last executing test programs: 16m42.259045143s ago: executing program 1 (id=133): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x32, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x5, 0x2, 0xbdb, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x7, 0x7, 0x4}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0148b8"], 0x85}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) fsmount(r0, 0x1, 0x2) r7 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 16m39.694032357s ago: executing program 4 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x7, 0x7f}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16m39.546189242s ago: executing program 1 (id=140): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x32, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x5, 0x2, 0xbdb, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x7, 0x7, 0x4}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0148b8"], 0x85}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) fsmount(r0, 0x1, 0x2) r7 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 16m36.667145871s ago: executing program 4 (id=143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[], 0x18, 0x4}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x11102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000340)=0x1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 16m35.480442357s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 16m34.960086627s ago: executing program 4 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) syz_emit_ethernet(0x808, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7d2, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6, "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"}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x255a7000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r4 = dup(r0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x8, 0xfe, 0x0, 0xff, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c091}, 0x4000000) connect$unix(r4, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 16m34.596961341s ago: executing program 1 (id=151): r0 = memfd_secret(0x80000) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x40}, {0x16}]}, 0x10) sendmmsg(r3, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r6, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0x16, 0x0, 0xe54}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x8000) 16m31.35180082s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x7}, 0x18) socket(0x28, 0x803, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16m31.145789647s ago: executing program 4 (id=156): timerfd_gettime(0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002a00), 0x1, 0x0) fdatasync(r0) 16m29.813625952s ago: executing program 4 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x48, 0x7b, 0x33}) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000300)="c094ae62c3b1777b7150a4521e0e34c1c0e455ba079f841155594c9d163a251ae3889e93b78cb6cc623ce6df69b677f74c7bc2cbdb22e5a9797944b01ff0ed7ac49876636affc845e3d9de28c830c83c0e463a0647cc264495a77b793ea0f28c815f1dc65e327f385ec42615ce0b46dcc5255621c5bbb9540796c21ed8c3c7854a6f2a8035d73a366acab5622ffb7d57d881447554272b8f57b6fcbc8c304b9e6e5e679a", 0xa4}, {&(0x7f00000003c0)="629b951b0fea293b3d6d64f6efa1820e163015c026a4aa4db0e2449c3b1314c10b98bed3807bb5266c00e0fc4f01484d59f39d72dd21fac15882cbcb7088ea4d7ce2a1490a45882b4d14ac94ee9f5b247b85329ccdcac60773e46893fe1338171956a49f317f4860c8c9e2e28b71956b0ba119f2c8792221f72537f4bcff6b6756390f2b58a705c4bbb96166c0", 0x8d}, {&(0x7f0000000480)="958ed38be94a20d9e7ca2c6647b854ed46f4a9e67646ca0ed899c62c7faa12a5d44aa0b8fe3074903a4ecc189e6eb5fa33c5f8118efff65eb0207cdc41e0ca97ffeab68d8281ee66cac451", 0x4b}, {0x0}], 0x5) 16m25.3550212s ago: executing program 1 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r7, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 16m20.931006691s ago: executing program 1 (id=169): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x32, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x5, 0x2, 0xbdb, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x7, 0x7, 0x4}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0148b8"], 0x85}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0xfc, 0x3, 0x58, 0x1, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsmount(r0, 0x1, 0x2) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') 16m13.586832764s ago: executing program 32 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x48, 0x7b, 0x33}) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000300)="c094ae62c3b1777b7150a4521e0e34c1c0e455ba079f841155594c9d163a251ae3889e93b78cb6cc623ce6df69b677f74c7bc2cbdb22e5a9797944b01ff0ed7ac49876636affc845e3d9de28c830c83c0e463a0647cc264495a77b793ea0f28c815f1dc65e327f385ec42615ce0b46dcc5255621c5bbb9540796c21ed8c3c7854a6f2a8035d73a366acab5622ffb7d57d881447554272b8f57b6fcbc8c304b9e6e5e679a", 0xa4}, {&(0x7f00000003c0)="629b951b0fea293b3d6d64f6efa1820e163015c026a4aa4db0e2449c3b1314c10b98bed3807bb5266c00e0fc4f01484d59f39d72dd21fac15882cbcb7088ea4d7ce2a1490a45882b4d14ac94ee9f5b247b85329ccdcac60773e46893fe1338171956a49f317f4860c8c9e2e28b71956b0ba119f2c8792221f72537f4bcff6b6756390f2b58a705c4bbb96166c0", 0x8d}, {&(0x7f0000000480)="958ed38be94a20d9e7ca2c6647b854ed46f4a9e67646ca0ed899c62c7faa12a5d44aa0b8fe3074903a4ecc189e6eb5fa33c5f8118efff65eb0207cdc41e0ca97ffeab68d8281ee66cac451", 0x4b}, {0x0}], 0x5) 16m4.618979572s ago: executing program 33 (id=169): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x32, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x5, 0x2, 0xbdb, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x7, 0x7, 0x4}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0148b8"], 0x85}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0xfc, 0x3, 0x58, 0x1, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsmount(r0, 0x1, 0x2) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') 8m2.694641975s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) syz_mount_image$befs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "d12af006cd174426478ccc39485890d81905f660a043e81e31537849327f27e5", "b2d406f5df4de1dd520cb4c46995e6db4515579fbc9d055c2d1f121aef5616a1", "662a2ab2f58f8657115cc356227f0e2dbc1a961b61e7f5c33066357173b41d1e", "386caf5b8c02a4b9fb6c7f3c20ef13f3dfc2599a5d5aba480d1f5f280ddc1953", "154af4dc4b644090e11f16be8459885d586cb3428a76cedd4784ea48f2a34cf0", "9fe9ad5e70ec5e256a3695bf", 0xe, 0x6, 0x7, 0xb6, 0x90000}}) 7m57.682632594s ago: executing program 2 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x4840) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000), 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a0104000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@RTM_GETNSID={0x44, 0x5a, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 7m56.055722643s ago: executing program 2 (id=941): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200c, 0x3, 0x1d, 0x200b, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xffffffffffffffff, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) 7m54.049831835s ago: executing program 2 (id=946): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup3(r1, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) userfaultfd(0x80001) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 7m52.486602718s ago: executing program 2 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x7, 0x7f}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m50.067814488s ago: executing program 2 (id=952): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x8001, 0x1, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 7m34.121731831s ago: executing program 34 (id=952): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x8001, 0x1, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 6m6.311449535s ago: executing program 5 (id=1112): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 6m5.704348223s ago: executing program 5 (id=1114): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) 6m2.592853441s ago: executing program 5 (id=1121): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'vlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}, 