last executing test programs: 13m54.71286164s ago: executing program 0 (id=304): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) pwritev(r1, 0x0, 0x0, 0xfffffff8, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 13m53.888194078s ago: executing program 0 (id=307): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x7, 0x4, &(0x7f0000000600)="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", 0x106) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 13m53.424113772s ago: executing program 0 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 13m46.804353383s ago: executing program 0 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 13m39.856509574s ago: executing program 0 (id=337): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x20000050) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000002380)="fcf0211c43cfbe136ce4b6ba0e3a969583ef8d585e3732f6", 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000140), 0x21, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 13m34.049576918s ago: executing program 0 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 13m18.703242998s ago: executing program 32 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 11m44.313458475s ago: executing program 5 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3e, 0x9, 0x0, 0x25dfdbfb, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}}, 0x0) clock_gettime(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1}, 0x18}}, 0x0) 11m43.046200624s ago: executing program 5 (id=550): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x9, 0x0, 0x100000}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 11m41.8520222s ago: executing program 5 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000040180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r4, 0x0, 0x0, 0x800) 11m40.83917506s ago: executing program 5 (id=556): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pipe2(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) 11m32.898165273s ago: executing program 5 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x410, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 11m31.359020087s ago: executing program 5 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x6, 0x9, 0x0, 0x5, 0x23, 0xff, 0x0, 0x1, 0xa, 0x4, 0xad, 0x0, 0x0, 0x8, 0x8, 0x8, 0x1, 0x7f, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m16.170528575s ago: executing program 33 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x6, 0x9, 0x0, 0x5, 0x23, 0xff, 0x0, 0x1, 0xa, 0x4, 0xad, 0x0, 0x0, 0x8, 0x8, 0x8, 0x1, 0x7f, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.558559058s ago: executing program 2 (id=1745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x34000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 31.99168071s ago: executing program 2 (id=1747): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x81802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f0005040000000000"], 0x114}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000300)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x29, 0xfffffffe, 0x0, 0x21, 0x0, 0x4, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r5, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 28.831469038s ago: executing program 2 (id=1753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0xd, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010026000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) timer_getoverrun(0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x1fff, 0xffff, 0x1, "16ecc2f3485c992e"}) ppoll(&(0x7f0000000540)=[{r4, 0x241}], 0x1, &(0x7f0000000600)={0x0, 0x989680}, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 21.815964881s ago: executing program 2 (id=1768): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8c801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000031400000011228d0000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 18.357230667s ago: executing program 2 (id=1772): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) wait4(0x0, 0x0, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) 18.252927042s ago: executing program 3 (id=1775): socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8009000000000000000002000000bbff0200000000000000000000000000018900907800000000fe8800"/74], 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5}, 0x38) sendfile(r0, r1, 0x0, 0x1000004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRESDEC], 0x10c}}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 17.203563234s ago: executing program 3 (id=1776): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) 14.500475079s ago: executing program 3 (id=1778): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xb, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32, @ANYBLOB="0c00990001000c006900000014000400"], 0xe4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 14.335773109s ago: executing program 6 (id=1780): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40008c0) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 13.798141904s ago: executing program 1 (id=1781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) 13.135788083s ago: executing program 4 (id=1782): r0 = socket(0x6, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50) sendmsg$NFC_CMD_DEV_DOWN(r1, 0x0, 0x5f616d3c7bbebcfc) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8410) 12.532162848s ago: executing program 6 (id=1783): ioctl(0xffffffffffffffff, 0x8b32, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x6440, 0x0, &(0x7f0000000040), 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272f652b8d10000000000000000", 0x1f}, {&(0x7f0000008c80)='%', 0x1}], 0x2, 0x0, 0x0, 0x4081}, 0x44044) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@fwd={0x8}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 12.421453446s ago: executing program 2 (id=1784): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x34000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 12.235905941s ago: executing program 1 (id=1785): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x42641, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rcu_utilization\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 10.588692657s ago: executing program 1 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 10.315681248s ago: executing program 3 (id=1787): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r6, 0x2}, 0x8) 8.316880979s ago: executing program 1 (id=1788): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c110000000000000026cf"], 0x14) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x81) r2 = syz_open_dev$video4linux(&(0x7f0000002f40), 0x303, 0x2000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8400", 0x28, 0x6, 0xff, @remote, @mcast2, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8afb72d8398dcbac145121cd4e97f5f2"}]}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x80000000000005, 0x2, 0x7}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$getown(0xffffffffffffffff, 0x9) 8.256126251s ago: executing program 3 (id=1789): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='subflow_check_data_avail\x00', r6}, 0x18) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x34) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 7.901270501s ago: executing program 6 (id=1790): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101280) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x129000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x8, r3}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 6.718860663s ago: executing program 1 (id=1791): socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8009000000000000000002000000bbff02000000000000000000000000000189009078"], 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5}, 0x38) sendfile(r0, r1, 0x0, 0x1000004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRESDEC], 0x10c}}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 5.618062035s ago: executing program 4 (id=1792): creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c980029829"], 0x0) 5.540851957s ago: executing program 4 (id=1793): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f00000004c0)={0x0, [0x8, 0xffff133a, 0x3], [{0x35, 0x0, 0x0, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x800}, {0x80, 0x4}], 0xd0a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000000080)=@un=@abs, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4.100970246s ago: executing program 6 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) 3.389989914s ago: executing program 3 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r2, 0x0) capset(0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{0x0}], 0x1, 0xfff, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) getrandom(0x0, 0x0, 0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffff7a003e45c, 0x10000000000000) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x5000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.19538022s ago: executing program 4 (id=1796): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) 2.859159637s ago: executing program 1 (id=1797): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x410, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.776211926s ago: executing program 6 (id=1798): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff0000060000000008000100ac14"], 0x24}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$mouse(0x0, 0x7f, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.429385965s ago: executing program 4 (id=1799): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x11) close_range(r4, r4, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 172.278344ms ago: executing program 4 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/158, 0x9e}], 0x1}, 0x2}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r6, 0x107, 0xd, 0x0, &(0x7f0000000000)) 0s ago: executing program 6 (id=1801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, 0x0, &(0x7f0000000280)=0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) kernel console output (not intermixed with test programs): 447][ T8116] overlay: Unknown parameter 'uid>00000000000000000000' [ 330.585767][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 331.825676][ T8145] kvm: kvm [8141]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 335.828098][ T8184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.935483][ T8225] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 340.942657][ T5879] IPVS: starting estimator thread 0... [ 341.085444][ T8233] IPVS: using max 53 ests per chain, 127200 per kthread [ 343.322479][ T8249] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 345.691228][ T8275] xt_TCPMSS: Only works on TCP SYN packets [ 346.788671][ T8277] geneve0: entered allmulticast mode [ 348.429088][ T8306] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 349.062422][ T8303] Bluetooth: MGMT ver 1.23 [ 350.456197][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 351.031405][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 351.052109][ T5879] usb 5-1: no configurations [ 351.057110][ T5879] usb 5-1: can't read configurations, error -22 [ 351.215716][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 351.573524][ T8343] netlink: 'syz.2.555': attribute type 21 has an invalid length. [ 351.581530][ T8343] netlink: 'syz.2.555': attribute type 20 has an invalid length. [ 351.589640][ T8343] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.854155][ T8351] geneve0: entered allmulticast mode [ 354.440102][ T8370] syz.1.560: attempt to access beyond end of device [ 354.440102][ T8370] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 354.453284][ T8370] FAT-fs (loop3): unable to read boot sector [ 358.985772][ T8386] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 359.136096][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.148737][ T8386] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 359.747813][ T8401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.758973][ T8401] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 366.140302][ T8442] CIFS: VFS: Malformed UNC in devname [ 373.944076][ T8524] block device autoloading is deprecated and will be removed. [ 377.238550][ T8551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.328781][ T8551] bridge0: port 3(bond1) entered blocking state [ 377.346461][ T8551] bridge0: port 3(bond1) entered disabled state [ 377.391775][ T8551] bond1: entered allmulticast mode [ 377.497792][ T8551] bond1: entered promiscuous mode [ 377.593040][ T8551] bridge0: port 3(bond1) entered blocking state [ 377.599895][ T8551] bridge0: port 3(bond1) entered forwarding state [ 377.608337][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.621098][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.631653][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.639507][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.649238][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.782106][ T6363] bridge0: port 3(bond1) entered disabled state [ 378.629341][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.143725][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.208352][ T8574] netlink: 'syz.1.600': attribute type 13 has an invalid length. [ 379.668519][ T2977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.846567][ T5830] Bluetooth: hci3: command tx timeout [ 381.338307][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 381.905553][ T5830] Bluetooth: hci3: command tx timeout [ 382.017681][ T8574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.828890][ T2977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.030642][ T8563] lo speed is unknown, defaulting to 1000 [ 384.005720][ T5830] Bluetooth: hci3: command tx timeout [ 384.368085][ T2977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.722257][ T2977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.085746][ T5830] Bluetooth: hci3: command tx timeout [ 386.631398][ T8654] loop6: detected capacity change from 0 to 524287999 [ 387.768919][ T8647] netlink: 'syz.4.615': attribute type 12 has an invalid length. [ 388.284423][ T8647] ip6t_rpfilter: unknown options [ 389.271529][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 389.322122][ T2977] bridge_slave_1: left allmulticast mode [ 389.370904][ T2977] bridge_slave_1: left promiscuous mode [ 389.413797][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.580450][ T2977] bridge_slave_0: left allmulticast mode [ 389.613254][ T2977] bridge_slave_0: left promiscuous mode [ 389.630982][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.619965][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 391.697686][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 391.960804][ T8701] ceph: No mds server is up or the cluster is laggy [ 393.283297][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.294496][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.314213][ T2977] bond0 (unregistering): Released all slaves [ 393.350847][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.361129][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.518455][ T9] lo speed is unknown, defaulting to 1000 [ 396.939386][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.972764][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.014220][ T8563] bridge_slave_0: entered allmulticast mode [ 397.043455][ T8563] bridge_slave_0: entered promiscuous mode [ 