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 145.588598][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.614810][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.681028][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.730982][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.770450][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.816484][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.860619][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.337866][ T6707] [U]  [ 147.497879][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.503935][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.510901][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.927074][ T5771] usb 2-1: USB disconnect, device number 4 [ 149.577469][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.583647][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.589831][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.164963][ T6748] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 151.171534][ T6748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.215706][ T6748] vhci_hcd vhci_hcd.0: Device attached [ 151.477225][ T5771] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 151.819565][ T6749] vhci_hcd: connection reset by peer [ 151.851444][ T2973] vhci_hcd: stop threads [ 151.855746][ T2973] vhci_hcd: release socket [ 151.861808][ T2973] vhci_hcd: disconnect device [ 151.870364][ T6754] syz.1.247 (6754) used greatest stack depth: 17960 bytes left [ 152.574818][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 154.740383][ T6782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.957707][ T5771] vhci_hcd: vhci_device speed not set [ 157.058099][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.153710][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.414993][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.424933][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.435522][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.445150][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.456298][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.463770][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.517464][ T6768] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.526379][ T6768] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.535887][ T6768] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.544898][ T6768] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.651898][ T6801] lo speed is unknown, defaulting to 1000 [ 157.995486][ T6801] chnl_net:caif_netlink_parms(): no params data found [ 159.497165][ T5085] Bluetooth: hci4: command tx timeout [ 159.866740][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.892524][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.922040][ T6801] bridge_slave_0: entered allmulticast mode [ 159.978700][ T55] block nbd3: Possible stuck request ffff888021b80000: control (read@0,4096B). Runtime 30 seconds [ 160.007826][ T6801] bridge_slave_0: entered promiscuous mode [ 160.042471][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.074121][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.107219][ T6801] bridge_slave_1: entered allmulticast mode [ 160.137908][ T6801] bridge_slave_1: entered promiscuous mode [ 160.252029][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.266455][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.405930][ T6801] team0: Port device team_slave_0 added [ 160.419631][ T6801] team0: Port device team_slave_1 added [ 160.552790][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.593963][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.628376][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.680437][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.707110][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.759654][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.530185][ T6801] hsr_slave_0: entered promiscuous mode [ 161.562458][ T6801] hsr_slave_1: entered promiscuous mode [ 161.580706][ T5085] Bluetooth: hci4: command tx timeout [ 161.602245][ T6801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.613947][ T6801] Cannot create hsr debugfs directory [ 162.118993][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 163.688289][ T5085] Bluetooth: hci4: command tx timeout [ 165.676120][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.738356][ T5085] Bluetooth: hci4: command tx timeout [ 166.642946][ T6848] batadv_slave_0: left promiscuous mode [ 166.938132][ T6848] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.948197][ T6848] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.960038][ T6848] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.969000][ T6848] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.030559][ T789] lo speed is unknown, defaulting to 1000 [ 167.183715][ T6801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.210042][ T6801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.342871][ T6801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.392947][ T6801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.580881][ T6893] ubi: mtd0 is already attached to ubi31 [ 167.612239][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 168.620716][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.695654][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.736845][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.744048][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.789478][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.796677][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.090654][ T6911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.986078][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.069623][ T6923] nbd4: detected capacity change from 0 to 8589934655 [ 170.579230][ T5770] block nbd4: Receive control failed (result -104) [ 170.669702][ T6801] veth0_vlan: entered promiscuous mode [ 170.739803][ T6801] veth1_vlan: entered promiscuous mode [ 170.878361][ T6801] veth0_macvtap: entered promiscuous mode [ 171.037888][ T6801] veth1_macvtap: entered promiscuous mode [ 171.110232][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.141287][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.157981][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.179507][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.211609][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.222480][ T6945] ubi: mtd0 is already attached to ubi31 [ 171.270689][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 171.360650][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.010208][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.035533][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.048173][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.076276][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.120152][ T6801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.153366][ T6801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.163194][ T6801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.187279][ T6801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.254676][ T6954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.356480][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.380897][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.428912][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.436764][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.303846][ T6970] syzkaller0: entered promiscuous mode [ 173.338572][ T6970] syzkaller0: entered allmulticast mode [ 173.785027][ T6986] vlan0: entered promiscuous mode [ 173.807318][ T6986] vlan0: entered allmulticast mode [ 173.820106][ T789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.821204][ T6986] hsr_slave_1: entered allmulticast mode [ 173.909730][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 174.040534][ T789] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.058659][ T789] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.095266][ T789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.110317][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 174.128194][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 174.150511][ T789] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.164503][ T789] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.174813][ T789] usb 5-1: Product: syz [ 174.182831][ T789] usb 5-1: Manufacturer: syz [ 174.201182][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 174.206675][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 174.229301][ T789] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 174.245416][ T789] cdc_wdm 5-1:1.0: Unknown control protocol [ 174.521033][ T6991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.171767][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 177.014687][ T7016] [U]  [ 177.021132][ T8] usb 5-1: USB disconnect, device number 2 [ 177.703282][ T7037] 9pnet_virtio: no channels available for device syz [ 178.196312][ T7039] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 178.855035][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.333'. [ 178.909874][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.332'. [ 182.439957][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.343'. [ 183.299731][ T7083] [U]  [ 183.662891][ T7099] macvtap1: entered promiscuous mode [ 183.677860][ T7099] macvtap1: entered allmulticast mode [ 183.683296][ T7099] veth1_vlan: entered allmulticast mode [ 183.743046][ T7104] ksmbd: Unknown IPC event: 10, ignore. [ 183.757290][ T5950] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.792094][ T7104] syzkaller0: entered promiscuous mode [ 183.798225][ T7104] syzkaller0: entered allmulticast mode [ 183.826881][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 183.950650][ T5950] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 183.966592][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.984945][ T5950] usb 5-1: Product: syz [ 183.991877][ T5950] usb 5-1: Manufacturer: syz [ 183.996610][ T5950] usb 5-1: SerialNumber: syz [ 184.010920][ T7112] bridge_slave_0: default FDB implementation only supports local addresses [ 184.328153][ T5950] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 184.363794][ T5950] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 184.446174][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'. [ 184.525561][ T5950] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 184.562707][ T5950] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 185.250443][ T7117] [U]  [ 185.772563][ T5771] usb 5-1: USB disconnect, device number 3 [ 185.797382][ T5771] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 185.819098][ T7136] random: crng reseeded on system resumption [ 185.852005][ T5771] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 185.910819][ T5771] visor 5-1:1.0: device disconnected [ 185.933810][ T7131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.455300][ T7151] macvtap1: entered promiscuous mode [ 186.471812][ T7151] macvtap1: entered allmulticast mode [ 186.486328][ T7151] veth1_vlan: entered allmulticast mode [ 187.064845][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 187.496681][ T7179] comedi comedi0: Cannot bond this driver to itself! [ 187.953770][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.961508][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.798961][ T7187] [U]  [ 188.969013][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.016019][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.321946][ T7160] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.331315][ T7160] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.341396][ T7160] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.352142][ T7160] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.398059][ T7160] veth1_vlan: left allmulticast mode [ 189.403785][ T7160] macvtap1: left promiscuous mode [ 189.409717][ T7160] macvtap1: left allmulticast mode [ 189.434791][ T7174] macvtap1: entered promiscuous mode [ 189.441015][ T7174] macvtap1: entered allmulticast mode [ 189.446419][ T7174] veth1_vlan: entered allmulticast mode [ 189.541957][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 189.785693][ T7219] netlink: 4168 bytes leftover after parsing attributes in process `syz.4.372'. [ 189.796205][ T7218] 9pnet_virtio: no channels available for device syz [ 189.805778][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.070201][ T55] block nbd3: Possible stuck request ffff888021b80000: control (read@0,4096B). Runtime 60 seconds [ 190.300527][ T7225] nbd5: detected capacity change from 0 to 8589934655 [ 190.600359][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.656141][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.205756][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'. [ 191.584074][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 191.796225][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.882530][ T7245] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 191.936007][ T7242] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.993026][ T5770] block nbd5: Receive control failed (result -104) [ 192.022222][ T7245] Illegal XDP return value 4294967274 on prog (id 51) dev N/A, expect packet loss! [ 192.200769][ T7242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.304150][ T7248] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 192.953202][ T7258] lo speed is unknown, defaulting to 1000 [ 192.966360][ T7258] lo speed is unknown, defaulting to 1000 [ 192.976593][ T7258] lo speed is unknown, defaulting to 1000 [ 193.009741][ T7258] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.090486][ T7258] lo speed is unknown, defaulting to 1000 [ 193.121711][ T7258] lo speed is unknown, defaulting to 1000 [ 193.150257][ T7258] lo speed is unknown, defaulting to 1000 [ 193.248058][ T7258] lo speed is unknown, defaulting to 1000 [ 193.297987][ T7258] lo speed is unknown, defaulting to 1000 [ 193.320143][ T7258] lo speed is unknown, defaulting to 1000 [ 193.545070][ T7262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.811049][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 194.179052][ T27] audit: type=1326 audit(1765385640.123:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843558f749 code=0x7fc00000 [ 194.550169][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.665794][ T7275] [U]  [ 194.928585][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'. [ 195.782290][ T7286] [U]  [ 195.941184][ T7290] nbd6: detected capacity change from 0 to 8589934655 [ 196.462837][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 196.694669][ T7304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.908718][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.924856][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.428432][ T5770] block nbd6: Receive control failed (result -104) [ 197.604684][ T7314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.861440][ T7323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 197.882077][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.403'. [ 198.346999][ T7313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.359569][ T7313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.368437][ T7313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.375811][ T7313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.383606][ T7313] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.392609][ T7313] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.583887][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 198.657574][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 199.666996][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.865770][ T7351] [U]  [ 199.971598][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 200.139066][ T7362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.180111][ T7365] 9pnet_virtio: no channels available for device syz [ 200.327376][ T55] block nbd4: Possible stuck request ffff888021bc0000: control (read@0,4096B). Runtime 30 seconds [ 200.377279][ T5770] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.383439][ T5770] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.389595][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.657542][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 200.919218][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 202.117791][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.475388][ T5770] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.933858][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'. [ 204.088887][ T7429] siw: device registration error -23 [ 204.145641][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'. [ 204.183271][ T7432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.472104][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.451'. [ 204.537214][ T5770] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.750267][ T7198] libceph: connect (1)[c::]:6789 error -101 [ 204.758514][ T7198] libceph: mon0 (1)[c::]:6789 connect error [ 204.762226][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 204.774528][ T7426] ceph: No mds server is up or the cluster is laggy [ 205.156287][ T7461] siw: device registration error -23 [ 206.268493][ T7469] fuse: root generation should be zero [ 206.875353][ T7489] siw: device registration error -23 [ 207.082104][ T7493] overlayfs: failed to clone upperpath [ 207.571183][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 