0x40008}, @in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) syz_open_dev$vim2m(0x0, 0x8000, 0x2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0xba2}, 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m54.133335s ago: executing program 5 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a050001300002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000210c0019800800020006000000135b688d68f784170334019b9180e960741cecb2586300395c8341b97c16245947ef7e50d7"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) msgget$private(0x0, 0x101) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100), 0x24, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 5m52.406768447s ago: executing program 5 (id=1129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5710fae9d6dcd329200000000000000004c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 5m48.651493522s ago: executing program 5 (id=1134): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002700)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6d66}}, 0x1ff, 0x619}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) syslog(0x1, 0x0, 0x0) 5m33.399017653s ago: executing program 35 (id=1134): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002700)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6d66}}, 0x1ff, 0x619}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) syslog(0x1, 0x0, 0x0) 11.608407879s ago: executing program 3 (id=1658): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/174, 0xae}, {0x0}], 0x2}, 0x7}], 0x1, 0x2101, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000000)=0x1) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 10.69101201s ago: executing program 0 (id=1659): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) getpid() r6 = semget$private(0x0, 0x5, 0x0) semctl$GETPID(r6, 0x3, 0xb, &(0x7f0000000040)=""/29) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000340)=""/219) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) 10.394783163s ago: executing program 6 (id=1660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 9.633656183s ago: executing program 0 (id=1661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpid() fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r3, 0xb) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) 9.531864547s ago: executing program 6 (id=1662): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 8.241885505s ago: executing program 6 (id=1663): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) 7.083602729s ago: executing program 6 (id=1664): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x30902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/22, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x801c0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7bf) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001c80)) 7.072275163s ago: executing program 0 (id=1665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 5.912349876s ago: executing program 6 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpid() fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r3, 0xb) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) 4.972015759s ago: executing program 0 (id=1667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x0, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f00000028c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000003c0), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fchdir(r2) mkdir(&(0x7f0000000400)='./file0\x00', 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000600)={0x0, 0x4, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) 4.967277572s ago: executing program 3 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, 0x0, 0x0, 0x60, &(0x7f00000008c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5}, 0x1e, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000000)={0xc, {0x8, 0x7, 0x3, 0x977}, {0x3, 0x6, 0x8, 0xfffffff7}, {0x403, 0x6}}) 3.340468458s ago: executing program 3 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) accept4(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.686218099s ago: executing program 6 (id=1670): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.066348811s ago: executing program 0 (id=1671): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="01", 0x24}]) 2.016599565s ago: executing program 3 (id=1672): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='io_uring_queue_async_work\x00', r5, 0x0, 0x4}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) 1.870690338s ago: executing program 0 (id=1673): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB="203004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 890.396539ms ago: executing program 3 (id=1674): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/224, 0xe0, 0x1, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 0s ago: executing program 3 (id=1675): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0, 0x85}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0xfc, 0x3, 0x58, 0x1, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) fsmount(r0, 0x1, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) kernel console output (not intermixed with test programs): -000: reconnect [ 715.461545][ T979] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 716.698783][ T979] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 716.751516][ T979] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 717.048901][ T979] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 717.188721][ T979] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 717.201395][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 717.261459][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 717.278730][ T979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 717.296345][ T979] usb 1-1: string descriptor 0 read error: -22 [ 717.302818][ T979] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 717.328269][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.923267][ T979] usb 1-1: config 0 descriptor?? [ 717.945541][ T979] usb 1-1: can't set config #0, error -71 [ 718.056760][ T979] usb 1-1: USB disconnect, device number 10 [ 719.319849][T10588] [U] v3f"S/4:XTzWtlW= [ 719.336569][T10588] [U] J"e:" [ 724.174862][T10619] vivid-002: disconnect [ 724.359690][T10609] vivid-002: reconnect [ 730.606173][T10640] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 731.982535][T10658] netlink: 80 bytes leftover after parsing attributes in process `syz.3.969'. [ 737.017174][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.041788][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.097746][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 737.151522][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 737.160235][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 737.176605][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.185318][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.368627][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.561446][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.875427][ T5849] Bluetooth: hci1: command tx timeout [ 742.433999][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.591037][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.951364][ T5845] Bluetooth: hci1: command tx timeout [ 744.022069][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.051330][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.179020][ T5968] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.211987][ T5968] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.321016][ T5968] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.625553][ T5968] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.781358][T10749] netlink: 14 bytes leftover after parsing attributes in process `syz.3.988'. [ 746.011551][ T5845] Bluetooth: hci1: command tx timeout [ 747.221971][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.233326][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.696861][T10771] tmpfs: Bad value for 'mpol' [ 747.813121][T10770] netdevsim netdevsim3: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 