398.441234][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.479723][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.525425][ T8563] bridge_slave_1: entered allmulticast mode [ 398.548039][ T8563] bridge_slave_1: entered promiscuous mode [ 398.615507][ T2977] hsr_slave_0: left promiscuous mode [ 398.622833][ T2977] hsr_slave_1: left promiscuous mode [ 398.635638][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.643320][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.692576][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.721031][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.865498][ T8781] trusted_key: encrypted_key: insufficient parameters specified [ 399.401441][ T2977] veth1_macvtap: left promiscuous mode [ 399.407122][ T2977] veth0_macvtap: left promiscuous mode [ 399.412813][ T2977] veth1_vlan: left promiscuous mode [ 399.420157][ T2977] veth0_vlan: left promiscuous mode [ 400.789186][ T8792] netlink: 277 bytes leftover after parsing attributes in process `syz.2.640'. [ 401.667932][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 402.495867][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 405.813347][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.858882][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.886724][ T8844] siw: device registration error -23 [ 407.531372][ T8563] team0: Port device team_slave_0 added [ 407.573679][ T8853] mmap: syz.4.656 (8853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 408.514477][ T8563] team0: Port device team_slave_1 added [ 408.547788][ T8864] netlink: 'syz.4.656': attribute type 4 has an invalid length. [ 413.216568][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.296548][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 413.296566][ T30] audit: type=1326 audit(1745173040.857:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 413.435294][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.786523][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.849333][ T30] audit: type=1326 audit(1745173041.367:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 414.369922][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.377011][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.403281][ T30] audit: type=1326 audit(1745173041.367:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 414.667588][ T30] audit: type=1326 audit(1745173041.367:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 414.689148][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.983578][ T30] audit: type=1326 audit(1745173041.377:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 415.874699][ T30] audit: type=1326 audit(1745173041.377:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 416.020803][ T30] audit: type=1326 audit(1745173041.377:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 416.236768][ T30] audit: type=1326 audit(1745173041.377:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 416.270342][ T30] audit: type=1326 audit(1745173041.507:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 416.891922][ T8563] hsr_slave_0: entered promiscuous mode [ 416.992118][ T30] audit: type=1326 audit(1745173041.537:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fbd8e169 code=0x7ffc0000 [ 417.075890][ T8563] hsr_slave_1: entered promiscuous mode [ 417.082393][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.548438][ T8563] Cannot create hsr debugfs directory [ 417.578903][ T8921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.626076][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.668'. [ 417.861945][ T2977] IPVS: stop unused estimator thread 0... [ 421.659384][ T5878] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 422.185694][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.245171][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 422.260306][ T5878] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 422.319905][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.364518][ T5878] usb 5-1: config 0 descriptor?? [ 422.405143][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 422.806361][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 422.907103][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 422.941419][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 422.981688][ T5878] usb 5-1: media controller created [ 423.011980][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.027477][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 423.749806][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 423.763689][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 423.840868][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 423.905955][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 423.912952][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 423.992564][ T8563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.909341][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 424.935573][ T5909] dvb-usb: error while querying for an remote control event. [ 424.944188][ T5878] usb 5-1: USB disconnect, device number 6 [ 425.682492][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 425.815493][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 425.828553][ T5909] dvb-usb: error while querying for an remote control event. [ 425.886155][ T8563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.981170][ T8563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.171294][ T8563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.875800][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 427.103994][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.118337][ T5830] Bluetooth: hci0: adv larger than maximum supported [ 427.118367][ T5830] Bluetooth: hci0: Malformed LE Event: 0x0d [ 427.251475][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.270537][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.277809][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.004544][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 428.330646][ T9042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.092188][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.099407][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.785933][ T9066] siw: device registration error -23 [ 431.242705][ T9071] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 433.983652][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.866724][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.885094][ T9146] batadv_slave_1: entered promiscuous mode [ 437.939447][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 438.069114][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.089595][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.100001][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.128322][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.953107][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.972773][ T9151] lo speed is unknown, defaulting to 1000 [ 440.069218][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081666][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.995688][ T5838] Bluetooth: hci0: adv larger than maximum supported [ 440.995740][ T5838] Bluetooth: hci0: Malformed LE Event: 0x0d [ 441.028333][ T9183] netlink: 116 bytes leftover after parsing attributes in process `syz.1.719'. [ 441.185943][ T5838] Bluetooth: hci3: command tx timeout [ 443.335521][ T5838] Bluetooth: hci3: command tx timeout [ 443.348439][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 443.348456][ T30] audit: type=1326 audit(1745173070.907:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9196 comm="syz.4.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x0 [ 445.368139][ T5830] Bluetooth: hci3: command tx timeout [ 445.875946][ T9189] tipc: New replicast peer: 255.255.255.255 [ 445.883213][ T9189] tipc: Enabled bearer , priority 10 [ 445.922358][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 448.756187][ T5830] Bluetooth: hci3: command tx timeout [ 450.363125][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.432304][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.048512][ T9151] bridge_slave_0: entered allmulticast mode [ 451.070592][ T9151] bridge_slave_0: entered promiscuous mode [ 451.178883][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.252026][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.279597][ T9151] bridge_slave_1: entered allmulticast mode [ 451.294809][ T9151] bridge_slave_1: entered promiscuous mode [ 452.207198][ T7312] bridge_slave_1: left allmulticast mode [ 452.325520][ T7312] bridge_slave_1: left promiscuous mode [ 452.356927][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.379484][ T7312] bridge_slave_0: left allmulticast mode [ 452.440619][ T7312] bridge_slave_0: left promiscuous mode [ 452.482616][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.645744][ T5880] IPVS: starting estimator thread 0... [ 453.887395][ T9299] IPVS: using max 28 ests per chain, 67200 per kthread [ 460.669531][ T7312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.681762][ T7312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.692725][ T7312] bond0 (unregistering): Released all slaves [ 461.139022][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.264838][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.409102][ T7312] hsr_slave_0: left promiscuous mode [ 461.519945][ T7312] hsr_slave_1: left promiscuous mode [ 461.882377][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.230897][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.231192][ T9393] Malformed UNC in devname [ 467.231192][ T9393] [ 467.237968][ T9393] CIFS: VFS: Malformed UNC in devname [ 469.454788][ T7312] team0 (unregistering): Port device team_slave_1 removed [ 471.761017][ T7312] team0 (unregistering): Port device team_slave_0 removed [ 474.017501][ T9441] Malformed UNC in devname [ 474.017501][ T9441] [ 474.024164][ T9441] CIFS: VFS: Malformed UNC in devname [ 478.470605][ T9486] Malformed UNC in devname [ 478.470605][ T9486] [ 478.477557][ T9486] CIFS: VFS: Malformed UNC in devname [ 479.784920][ T9151] team0: Port device team_slave_0 added [ 479.820249][ T9151] team0: Port device team_slave_1 added [ 480.855196][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.895399][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.985448][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.001697][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.035984][ T5830] Bluetooth: hci2: adv larger than maximum supported [ 481.036032][ T5830] Bluetooth: hci2: Malformed LE Event: 0x0d [ 481.077066][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.592323][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.034572][ T9151] hsr_slave_0: entered promiscuous mode [ 482.043912][ T9151] hsr_slave_1: entered promiscuous mode [ 482.062469][ T9151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.083000][ T9151] Cannot create hsr debugfs directory [ 485.415585][ T5877] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 486.227524][ T5877] usb 5-1: config 0 has no interfaces? [ 486.285871][ T5877] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 486.325580][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.333644][ T5877] usb 5-1: Product: syz [ 486.648133][ T9576] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 487.136533][ T5877] usb 5-1: Manufacturer: syz [ 487.141209][ T5877] usb 5-1: SerialNumber: syz [ 487.307537][ T5877] usb 5-1: config 0 descriptor?? [ 488.514012][ T9151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 488.542812][ T9151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 488.578239][ T9151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 488.858736][ T9151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 490.669404][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.828728][ T9151] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.869271][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.876499][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.089188][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.096386][ T7312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.204066][ T9] usb 5-1: USB disconnect, device number 7 [ 492.263114][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.429738][ T9622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.538295][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.808436][ T9639] netlink: 64 bytes leftover after parsing attributes in process `syz.3.819'. [ 493.846067][ T9639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.819'. [ 493.855185][ T9639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.819'. [ 494.250629][ T9652] syz.2.821: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 494.266299][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.2.821 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 494.266334][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 494.266357][ T9652] Call Trace: [ 494.266365][ T9652] [ 494.266373][ T9652] dump_stack_lvl+0x241/0x360 [ 494.266405][ T9652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.266434][ T9652] ? __wake_up_klogd+0xcc/0x110 [ 494.266462][ T9652] warn_alloc+0x27c/0x410 [ 494.266487][ T9652] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 494.266512][ T9652] ? __pfx_warn_alloc+0x10/0x10 [ 494.266542][ T9652] ? __pfx___schedule+0x10/0x10 [ 494.266570][ T9652] ? __x64_sys_setsockopt+0x187/0x210 [ 494.266604][ T9652] __vmalloc_node_range_noprof+0x128/0x1390 [ 494.266633][ T9652] ? rcu_is_watching+0x15/0xb0 [ 494.266650][ T9652] ? trace_irq_disable+0x3b/0x120 [ 494.266670][ T9652] ? preempt_schedule_irq+0x145/0x1c0 [ 494.266705][ T9652] ? irqentry_exit+0x63/0x90 [ 494.266723][ T9652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 494.266759][ T9652] vmalloc_user_noprof+0x74/0x80 [ 494.266786][ T9652] ? xskq_create+0xb6/0x170 [ 494.266808][ T9652] xskq_create+0xb6/0x170 [ 494.266833][ T9652] xsk_init_queue+0xa1/0x100 [ 494.266859][ T9652] xsk_setsockopt+0x449/0x840 [ 494.266884][ T9652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 494.266905][ T9652] ? rcu_is_watching+0x15/0xb0 [ 494.266923][ T9652] ? rcu_read_unlock_special+0x49b/0x570 [ 494.266947][ T9652] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 494.266971][ T9652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 494.266991][ T9652] do_sock_setsockopt+0x3b1/0x710 [ 494.267020][ T9652] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 494.267041][ T9652] ? __fget_files+0x2a/0x420 [ 494.267067][ T9652] ? __fget_files+0x39d/0x420 [ 494.267084][ T9652] ? __fget_files+0x2a/0x420 [ 494.267113][ T9652] __x64_sys_setsockopt+0x187/0x210 [ 494.267144][ T9652] do_syscall_64+0xf3/0x210 [ 494.267162][ T9652] ? clear_bhb_loop+0x45/0xa0 [ 494.267183][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.267199][ T9652] RIP: 0033:0x7fa4ca78e169 [ 494.267215][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.267229][ T9652] RSP: 002b:00007fa4cb55d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 494.267248][ T9652] RAX: ffffffffffffffda RBX: 00007fa4ca9b6160 RCX: 00007fa4ca78e169 [ 494.267260][ T9652] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 494.267270][ T9652] RBP: 00007fa4ca810a68 R08: 0000000000000052 R09: 0000000000000000 [ 494.267281][ T9652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.267291][ T9652] R13: 0000000000000000 R14: 00007fa4ca9b6160 R15: 00007fff25e423e8 [ 494.267321][ T9652] [ 494.267391][ T9652] Mem-Info: [ 494.544657][ T9652] active_anon:346 inactive_anon:8216 isolated_anon:0 [ 494.544657][ T9652] active_file:17262 inactive_file:37465 isolated_file:0 [ 494.544657][ T9652] unevictable:768 dirty:253 writeback:0 [ 494.544657][ T9652] slab_reclaimable:10151 slab_unreclaimable:112931 [ 494.544657][ T9652] mapped:32686 shmem:4304 pagetables:997 [ 494.544657][ T9652] sec_pagetables:0 bounce:0 [ 494.544657][ T9652] kernel_misc_reclaimable:0 [ 494.544657][ T9652] free:1308932 free_pcp:894 free_cma:0 [ 494.590480][ T9652] Node 0 active_anon:1384kB inactive_anon:32864kB active_file:68976kB inactive_file:149860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130744kB dirty:1012kB writeback:0kB shmem:15680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11904kB pagetables:3988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 494.624235][ T9652] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 494.655504][ T9652] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.682603][ T9652] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 494.688864][ T9652] Node 0 DMA32 free:1314320kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:1380kB inactive_anon:32860kB active_file:68884kB inactive_file:149848kB unevictable:1536kB writepending:1012kB present:3129332kB managed:2547772kB mlocked:0kB bounce:0kB free_pcp:1528kB local_pcp:772kB free_cma:0kB [ 494.719506][ T9652] lowmem_reserve[]: 0 0 0 0 0 [ 494.724192][ T9652] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.750796][ T9652] lowmem_reserve[]: 0 0 0 0 0 [ 494.755528][ T9652] Node 1 Normal free:3906048kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 494.784998][ T9652] lowmem_reserve[]: 0 0 0 0 0 [ 494.790218][ T9652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 494.802966][ T9652] Node 0 DMA32: 91*4kB (UME) 110*8kB (UE) 594*16kB (UME) 651*32kB (UME) 651*64kB (UME) 115*128kB (UM) 34*256kB (UM) 40*512kB (UM) 21*1024kB (UME) 4*2048kB (UME) 285*4096kB (UM) = 1314204kB [ 494.821597][ T9652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 494.833077][ T9652] Node 1 Normal: 196*4kB (UE) 56*8kB (UME) 41*16kB (UME) 215*32kB (UME) 101*64kB (UME) 27*128kB (UME) 15*256kB (UME) 9*512kB (UME) 2*1024kB (ME) 5*2048kB (UME) 944*4096kB (M) = 3906048kB [ 494.851579][ T9652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.861134][ T9652] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 494.870429][ T9652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.879970][ T9652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 494.889740][ T9652] 59031 total pagecache pages [ 494.894422][ T9652] 0 pages in swap cache [ 494.898581][ T9652] Free swap = 124996kB [ 494.902709][ T9652] Total swap = 124996kB [ 494.906858][ T9652] 2097051 pages RAM [ 494.910639][ T9652] 0 pages HighMem/MovableOnly [ 494.915284][ T9652] 428449 pages reserved [ 494.919445][ T9652] 0 pages cma reserved [ 496.228517][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.747286][ T9698] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 498.753851][ T9698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.761600][ T9698] vhci_hcd vhci_hcd.0: Device attached [ 499.012186][ T9697] block nbd4: not configured, cannot reconfigure [ 499.405544][ T10] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 500.370483][ T9713] use of bytesused == 0 is deprecated and will be removed in the future, [ 500.396578][ T9713] use the actual size instead. [ 500.524499][ T9709] kAFS: unable to lookup cell '.,' [ 501.596745][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.604091][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.254866][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.264119][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.273419][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.282156][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.289953][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.696402][ T9750] Cannot find del_set index 4 as target [ 505.520305][ T5830] Bluetooth: hci3: command tx timeout [ 507.380657][ T9741] lo speed is unknown, defaulting to 1000 [ 507.590234][ T9774] Malformed UNC in devname [ 507.590234][ T9774] [ 507.597042][ T9774] CIFS: VFS: Malformed UNC in devname [ 507.870966][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 507.874092][ T5830] Bluetooth: hci3: command tx timeout [ 509.806976][ T9795] input: syz1 as /devices/virtual/input/input7 [ 509.969539][ T5830] Bluetooth: hci3: command tx timeout [ 511.985863][ T5830] Bluetooth: hci3: command tx timeout [ 517.421604][ T9847] ubi31: attaching mtd0 [ 517.433371][ T9847] ubi31: scanning is finished [ 517.438318][ T9847] ubi31: empty MTD device detected [ 517.582440][ T9741] chnl_net:caif_netlink_parms(): no params data found [ 517.945962][ T2865] bridge_slave_1: left allmulticast mode [ 518.032628][ T2865] bridge_slave_1: left promiscuous mode [ 518.104713][ T2865] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.128096][ T9847] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 518.153421][ T9847] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 518.184175][ T9847] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 518.212535][ T9847] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 518.241479][ T9847] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 518.265430][ T9847] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 518.293971][ T9847] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3729745515 [ 518.349977][ T9847] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 518.366741][ T2865] bridge_slave_0: left allmulticast mode [ 518.372442][ T2865] bridge_slave_0: left promiscuous mode [ 518.399440][ T9871] ubi31: background thread "ubi_bgt31d" started, PID 9871 [ 518.434012][ T2865] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.856871][ T9882] siw: device registration error -23 [ 520.834753][ T2865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.852235][ T2865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.865006][ T2865] bond0 (unregistering): Released all slaves [ 522.504428][ T9890] delete_channel: no stack [ 522.865950][ T5879] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 523.118668][ T5879] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 523.236580][ T5879] usb 2-1: config 150 has no interface number 0 [ 523.315091][ T5879] usb 2-1: config 150 interface 204 has no altsetting 0 [ 524.294282][ T5879] usb 2-1: config 150 interface 1 has no altsetting 0 [ 524.334201][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.350930][ T5879] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 524.361432][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.495256][ T9741] bridge_slave_0: entered allmulticast mode [ 524.501524][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.514810][ T5879] usb 2-1: Product: syz [ 524.522753][ T9741] bridge_slave_0: entered promiscuous mode [ 524.532865][ T5879] usb 2-1: Manufacturer: syz [ 524.559198][ T5879] usb 2-1: SerialNumber: syz [ 525.766169][ T2865] hsr_slave_0: left promiscuous mode [ 527.345830][ T2865] hsr_slave_1: left promiscuous mode [ 527.636676][ T2865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.662999][ T2865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.989254][ T9919] overlayfs: failed to clone upperpath [ 528.586919][ T5879] usb 2-1: can't set config #150, error -71 [ 528.636942][ T5879] usb 2-1: USB disconnect, device number 5 [ 530.390724][ T9940] netlink: 244 bytes leftover after parsing attributes in process `syz.2.876'. [ 530.507707][ T9942] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 533.223398][ T2865] team0 (unregistering): Port device team_slave_1 removed [ 533.494515][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 533.980239][ T2865] team0 (unregistering): Port device team_slave_0 removed [ 535.015665][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.023131][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.031232][ T9741] bridge_slave_1: entered allmulticast mode [ 535.044911][ T9741] bridge_slave_1: entered promiscuous mode [ 535.609924][ T9980] 9pnet_virtio: no channels available for device [ 536.391447][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.411147][ T9974] netlink: 'syz.2.887': attribute type 12 has an invalid length. [ 537.286000][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.760672][ T9741] team0: Port device team_slave_0 added [ 538.804207][ T9741] team0: Port device team_slave_1 added [ 538.909979][T10014] x_tables: duplicate underflow at hook 2 [ 538.932102][ T30] audit: type=1326 audit(1745173166.487:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.2.893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x0 [ 539.170688][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.784951][T10009] bond0: (slave rose0): Enslaving as an active interface with an up link [ 539.957994][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.990595][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.129388][ T9741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.143346][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.151211][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.189268][ T9741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.693413][T10040] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 541.719895][T10040] CIFS mount error: No usable UNC path provided in device string! [ 541.719895][T10040] [ 541.943695][T10041] xt_hashlimit: size too large, truncated to 1048576 [ 541.950813][T10041] xt_hashlimit: overflow, try lower: 0/0 [ 541.963031][T10040] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 542.645743][ T9741] hsr_slave_0: entered promiscuous mode [ 542.706773][ T9741] hsr_slave_1: entered promiscuous mode [ 543.831617][ T9741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.840255][ T9741] Cannot create hsr debugfs directory [ 544.786184][T10062] hub 9-0:1.0: USB hub found [ 544.792390][T10062] hub 9-0:1.0: 1 port detected [ 547.494932][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.515594][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.640325][T10076] veth0_vlan: entered allmulticast mode [ 547.804788][T10079] siw: device registration error -23 [ 548.971192][T10101] usb usb1: usbfs: process 10101 (syz.3.913) did not claim interface 0 before use [ 549.478358][ T5830] Bluetooth: hci1: command tx timeout [ 551.274332][T10123] Malformed UNC in devname [ 551.274332][T10123] [ 551.281374][T10123] CIFS: VFS: Malformed UNC in devname [ 552.801658][T10118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.953901][ T9741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.164672][T10144] 9pnet_fd: Insufficient options for proto=fd [ 553.182762][ T9741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.888892][ T9741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.937309][ T9741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.283500][T10155] netlink: 104 bytes leftover after parsing attributes in process `syz.3.923'. [ 555.689610][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.470919][ T9741] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.527123][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.534414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.778136][T10176] overlayfs: failed to clone upperpath [ 557.584458][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.591773][ T7312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.036104][T10183] Illegal XDP return value 4294967294 on prog (id 271) dev N/A, expect packet loss! [ 559.893319][T10193] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.613117][ T9775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.628595][ T9775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.637774][ T9775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.686077][ T9775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.716630][ T9775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.954151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.960899][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.987050][T10218] lo speed is unknown, defaulting to 1000 [ 564.785549][ T5830] Bluetooth: hci5: command tx timeout [ 566.236322][T10255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.908529][ T5830] Bluetooth: hci5: command tx timeout [ 569.002439][ T5830] Bluetooth: hci5: command tx timeout [ 570.045264][T10218] chnl_net:caif_netlink_parms(): no params data found [ 571.027244][ T5830] Bluetooth: hci5: command tx timeout [ 573.583041][ T7309] bridge_slave_1: left allmulticast mode [ 573.609360][ T7309] bridge_slave_1: left promiscuous mode [ 573.630208][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.751742][ T7309] bridge_slave_0: left allmulticast mode [ 573.935561][T10324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.972868][ T7309] bridge_slave_0: left promiscuous mode [ 574.058663][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.770318][T10341] siw: device registration error -23 [ 580.352401][ T7309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.382223][ T7309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.598799][ T7309] bond0 (unregistering): Released all slaves [ 582.502585][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.525517][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.543105][T10218] bridge_slave_0: entered allmulticast mode [ 582.557024][T10218] bridge_slave_0: entered promiscuous mode [ 582.574704][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.592707][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.772289][T10218] bridge_slave_1: entered allmulticast mode [ 582.780115][T10218] bridge_slave_1: entered promiscuous mode [ 582.808518][ T7309] hsr_slave_0: left promiscuous mode [ 582.815132][ T7309] hsr_slave_1: left promiscuous mode [ 583.780475][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.834037][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.885475][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 584.765892][ T5880] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 584.774223][ T5880] usb 5-1: config 0 has no interface number 0 [ 584.805791][ T5880] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=b1.52 [ 584.816576][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.824950][ T5880] usb 5-1: Product: syz [ 584.838267][ T5880] usb 5-1: Manufacturer: syz [ 584.865142][ T5880] usb 5-1: SerialNumber: syz [ 584.947546][ T5880] usb 5-1: config 0 descriptor?? [ 584.965081][ T5880] cypress_m8 5-1:0.8: HID->COM RS232 Adapter converter detected [ 584.997101][ T5880] cyphidcom ttyUSB0: required endpoint is missing [ 585.733801][T10382] program syz.4.