207.602071][ T7500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.648764][ T7501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.715573][ T7516] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 208.757302][ T5754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.947644][ T5754] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 208.975898][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.061525][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.150445][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.230797][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.247360][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.287065][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.303031][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.361462][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.421143][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.474647][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.536399][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.607019][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.647430][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.654999][ T7531] bond0: entered promiscuous mode [ 209.656338][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.671559][ T7531] bond_slave_0: entered promiscuous mode [ 209.681497][ T7531] bond_slave_1: entered promiscuous mode [ 209.767322][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.774992][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.799434][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.834054][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.870185][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.912422][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.937107][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.944976][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.958693][ T5754] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 209.973012][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.982837][ T5754] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.013892][ T5754] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.032981][ T5754] usb 5-1: Product: syz [ 210.039805][ T5754] usb 5-1: Manufacturer: syz [ 210.044441][ T5754] usb 5-1: SerialNumber: syz [ 210.057506][ T5754] usb 5-1: config 0 descriptor?? [ 210.066706][ T5754] yurex 5-1:0.0: Could not find endpoints [ 210.304342][ T7196] usb 5-1: USB disconnect, device number 4 [ 210.711250][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 210.744494][ T7548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.088750][ T7554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.309266][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 217.003691][ T7604] ksmbd: Unknown IPC event: 6, ignore. [ 218.353686][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 218.456154][ T7618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.488884][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 218.838319][ T5139] udevd[5139]: worker [6014] /devices/virtual/block/nbd3 is taking a long time [ 219.193313][ T7616] [U]  [ 219.349285][ T7627] 9pnet_virtio: no channels available for device syz [ 219.378413][ T7629] siw: device registration error -23 [ 219.757823][ T7640] overlayfs: failed to clone upperpath [ 220.007252][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 220.137565][ T6492] block nbd3: Possible stuck request ffff888021b80000: control (read@0,4096B). Runtime 90 seconds [ 220.206397][ T8] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 220.216004][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.224513][ T8] usb 3-1: Product: syz [ 220.229185][ T8] usb 3-1: Manufacturer: syz [ 220.233963][ T8] usb 3-1: SerialNumber: syz [ 220.923502][ T8] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 220.942618][ T8] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 220.953567][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 220.962851][ T6492] block nbd5: Possible stuck request ffff888021c28000: control (read@0,1024B). Runtime 30 seconds [ 220.973745][ T6492] block nbd5: Possible stuck request ffff888021c28200: control (read@1024,1024B). Runtime 30 seconds [ 220.985161][ T6492] block nbd5: Possible stuck request ffff888021c28400: control (read@2048,1024B). Runtime 30 seconds [ 220.996608][ T6492] block nbd5: Possible stuck request ffff888021c28600: control (read@3072,1024B). Runtime 30 seconds [ 221.010590][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 221.246374][ T7198] usb 3-1: USB disconnect, device number 2 [ 221.264472][ T7198] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 221.307773][ T7198] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 221.325802][ T7198] visor 3-1:1.0: device disconnected [ 221.827967][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 222.290933][ T7660] [U]  [ 222.474881][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 223.306062][ T7677] ALSA: mixer_oss: invalid OSS volume '' [ 224.209258][ T7677] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 224.215820][ T7677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.461597][ T7677] vhci_hcd vhci_hcd.0: Device attached [ 224.512427][ T7669] bond0: left promiscuous mode [ 224.525506][ T7669] bond_slave_0: left promiscuous mode [ 224.563195][ T7669] bond_slave_1: left promiscuous mode [ 224.682392][ T7680] vhci_hcd: connection closed [ 224.684496][ T1114] vhci_hcd: stop threads [ 224.693723][ T1114] vhci_hcd: release socket [ 224.698470][ T1114] vhci_hcd: disconnect device [ 224.747081][ T7202] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 224.754643][ T7202] usb 41-1: enqueue for inactive port 0 [ 224.877380][ T7202] vhci_hcd: vhci_device speed not set [ 225.015711][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.056018][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.561634][ T7669] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.577209][ T7669] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.586195][ T7669] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.595601][ T7669] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.741421][ T7689] nbd7: detected capacity change from 0 to 8589934655 [ 225.754663][ T7669] veth1_vlan: left allmulticast mode [ 225.760582][ T7669] macvtap1: left promiscuous mode [ 225.765718][ T7669] macvtap1: left allmulticast mode [ 226.076404][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 226.351595][ T5770] block nbd7: Receive control failed (result -104) [ 227.606675][ T97] block nbd6: Possible stuck request ffff888021c68000: control (read@0,1024B). Runtime 30 seconds [ 227.617860][ T97] block nbd6: Possible stuck request ffff888021c68200: control (read@1024,1024B). Runtime 30 seconds [ 227.636128][ T97] block nbd6: Possible stuck request ffff888021c68400: control (read@2048,1024B). Runtime 30 seconds [ 227.667290][ T97] block nbd6: Possible stuck request ffff888021c68600: control (read@3072,1024B). Runtime 30 seconds [ 228.087911][ T7726] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 228.094459][ T7726] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.192911][ T7730] siw: device registration error -23 [ 228.267083][ T7726] vhci_hcd vhci_hcd.0: Device attached [ 230.982814][ T5139] udevd[5139]: worker [6549] /devices/virtual/block/nbd4 is taking a long time [ 231.647101][ T8] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 231.697492][ T6492] block nbd4: Possible stuck request ffff888021bc0000: control (read@0,4096B). Runtime 60 seconds [ 231.719779][ T7727] vhci_hcd: connection reset by peer [ 231.798944][ T1128] vhci_hcd: stop threads [ 231.843682][ T1128] vhci_hcd: release socket [ 231.848446][ T1128] vhci_hcd: disconnect device [ 231.873483][ T7737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.935570][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.954086][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.425991][ T7758] nbd8: detected capacity change from 0 to 8589934655 [ 232.541199][ T7762] siw: device registration error -23 [ 232.954521][ T5770] block nbd8: Receive control failed (result -104) [ 232.981730][ T7772] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 233.200522][ T27] audit: type=1800 audit(1765385679.163:3): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.550" name="bus" dev="ramfs" ino=16636 res=0 errno=0 [ 233.496152][ T7781] o2cb: This node has not been configured. [ 233.514208][ T7781] o2cb: Cluster check failed. Fix errors before retrying. [ 233.515824][ T5770] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 233.531281][ T7781] (syz.4.555,7781,1):user_dlm_register:674 ERROR: status = -22 [ 233.540436][ T7781] (syz.4.555,7781,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 