747.833288][T10770] netdevsim netdevsim3: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 748.001707][ T49] bridge_slave_1: left allmulticast mode [ 748.110584][ T49] bridge_slave_1: left promiscuous mode [ 748.228477][ T5845] Bluetooth: hci1: command tx timeout [ 748.244921][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.176460][ T49] bridge_slave_0: left allmulticast mode [ 749.183589][ T49] bridge_slave_0: left promiscuous mode [ 749.225435][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.329988][T10787] ptrace attach of "./syz-executor exec"[9378] was attempted by "./syz-executor exec"[10787] [ 749.432610][T10787] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 749.441219][T10787] overlayfs: failed to set xattr on upper [ 749.447471][T10787] overlayfs: ...falling back to redirect_dir=nofollow. [ 749.455923][T10787] overlayfs: ...falling back to index=off. [ 749.462047][T10787] overlayfs: ...falling back to uuid=null. [ 749.468397][T10787] overlayfs: maximum fs stacking depth exceeded [ 752.799026][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.048640][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.203650][ T49] bond0 (unregistering): Released all slaves [ 753.250601][T10697] chnl_net:caif_netlink_parms(): no params data found [ 756.603669][T10697] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.631421][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.651544][T10697] bridge_slave_0: entered allmulticast mode [ 757.008636][T10697] bridge_slave_0: entered promiscuous mode [ 757.596923][T10697] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.658441][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.116774][T10697] bridge_slave_1: entered allmulticast mode [ 758.261462][T10697] bridge_slave_1: entered promiscuous mode [ 759.062399][T10878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1015'. [ 760.751051][T10697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.746621][T10697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.459009][T10697] team0: Port device team_slave_0 added [ 763.482559][T10697] team0: Port device team_slave_1 added [ 764.726103][T10920] ceph: No mds server is up or the cluster is laggy [ 768.348938][ T10] libceph: connect (1)[c::]:6789 error -22 [ 768.776604][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 768.819494][ T9644] libceph: connect (1)[c::]:6789 error -22 [ 768.865179][ T9644] libceph: mon0 (1)[c::]:6789 connect error [ 769.125922][T10934] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1027'. [ 769.249788][T10697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.448590][T10697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.633071][T10938] trusted_key: syz.6.1026 sent an empty control message without MSG_MORE. [ 770.391447][T10697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.650452][T10697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.678648][T10697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.881375][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 771.964915][T10697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.281309][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 772.903368][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 772.913182][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.923192][ T24] usb 4-1: Product: syz [ 772.927468][ T24] usb 4-1: Manufacturer: syz [ 772.934599][ T24] usb 4-1: SerialNumber: syz [ 773.067803][ T24] usb 4-1: config 0 descriptor?? [ 773.383614][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 773.629767][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 773.701932][ T24] usb 4-1: USB disconnect, device number 7 [ 774.081364][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 776.506672][T10991] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1040'. [ 776.976222][T10993] ptrace attach of "./syz-executor exec"[9378] was attempted by "./syz-executor exec"[10993] [ 776.977222][T10994] overlayfs: workdir and upperdir must reside under the same mount [ 777.289693][T10697] hsr_slave_0: entered promiscuous mode [ 777.349118][T10697] hsr_slave_1: entered promiscuous mode [ 777.391633][T10697] debugfs: 'hsr0' already exists in 'hsr' [ 777.410537][T10697] Cannot create hsr debugfs directory [ 780.412168][T11021] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[11021] [ 780.445831][T11021] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 780.453531][T11021] overlayfs: failed to set xattr on upper [ 780.459476][T11021] overlayfs: ...falling back to redirect_dir=nofollow. [ 780.466816][T11021] overlayfs: ...falling back to index=off. [ 780.473262][T11021] overlayfs: ...falling back to uuid=null. [ 780.479259][T11021] overlayfs: maximum fs stacking depth exceeded [ 781.921394][T11034] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[11034] [ 782.065458][T11034] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 782.073171][T11034] overlayfs: failed to set xattr on upper [ 782.078981][T11034] overlayfs: ...falling back to redirect_dir=nofollow. [ 782.086132][T11034] overlayfs: ...falling back to index=off. [ 782.092408][T11034] overlayfs: ...falling back to uuid=null. [ 782.098851][T11034] overlayfs: maximum fs stacking depth exceeded [ 783.158656][T11047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1054'. [ 786.539477][ T49] hsr_slave_0: left promiscuous mode [ 786.556428][ T49] hsr_slave_1: left promiscuous mode [ 786.653793][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.882127][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.138985][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.201588][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.246534][ T49] veth1_macvtap: left promiscuous mode [ 787.281049][ T49] veth0_macvtap: left promiscuous mode [ 787.361613][ T49] veth1_vlan: left promiscuous mode [ 787.393932][ T49] veth0_vlan: left promiscuous mode [ 791.281580][ T9644] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 791.492112][ T9644] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 791.502846][ T9644] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 791.511454][ T9644] usb 6-1: Product: syz [ 791.517790][ T9644] usb 6-1: Manufacturer: syz [ 791.523043][ T9644] usb 6-1: SerialNumber: syz [ 791.566810][ T9644] usb 6-1: config 0 descriptor?? [ 791.706012][ T49] team0 (unregistering): Port device team_slave_1 removed [ 791.769730][ T49] team0 (unregistering): Port device team_slave_0 removed [ 792.622863][T11065] netdevsim netdevsim3: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 792.839423][T11065] netdevsim netdevsim3: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 793.626462][ T9644] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 793.641566][ T9644] asix 6-1:0.0: probe with driver asix failed with error -71 [ 793.717064][ T9644] usb 6-1: USB disconnect, device number 2 [ 796.198775][T11117] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1070'. [ 799.202631][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 799.676463][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 799.694578][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 799.707055][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 799.720935][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 799.731957][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 801.831559][ T5845] Bluetooth: hci5: command tx timeout [ 803.375714][ T9954] libceph: connect (1)[c::]:6789 error -22 [ 803.921362][ T5845] Bluetooth: hci5: command tx timeout [ 804.009289][ T9954] libceph: mon0 (1)[c::]:6789 connect error [ 804.465505][T11177] ceph: No mds server is up or the cluster is laggy [ 804.563838][ T9954] libceph: connect (1)[c::]:6789 error -22 [ 804.692530][ T9954] libceph: mon0 (1)[c::]:6789 connect error [ 805.079464][ T24] libceph: connect (1)[c::]:6789 error -22 [ 805.114544][T11139] chnl_net:caif_netlink_parms(): no params data found [ 805.740093][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 805.991911][T11191] ptrace attach of "./syz-executor exec"[9447] was attempted by "./syz-executor exec"[11191] [ 806.017202][ T5845] Bluetooth: hci5: command tx timeout [ 806.017585][T11192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 806.024476][T11192] overlayfs: failed to set xattr on upper [ 806.039401][T11192] overlayfs: ...falling back to redirect_dir=nofollow. [ 806.047802][T11192] overlayfs: ...falling back to index=off. [ 806.055770][T11192] overlayfs: ...falling back to uuid=null. [ 806.063769][T11192] overlayfs: maximum fs stacking depth exceeded [ 806.268680][ T24] libceph: connect (1)[c::]:6789 error -22 [ 806.342594][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 806.863901][T11203] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1088'. [ 808.334067][ T5845] Bluetooth: hci5: command tx timeout [ 808.496950][ T9908] bridge_slave_1: left allmulticast mode [ 808.637027][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.643433][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.688400][T11221] vivid-003: disconnect [ 809.667920][ T9908] bridge_slave_1: left promiscuous mode [ 809.677893][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.688253][T11213] vivid-003: reconnect [ 809.759248][ T9908] bridge_slave_0: left allmulticast mode [ 809.785998][ T9908] bridge_slave_0: left promiscuous mode [ 809.917476][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.862558][ T9908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.904525][ T9908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.933730][ T9908] bond0 (unregistering): Released all slaves [ 812.404908][T11139] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.442632][T11139] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.450015][T11139] bridge_slave_0: entered allmulticast mode [ 812.459021][T11139] bridge_slave_0: entered promiscuous mode [ 812.471749][T11139] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.478942][T11139] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.490364][T11139] bridge_slave_1: entered allmulticast mode [ 812.498096][T11139] bridge_slave_1: entered promiscuous mode [ 812.682385][ T9908] hsr_slave_0: left promiscuous mode [ 812.891119][ T9908] hsr_slave_1: left promiscuous mode [ 812.905682][ T9908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.922803][ T9908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.971412][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 813.341458][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 813.396254][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.407969][ T10] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.420619][ T10] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.431569][ T10] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.895216][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.901943][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 813.911000][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.921384][T11247] loop9: detected capacity change from 0 to 7 [ 814.442569][ T10] usb 1-1: config 0 descriptor?? [ 814.445099][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1101'. [ 815.563742][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 815.569796][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 816.300333][ T10] usb 1-1: USB disconnect, device number 11 [ 816.369665][T11268] vivid-003: disconnect [ 816.540196][T11262] vivid-003: reconnect [ 817.501395][ T9954] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 817.734686][ T9954] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 818.181497][ T9954] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 818.243007][ T9908] team0 (unregistering): Port device team_slave_1 removed [ 818.245579][ T9954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 818.284845][ T9954] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 818.315538][ T9954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 818.329551][ T9954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 818.349805][ T9954] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 818.377729][ T9954] usb 7-1: string descriptor 0 read error: -22 [ 818.397667][ T9954] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 818.409970][ T9954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.423979][ T9954] usb 7-1: config 0 descriptor?? [ 818.447151][ T9954] hub 7-1:0.0: bad descriptor, ignoring hub [ 818.463907][ T9954] hub 7-1:0.0: probe with driver hub failed with error -5 [ 818.480215][ T9908] team0 (unregistering): Port device team_slave_0 removed [ 818.490746][ T9954] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input11 [ 819.081494][T11274] loop6: detected capacity change from 0 to 128 [ 819.088737][T11274] befs: (loop6): No write support. Marking filesystem read-only [ 819.098460][T11274] befs: (loop6): invalid magic header [ 819.546912][T11292] loop9: detected capacity change from 0 to 7 [ 819.554579][T11292] buffer_io_error: 23 callbacks suppressed [ 819.554595][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.568823][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.577004][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.585218][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.593400][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.601897][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.610348][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.618570][T11292] ldm_validate_partition_table(): Disk read failed. [ 819.625565][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.635450][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.665327][T11292] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.674123][T11292] Dev loop9: unable to read RDB block 0 [ 819.680764][T11292] loop9: unable to read partition table [ 819.687249][T11292] loop9: partition table beyond EOD, truncated [ 819.693654][T11292] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 819.693654][T11292] ) failed (rc=-5) [ 821.227634][ T9644] libceph: connect (1)[c::]:6789 error -101 [ 821.237575][ T9644] libceph: mon0 (1)[c::]:6789 connect error [ 821.374350][T11139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.405762][ T145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.448381][ T145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.460650][T11306] fuse: Bad value for 'rootmode' [ 821.548213][ T5956] usb 7-1: USB disconnect, device number 2 [ 821.553363][T11139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.615472][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 821.654749][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 822.842451][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 822.848503][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 822.901448][ T145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.912773][T11303] ceph: No mds server is up or the cluster is laggy [ 822.941373][ T145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.138157][T11323] vivid-001: disconnect [ 823.808500][T11318] vivid-001: reconnect [ 824.111026][T11139] team0: Port device team_slave_0 added [ 824.168917][T11139] team0: Port device team_slave_1 added [ 831.328775][T11139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.461314][T11139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.581723][T11139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.604139][T11139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.613264][T11139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.386284][T11139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.521687][T11369] loop9: detected capacity change from 0 to 7 [ 833.529213][T11369] buffer_io_error: 9 callbacks suppressed [ 833.529227][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.543166][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.551403][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.560309][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.569087][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.577558][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.585999][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.594383][T11369] ldm_validate_partition_table(): Disk read failed. [ 