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.866643][ T5880] usb 5-1: USB disconnect, device number 8 [ 585.892498][ T5880] cypress_m8 5-1:0.8: device disconnected [ 585.977882][ T7309] team0 (unregistering): Port device team_slave_1 removed [ 586.032362][ T7309] team0 (unregistering): Port device team_slave_0 removed [ 586.712025][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 588.854542][T10435] Malformed UNC in devname [ 588.854542][T10435] [ 588.861633][T10435] CIFS: VFS: Malformed UNC in devname [ 589.240179][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'. [ 589.329982][T10442] --map-set only usable from mangle table [ 593.250185][T10472] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 593.268915][T10462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 593.313117][T10218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.484599][T10218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.583212][T10481] Malformed UNC in devname [ 593.583212][T10481] [ 593.591617][T10481] CIFS: VFS: Malformed UNC in devname [ 593.702145][T10484] Malformed UNC in devname [ 593.702145][T10484] [ 593.709162][T10484] CIFS: VFS: Malformed UNC in devname [ 594.969559][T10218] team0: Port device team_slave_0 added [ 594.980772][T10492] Invalid ELF header magic: != ELF [ 595.089944][T10218] team0: Port device team_slave_1 added [ 595.522560][T10499] trusted_key: syz.3.998 sent an empty control message without MSG_MORE. [ 596.571220][T10218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.607316][T10510] CIFS: Unable to determine destination address [ 596.614523][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.643337][T10218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.666310][T10218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.673340][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.700436][T10218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.432888][T10218] hsr_slave_0: entered promiscuous mode [ 597.524936][T10218] hsr_slave_1: entered promiscuous mode [ 597.561114][T10218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.569769][T10531] xt_l2tp: missing protocol rule (udp|l2tpip) [ 597.606260][T10218] Cannot create hsr debugfs directory [ 602.448143][ T5975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 602.855685][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 602.901626][ T5975] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 603.155779][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.164562][ T5975] usb 4-1: Product: syz [ 603.172954][ T5975] usb 4-1: Manufacturer: syz [ 603.179252][ T5975] usb 4-1: SerialNumber: syz [ 603.298264][ T5975] usb 4-1: config 0 descriptor?? [ 603.709437][ T5975] as10x_usb: device has been detected [ 603.722080][ T5975] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 603.908034][ T5975] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 604.904268][ T5975] as10x_usb: error during firmware upload part1 [ 604.966943][ T5975] Registered device Sky IT Digital Key (green led) [ 605.113402][ T8692] usb 4-1: USB disconnect, device number 3 [ 605.255031][ T8692] Unregistered device Sky IT Digital Key (green led) [ 605.537682][ T8692] as10x_usb: device has been disconnected [ 605.582863][T10218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.661023][T10624] ======================================================= [ 605.661023][T10624] WARNING: The mand mount option has been deprecated and [ 605.661023][T10624] and is ignored by this kernel. Remove the mand [ 605.661023][T10624] option from the mount to silence this warning. [ 605.661023][T10624] ======================================================= [ 606.150033][T10218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 606.240231][T10218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 606.359650][T10218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 606.964411][T10637] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 607.537858][T10218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.596733][T10218] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.631627][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.638854][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.751573][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.758818][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.691238][T10218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.702024][T10218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.205941][T10665] netlink: 'syz.3.1033': attribute type 17 has an invalid length. [ 611.583828][ T8692] IPVS: starting estimator thread 0... [ 611.786024][T10670] IPVS: using max 38 ests per chain, 91200 per kthread [ 613.675952][T10700] Malformed UNC in devname [ 613.675952][T10700] [ 613.682630][T10700] CIFS: VFS: Malformed UNC in devname [ 613.737772][T10218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.371289][T10218] veth0_vlan: entered promiscuous mode [ 614.421501][T10218] veth1_vlan: entered promiscuous mode [ 614.524372][T10218] veth0_macvtap: entered promiscuous mode [ 614.661404][T10218] veth1_macvtap: entered promiscuous mode [ 614.702637][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 614.741959][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.875163][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.911391][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.459115][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.482998][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.683940][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.754837][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 615.764092][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 616.238448][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.262402][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.331127][T10218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.554522][T10722] ipvlan2: entered allmulticast mode [ 616.559967][T10722] veth0_vlan: entered allmulticast mode [ 616.608634][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.624437][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.634872][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.887717][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.025492][T10218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.036265][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.047984][T10218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.254874][T10737] evm: overlay not supported [ 621.441490][ T9775] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 622.330841][T10784] Malformed UNC in devname [ 622.330841][T10784] [ 622.337722][T10784] CIFS: VFS: Malformed UNC in devname [ 623.422690][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.443953][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.457188][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.466016][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.474769][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.824400][T10795] siw: device registration error -23 [ 623.997412][T10788] lo speed is unknown, defaulting to 1000 [ 624.396069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.545480][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.173364][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1056'. [ 625.507268][ T9775] Bluetooth: hci3: command tx timeout [ 627.653156][ T9775] Bluetooth: hci3: command tx timeout [ 628.857954][ T7312] bridge_slave_1: left allmulticast mode [ 628.863648][ T7312] bridge_slave_1: left promiscuous mode [ 628.870186][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.694869][ T9775] Bluetooth: hci3: command tx timeout [ 630.369076][ T7312] bridge_slave_0: left allmulticast mode [ 630.393729][ T7312] bridge_slave_0: left promiscuous mode [ 630.429008][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.771583][T10852] siw: device registration error -23 [ 630.894146][ T9] libceph: connect (1)[c::]:6789 error -101 [ 631.867933][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 631.885046][T10853] ceph: No mds server is up or the cluster is laggy [ 631.892901][ T9775] Bluetooth: hci3: command tx timeout [ 632.169600][T10866] netlink: 'syz.3.1067': attribute type 4 has an invalid length. [ 632.265812][T10866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1067'. [ 635.288422][ T7312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.651139][ T7312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.779624][ T7312] bond0 (unregistering): Released all slaves [ 636.091565][T10788] chnl_net:caif_netlink_parms(): no params data found [ 637.300133][T10919] overlayfs: failed to clone upperpath [ 640.317002][T10944] xt_l2tp: missing protocol rule (udp|l2tpip) [ 640.597762][T10946] netlink: 'syz.2.1084': attribute type 1 has an invalid length. [ 640.657290][ T7312] hsr_slave_0: left promiscuous mode [ 640.726635][ T7312] hsr_slave_1: left promiscuous mode [ 640.734620][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1084'. [ 640.806629][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.824565][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.709742][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.746833][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.099116][ T7312] veth1_macvtap: left promiscuous mode [ 642.133182][ T7312] veth0_macvtap: left promiscuous mode [ 642.170996][ T7312] veth1_vlan: left promiscuous mode [ 642.214392][ T7312] veth0_vlan: left promiscuous mode [ 642.553973][T10972] siw: device registration error -23 [ 643.393336][ T7312] team0 (unregistering): Port device team_slave_1 removed [ 643.441075][ T7312] team0 (unregistering): Port device team_slave_0 removed [ 643.828733][T10946] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 647.756038][T11005] netlink: 'syz.1.1094': attribute type 23 has an invalid length. [ 648.158324][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.166249][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.173495][T10788] bridge_slave_0: entered allmulticast mode [ 648.207573][T10788] bridge_slave_0: entered promiscuous mode [ 648.265084][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.295936][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.321376][T10788] bridge_slave_1: entered allmulticast mode [ 648.503163][T10788] bridge_slave_1: entered promiscuous mode [ 648.876079][T10788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.910317][T10788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.401636][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 649.667625][T11039] siw: device registration error -23 [ 649.800075][T10788] team0: Port device team_slave_0 added [ 649.848096][T11034] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1099'. [ 650.000537][T10788] team0: Port device team_slave_1 added [ 651.863974][T11064] Malformed UNC in devname [ 651.863974][T11064] [ 651.879942][T11064] CIFS: VFS: Malformed UNC in devname [ 652.541314][T11069] overlayfs: failed to resolve './file0': -40 [ 652.706574][T10788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.716345][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.060172][T10788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.084503][T10788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.149194][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.291885][T10788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.999370][T10788] hsr_slave_0: entered promiscuous mode [ 655.021171][T10788] hsr_slave_1: entered promiscuous mode [ 655.153957][T10788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.203797][T10788] Cannot create hsr debugfs directory [ 655.916155][ T5879] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 656.078989][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.240320][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 656.276438][ T5879] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 656.314333][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.934780][ T5879] usb 5-1: config 0 descriptor?? [ 656.947143][ T5879] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 656.953921][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 656.969551][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 656.994859][ T5879] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 657.070138][ T5879] usb 5-1: media controller created [ 657.087358][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.178750][T11095] dvb-usb: bulk message failed: -22 (3/0) [ 657.297201][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 657.303329][ T5879] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 657.314713][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 657.328565][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 657.361404][ T5879] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 657.517235][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 657.551523][ T5877] dvb-usb: error while querying for an remote control event. [ 658.285441][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 658.306700][ T9] usb 5-1: USB disconnect, device number 9 [ 658.350406][ T5879] dvb-usb: error while querying for an remote control event. [ 659.282946][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 662.266743][T11146] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 11146 comm: syz.2.1119) [ 662.301813][ T30] audit: type=1800 audit(1745173289.837:138): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1119" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=30367 res=0 errno=0 [ 662.512950][T10788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.578309][T10788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 662.831145][T10788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 664.112952][T10788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 665.204963][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1126'. [ 667.190451][T10788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.276232][T10788] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.304100][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.311392][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.588213][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.595516][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.268848][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'. [ 668.300485][T10788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 668.319104][T10788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.851366][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1134'. [ 670.159652][T11219] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 670.572268][T10788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.013974][T11230] vlan2: entered promiscuous mode [ 671.019450][T11230] veth1_to_batadv: entered promiscuous mode [ 671.364559][T11224] netlink: 'syz.2.1138': attribute type 4 has an invalid length. [ 671.418139][T11229] xt_CT: No such helper "pptp" [ 671.482510][T11189] syz.3.1129 (11189): drop_caches: 2 [ 675.425838][ T9775] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 675.611746][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 676.048184][T10788] veth0_vlan: entered promiscuous mode [ 676.060452][T10788] veth1_vlan: entered promiscuous mode [ 676.155817][T10788] veth0_macvtap: entered promiscuous mode [ 676.206022][T10788] veth1_macvtap: entered promiscuous mode [ 676.275495][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.295377][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.461379][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.473452][ T5879] usb 5-1: config 0 has no interfaces? [ 676.626666][T11289] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 676.638551][T11289] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 677.020785][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.031260][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.042913][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.053414][ T5879] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 677.068012][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.078570][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.103658][ T5879] usb 5-1: Product: syz [ 677.111621][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.125771][ T5879] usb 5-1: Manufacturer: syz [ 677.130464][ T5879] usb 5-1: SerialNumber: syz [ 677.141934][T10788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.352114][ T5879] usb 5-1: config 0 descriptor?? [ 677.466954][T11301] overlayfs: failed to clone upperpath [ 678.028109][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.040704][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.077644][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.092402][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.105896][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.116934][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.128952][T10788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.144437][T10788] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.156084][T10788] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.164883][T10788] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.205834][T10788] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.021452][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 679.229291][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 679.252414][T10865] usb 5-1: USB disconnect, device number 10 [ 682.624832][ T6361] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.578111][ T30] audit: type=1326 audit(1745173310.537:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 685.314803][ T30] audit: type=1326 audit(1745173310.537:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 685.375526][ T30] audit: type=1326 audit(1745173310.547:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.017814][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.028992][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.108709][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.146235][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.160840][ T30] audit: type=1326 audit(1745173310.547:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.182928][ T30] audit: type=1326 audit(1745173310.547:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.205098][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.212616][ T30] audit: type=1326 audit(1745173310.547:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.235108][ T30] audit: type=1326 audit(1745173310.557:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.257503][ T30] audit: type=1326 audit(1745173310.557:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.284276][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.291738][ T30] audit: type=1326 audit(1745173310.557:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.314041][ T30] audit: type=1326 audit(1745173310.557:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11354 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878a78e169 code=0x7ffc0000 [ 686.339996][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.374471][ T6361] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.518965][T11377] lo speed is unknown, defaulting to 1000 [ 687.755699][T10865] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 687.937564][T10865] usb 2-1: No LPM exit latency info found, disabling LPM. [ 687.947024][ T6361] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.986362][T10865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 688.486596][ T5830] Bluetooth: hci3: command tx timeout [ 688.613385][T10865] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.617720][T11405] overlayfs: failed to clone upperpath [ 689.690696][T10865] usb 2-1: string descriptor 0 read error: -71 [ 689.699577][ T6361] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.714156][T10865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 689.736474][T10865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.948425][T11412] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1174'. [ 690.428298][T10865] usb 2-1: can't set config #1, error -71 [ 690.463694][T10865] usb 2-1: USB disconnect, device number 6 [ 690.555603][ T5830] Bluetooth: hci3: command tx timeout [ 692.474712][ T6361] bridge_slave_1: left allmulticast mode [ 692.503180][ T6361] bridge_slave_1: left promiscuous mode [ 692.665578][ T5830] Bluetooth: hci3: command tx timeout [ 693.045830][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.207746][ T6361] bridge_slave_0: left allmulticast mode [ 693.247482][ T6361] bridge_slave_0: left promiscuous mode [ 693.253278][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.046145][T11453] Invalid source name [ 694.050173][T11453] UBIFS error (pid: 11453): cannot open "./file0", error -22 [ 694.705613][ T5830] Bluetooth: hci3: command tx timeout [ 696.651301][T11473] trusted_key: encrypted_key: key user:syz not found [ 698.525697][ T6361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.543775][ T6361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.554958][ T6361] bond0 (unregistering): Released all slaves [ 699.404017][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1191'. [ 699.435797][ T5830] Bluetooth: hci3: command tx timeout [ 700.401490][ T6361] hsr_slave_0: left promiscuous mode [ 700.547838][ T6361] hsr_slave_1: left promiscuous mode [ 700.603362][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.687454][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.709074][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.718448][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.764003][ T6361] veth1_macvtap: left promiscuous mode [ 700.898286][ T6361] veth0_macvtap: left promiscuous mode [ 700.918434][ T6361] veth1_vlan: left promiscuous mode [ 700.949336][ T6361] veth0_vlan: left promiscuous mode [ 707.106036][ T6361] team0 (unregistering): Port device team_slave_1 removed [ 707.571283][ T6361] team0 (unregistering): Port device team_slave_0 removed [ 710.785012][T11377] chnl_net:caif_netlink_parms(): no params data found [ 714.758964][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.811518][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.846089][T11377] bridge_slave_0: entered allmulticast mode [ 714.950588][T11377] bridge_slave_0: entered promiscuous mode [ 716.418730][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.434770][ T5879] IPVS: starting estimator thread 0... [ 716.450758][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.465816][T11377] bridge_slave_1: entered allmulticast mode [ 716.500168][T11377] bridge_slave_1: entered promiscuous mode [ 716.545636][T11604] IPVS: using max 34 ests per chain, 81600 per kthread [ 718.262487][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.699849][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.810365][T11626] ALSA: mixer_oss: invalid OSS volume '' [ 720.003882][T11377] team0: Port device team_slave_0 added [ 720.043544][T11377] team0: Port device team_slave_1 added [ 720.187095][T11647] x_tables: ip_tables: osf match: only valid for protocol 6 [ 720.296018][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.482665][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.198715][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 721.198734][ T30] audit: type=1800 audit(1745173348.137:153): pid=11654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1222" name="SYSV00000000" dev="tmpfs" ino=13 res=0 errno=0 [ 721.459117][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.069725][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.087674][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.671802][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.066368][T11377] hsr_slave_0: entered promiscuous mode [ 725.853452][T11377] hsr_slave_1: entered promiscuous mode [ 725.905616][T11377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.974531][T11377] Cannot create hsr debugfs directory [ 726.323266][T11696] overlayfs: failed to clone upperpath [ 729.251179][T11721] mmap: syz.3.1236 (11721): VmData 37613568 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 732.056719][T11758] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 732.675456][T11377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 732.732604][T11377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 732.765943][T11377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 732.773930][ T5830] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 732.891024][T11377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 732.949917][T11761] 9pnet: p9_errstr2errno: server reported unknown error ¤ŃĹl0î„&IŘü [ 733.211849][T11763] siw: device registration error -23 [ 733.502967][T11776] Malformed UNC in devname [ 733.502967][T11776] [ 733.509758][T11776] CIFS: VFS: Malformed UNC in devname [ 736.825647][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 736.835742][ T5830] Bluetooth: hci2: Injecting HCI hardware error event [ 736.845941][ T9775] Bluetooth: hci2: hardware error 0x00 [ 737.474778][T11377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.530435][T11377] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.600994][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.608170][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.654156][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.661316][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.071584][ T9775] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 740.539851][T11829] siw: device registration error -23 [ 742.006583][T11854] Malformed UNC in devname [ 742.006583][T11854] [ 742.013306][T11854] CIFS: VFS: Malformed UNC in devname [ 742.452636][T11855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 744.918588][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 744.931395][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 744.956200][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 744.973956][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 744.990162][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 746.387415][T11878] lo speed is unknown, defaulting to 1000 [ 746.659430][T11910] Malformed UNC in devname [ 746.659430][T11910] [ 746.666340][T11910] CIFS: VFS: Malformed UNC in devname [ 747.038815][T11905] siw: device registration error -23 [ 747.063892][ T9775] Bluetooth: hci3: command tx timeout [ 747.270018][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.276602][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.131337][ T9775] Bluetooth: hci3: command tx timeout [ 749.717850][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 749.844939][T11951] input: syz1 as /devices/virtual/input/input9 [ 750.022708][T11953] Invalid source name [ 750.937257][ T5879] usb 5-1: config 0 has no interfaces? [ 750.945242][ T5879] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 750.957777][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.979081][T11878] chnl_net:caif_netlink_parms(): no params data found [ 751.054340][ T5879] usb 5-1: Product: syz [ 751.087811][ T5879] usb 5-1: Manufacturer: syz [ 751.281016][ T9775] Bluetooth: hci3: command tx timeout [ 751.326953][ T5879] usb 5-1: SerialNumber: syz [ 752.297809][ T6361] bridge_slave_1: left allmulticast mode [ 752.303493][ T6361] bridge_slave_1: left promiscuous mode [ 752.324438][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.335965][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.465846][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.507675][ T5879] usb 5-1: config 0 descriptor?? [ 752.567458][ T6361] bridge_slave_0: left allmulticast mode [ 752.595658][ T6361] bridge_slave_0: left promiscuous mode [ 752.822789][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.865765][ T5878] usb 5-1: USB disconnect, device number 11 [ 753.345542][ T9775] Bluetooth: hci3: command tx timeout [ 755.360015][T11998] Malformed UNC in devname [ 755.360015][T11998] [ 755.366741][T11998] CIFS: VFS: Malformed UNC in devname [ 756.939926][T12015] overlayfs: failed to clone lowerpath [ 756.959132][T12015] overlayfs: failed to clone upperpath [ 758.284505][T12031] overlayfs: failed to resolve './file0': -40 [ 761.608782][T12047] xt_l2tp: missing protocol rule (udp|l2tpip) [ 762.336916][T12056] Malformed UNC in devname [ 762.336916][T12056] [ 762.359428][T12056] CIFS: VFS: Malformed UNC in devname [ 763.345702][ T6361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.365766][ T6361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.376775][ T6361] bond0 (unregistering): Released all slaves [ 763.485770][T12063] siw: device registration error -23 [ 764.222963][T12011] syz_tun: entered allmulticast mode [ 764.237949][T12011] syz_tun: left allmulticast mode [ 764.271387][T12022] dvmrp1: entered allmulticast mode [ 764.517008][T11878] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.524278][T11878] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.545614][T11878] bridge_slave_0: entered allmulticast mode [ 764.553344][T11878] bridge_slave_0: entered promiscuous mode [ 764.606561][T11878] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.613991][T11878] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.645650][T11878] bridge_slave_1: entered allmulticast mode [ 764.654012][T11878] bridge_slave_1: entered promiscuous mode [ 765.972132][ T6361] hsr_slave_0: left promiscuous mode [ 766.995796][ T6361] hsr_slave_1: left promiscuous mode [ 767.022218][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.239143][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.746796][T12101] siw: device registration error -23 [ 767.982404][ T9775] Bluetooth: hci1: command tx timeout [ 769.579103][ T6361] team0 (unregistering): Port device team_slave_1 removed [ 769.671761][ T6361] team0 (unregistering): Port device team_slave_0 removed [ 772.030425][T11878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.973048][T11878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.349964][T11878] team0: Port device team_slave_0 added [ 774.363175][T11878] team0: Port device team_slave_1 added [ 774.391919][T12150] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 776.758838][T11878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.859733][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.971409][T11878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.984689][T11878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.009481][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.009512][T11878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.016647][T12179] overlayfs: failed to clone upperpath [ 778.183523][T11878] hsr_slave_0: entered promiscuous mode [ 778.191772][T11878] hsr_slave_1: entered promiscuous mode [ 778.221862][T11878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.241885][T11878] Cannot create hsr debugfs directory [ 780.489489][T12211] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 784.005410][T12231] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1335'. [ 785.838868][T12251] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 786.582528][T12259] Malformed UNC in devname [ 786.582528][T12259] [ 786.589288][T12259] CIFS: VFS: Malformed UNC in devname [ 786.886121][T12257] ALSA: mixer_oss: invalid OSS volume '' [ 792.351980][T11878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 792.425714][T11878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 792.487446][T11878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 792.522555][T11878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 