233.753909][ T7786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.203153][ T7799] 9pnet_virtio: no channels available for device syz [ 234.277108][ T7198] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.513379][ T7198] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 234.523102][ T7198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.547084][ T7198] usb 1-1: Product: syz [ 234.551289][ T7198] usb 1-1: Manufacturer: syz [ 234.556069][ T7198] usb 1-1: SerialNumber: syz [ 234.628228][ T7802] macvtap2: entered promiscuous mode [ 234.633957][ T7802] macvtap2: entered allmulticast mode [ 234.750623][ T7802] veth1_vlan: entered allmulticast mode [ 234.776096][ T7805] macvtap3: entered promiscuous mode [ 234.887973][ T7198] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 234.888638][ T7805] macvtap3: entered allmulticast mode [ 234.895820][ T7198] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 235.224962][ T7198] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 235.235388][ T7198] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 235.324541][ T7198] usb 1-1: USB disconnect, device number 3 [ 235.337830][ T7198] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 235.381355][ T7198] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 235.406645][ T7198] visor 1-1:1.0: device disconnected [ 235.579762][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 235.628828][ T7820] siw: device registration error -23 [ 235.681995][ T7822] 9pnet_virtio: no channels available for device syz [ 235.750255][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.534887][ T7849] siw: device registration error -23 [ 236.681750][ T7848] nbd9: detected capacity change from 0 to 8589934655 [ 236.777546][ T8] vhci_hcd: vhci_device speed not set [ 237.232702][ T5770] block nbd9: Receive control failed (result -104) [ 237.506777][ T7866] macvtap2: entered promiscuous mode [ 237.551094][ T7866] macvtap2: entered allmulticast mode [ 237.577079][ T5770] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 237.591861][ T5770] Bluetooth: hci3: Injecting HCI hardware error event [ 237.600354][ T5776] Bluetooth: hci3: hardware error 0x00 [ 237.716189][ T7867] macvtap3: entered promiscuous mode [ 237.744339][ T7867] macvtap3: entered allmulticast mode [ 239.058157][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.877906][ T5776] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 239.974408][ T7889] siw: device registration error -23 [ 240.434293][ T7895] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 240.489648][ T7895] kAFS: No cell specified [ 242.591933][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'. [ 243.099720][ T7198] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 243.408036][ T7198] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 243.418280][ T7198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.426387][ T7198] usb 5-1: Product: syz [ 243.431414][ T7198] usb 5-1: Manufacturer: syz [ 243.439263][ T7198] usb 5-1: SerialNumber: syz [ 243.584287][ T7987] veth1_vlan: left allmulticast mode [ 243.659397][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 243.825811][ T7992] macvtap2: left promiscuous mode [ 243.860337][ T7992] macvtap2: left allmulticast mode [ 243.882077][ T7198] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 243.918447][ T7198] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 244.472863][ T7198] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 244.498625][ T7992] veth1_vlan: left allmulticast mode [ 244.506392][ T7198] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 244.532765][ T7198] usb 5-1: USB disconnect, device number 5 [ 244.560243][ T7992] macvtap3: left promiscuous mode [ 244.577701][ T7992] macvtap3: left allmulticast mode [ 244.624512][ T7198] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 244.674978][ T7198] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 244.711117][ T7198] visor 5-1:1.0: device disconnected [ 246.820092][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 247.296187][ T8009] [U]  [ 248.347027][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 249.122573][ T8] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 249.151962][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.197667][ T8] usb 3-1: Product: syz [ 249.213392][ T8] usb 3-1: Manufacturer: syz [ 249.229989][ T8] usb 3-1: SerialNumber: syz [ 249.865966][ T8] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 249.878708][ T8] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 249.928325][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 249.984806][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 250.076418][ T8] usb 3-1: USB disconnect, device number 3 [ 250.097916][ T8] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 250.136855][ T8] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 250.172651][ T8] visor 3-1:1.0: device disconnected [ 250.219258][ T6492] block nbd3: Possible stuck request ffff888021b80000: control (read@0,4096B). Runtime 120 seconds [ 250.342756][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'. [ 251.770396][ T6492] block nbd5: Possible stuck request ffff888021c28000: control (read@0,1024B). Runtime 60 seconds [ 251.781330][ T6492] block nbd5: Possible stuck request ffff888021c28200: control (read@1024,1024B). Runtime 60 seconds [ 251.792440][ T6492] block nbd5: Possible stuck request ffff888021c28400: control (read@2048,1024B). Runtime 60 seconds [ 251.803820][ T6492] block nbd5: Possible stuck request ffff888021c28600: control (read@3072,1024B). Runtime 60 seconds [ 252.685798][ T8046] [U]  [ 252.697182][ T5770] Bluetooth: hci4: command 0x0c1a tx timeout [ 252.878340][ T8053] nbd10: detected capacity change from 0 to 8589934655 [ 252.921524][ T5770] block nbd10: Receive control failed (result -32) [ 252.982160][ T6492] block nbd10: Dead connection, failed to find a fallback [ 252.991369][ T6492] block nbd10: shutting down sockets [ 252.998228][ T6492] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.007878][ T6492] Buffer I/O error on dev nbd10, logical block 0, async page read [ 253.027613][ T97] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 253.036788][ T97] Buffer I/O error on dev nbd10, logical block 1, async page read [ 253.044906][ T97] Buffer I/O error on dev nbd10, logical block 2, async page read [ 253.053427][ T97] Buffer I/O error on dev nbd10, logical block 3, async page read [ 253.063172][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.072645][ T97] Buffer I/O error on dev nbd10, logical block 0, async page read [ 253.080668][ T97] Buffer I/O error on dev nbd10, logical block 1, async page read [ 253.088708][ T97] Buffer I/O error on dev nbd10, logical block 2, async page read [ 253.096507][ T97] Buffer I/O error on dev nbd10, logical block 3, async page read [ 253.104816][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.114191][ T97] Buffer I/O error on dev nbd10, logical block 0, async page read [ 253.122321][ T97] Buffer I/O error on dev nbd10, logical block 1, async page read [ 253.130578][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.140025][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.149461][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.159851][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.179280][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.188626][ T7995] ldm_validate_partition_table(): Disk read failed. [ 253.202663][ T97] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 253.214272][ T7995] Dev nbd10: unable to read RDB block 0 [ 253.228113][ T7995] nbd10: unable to read partition table [ 253.275190][ T7995] ldm_validate_partition_table(): Disk read failed. [ 253.308021][ T7995] Dev nbd10: unable to read RDB block 0 [ 253.342336][ T7995] nbd10: unable to read partition table [ 255.350454][ T5754] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.400197][ T8085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.642849][ T5754] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 255.652325][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.660708][ T5754] usb 3-1: Product: syz [ 255.666091][ T5754] usb 3-1: Manufacturer: syz [ 255.670825][ T5754] usb 3-1: SerialNumber: syz [ 256.346623][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.354669][ T6492] block nbd7: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 30 seconds [ 256.366774][ T5754] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 256.447232][ T5754] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 256.523067][ T5754] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 256.564125][ T5754] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 256.650828][ T5754] usb 