833.601420][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.609802][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.618132][T11369] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.650032][T11369] Dev loop9: unable to read RDB block 0 [ 833.658652][T11369] loop9: unable to read partition table [ 833.665476][T11369] loop9: partition table beyond EOD, truncated [ 833.671863][T11369] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 833.671863][T11369] ) failed (rc=-5) [ 834.809985][T11376] loop9: detected capacity change from 0 to 7 [ 834.848200][T11376] ldm_validate_partition_table(): Disk read failed. [ 834.867929][T11376] Dev loop9: unable to read RDB block 0 [ 834.881781][T11376] loop9: unable to read partition table [ 834.892854][T11376] loop9: partition table beyond EOD, truncated [ 834.899349][T11376] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 834.899349][T11376] ) failed (rc=-5) [ 836.290913][T11139] hsr_slave_0: entered promiscuous mode [ 836.353090][T11139] hsr_slave_1: entered promiscuous mode [ 836.359802][T11139] debugfs: 'hsr0' already exists in 'hsr' [ 836.507704][T11382] vivid-003: disconnect [ 836.895417][T11139] Cannot create hsr debugfs directory [ 836.974514][T11377] vivid-003: reconnect [ 838.027931][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1132'. [ 839.443233][ T30] audit: type=1326 audit(1751500641.315:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34cd8e929 code=0x0 [ 840.285483][T11415] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1137'. [ 841.709057][T11421] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1138'. [ 842.398113][T11417] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1134'. [ 844.972790][T11436] vivid-003: disconnect [ 845.724649][T11432] vivid-003: reconnect [ 847.814819][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 847.860994][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 847.946008][T11445] ceph: No mds server is up or the cluster is laggy [ 850.126123][T11139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 850.224193][T11139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 850.336704][T11139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 850.415098][T11139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 852.844581][T11139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.873440][T11139] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.894010][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.901167][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.921076][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.928297][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.313599][T11139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.729393][T11500] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1153'. [ 857.114234][T11521] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1159'. [ 858.335617][T11532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.347843][T11532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.363639][T11532] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 858.376179][T11532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 858.970142][T11532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.844101][T11532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 859.899651][T11532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 859.922332][T11532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 859.932382][T11532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 859.946621][T11532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 860.761759][T11554] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1164'. [ 861.281922][ T5845] Bluetooth: hci1: command tx timeout [ 862.082366][ T5845] Bluetooth: hci6: command tx timeout [ 863.361455][ T5845] Bluetooth: hci1: command tx timeout [ 864.151365][ T5845] Bluetooth: hci6: command tx timeout [ 865.346591][T11526] chnl_net:caif_netlink_parms(): no params data found [ 865.441534][ T5845] Bluetooth: hci1: command tx timeout [ 866.244559][ T5845] Bluetooth: hci6: command tx timeout [ 866.784970][T11541] chnl_net:caif_netlink_parms(): no params data found [ 867.531395][ T5845] Bluetooth: hci1: command tx timeout [ 867.686312][T11618] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1173'. [ 868.342691][ T5845] Bluetooth: hci6: command tx timeout [ 868.398905][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.468722][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.551547][T11526] bridge_slave_0: entered allmulticast mode [ 868.591565][T11526] bridge_slave_0: entered promiscuous mode [ 868.628777][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.672191][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.721485][T11526] bridge_slave_1: entered allmulticast mode [ 868.746960][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 868.910380][T11526] bridge_slave_1: entered promiscuous mode [ 868.919583][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 868.935841][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 868.951873][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 868.960194][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 869.621322][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 869.631401][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 869.648712][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 869.710392][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 869.862587][ T5922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 869.881519][ T5922] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 870.633981][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.640349][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.439694][T11629] fido_id[11629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 872.191811][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.638196][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.314657][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.341434][T11541] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.368968][T11541] bridge_slave_0: entered allmulticast mode [ 873.413414][T11541] bridge_slave_0: entered promiscuous mode [ 873.473703][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.511608][T11541] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.541710][T11541] bridge_slave_1: entered allmulticast mode [ 873.621827][T11541] bridge_slave_1: entered promiscuous mode [ 873.909440][T11526] team0: Port device team_slave_0 added [ 875.088227][T11526] team0: Port device team_slave_1 added [ 875.211894][ T12] bridge_slave_1: left allmulticast mode [ 875.221031][ T12] bridge_slave_1: left promiscuous mode [ 875.232636][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.144899][T11669] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1183'. [ 877.623872][ T12] bridge_slave_0: left allmulticast mode [ 877.629586][ T12] bridge_slave_0: left promiscuous mode [ 877.724679][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.837190][T11701] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1191'. [ 881.112626][T11713] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1194'. [ 881.967112][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.045069][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.083783][ T12] bond0 (unregistering): Released all slaves [ 882.892349][T11541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.060388][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.120620][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.184488][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.252563][T11541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.619733][T11737] loop9: detected capacity change from 0 to 7 [ 883.629012][T11737] buffer_io_error: 23 callbacks suppressed [ 883.629028][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.645588][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.656107][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.668594][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.680521][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.691287][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.752568][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.762509][T11737] ldm_validate_partition_table(): Disk