792.999046][T11878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.342658][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.482199][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 793.560236][T12329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 793.562208][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 793.632418][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 793.722104][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.729314][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.804191][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.811440][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.791285][T12350] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 794.820996][T12339] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 795.578853][T11878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.889696][ T9775] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 797.263983][T12390] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 798.219315][T11878] veth0_vlan: entered promiscuous mode [ 798.306592][T11878] veth1_vlan: entered promiscuous mode [ 798.410844][T11878] veth0_macvtap: entered promiscuous mode [ 798.449791][T11878] veth1_macvtap: entered promiscuous mode [ 799.103853][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.264464][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.435280][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.446724][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.456915][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.467608][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.716812][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.887711][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.988025][T11878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.663353][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.701858][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.738494][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.775743][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.805761][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.875593][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.084815][T11878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.155435][T12436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1371'. [ 802.675864][T11878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.688050][T11878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.696998][T11878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.706241][T11878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.851566][T12433] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 802.866749][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1371'. [ 802.875887][T12433] openvswitch: netlink: Missing key (keys=40, expected=80) [ 803.455069][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.540931][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.524378][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.885150][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 807.905684][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 807.926592][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 807.961283][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 807.991821][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 808.160710][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.230218][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.236834][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.341769][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 810.075532][ T5830] Bluetooth: hci3: command tx timeout [ 810.550720][T12525] overlayfs: missing 'lowerdir' [ 811.962702][T12501] team0 (unregistering): Port device team_slave_0 removed [ 811.983797][T12501] team0 (unregistering): Port device team_slave_1 removed [ 812.204707][ T5830] Bluetooth: hci3: command tx timeout [ 812.403268][T12493] lo speed is unknown, defaulting to 1000 [ 814.348991][ T5830] Bluetooth: hci3: command tx timeout [ 816.031286][T12566] xt_CT: No such helper "pptp" [ 816.259577][T12562] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 816.275025][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.294224][T12569] vlan2: entered promiscuous mode [ 816.299422][T12569] veth1_to_batadv: entered promiscuous mode [ 816.366721][ T13] bridge_slave_1: left allmulticast mode [ 816.372434][ T13] bridge_slave_1: left promiscuous mode [ 816.415611][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.518438][ T13] bridge_slave_0: left allmulticast mode [ 816.544222][ T13] bridge_slave_0: left promiscuous mode [ 816.551508][ T5830] Bluetooth: hci3: command tx timeout [ 816.574411][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.018084][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.027145][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1399'. [ 819.037555][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.049928][ T13] bond0 (unregistering): Released all slaves [ 819.103861][T12574] bond0: (slave batadv0): Releasing backup interface [ 819.123612][T12574] bridge_slave_0: left allmulticast mode [ 819.138369][T12574] bridge_slave_0: left promiscuous mode [ 819.154658][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.174832][T12574] bridge_slave_1: left allmulticast mode [ 819.184859][T12574] bridge_slave_1: left promiscuous mode [ 819.195287][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.209580][T12574] bond0: (slave bond_slave_0): Releasing backup interface [ 819.220789][T12574] bond0: (slave bond_slave_1): Releasing backup interface [ 819.241428][T12574] team0: Port device team_slave_0 removed [ 819.255061][T12574] team0: Port device team_slave_1 removed [ 819.261937][T12574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.269941][T12574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.279365][T12574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.292687][T12574] bond0: (slave wlan1): Releasing backup interface [ 819.541668][ T13] hsr_slave_0: left promiscuous mode [ 820.136410][ T13] hsr_slave_1: left promiscuous mode [ 820.176833][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.209670][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.234828][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.448188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.597596][T12622] overlayfs: failed to resolve './file0': -40 [ 823.050003][ T13] veth1_macvtap: left promiscuous mode [ 823.059870][ T13] veth0_macvtap: left promiscuous mode [ 823.071831][ T13] veth1_vlan: left promiscuous mode [ 824.034214][ T13] veth0_vlan: left promiscuous mode [ 824.942994][T12644] overlayfs: failed to clone upperpath [ 826.751466][ T13] team0 (unregistering): Port device team_slave_1 removed [ 826.805796][ T13] team0 (unregistering): Port device team_slave_0 removed [ 827.320673][T12493] chnl_net:caif_netlink_parms(): no params data found [ 830.296866][T12666] openvswitch: netlink: Message has 8 unknown bytes. [ 832.255940][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.272019][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.927239][T12493] bridge_slave_0: entered allmulticast mode [ 832.935542][T12493] bridge_slave_0: entered promiscuous mode [ 832.945752][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.953112][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.960528][T12493] bridge_slave_1: entered allmulticast mode [ 833.284863][T12692] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1416'. [ 833.712706][T12493] bridge_slave_1: entered promiscuous mode [ 834.912889][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.925868][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.808013][T12493] team0: Port device team_slave_0 added [ 836.886489][T12728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1425'. [ 837.094697][T12493] team0: Port device team_slave_1 added [ 838.475633][T12743] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.1426'. [ 839.217669][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.224679][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.896544][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.616835][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.665445][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.940794][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.532585][T12493] hsr_slave_0: entered promiscuous mode [ 842.729205][T12493] hsr_slave_1: entered promiscuous mode [ 842.846154][T12493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 842.867484][T12493] Cannot create hsr debugfs directory [ 850.700884][T12839] tmpfs: Unknown parameter 'siz˙˙˙˙' [ 851.078646][T12843] veth0_vlan: entered allmulticast mode [ 851.178372][T12843] veth0_vlan: left promiscuous mode [ 851.192793][T12843] veth0_vlan: entered promiscuous mode [ 853.190286][T12862] x_tables: ip_tables: ah match: only valid for protocol 51 [ 855.112371][T12872] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 857.595800][ T30] audit: type=1804 audit(1745174391.123:154): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1457" name="/newroot/324/file1" dev="fuse" ino=1 res=1 errno=0 [ 858.360436][ T30] audit: type=1800 audit(1745174391.123:155): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1457" name="/" dev="fuse" ino=1 res=0 errno=0 [ 859.599841][ T30] audit: type=1800 audit(1745174391.133:156): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1457" name="/" dev="fuse" ino=1 res=0 errno=0 [ 859.622387][T12493] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 859.866975][T12493] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 860.760989][T12493] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 860.831619][T12493] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 861.098173][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'. [ 863.750460][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.294657][T12944] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 864.303892][T12944] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 865.524528][ T30] audit: type=1326 audit(1745174399.083:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 865.546175][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.820385][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 865.829637][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'. [ 866.511132][ T30] audit: type=1326 audit(1745174399.083:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 866.532716][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.539884][ T30] audit: type=1326 audit(1745174399.083:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 866.776672][ T30] audit: type=1326 audit(1745174399.083:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 866.925609][ T30] audit: type=1326 audit(1745174399.083:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 867.051390][ T30] audit: type=1326 audit(1745174399.083:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 867.445764][ T30] audit: type=1326 audit(1745174399.083:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 867.990543][ T30] audit: type=1326 audit(1745174399.083:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 868.286717][ T30] audit: type=1326 audit(1745174399.083:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 868.975473][ T30] audit: type=1326 audit(1745174399.083:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12939 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ca78e169 code=0x7ffc0000 [ 868.997059][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.324986][ T9775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 869.352067][ T9775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 869.364972][ T9775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 869.365984][T12991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 869.396827][ T9775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 869.407276][ T9775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 870.288480][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.301190][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.518142][ T9775] Bluetooth: hci3: command tx timeout [ 872.196445][T13013] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 872.568922][T13013] team0: Device ipvlan1 failed to register rx_handler [ 872.700933][T12992] lo speed is unknown, defaulting to 1000 [ 873.595495][ T9775] Bluetooth: hci3: command tx timeout [ 875.675514][ T9775] Bluetooth: hci3: command tx timeout [ 877.527116][T13052] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 877.775858][ T9775] Bluetooth: hci3: command tx timeout [ 878.296376][T13059] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 879.429032][ T7312] bridge_slave_1: left allmulticast mode [ 879.434920][ T7312] bridge_slave_1: left promiscuous mode [ 880.003779][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.997646][ T7312] bridge_slave_0: left allmulticast mode [ 881.003339][ T7312] bridge_slave_0: left promiscuous mode [ 881.210421][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.559486][ T7312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.578429][ T7312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.596568][ T7312] bond0 (unregistering): Released all slaves [ 887.711218][T12992] chnl_net:caif_netlink_parms(): no params data found [ 889.251706][ T7312] hsr_slave_0: left promiscuous mode [ 889.264555][ T7312] hsr_slave_1: left promiscuous mode [ 889.281198][T13171] Malformed UNC in devname [ 889.281198][T13171] [ 889.288031][T13171] CIFS: VFS: Malformed UNC in devname [ 889.315964][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.406184][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.418001][T13176] tmpfs: Unknown parameter 'nsrquota' [ 890.103272][T13184] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 890.109950][T13184] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 890.117980][T13184] vhci_hcd vhci_hcd.0: Device attached [ 890.423608][T13185] vhci_hcd: connection closed [ 890.438239][ T2865] vhci_hcd: stop threads [ 890.448401][ T2865] vhci_hcd: release socket [ 890.458280][ T2865] vhci_hcd: disconnect device [ 891.254364][ T7312] team0 (unregistering): Port device team_slave_1 removed [ 891.339335][ T7312] team0 (unregistering): Port device team_slave_0 removed [ 891.818096][T13173] lo speed is unknown, defaulting to 1000 [ 891.841995][T13173] lo speed is unknown, defaulting to 1000 [ 891.856451][T13202] netdevsim netdevsim3: Direct firmware load for . [ 891.856451][T13202] failed with error -2 [ 891.869714][T13173] lo speed is unknown, defaulting to 1000 [ 891.908371][T13202] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 891.908371][T13202] [ 891.945929][T13173] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 892.236273][T13231] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 892.243356][T13231] PKCS7: Only support pkcs7_signedData type [ 892.756561][T13225] bridge_slave_0: entered promiscuous mode [ 892.762984][T13173] lo speed is unknown, defaulting to 1000 [ 892.906233][T13173] lo speed is unknown, defaulting to 1000 [ 892.913880][T13173] lo speed is unknown, defaulting to 1000 [ 892.933362][T12992] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.954388][T13225] autofs: Unknown parameter '(' [ 892.982572][T12992] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.008947][T12992] bridge_slave_0: entered allmulticast mode [ 893.053278][T12992] bridge_slave_0: entered promiscuous mode [ 