3-1: USB disconnect, device number 4 [ 256.661653][ T5754] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 256.688871][ T5754] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 256.717795][ T5754] visor 3-1:1.0: device disconnected [ 257.898626][ T97] block nbd6: Possible stuck request ffff888021c68000: control (read@0,1024B). Runtime 60 seconds [ 257.909911][ T97] block nbd6: Possible stuck request ffff888021c68200: control (read@1024,1024B). Runtime 60 seconds [ 257.921345][ T97] block nbd6: Possible stuck request ffff888021c68400: control (read@2048,1024B). Runtime 60 seconds [ 257.932895][ T97] block nbd6: Possible stuck request ffff888021c68600: control (read@3072,1024B). Runtime 60 seconds [ 257.989158][ T8107] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 257.995708][ T8107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 258.015351][ T8107] vhci_hcd vhci_hcd.0: Device attached [ 258.277059][ T5754] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 259.431306][ T8108] vhci_hcd: connection reset by peer [ 259.478191][ T59] vhci_hcd: stop threads [ 259.486160][ T59] vhci_hcd: release socket [ 259.499930][ T59] vhci_hcd: disconnect device [ 259.654659][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.666155][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.685253][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.696259][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.708821][ T5776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 259.716281][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.724225][ T8120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.805937][ T8118] lo speed is unknown, defaulting to 1000 [ 260.005463][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 260.204636][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.212732][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.225710][ T8118] bridge_slave_0: entered allmulticast mode [ 260.346197][ T8118] bridge_slave_0: entered promiscuous mode [ 260.355077][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.369044][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.393164][ T8118] bridge_slave_1: entered allmulticast mode [ 260.412261][ T8118] bridge_slave_1: entered promiscuous mode [ 260.638317][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.689955][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.862514][ T8118] team0: Port device team_slave_0 added [ 260.988246][ T8118] team0: Port device team_slave_1 added [ 261.219874][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.239061][ T8147] nbd11: detected capacity change from 0 to 8589934655 [ 261.252642][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.557229][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.638990][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.651719][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.681253][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.760765][ T6492] block nbd4: Possible stuck request ffff888021bc0000: control (read@0,4096B). Runtime 90 seconds [ 261.820751][ T5776] Bluetooth: hci5: command tx timeout [ 261.913841][ T5770] block nbd11: Receive control failed (result -104) [ 261.972811][ T8118] hsr_slave_0: entered promiscuous mode [ 261.991714][ T8118] hsr_slave_1: entered promiscuous mode [ 262.142237][ T8118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.186994][ T8118] Cannot create hsr debugfs directory [ 263.016270][ T8118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.023760][ T6492] block nbd8: Possible stuck request ffff888021d20000: control (read@0,1024B). Runtime 30 seconds [ 263.034465][ T6492] block nbd8: Possible stuck request ffff888021d20200: control (read@1024,1024B). Runtime 30 seconds [ 263.045448][ T6492] block nbd8: Possible stuck request ffff888021d20400: control (read@2048,1024B). Runtime 30 seconds [ 263.056519][ T6492] block nbd8: Possible stuck request ffff888021d20600: control (read@3072,1024B). Runtime 30 seconds [ 263.280385][ T8118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.897139][ T5770] Bluetooth: hci5: command tx timeout [ 264.445620][ T5754] vhci_hcd: vhci_device speed not set [ 264.455736][ T8118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.612023][ T8118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.682709][ T8162] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 264.689266][ T8162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.693751][ T8166] overlayfs: failed to resolve './file0': -2 [ 264.703912][ T8162] vhci_hcd vhci_hcd.0: Device attached [ 264.777410][ T8164] vhci_hcd: connection closed [ 264.786404][ T59] vhci_hcd: stop threads [ 264.815323][ T59] vhci_hcd: release socket [ 264.826982][ T59] vhci_hcd: disconnect device [ 264.858059][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'. [ 264.928184][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.951676][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.975425][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.982628][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.031142][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.038375][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.051328][ T8176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.108984][ T8118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.132472][ T8118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.795205][ T8173] [U]  [ 265.912113][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.978945][ T5770] Bluetooth: hci5: command tx timeout [ 267.785811][ T97] block nbd9: Possible stuck request ffff888021de0000: control (read@0,1024B). Runtime 30 seconds [ 267.796581][ T97] block nbd9: Possible stuck request ffff888021de0200: control (read@1024,1024B). Runtime 30 seconds [ 267.807548][ T97] block nbd9: Possible stuck request ffff888021de0400: control (read@2048,1024B). Runtime 30 seconds [ 267.818579][ T97] block nbd9: Possible stuck request ffff888021de0600: control (read@3072,1024B). Runtime 30 seconds [ 268.022014][ T8209] overlayfs: failed to resolve './file0': -2 [ 268.060871][ T5770] Bluetooth: hci5: command tx timeout [ 268.186767][ T8118] veth0_vlan: entered promiscuous mode [ 268.239760][ T8118] veth1_vlan: entered promiscuous mode [ 268.426204][ T8118] veth0_macvtap: entered promiscuous mode [ 268.464607][ T8118] veth1_macvtap: entered promiscuous mode [ 268.506465][ T8216] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 268.513012][ T8216] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 268.535093][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.546468][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.548121][ T8213] nbd12: detected capacity change from 0 to 8589934655 [ 268.558901][ T8216] vhci_hcd vhci_hcd.0: Device attached [ 268.580317][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.686844][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.709625][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.721669][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.746685][ T8118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.761164][ T8118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.770615][ T8118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.779781][ T8217] vhci_hcd: connection closed [ 268.780055][ T7936] vhci_hcd: stop threads [ 268.780618][ T8118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.784740][ T7936] vhci_hcd: release socket [ 268.809473][ T7936] vhci_hcd: disconnect device [ 268.847039][ T23] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 268.874435][ T23] usb 41-1: enqueue for inactive port 0 [ 268.965708][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.975734][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.007137][ T23] vhci_hcd: vhci_device speed not set [ 269.055024][ T5770] block nbd12: Receive control failed (result -104) [ 269.056196][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.099328][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.433329][ T8220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.086326][ T8242] overlayfs: failed to resolve './file0': -2 [ 271.369441][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 273.051972][ T8243] [U]  [ 273.477828][ T8255] nbd13: detected capacity change from 0 to 8589934655 [ 273.615278][ T8259] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 273.621839][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.637857][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 273.901430][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.927333][ T5858] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 274.035181][ T5770] block nbd13: Receive control failed (result -104) [ 274.361202][ T8275] overlayfs: failed to resolve './file0': -2 [ 276.022925][ T8260] vhci_hcd: connection reset by peer [ 276.028591][ T1114] vhci_hcd: stop threads [ 276.197376][ T1114] vhci_hcd: release socket [ 276.201886][ T1114] vhci_hcd: disconnect device [ 277.054645][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'. [ 277.329638][ T8300] overlayfs: failed to resolve './file0': -2 [ 277.336393][ T8298] macvtap4: entered promiscuous mode [ 277.357472][ T8298] macvtap4: entered allmulticast mode [ 277.368608][ T8294] [U]  [ 277.383577][ T8298] veth1_vlan: entered allmulticast mode [ 277.497597][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.827709][ T8309] nbd14: detected capacity change from 0 to 8589934655 [ 279.029279][ T5858] vhci_hcd: vhci_device speed not set [ 279.061614][ T5770] block nbd14: Receive control failed (result -104) [ 279.300666][ T8317] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 279.307199][ T8317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.317142][ T8317] vhci_hcd vhci_hcd.0: Device attached [ 279.707095][ T5822] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 279.728745][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 280.584685][ T8329] [U]  [ 280.637814][ T6492] block nbd3: Possible stuck request ffff888021b80000: control (read@0,4096B). Runtime 150 seconds [ 280.872930][ T8338] overlayfs: failed to resolve './file0': -2 [ 280.970265][ T8318] vhci_hcd: connection reset by peer [ 280.986773][ T7936] vhci_hcd: stop threads [ 281.002152][ T7936] vhci_hcd: release socket [ 281.038012][ T7936] vhci_hcd: disconnect device [ 281.078423][ T8342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.504028][ T6492] block nbd5: Possible stuck request ffff888021c28000: control (read@0,1024B). Runtime 90 seconds [ 282.514929][ T6492] block nbd5: Possible stuck request ffff888021c28200: control (read@1024,1024B). Runtime 90 seconds [ 282.526010][ T6492] block nbd5: Possible stuck request ffff888021c28400: control (read@2048,1024B). Runtime 90 seconds [ 282.537546][ T6492] block nbd5: Possible stuck request ffff888021c28600: control (read@3072,1024B). Runtime 90 seconds [ 283.178915][ T8355] nbd15: detected capacity change from 0 to 8589934655 [ 283.198017][ T5770] block nbd15: Receive control failed (result -32) [ 283.217970][ T97] block nbd15: Dead connection, failed to find a fallback [ 283.225140][ T97] block nbd15: shutting down sockets [ 283.233651][ T97] blk_print_req_error: 94 callbacks suppressed [ 283.233667][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.248869][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.702'. [ 283.249542][ T97] buffer_io_error: 122 callbacks suppressed [ 283.249552][ T97] Buffer I/O error on dev nbd15, logical block 0, async page read [ 283.272840][ T97] Buffer I/O error on dev nbd15, logical block 1, async page read [ 283.281628][ T97] Buffer I/O error on dev nbd15, logical block 2, async page read [ 283.289940][ T97] Buffer I/O error on dev nbd15, logical block 3, async page read [ 283.298154][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.307475][ T97] Buffer I/O error on dev nbd15, logical block 0, async page read [ 283.315400][ T97] Buffer I/O error on dev nbd15, logical block 1, async page read [ 283.323412][ T97] Buffer I/O error on dev nbd15, logical block 2, async page read [ 283.331299][ T97] Buffer I/O error on dev nbd15, logical block 3, async page read [ 283.339356][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.356986][ T97] Buffer I/O error on dev nbd15, logical block 0, async page read [ 283.364829][ T97] Buffer I/O error on dev nbd15, logical block 1, async page read [ 283.372887][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.382227][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.391570][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.400909][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.410211][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 283.419523][ T6980] ldm_validate_partition_table(): Disk read failed. [ 283.427053][ T97] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.436300][ T97] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.446427][ T6980] Dev nbd15: unable to read RDB block 0 [ 283.461675][ T6980] nbd15: unable to read partition table [ 283.504122][ T6980] ldm_validate_partition_table(): Disk read failed. [ 283.518182][ T6980] Dev nbd15: unable to read RDB block 0 [ 283.564589][ T6980] nbd15: unable to read partition table [ 284.585897][ T8364] [U]  [ 284.594779][ T8369] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 284.601342][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.731898][ T8369] vhci_hcd vhci_hcd.0: Device attached [ 284.858932][ T8373] vhci_hcd: connection reset by peer [ 284.865646][ T79] vhci_hcd: stop threads [ 284.877732][ T79] vhci_hcd: release socket [ 284.901029][ T79] vhci_hcd: disconnect device [ 284.974447][ T5822] vhci_hcd: vhci_device speed not set [ 286.554185][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.689195][ T8393] macvtap2: entered promiscuous mode [ 286.697540][ T6492] block nbd7: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 60 seconds [ 286.727294][ T8393] macvtap2: entered allmulticast mode [ 286.767377][ T8393] veth1_vlan: entered allmulticast mode [ 287.088458][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.5.714'. [ 288.043592][ T24] block nbd6: Possible stuck request ffff888021c68000: control (read@0,1024B). Runtime 90 seconds [ 288.055094][ T24] block nbd6: Possible stuck request ffff888021c68200: control (read@1024,1024B). Runtime 90 seconds [ 288.067249][ T24] block nbd6: Possible stuck request ffff888021c68400: control (read@2048,1024B). Runtime 90 seconds [ 288.234168][ T8399] [U]  [ 288.238912][ T24] block nbd6: Possible stuck request ffff888021c68600: control (read@3072,1024B). Runtime 90 seconds [ 290.257575][ T8412] nbd16: detected capacity change from 0 to 8589934655 [ 290.313076][ T5770] block nbd16: Receive control failed (result -32) [ 290.359185][ T8419] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 290.365755][ T8419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 290.384910][ T6492] block nbd16: Dead connection, failed to find a fallback [ 290.393273][ T6492] block nbd16: shutting down sockets [ 290.398745][ T6492] blk_print_req_error: 93 callbacks suppressed [ 290.398757][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.407942][ T8419] vhci_hcd vhci_hcd.0: Device attached [ 290.414731][ T6492] buffer_io_error: 122 callbacks suppressed [ 290.414744][ T6492] Buffer I/O error on dev nbd16, logical block 0, async page read [ 290.434197][ T6492] Buffer I/O error on dev nbd16, logical block 1, async page read [ 290.540927][ T6492] Buffer I/O error on dev nbd16, logical block 2, async page read [ 290.549419][ T6492] Buffer I/O error on dev nbd16, logical block 3, async page read [ 290.564356][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.574288][ T6492] Buffer I/O error on dev nbd16, logical block 0, async page read [ 290.585218][ T6492] Buffer I/O error on dev nbd16, logical block 1, async page read [ 290.593375][ T6492] Buffer I/O error on dev nbd16, logical block 2, async page read [ 290.601551][ T6492] Buffer I/O error on dev nbd16, logical block 3, async page read [ 290.610095][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.619771][ T6492] Buffer I/O error on dev nbd16, logical block 0, async page read [ 290.637284][ T6492] Buffer I/O error on dev nbd16, logical block 1, async page read [ 290.645472][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.657460][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.667194][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.686036][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.695467][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 290.704982][ T6980] ldm_validate_partition_table(): Disk read failed. [ 290.712331][ T8423] vhci_hcd: connection closed [ 290.713492][ T6492] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.727657][ T6492] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.747145][ T11] vhci_hcd: stop threads [ 290.747257][ T23] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 290.751602][ T11] vhci_hcd: release socket [ 290.789903][ T6980] Dev nbd16: unable to read RDB block 0 [ 290.805945][ T6980] nbd16: unable to read partition table [ 290.809062][ T11] vhci_hcd: disconnect device [ 290.841132][ T6980] ldm_validate_partition_table(): Disk read failed. [ 290.850385][ T6980] Dev nbd16: unable to read RDB block 0 [ 290.870131][ T6980] nbd16: unable to read partition table [ 291.627040][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 291.860978][ T97] block nbd11: Possible stuck request ffff888021e60000: control (read@0,1024B). Runtime 30 seconds [ 291.861060][ T6492] block nbd4: Possible stuck request ffff888021bc0000: control (read@0,4096B). Runtime 120 seconds [ 291.871988][ T97] block nbd11: Possible stuck request ffff888021e60200: control (read@1024,1024B). Runtime 30 seconds [ 291.897483][ T97] block nbd11: Possible stuck request ffff888021e60400: control (read@2048,1024B). Runtime 30 seconds [ 291.908628][ T97] block nbd11: Possible stuck request ffff888021e60600: control (read@3072,1024B). Runtime 30 seconds [ 291.909489][ T5822] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 292.016576][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.055277][ T5822] usb 1-1: Product: syz [ 292.116081][ T5822] usb 1-1: Manufacturer: syz [ 292.141851][ T5822] usb 1-1: SerialNumber: syz [ 292.400087][ T8437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.645164][ T5822] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 292.729544][ T5822] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 292.907453][ T5822] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 293.760903][ T55] block nbd8: Possible stuck request ffff888021d20000: control (read@0,1024B). Runtime 60 seconds [ 293.771595][ T55] block nbd8: Possible stuck request ffff888021d20200: control (read@1024,1024B). Runtime 60 seconds [ 293.782793][ T55] block nbd8: Possible stuck request ffff888021d20400: control (read@2048,1024B). Runtime 60 seconds [ 293.793897][ T55] block nbd8: Possible stuck request ffff888021d20600: control (read@3072,1024B). Runtime 60 seconds [ 293.857402][ T5822] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 293.892167][ T5822] usb 1-1: USB disconnect, device number 4 [ 293.921268][ T5822] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 293.938731][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.727'. [ 293.950997][ T5822] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 293.961873][ T5822] visor 1-1:1.0: device disconnected [ 295.484075][ T8446] [U]  [ 295.660388][ T8463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 295.666944][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.695712][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 296.056671][ T23] vhci_hcd: vhci_device speed not set [ 296.117652][ T5858] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 296.302760][ T8464] vhci_hcd: connection reset by peer [ 296.313416][ T41] vhci_hcd: stop threads [ 296.318023][ T41] vhci_hcd: release socket [ 296.332731][ T41] vhci_hcd: disconnect device [ 296.607820][ T8471] nbd17: detected capacity change from 0 to 8589934655 [ 296.620743][ T5770] block nbd17: Receive control failed (result -104) [ 297.396816][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.722115][ T97] block nbd9: Possible stuck request ffff888021de0000: control (read@0,1024B). Runtime 60 seconds [ 298.732901][ T97] block nbd9: Possible stuck request ffff888021de0200: control (read@1024,1024B). Runtime 60 seconds [ 298.743915][ T97] block nbd9: Possible stuck request ffff888021de0400: control (read@2048,1024B). Runtime 60 seconds [ 298.754850][ T97] block nbd9: Possible stuck request ffff888021de0600: control (read@3072,1024B). Runtime 60 seconds [ 298.882948][ T55] block nbd12: Possible stuck request ffff888021ea0000: control (read@0,4096B). Runtime 30 seconds [ 299.037951][ T8501] netlink: 20 bytes leftover after parsing attributes in process `syz.5.741'. [ 299.808699][ T8500] [U]  [ 300.387675][ T8513] nbd18: detected capacity change from 0 to 8589934655 [ 300.403857][ T5770] block nbd18: Receive control failed (result -32) [ 300.467065][ T5950] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 300.685896][ T8518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 300.692454][ T8518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.701346][ T8518] vhci_hcd vhci_hcd.0: Device attached [ 300.753343][ T5950] usb 6-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 300.957252][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.965310][ T5950] usb 6-1: Product: syz [ 300.986993][ T5950] usb 6-1: Manufacturer: syz [ 300.997038][ T5950] usb 6-1: SerialNumber: syz [ 301.007965][ T8519] vhci_hcd: connection closed [ 301.009218][ T41] vhci_hcd: stop threads [ 301.027995][ T41] vhci_hcd: release socket [ 301.038709][ T41] vhci_hcd: disconnect device [ 301.261241][ T5858] vhci_hcd: vhci_device speed not set [ 301.358133][ T5950] usb 6-1: palm_os_4_probe - error -71 getting connection info [ 301.365927][ T5950] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 301.399173][ T5950] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 301.520764][ T5950] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 301.538731][ T5950] usb 6-1: USB disconnect, device number 2 [ 301.548448][ T5950] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 301.564056][ T5950] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 302.695969][ T5950] visor 6-1:1.0: device disconnected [ 302.866683][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.119543][ T8546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 303.983575][ T8545] [U]  [ 303.987486][ T28] INFO: task syz.3.221:6659 blocked for more than 143 seconds. [ 303.995053][ T28] Not tainted syzkaller #0 [ 304.011108][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 304.025835][ T28] task:syz.3.221 state:D stack:27560 pid:6659 ppid:5762 flags:0x00004004 [ 304.037648][ T28] Call Trace: [ 304.041036][ T28] [ 304.045678][ T28] __schedule+0x14d2/0x44d0 [ 304.053189][ T28] ? __lock_acquire+0x7c80/0x7c80 [ 304.066267][ T97] block nbd13: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 30 seconds [ 304.080423][ T28] ? asan.module_dtor+0x20/0x20 [ 304.100138][ T28] ? __mutex_lock+0x6b2/0xcc0 [ 304.104890][ T28] ? __mutex_trylock_common+0x84/0x250 [ 304.164004][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 304.170526][ T28] schedule+0xbd/0x170 [ 304.174758][ T28] schedule_preempt_disabled+0x13/0x20 [ 304.219864][ T28] __mutex_lock+0x6b7/0xcc0 [ 304.224425][ T28] ? __mutex_lock+0x4e8/0xcc0 [ 304.229187][ T28] ? blkdev_get_by_dev+0x121/0x600 [ 304.234315][ T28] ? mutex_lock_nested+0x20/0x20 [ 304.239494][ T28] ? iput+0x347/0x920 [ 304.243502][ T28] ? ilookup+0x1c4/0x200 [ 304.248110][ T28] ? disk_block_events+0xa7/0x120 [ 304.253157][ T28] ? blkdev_get_by_dev+0x101/0x600 [ 304.258392][ T28] blkdev_get_by_dev+0x121/0x600 [ 304.263352][ T28] bdev_open_by_dev+0x77/0x100 [ 304.277355][ T28] setup_bdev_super+0x59/0x660 [ 304.282186][ T28] nilfs_mount+0x4c4/0x7f0 [ 304.286632][ T28] ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0 [ 304.304141][ T28] ? aa_get_newest_label+0xf8/0x5c0 [ 304.309787][ T28] ? vfs_parse_fs_string+0x102/0x160 [ 304.315104][ T28] ? end_current_label_crit_section+0x170/0x170 [ 304.344481][ T28] legacy_get_tree+0xea/0x180 [ 304.349504][ T28] ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0 [ 304.355521][ T28] vfs_get_tree+0x8c/0x280 [ 304.386985][ T28] do_new_mount+0x24b/0xa40 [ 304.391566][ T28] __se_sys_mount+0x2da/0x3c0 [ 304.396266][ T28] ? __x64_sys_mount+0xc0/0xc0 [ 304.443194][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 304.448541][ T28] ? __x64_sys_mount+0x20/0xc0 [ 304.453479][ T28] do_syscall_64+0x55/0xb0 [ 304.474254][ T28] ? clear_bhb_loop+0x40/0x90 [ 304.479201][ T28] ? clear_bhb_loop+0x40/0x90 [ 304.483900][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.503373][ T28] RIP: 0033:0x7f165dd8f749 [ 304.517109][ T28] RSP: 002b:00007f165ec7d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.525562][ T28] RAX: ffffffffffffffda RBX: 00007f165dfe5fa0 RCX: 00007f165dd8f749 [ 304.574221][ T28] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000140 [ 304.587257][ T28] RBP: 00007f165de13f91 R08: 0000200000000980 R09: 0000000000000000 [ 304.595286][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.637085][ T28] R13: 00007f165dfe6038 R14: 00007f165dfe5fa0 R15: 00007ffc5616ca08 [ 304.645129][ T28] [ 304.668095][ T28] [ 304.668095][ T28] Showing all locks held in the system: [ 304.675859][ T28] 1 lock held by khungtaskd/28: [ 304.717261][ T28] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 304.753992][ T28] 2 locks held by kworker/u4:4/59: [ 304.787092][ T28] #0: ffff88801f2b7538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 304.817106][ T28] #1: ffffc900015a7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 304.847116][ T28] 2 locks held by kworker/u4:9/2955: [ 304.852441][ T28] #0: ffff88801f2b7538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 304.901580][ T28] #1: ffffc9000be77d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 304.914009][ T28] 2 locks held by getty/5526: [ 304.919105][ T28] #0: ffff88802cfee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 