read failed. [ 883.770379][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.782718][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.794556][T11737] Buffer I/O error on dev loop9, logical block 0, async page read [ 883.808504][T11737] Dev loop9: unable to read RDB block 0 [ 883.824170][T11737] loop9: unable to read partition table [ 883.833220][T11737] loop9: partition table beyond EOD, truncated [ 883.839540][T11737] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 883.839540][T11737] ) failed (rc=-5) [ 885.339441][ T12] hsr_slave_0: left promiscuous mode [ 885.770441][ T12] hsr_slave_1: left promiscuous mode [ 885.811630][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.844352][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.861450][ T5922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 886.061440][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 886.169799][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.189441][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.262315][T11748] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1203'. [ 886.770716][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.786694][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.813509][ T5922] usb 4-1: Product: syz [ 886.822212][ T5922] usb 4-1: Manufacturer: syz [ 886.832410][ T5922] usb 4-1: SerialNumber: syz [ 887.152679][ T30] audit: type=1326 audit(1751500688.985:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0250b8e929 code=0x0 [ 887.668305][ T12] team0 (unregistering): Port device team_slave_1 removed [ 887.710404][ T12] team0 (unregistering): Port device team_slave_0 removed [ 888.362098][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.389226][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.486947][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.614451][T11541] team0: Port device team_slave_0 added [ 888.624407][T11541] team0: Port device team_slave_1 added [ 888.681148][ T9644] usb 4-1: USB disconnect, device number 8 [ 888.971687][T11761] loop9: detected capacity change from 0 to 7 [ 888.980300][T11761] buffer_io_error: 9 callbacks suppressed [ 888.980317][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 888.994371][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.002729][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.010805][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.018941][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.027413][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.035917][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.044120][T11761] ldm_validate_partition_table(): Disk read failed. [ 889.051045][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.060907][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.096599][T11761] Buffer I/O error on dev loop9, logical block 0, async page read [ 889.105431][T11761] Dev loop9: unable to read RDB block 0 [ 889.112428][T11761] loop9: unable to read partition table [ 889.119159][T11761] loop9: partition table beyond EOD, truncated [ 889.125478][T11761] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 889.125478][T11761] ) failed (rc=-5) [ 890.265791][T11541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.348270][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.421361][T11541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.462335][T11541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.489642][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.270732][T11541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.499322][T11775] netlink: 'syz.6.1210': attribute type 8 has an invalid length. [ 891.590399][T11779] netlink: 'syz.6.1210': attribute type 8 has an invalid length. [ 891.622489][T11526] hsr_slave_0: entered promiscuous mode [ 891.658207][T11526] hsr_slave_1: entered promiscuous mode [ 891.689031][T11526] debugfs: 'hsr0' already exists in 'hsr' [ 891.723580][T11526] Cannot create hsr debugfs directory [ 891.754820][T11541] hsr_slave_0: entered promiscuous mode [ 891.779436][T11541] hsr_slave_1: entered promiscuous mode [ 891.826109][T11541] debugfs: 'hsr0' already exists in 'hsr' [ 891.834529][T11541] Cannot create hsr debugfs directory [ 893.024910][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1214'. [ 894.257325][T11808] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1215'. [ 896.103486][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.305042][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.684881][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.707488][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.079010][T11830] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1217'. [ 898.564353][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.596577][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.194249][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.248810][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.016835][ T12] bridge_slave_1: left allmulticast mode [ 903.041836][ T12] bridge_slave_1: left promiscuous mode [ 903.047691][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.121804][ T12] bridge_slave_0: left allmulticast mode [ 903.171339][ T12] bridge_slave_0: left promiscuous mode [ 903.188507][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.532173][T11879] vivid-002: disconnect [ 904.552738][T11874] vivid-002: reconnect [ 904.652710][T11881] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1232'. [ 905.056538][T11884] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[11884] [ 905.084485][T11884] overlayfs: workdir and upperdir must reside under the same mount [ 905.785410][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.806626][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.872046][ T12] bond0 (unregistering): Released all slaves [ 907.588936][ T979] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 908.443394][ T979] usb 7-1: Using ep0 maxpacket: 8 [ 908.452352][ T979] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.463101][ T979] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.490372][ T979] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.651621][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.671331][ T979] usb 7-1: Product: syz [ 908.691652][ T979] usb 7-1: Manufacturer: syz [ 908.733184][T11526] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 908.771405][ T979] usb 7-1: SerialNumber: syz [ 909.516781][T11526] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 909.724225][T11526] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 909.777896][T11526] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 909.830359][T11922] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1240'. [ 910.935440][ T9954] usb 7-1: USB disconnect, device number 3 [ 910.987988][ T12] hsr_slave_0: left promiscuous mode [ 911.019619][ T12] hsr_slave_1: left promiscuous mode [ 911.035897][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.045368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.055999][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.064084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.178426][ T12] veth1_macvtap: left promiscuous mode [ 911.354702][ T12] veth0_macvtap: left promiscuous mode [ 911.594396][ T12] veth1_vlan: left promiscuous mode [ 911.612844][ T12] veth0_vlan: left promiscuous mode [ 911.801410][ T5922] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 911.955921][ T5922] usb 7-1: Using ep0 maxpacket: 8 [ 911.964772][ T5922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 911.975188][ T5922] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 911.996000][ T5922] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 912.005994][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.025925][ T5922] usb 7-1: Product: syz [ 912.030123][ T5922] usb 7-1: Manufacturer: syz [ 912.047912][ T5922] usb 7-1: SerialNumber: syz [ 913.211166][ T12] team0 (unregistering): Port device team_slave_1 removed [ 913.261702][ T12] team0 (unregistering): Port