893.221745][T12992] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.232524][T12992] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.289354][T12992] bridge_slave_1: entered allmulticast mode [ 893.357183][T12992] bridge_slave_1: entered promiscuous mode [ 893.918299][T13173] lo speed is unknown, defaulting to 1000 [ 896.021864][T13173] lo speed is unknown, defaulting to 1000 [ 896.028160][T12992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.041680][T12992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.797299][T13259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.130671][T13262] Malformed UNC in devname [ 897.130671][T13262] [ 897.130723][T13262] CIFS: VFS: Malformed UNC in devname [ 898.954650][T12992] team0: Port device team_slave_0 added [ 899.242646][T12992] team0: Port device team_slave_1 added [ 900.062996][T12992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.084986][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.147280][T12992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.178414][T12992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.201657][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.277264][T12992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.435168][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 900.435206][ T30] audit: type=1326 audit(1745174433.973:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 901.064919][ T30] audit: type=1326 audit(1745174433.973:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 901.629874][ T30] audit: type=1326 audit(1745174433.973:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 901.652689][ T30] audit: type=1326 audit(1745174433.973:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 901.767386][ T30] audit: type=1326 audit(1745174433.973:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 902.104318][ T30] audit: type=1326 audit(1745174433.983:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 902.565431][ T30] audit: type=1326 audit(1745174433.983:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 903.423957][ T30] audit: type=1326 audit(1745174433.983:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 903.553460][T13320] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1535'. [ 903.891772][T12992] hsr_slave_0: entered promiscuous mode [ 903.905501][ T30] audit: type=1326 audit(1745174433.983:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 903.928224][T12992] hsr_slave_1: entered promiscuous mode [ 903.934560][T12992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.946425][T12992] Cannot create hsr debugfs directory [ 903.955425][ T30] audit: type=1326 audit(1745174433.983:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13291 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x7ffc0000 [ 904.027197][T13323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 907.735709][ T52] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 908.045556][ T52] usb 5-1: device descriptor read/64, error -71 [ 908.416249][ T52] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 908.777566][ T52] usb 5-1: device descriptor read/64, error -71 [ 908.991910][ T52] usb usb5-port1: attempt power cycle [ 910.825504][ T52] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 911.384331][ T52] usb 5-1: device descriptor read/8, error -71 [ 911.675215][T13388] SET target dimension over the limit! [ 912.428085][T12992] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 913.479635][T12992] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 913.569781][T12992] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 913.700535][T13403] netlink: 'syz.4.1552': attribute type 10 has an invalid length. [ 913.751682][T12992] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 913.817440][T13412] netlink: 'syz.4.1552': attribute type 10 has an invalid length. [ 913.886474][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.893867][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.498859][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.506188][T13403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.514092][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.521317][T13403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.648423][T13421] ALSA: mixer_oss: invalid OSS volume '' [ 914.696319][T13417] ucma_write: process 1400 (syz.1.1554) changed security contexts after opening file descriptor, this is not allowed. [ 914.730182][T13403] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 914.793733][T13412] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 915.712591][T12992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.327819][T12992] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.365990][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.373473][ T8041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.376982][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.384188][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.065232][T12992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.358407][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 920.358444][ T30] audit: type=1326 audit(1745174906.922:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13467 comm="syz.1.1563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7f3f8e169 code=0x0 [ 922.114983][T12992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.754512][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 927.986417][T13546] xt_TPROXY: Can be used only with -p tcp or -p udp [ 928.787982][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1573'. [ 928.797307][T13548] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1573'. [ 928.806511][T13548] netlink: 'syz.4.1573': attribute type 10 has an invalid length. [ 931.050244][ T5878] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 931.119749][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 931.130148][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 931.142522][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 931.174115][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 931.183107][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.241434][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.278023][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 931.288790][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 931.299799][ T5878] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 931.308951][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.347943][T13562] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 931.382160][ T5878] hub 5-1:1.0: bad descriptor, ignoring hub [ 931.416577][ T5878] hub 5-1:1.0: probe with driver hub failed with error -5 [ 931.424551][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 931.446904][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 931.473774][ T5878] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 931.489648][ T5878] cdc_wdm 5-1:1.0: Unknown control protocol [ 931.590889][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.598227][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.254908][T13569] lo speed is unknown, defaulting to 1000 [ 932.316997][T13569] lo speed is unknown, defaulting to 1000 [ 932.575915][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.582817][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.589371][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.596003][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.603175][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.609796][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.617221][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.623933][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.631133][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.637762][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.645125][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.651747][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.659380][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.665999][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.673179][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.679796][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.687173][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.693819][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.701289][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 932.707903][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 932.767600][T13594] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 933.286690][ T9775] Bluetooth: hci3: command tx timeout [ 934.479224][T13613] veth0_vlan: entered allmulticast mode [ 934.508766][T13614] veth0_vlan: left promiscuous mode [ 934.515226][T13614] veth0_vlan: entered promiscuous mode [ 934.563542][T13598] "syz.2.1585" (13598) uses obsolete ecb(arc4) skcipher [ 934.571894][ T2865] bridge_slave_1: left allmulticast mode [ 934.598726][ T2865] bridge_slave_1: left promiscuous mode [ 934.615277][ T2865] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.647842][ T2865] bridge_slave_0: left allmulticast mode [ 934.666527][ T2865] bridge_slave_0: left promiscuous mode [ 934.682457][ T2865] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.349414][ T9775] Bluetooth: hci3: command tx timeout [ 935.996860][T13639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.425545][ T9775] Bluetooth: hci3: command tx timeout [ 938.323027][T13369] usb 5-1: USB disconnect, device number 16 [ 938.512962][T13650] Malformed UNC in devname [ 938.512962][T13650] [ 938.519869][T13650] CIFS: VFS: Malformed UNC in devname [ 939.522453][ T9775] Bluetooth: hci3: command tx timeout [ 939.812683][T13660] Invalid ELF header magic: != ELF [ 940.551040][ T2865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.562938][ T2865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.573937][ T2865] bond0 (unregistering): Released all slaves [ 940.695927][T13667] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 941.324014][T13661] bond0: entered promiscuous mode [ 943.320635][ T2865] hsr_slave_0: left promiscuous mode [ 943.581472][ T2865] hsr_slave_1: left promiscuous mode [ 943.594041][ T2865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.889969][ T2865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.037463][T13697] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 944.044021][T13697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 944.053748][T13697] vhci_hcd vhci_hcd.0: Device attached [ 944.269074][T13700] vhci_hcd: connection closed [ 944.375313][ T80] vhci_hcd: stop threads [ 944.401885][ T80] vhci_hcd: release socket [ 944.411194][ T80] vhci_hcd: disconnect device [ 946.029117][T13713] xt_bpf: check failed: parse error [ 946.274794][ T2865] team0 (unregistering): Port device team_slave_1 removed [ 946.429441][ T2865] team0 (unregistering): Port device team_slave_0 removed [ 948.672717][T13569] chnl_net:caif_netlink_parms(): no params data found [ 951.265772][T13752] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.352238][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.385795][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.423566][T13569] bridge_slave_0: entered allmulticast mode [ 955.451139][T13569] bridge_slave_0: entered promiscuous mode [ 955.593119][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.605498][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.623003][T13569] bridge_slave_1: entered allmulticast mode [ 956.175028][T13569] bridge_slave_1: entered promiscuous mode [ 957.458908][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.693993][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.972159][T13569] team0: Port device team_slave_0 added [ 957.992243][T13569] team0: Port device team_slave_1 added [ 958.062575][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.071006][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.102944][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.122084][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.129459][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.159882][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.291146][T13569] hsr_slave_0: entered promiscuous mode [ 958.326893][T13569] hsr_slave_1: entered promiscuous mode [ 958.333962][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.344822][T13569] Cannot create hsr debugfs directory [ 958.992422][T13569] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 959.005678][T13569] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 959.015241][T13569] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 959.025017][T13569] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 959.114564][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.137005][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.151947][ T2865] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.159195][ T2865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.180507][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.187803][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.451020][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.748978][T13569] veth0_vlan: entered promiscuous mode [ 959.782595][T13569] veth1_vlan: entered promiscuous mode [ 959.842995][T13569] veth0_macvtap: entered promiscuous mode [ 959.855365][T13569] veth1_macvtap: entered promiscuous mode [ 959.892198][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.906684][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.920962][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.933584][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.952529][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.963473][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.981005][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.009221][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.025293][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.042457][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.053195][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.071073][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.082724][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.107130][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.127564][T13569] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.141726][T13569] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.152197][T13569] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.166447][T13569] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.274670][ T6368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.291212][ T6368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.337087][ T2865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.345017][ T2865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.557619][T13889] sock: sock_set_timeout: `syz.1.1630' (pid 13889) tries to set negative timeout [ 961.761048][T13886] veth0_to_team: entered promiscuous mode [ 961.767907][T13886] veth0_to_team: entered allmulticast mode [ 962.029847][T13880] tipc: Started in network mode [ 962.034761][T13880] tipc: Node identity ., cluster identity 4711 [ 962.072886][T13880] tipc: Enabling of bearer rejected, failed to enable media [ 964.021240][T13918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 964.297856][T13926] overlayfs: failed to clone upperpath [ 969.607777][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 970.650016][T13980] syz.4.1639 (13980): drop_caches: 2 [ 971.752697][T13999] input: syz0 as /devices/virtual/input/input11 [ 972.666872][T13993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.804829][ T6368] Bluetooth: hci5: Frame reassembly failed (-84) [ 972.964256][ T6368] Bluetooth: hci5: Frame reassembly failed (-84) [ 974.786717][ T9775] Bluetooth: hci5: command 0xfc11 tx timeout [ 974.793281][ T5830] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 977.093275][ T30] audit: type=1800 audit(1745174963.042:186): pid=14035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1651" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 977.098306][T14036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.215646][T14033] gfs2: gfs2 mount does not exist [ 978.612897][T14056] tmpfs: Bad value for 'nr_inodes' [ 980.705708][T14077] xt_l2tp: v2 sid > 0xffff: 262144 [ 984.210241][T14107] netlink: 'syz.6.1668': attribute type 2 has an invalid length. [ 984.725629][ T5877] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 985.376559][ T5877] usb 7-1: device descriptor read/64, error -71 [ 986.122294][T14126] tty tty1: ldisc open failed (-12), clearing slot 0 [ 993.047805][T14181] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 993.053184][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.065979][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.150439][T14191] sp0: Synchronizing with TNC [ 994.803916][T14211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 995.727179][T14226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1697'. [ 997.952421][T14241] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 997.964253][T14241] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 999.647990][T14256] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 999.657368][T14256] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1001.114903][T14273] Invalid source name [ 1001.119260][T14273] UBIFS error (pid: 14273): cannot open "/dev/sg0", error -22 [ 1001.123354][T14273] 9pnet_fd: Insufficient options for proto=fd [ 1001.753278][ T5830] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1004.486648][T14296] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1004.493392][T14296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1004.503795][T14296] vhci_hcd vhci_hcd.0: Device attached [ 1005.885608][ T52] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1005.981833][T14297] vhci_hcd: connection closed [ 1005.984629][ T8041] vhci_hcd: stop threads [ 1006.168851][ T8041] vhci_hcd: release socket [ 1006.259936][ T8041] vhci_hcd: disconnect device [ 1007.883709][T14316] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1008.370022][T14319] Invalid option length (1048055) for dns_resolver key [ 1009.661754][T14327] Malformed UNC in devname [ 1009.661754][T14327] [ 1009.668515][T14327] CIFS: VFS: Malformed UNC in devname [ 1011.395727][ T52] vhci_hcd: vhci_device speed not set [ 1011.476630][T14332] xt_CT: No such helper "pptp" [ 1014.763419][T14378] syz.3.1733 (14378): /proc/14373/oom_adj is deprecated, please use /proc/14373/oom_score_adj instead. [ 1015.341455][T14384] Malformed UNC in devname [ 1015.341455][T14384] [ 1015.348452][T14384] CIFS: VFS: Malformed UNC in devname [ 1016.125546][T14391] Malformed UNC in devname [ 1016.125546][T14391] [ 1016.132807][T14391] CIFS: VFS: Malformed UNC in devname [ 1017.121827][T14396] syz.1.1738 (14396): drop_caches: 2 [ 1017.701020][T14407] netlink: 'syz.2.1740': attribute type 2 has an invalid length. [ 1019.919138][T14413] overlayfs: failed to resolve './bus': -2 [ 1020.665104][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 1021.074928][T14440] Malformed UNC in devname [ 1021.074928][T14440] [ 1021.081718][T14440] CIFS: VFS: Malformed UNC in devname [ 1022.659223][T14449] Malformed UNC in devname [ 1022.659223][T14449] [ 1022.665970][T14449] CIFS: VFS: Malformed UNC in devname [ 1026.807960][T14476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.310243][T14518] Malformed UNC in devname [ 1029.310243][T14518] [ 1029.317176][T14518] CIFS: VFS: Malformed UNC in devname [ 1032.944884][T14542] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1038.125867][T14586] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1042.369663][T14637] overlayfs: failed to resolve './file1/file0': -2 [ 1048.081139][T14679] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1789'. [ 1048.090679][T14679] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1048.099158][T14679] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1053.215659][ T31] INFO: task kworker/0:5:5898 blocked for more than 143 seconds. [ 1053.223447][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1053.240642][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1053.435675][T14722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1053.446843][T14722] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1054.206880][ T31] task:kworker/0:5 state:D stack:20312 pid:5898 tgid:5898 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1054.219014][ T31] Workqueue: usb_hub_wq hub_event [ 1054.224110][ T31] Call Trace: [ 1054.230886][ T31] [ 1054.233898][ T31] __schedule+0x1b33/0x51f0 [ 1054.692631][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.699186][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.737821][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 1054.742832][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1054.758486][ T31] ? schedule+0x163/0x360 [ 1054.762974][ T31] ? __pfx___schedule+0x10/0x10 [ 1054.768598][ T31] ? schedule+0x90/0x360 [ 1054.772890][ T31] ? schedule+0x90/0x360 [ 1054.777923][ T31] schedule+0x163/0x360 [ 1054.782141][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 1054.787393][ T31] schedule_preempt_disabled+0x13/0x30 [ 1054.792979][ T31] __mutex_lock+0x805/0x10c0 [ 1054.798117][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 1054.803002][ T31] ? hub_event+0x24cd/0x50f0 [ 1054.808154][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1054.813484][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1054.822684][ T31] hub_event+0x24cd/0x50f0 [ 1054.832567][ T31] ? __pfx_hub_event+0x10/0x10 [ 1054.841159][ T31] ? __lock_acquire+0xad5/0xd80 [ 1054.848010][ T31] ? init_memory_mapping+0x381/0xe70 [ 1054.853354][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 1054.863215][ T31] process_scheduled_works+0xac3/0x18e0 [ 1054.870666][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1054.889741][ T31] ? assign_work+0x367/0x3d0 [ 1054.894408][ T31] worker_thread+0x870/0xd50 [ 1054.914801][ T31] ? __kthread_parkme+0x1a8/0x200 [ 1054.925522][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1054.939914][ T31] kthread+0x7b7/0x940 [ 1054.944166][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1054.952901][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.963305][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.972589][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.982932][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.992134][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1055.004479][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1055.010001][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.014755][ T31] ret_from_fork+0x4b/0x80 [ 1055.019646][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.024398][ T31] ret_from_fork_asm+0x1a/0x30 [ 1055.029794][ T31] [ 1055.033117][ T31] [ 1055.033117][ T31] Showing all locks held in the system: [ 1055.041925][ T31] 5 locks held by kworker/0:1/10: [ 1055.048162][ T31] #0: ffff8880226ea948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1055.067659][ T31] #1: ffffc900000f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1055.233391][ T31] #2: ffff888145f69198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 1055.255463][ T31] #3: ffff888145f99510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 1055.279147][ T31] #4: ffff88814533d268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 1055.289468][ T31] 1 lock held by khungtaskd/31: [ 1055.294390][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 1055.304790][ T31] 2 locks held by getty/5586: [ 1055.310008][ T31] #0: ffff8881489b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1055.320107][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 1055.330585][ T31] 2 locks held by syz-executor/5828: [ 1055.346089][ T31] #0: ffff88807d29c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1055.365406][ T31] #1: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 1055.379839][ T31] 5 locks held by kworker/0:5/5898: [ 1055.385164][ T31] #0: ffff8880226ea948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1055.402460][ T31] #1: ffffc9000448fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1055.414654][ T31] #2: ffff888145f6c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 1055.423776][ T31] #3: ffff888145f6f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 1055.434150][ T31] #4: ffff88814533d268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 1055.444133][ T31] 2 locks held by kworker/u8:26/7312: [ 1055.449667][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1055.462845][ T31] #1: ffffc900045dfc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1055.475460][ T31] [ 1055.481310][ T31] ============================================= [ 1055.481310][ T31] [ 1055.513711][ T31] NMI backtrace for cpu 1 [ 1055.513733][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1055.513753][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1055.513763][ T31] Call Trace: [ 1055.513770][ T31] [ 1055.513777][ T31] dump_stack_lvl+0x241/0x360 [ 1055.513805][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.513825][ T31] ? __pfx__printk+0x10/0x10 [ 1055.513857][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 1055.513884][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1055.513911][ T31] ? _printk+0xd5/0x120 [ 1055.513931][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1055.513949][ T31] ? __pfx__printk+0x10/0x10 [ 1055.513972][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1055.513994][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1055.514018][ T31] watchdog+0x1058/0x10a0 [ 1055.514039][ T31] ? watchdog+0x1ea/0x10a0 [ 1055.514065][ T31] ? __pfx_watchdog+0x10/0x10 [ 1055.514088][ T31] kthread+0x7b7/0x940 [ 1055.514107][ T31] ? __pfx_watchdog+0x10/0x10 [ 1055.514126][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.514140][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.514157][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.514172][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.514188][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1055.514208][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1055.514223][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.514240][ T31] ret_from_fork+0x4b/0x80 [ 1055.514253][ T31] ? __pfx_kthread+0x10/0x10 [ 1055.514270][ T31] ret_from_fork_asm+0x1a/0x30 [ 1055.514305][ T31] [ 1055.514559][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1055.685838][ C0] NMI backtrace for cpu 0 [ 1055.685855][ C0] CPU: 0 UID: 0 PID: 6361 Comm: kworker/u8:17 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1055.685881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1055.685891][ C0] Workqueue: bat_events batadv_nc_worker [ 1055.685918][ C0] RIP: 0010:lock_acquire+0x11a/0x2f0 [ 1055.685939][ C0] Code: 48 89 df 8b 74 24 04 44 89 fa 44 89 e9 45 89 e0 6a 00 6a 00 6a 00 ff b4 24 90 00 00 00 ff 74 24 28 e8 6a 02 00 00 48 83 c4 28 <48> c7 c7 af 80 4c 8e e8 6a 68 89 0a b8 ff ff ff ff 65 0f c1 05 9d [ 1055.685952][ C0] RSP: 0018:ffffc9000f92fa38 EFLAGS: 00000082 [ 1055.685966][ C0] RAX: 0000000000000001 RBX: ffffffff8ed3df20 RCX: db8d80305512e400 [ 1055.685977][ C0] RDX: 0000000000000000 RSI: ffff88802d3f0b40 RDI: ffff88802d3f0000 [ 1055.685988][ C0] RBP: ffffffff93651020 R08: 0000000000000000 R09: 0000000000000000 [ 1055.685998][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1055.686007][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 1055.686016][ C0] FS: 0000000000000000(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 1055.686029][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1055.686040][ C0] CR2: 00007fa4ca980178 CR3: 00000000339ce000 CR4: 00000000003526f0 [ 1055.686054][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1055.686063][ C0] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1055.686074][ C0] Call Trace: [ 1055.686080][ C0] [ 1055.686088][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1055.686112][ C0] batadv_nc_worker+0xec/0x610 [ 1055.686133][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1055.686155][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1055.686177][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 1055.686200][ C0] process_scheduled_works+0xac3/0x18e0 [ 1055.686234][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1055.686260][ C0] ? assign_work+0x367/0x3d0 [ 1055.686283][ C0] worker_thread+0x870/0xd50 [ 1055.686312][ C0] ? __kthread_parkme+0x1a8/0x200 [ 1055.686337][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1055.686362][ C0] kthread+0x7b7/0x940 [ 1055.686378][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1055.686403][ C0] ? __pfx_kthread+0x10/0x10 [ 1055.686417][ C0] ? __pfx_kthread+0x10/0x10 [ 1055.686435][ C0] ? __pfx_kthread+0x10/0x10 [ 1055.686449][ C0] ? __pfx_kthread+0x10/0x10 [ 1055.686466][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1055.686487][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 1055.686504][ C0] ? __pfx_kthread+0x10/0x10 [ 1055.686519][ C0] ret_from_fork+0x4b/0x80 [ 1055.686532][ C0] ? __pfx_kthread+0x10/0x10 [ 1055.686547][ C0] ret_from_fork_asm+0x1a/0x30 [ 1055.686574][ C0] [ 1055.691252][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1055.961435][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1055.973239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1055.983372][ T31] Call Trace: [ 1055.986642][ T31] [ 1055.989561][ T31] dump_stack_lvl+0x241/0x360 [ 1055.994237][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.999426][ T31] ? __pfx__printk+0x10/0x10 [ 1056.004012][ T31] ? vscnprintf+0x5d/0x90 [ 1056.008334][ T31] panic+0x349/0x880 [ 1056.012215][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1056.017576][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1056.023740][ T31] ? __pfx_panic+0x10/0x10 [ 1056.028150][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1056.033513][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1056.039671][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1056.045851][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1056.052043][ T31] watchdog+0x1097/0x10a0 [ 1056.056375][ T31] ? watchdog+0x1ea/0x10a0 [ 1056.060809][ T31] ? __pfx_watchdog+0x10/0x10 [ 1056.065488][ T31] kthread+0x7b7/0x940 [ 1056.069666][ T31] ? __pfx_watchdog+0x10/0x10 [ 1056.074348][ T31] ? __pfx_kthread+0x10/0x10 [ 1056.078957][ T31] ? __pfx_kthread+0x10/0x10 [ 1056.083551][ T31] ? __pfx_kthread+0x10/0x10 [ 1056.088143][ T31] ? __pfx_kthread+0x10/0x10 [ 1056.092734][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1056.097936][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1056.103125][ T31] ? __pfx_kthread+0x10/0x10 [ 1056.107716][ T31] ret_from_fork+0x4b/0x80 [ 1056.112147][ T31] ? __pfx_kthread+0x10/0x10 [ 1056.116741][ T31] ret_from_fork_asm+0x1a/0x30 [ 1056.121531][ T31] [ 1056.124690][ T31] Kernel Offset: disabled [ 1056.129031][ T31] Rebooting in 86400 seconds..