304.928992][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 304.939186][ T28] 2 locks held by syz-executor/5765: [ 304.944638][ T28] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 304.953708][ T28] #1: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 304.964859][ T28] 2 locks held by kworker/0:8/5858: [ 304.970133][ T28] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 304.981329][ T28] #1: ffffc90004b4fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 304.991725][ T28] 1 lock held by udevd/6014: [ 304.996325][ T28] #0: ffff888021b2b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.006442][ T28] 1 lock held by udevd/6024: [ 305.011112][ T28] #0: ffff888141b684c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.021858][ T28] 1 lock held by udevd/6035: [ 305.026748][ T28] #0: ffff888021be34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.037345][ T28] 1 lock held by udevd/6549: [ 305.041967][ T28] #0: ffff8880219ec4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.052066][ T28] 1 lock held by syz.3.221/6659: [ 305.057128][ T28] #0: ffff888021b2b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.067368][ T28] 1 lock held by udevd/6980: [ 305.071977][ T28] #0: ffff88805344f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.082254][ T28] 1 lock held by udevd/7093: [ 305.086864][ T28] #0: ffff888021bf54c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.098196][ T28] 1 lock held by udevd/7128: [ 305.102817][ T28] #0: ffff888141b214c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.112959][ T28] 1 lock held by udevd/7648: [ 305.117592][ T28] #0: ffff888021bf04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.127712][ T28] 1 lock held by udevd/7810: [ 305.132306][ T28] #0: ffff888141b584c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.142393][ T28] 1 lock held by udevd/7811: [ 305.147176][ T28] #0: ffff888021cf94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.157571][ T28] 1 lock held by udevd/7813: [ 305.162162][ T28] #0: ffff888021e2b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.172352][ T28] 1 lock held by udevd/7995: [ 305.177139][ T28] #0: ffff888021dbb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 305.187232][ T28] 1 lock held by syz-executor/8118: [ 305.192411][ T28] #0: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 305.203372][ T28] [ 305.207983][ T28] ============================================= [ 305.207983][ T28] [ 305.229474][ T28] NMI backtrace for cpu 1 [ 305.233866][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 305.241074][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.251234][ T28] Call Trace: [ 305.254521][ T28] [ 305.257458][ T28] dump_stack_lvl+0x16c/0x230 [ 305.262168][ T28] ? preempt_count_add+0x91/0x1a0 [ 305.267209][ T28] ? show_regs_print_info+0x20/0x20 [ 305.272426][ T28] ? load_image+0x3b0/0x3b0 [ 305.276958][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 305.281911][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 305.288067][ T28] ? _printk+0xd0/0x110 [ 305.292228][ T28] ? load_image+0x3b0/0x3b0 [ 305.296723][ T28] ? load_image+0x3b0/0x3b0 [ 305.301219][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 305.307277][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 305.313246][ T28] watchdog+0xf41/0xf80 [ 305.317392][ T28] ? watchdog+0x1e1/0xf80 [ 305.321718][ T28] kthread+0x2fa/0x390 [ 305.325778][ T28] ? hungtask_pm_notify+0x90/0x90 [ 305.330791][ T28] ? kthread_blkcg+0xd0/0xd0 [ 305.335365][ T28] ret_from_fork+0x48/0x80 [ 305.339772][ T28] ? kthread_blkcg+0xd0/0xd0 [ 305.344347][ T28] ret_from_fork_asm+0x11/0x20 [ 305.349111][ T28] [ 305.352761][ T28] Sending NMI from CPU 1 to CPUs 0: [ 305.358067][ C0] NMI backtrace for cpu 0 [ 305.358077][ C0] CPU: 0 PID: 6322 Comm: syz-executor Not tainted syzkaller #0 [ 305.358092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.358101][ C0] RIP: 0010:__lock_acquire+0x8f/0x7c80 [ 305.358122][ C0] Code: 01 00 00 50 fe 66 81 48 8d 9c 24 20 01 00 00 48 c1 eb 03 42 c7 04 03 f1 f1 f1 f1 48 b8 f2 f2 f2 f2 f2 00 00 00 4a 89 44 03 0b <42> c7 44 03 17 f3 f3 f3 f3 42 c6 44 03 1b f3 65 4c 8b 35 ca b6 9c [ 305.358136][ C0] RSP: 0018:ffffc90003237560 EFLAGS: 00000802 [ 305.358150][ C0] RAX: 000000f2f2f2f2f2 RBX: 1ffff92000646ed0 RCX: 0000000000000002 [ 305.358162][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88813fffa7c8 [ 305.358172][ C0] RBP: ffffc900032377a8 R08: dffffc0000000000 R09: 0000000000000001 [ 305.358183][ C0] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: 0000000000000001 [ 305.358193][ C0] R13: 0000000000000001 R14: 0000000000000046 R15: 0000000000000000 [ 305.358203][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 305.358217][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.358228][ C0] CR2: 00007f8436317d60 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 305.358242][ C0] Call Trace: [ 305.358247][ C0] [ 305.358261][ C0] ? __lock_acquire+0x1334/0x7c80 [ 305.358278][ C0] ? verify_lock_unused+0x140/0x140 [ 305.358301][ C0] ? mark_lock+0x94/0x320 [ 305.358318][ C0] ? __lock_acquire+0x1260/0x7c80 [ 305.358335][ C0] lock_acquire+0x197/0x410 [ 305.358349][ C0] ? bad_range+0x5f/0x280 [ 305.358366][ C0] ? bad_range+0x5f/0x280 [ 305.358380][ C0] ? read_lock_is_recursive+0x20/0x20 [ 305.358401][ C0] ? bad_range+0x5f/0x280 [ 305.358414][ C0] seqcount_lockdep_reader_access+0xb5/0x180 [ 305.358429][ C0] ? bad_range+0x5f/0x280 [ 305.358443][ C0] ? bad_range+0x280/0x280 [ 305.358457][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 305.358477][ C0] ? __rwlock_init+0x150/0x150 [ 305.358493][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 305.358513][ C0] bad_range+0x5f/0x280 [ 305.358530][ C0] __free_one_page+0x12e/0xc40 [ 305.358553][ C0] free_pcppages_bulk+0x306/0x5d0 [ 305.358580][ C0] free_unref_page+0x17e/0x2e0 [ 305.358603][ C0] vfree+0x1a6/0x320 [ 305.358621][ C0] ? kcov_open+0x90/0x90 [ 305.358638][ C0] kcov_close+0x2b/0x50 [ 305.358655][ C0] __fput+0x234/0x970 [ 305.358681][ C0] task_work_run+0x1ce/0x250 [ 305.358709][ C0] ? task_work_cancel+0x240/0x240 [ 305.358728][ C0] ? do_exit+0x906/0x23c0 [ 305.358748][ C0] ? kmem_cache_free+0xf8/0x280 [ 305.358770][ C0] do_exit+0x90b/0x23c0 [ 305.358793][ C0] ? put_task_struct+0xc0/0xc0 [ 305.358812][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 305.358830][ C0] ? lock_chain_count+0x20/0x20 [ 305.358844][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 305.358860][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 305.358877][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 305.358894][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.358911][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 305.358930][ C0] do_group_exit+0x21b/0x2d0 [ 305.358952][ C0] __x64_sys_exit_group+0x3f/0x40 [ 305.358973][ C0] do_syscall_64+0x55/0xb0 [ 305.358986][ C0] ? clear_bhb_loop+0x40/0x90 [ 305.359003][ C0] ? clear_bhb_loop+0x40/0x90 [ 305.359021][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.359038][ C0] RIP: 0033:0x7f843558f749 [ 305.359049][ C0] Code: Unable to access opcode bytes at 0x7f843558f71f. [ 305.359057][ C0] RSP: 002b:00007ffd57ff8988 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 305.359072][ C0] RAX: ffffffffffffffda RBX: 00007f843561585d RCX: 00007f843558f749 [ 305.359083][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 305.359092][ C0] RBP: 00007f843561586f R08: 00007ffd57ff6727 R09: 00000000000927c0 [ 305.359103][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 305.359112][ C0] R13: 00000000000927c0 R14: 000000000004a035 R15: 00007ffd57ff8b30 [ 305.359129][ C0] [ 305.361790][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 305.754968][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 305.762153][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.772203][ T28] Call Trace: [ 305.775485][ T28] [ 305.778420][ T28] dump_stack_lvl+0x16c/0x230 [ 305.783106][ T28] ? show_regs_print_info+0x20/0x20 [ 305.788292][ T28] ? load_image+0x3b0/0x3b0 [ 305.792783][ T28] panic+0x2c0/0x710 [ 305.796662][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 305.802285][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 305.806768][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 305.812296][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 305.818447][ T28] watchdog+0xf80/0xf80 [ 305.822609][ T28] ? watchdog+0x1e1/0xf80 [ 305.826948][ T28] kthread+0x2fa/0x390 [ 305.831009][ T28] ? hungtask_pm_notify+0x90/0x90 [ 305.836016][ T28] ? kthread_blkcg+0xd0/0xd0 [ 305.840590][ T28] ret_from_fork+0x48/0x80 [ 305.844988][ T28] ? kthread_blkcg+0xd0/0xd0 [ 305.849555][ T28] ret_from_fork_asm+0x11/0x20 [ 305.854309][ T28] [ 305.857626][ T28] Kernel Offset: disabled [ 305.861940][ T28] Rebooting in 86400 seconds..