device team_slave_0 removed [ 914.302020][T11532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 914.311344][T11532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 914.319851][T11532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 914.328183][T11532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 914.335909][T11532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 915.081115][ T5922] usb 7-1: USB disconnect, device number 4 [ 915.269719][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1248'. [ 915.541726][T11972] netdevsim netdevsim0: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 915.575003][T11972] netdevsim netdevsim0: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 915.653311][T11963] tmpfs: Bad value for 'mpol' [ 916.152995][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 916.381343][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 916.391386][ T5845] Bluetooth: hci2: command tx timeout [ 916.421943][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.473946][ T43] usb 4-1: config 0 has no interfaces? [ 916.541023][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 916.580226][T11532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.589060][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.610080][T11532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 916.619403][T11532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 916.622504][ T43] usb 4-1: Product: syz [ 916.652159][T11532] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 916.662761][T11532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.737790][ T43] usb 4-1: Manufacturer: syz [ 916.787086][ T43] usb 4-1: SerialNumber: syz [ 916.819758][ T43] usb 4-1: config 0 descriptor?? [ 917.557991][T11949] chnl_net:caif_netlink_parms(): no params data found [ 917.997647][ T43] libceph: connect (1)[c::]:6789 error -101 [ 918.054632][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 918.203152][T12009] ceph: No mds server is up or the cluster is laggy [ 918.516383][ T5845] Bluetooth: hci2: command tx timeout [ 918.715912][T11532] Bluetooth: hci5: command tx timeout [ 919.849111][ T5903] usb 4-1: USB disconnect, device number 9 [ 920.551346][T11532] Bluetooth: hci2: command tx timeout [ 920.803623][T11532] Bluetooth: hci5: command tx timeout [ 921.154344][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.915118][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.922829][T11949] bridge_slave_0: entered allmulticast mode [ 921.931007][T11949] bridge_slave_0: entered promiscuous mode [ 921.952557][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.959706][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.975981][T11949] bridge_slave_1: entered allmulticast mode [ 922.007847][T11949] bridge_slave_1: entered promiscuous mode [ 922.370802][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 922.706608][T11532] Bluetooth: hci2: command tx timeout [ 922.786315][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.854553][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.964220][T11532] Bluetooth: hci5: command tx timeout [ 923.054651][T12038] vivid-003: disconnect [ 923.059749][T12037] vivid-003: reconnect [ 923.168742][T11949] team0: Port device team_slave_0 added [ 923.224856][T11949] team0: Port device team_slave_1 added [ 924.280692][T12056] [U] v3f"S/4:XTzWtlW= [ 924.288720][T12056] [U] J"e:" [ 924.333389][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.343458][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.621004][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.081430][T11532] Bluetooth: hci5: command tx timeout [ 925.207236][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.243843][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.770811][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.104374][T12074] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1267'. [ 926.543481][T11988] chnl_net:caif_netlink_parms(): no params data found [ 928.021846][ T6961] bridge_slave_1: left allmulticast mode [ 928.341743][T12091] ubi31: attaching mtd0 [ 928.355076][ T6961] bridge_slave_1: left promiscuous mode [ 928.376356][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.395949][T12091] ubi31: scanning is finished [ 928.405359][T12091] ubi31: empty MTD device detected [ 928.411842][ T6961] bridge_slave_0: left allmulticast mode [ 928.417975][ T6961] bridge_slave_0: left promiscuous mode [ 928.431800][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.665542][T12091] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 928.676238][T12091] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 928.685118][T12091] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 928.699422][T12091] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 928.715875][T12091] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 928.741378][T12091] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 928.811521][T12091] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 331226970 [ 928.860527][T12091] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 928.915089][T12100] ubi31: background thread "ubi_bgt31d" started, PID 12100 [ 928.965778][ T30] audit: type=1800 audit(1751500730.835:14): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1271" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 929.001168][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.075087][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.098327][ T6961] bond0 (unregistering): Released all slaves [ 929.220724][T12109] ubi: mtd0 is already attached to ubi31 [ 929.651676][T12104] syz.6.1271 (12104) used greatest stack depth: 19512 bytes left [ 929.673035][T11949] hsr_slave_0: entered promiscuous mode [ 929.712584][T11949] hsr_slave_1: entered promiscuous mode [ 930.179170][T12120] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1274'. [ 931.106419][ T6961] hsr_slave_0: left promiscuous mode [ 931.131419][ T6961] hsr_slave_1: left promiscuous mode [ 931.515819][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.760100][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.806264][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.891932][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.046375][ T979] libceph: connect (1)[c::]:6789 error -101 [ 936.144028][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 936.280178][T12151] ceph: No mds server is up or the cluster is laggy [ 936.581591][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 936.703655][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 937.307636][ T6961] team0 (unregistering): Port device team_slave_1 removed [ 937.856907][ T6961] team0 (unregistering): Port device team_slave_0 removed [ 940.563937][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.587540][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.616936][T11988] bridge_slave_0: entered allmulticast mode [ 940.639030][T11988] bridge_slave_0: entered promiscuous mode [ 940.665051][T12181] tmpfs: Bad value for 'mpol' [ 940.694154][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.596054][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.704351][T11988] bridge_slave_1: entered allmulticast mode [ 942.092605][T11988] bridge_slave_1: entered promiscuous mode [ 942.666032][T12179] netdevsim netdevsim3: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 942.731298][T12179] netdevsim netdevsim3: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 943.981568][T12207] fuse: Unknown parameter 'user_id00000000000000000000' [ 944.615120][T11988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.706789][T12210] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1293'. [ 945.054036][T11988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.349715][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 946.917736][T11988] team0: Port device team_slave_0 added [ 946.939927][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 946.985297][T11988] team0: Port device team_slave_1 added [ 948.596331][T11988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.610794][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.734157][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 948.803910][T11988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.888764][T11988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.924863][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.965391][T11988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.779095][T12266] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1303'. [ 951.298451][T11988] hsr_slave_0: entered promiscuous mode [ 951.452369][T11988] hsr_slave_1: entered promiscuous mode [ 951.458675][T11988] debugfs: 'hsr0' already exists in 'hsr' [ 951.473906][T11988] Cannot create hsr debugfs directory [ 951.517199][ T6961] bridge_slave_1: left allmulticast mode [ 951.590883][T12284] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1308'. [ 952.108687][ T6961] bridge_slave_1: left promiscuous mode [ 952.114551][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.448393][ T6961] bridge_slave_0: left allmulticast mode [ 952.498611][ T6961] bridge_slave_0: left promiscuous mode [ 952.511481][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.630116][T12289] [U] v3f"S/4:XTzWtlW= [ 952.640660][T12289] [U] J"e:" [ 953.649153][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.762684][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.813301][ T6961] bond0 (unregistering): Released all slaves [ 957.489152][ T6961] hsr_slave_0: left promiscuous mode [ 957.511565][ T6961] hsr_slave_1: left promiscuous mode [ 957.532022][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.575083][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.113546][ T6961] team0 (unregistering): Port device team_slave_1 removed [ 959.174539][ T6961] team0 (unregistering): Port device team_slave_0 removed [ 959.574549][T11949] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 959.796804][T11949] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 959.895297][T11949] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 959.949075][T11949] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 959.963322][T12359] vivid-001: disconnect [ 959.984457][T12356] vivid-001: reconnect [ 960.296726][T12371] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1323'. [ 961.673349][T12381] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1325'. [ 961.958174][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 961.968044][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 961.977095][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 961.986031][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 961.995033][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 962.004086][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 962.013167][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 962.022198][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 962.168907][T12383] ubi: mtd0 is already attached to ubi31 [ 966.677429][T12394] vivid-002: disconnect [ 966.696807][T12392] vivid-002: reconnect [ 967.097988][T12401] vivid-003: disconnect [ 967.529361][T12395] vivid-003: reconnect [ 967.552130][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.759428][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.800089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.807324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.945599][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.952774][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.991355][ T5902] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 968.294296][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 968.470142][ T5902] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 968.761396][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.789849][ T5902] usb 4-1: Product: syz [ 968.820253][ T5902] usb 4-1: Manufacturer: syz [ 968.869464][ T5902] usb 4-1: SerialNumber: syz [ 968.894290][T11988] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 968.914276][ T5902] usb 4-1: config 0 descriptor?? [ 968.944824][T11988] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 969.025072][T11988] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 969.136395][ T5902] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 969.228945][T11988] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 969.965616][ T5902] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 970.012660][ T5902] usb 4-1: USB disconnect, device number 10 [ 971.214684][T11988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.332493][T11988] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.398816][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.405992][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.223973][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.231108][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.297181][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.392905][T11988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 972.406926][T11988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 972.419298][T12460] vivid-002: disconnect [ 972.424170][T12452] vivid-002: reconnect [ 973.003161][T12467] vivid-002: disconnect [ 973.751831][T12464] vivid-002: reconnect [ 974.229790][ T5902] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 974.401427][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 974.423977][ T5902] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 974.467368][ T5902] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 974.477679][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.511441][ T5902] usb 4-1: Product: syz [ 974.515654][ T5902] usb 4-1: Manufacturer: syz [ 974.534127][T11988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.571104][ T5902] usb 4-1: SerialNumber: syz [ 974.649436][ T5902] usb 4-1: config 0 descriptor?? [ 975.952164][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 975.961946][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 975.970511][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 975.980244][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 975.988093][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 976.946350][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.963657][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.976794][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.994268][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.999347][ T9644] usb 4-1: USB disconnect, device number 11 [ 977.018089][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 978.075191][ T5845] Bluetooth: hci1: command tx timeout [ 978.296631][ T5943] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 979.043096][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 979.086501][ T5943] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.102158][ T2989] bridge_slave_1: left allmulticast mode [ 979.107884][ T2989] bridge_slave_1: left promiscuous mode [ 979.114802][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.134578][ T5943] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.176214][ T5943] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.176497][ T2989] bridge_slave_0: left allmulticast mode [ 979.190796][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.198212][ T5845] Bluetooth: hci2: command tx timeout [ 979.202592][ T5943] usb 7-1: Product: syz [ 979.209545][ T5943] usb 7-1: Manufacturer: syz [ 979.215873][ T5943] usb 7-1: SerialNumber: syz [ 979.221278][ T2989] bridge_slave_0: left promiscuous mode [ 979.227541][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.382404][T12533] vivid-002: disconnect [ 979.387406][T12531] vivid-002: reconnect [ 979.564250][T12539] vivid-001: disconnect [ 980.151536][ T5845] Bluetooth: hci1: command tx timeout [ 980.325555][T12536] vivid-001: reconnect [ 980.574584][ T5943] libceph: connect (1)[c::]:6789 error -22 [ 980.944041][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 981.035464][T12548] ceph: No mds server is up or the cluster is laggy [ 981.197301][ T979] usb 7-1: USB disconnect, device number 5 [ 981.271443][ T5845] Bluetooth: hci2: command tx timeout [ 982.241238][ T5845] Bluetooth: hci1: command tx timeout [ 982.528386][ T9644] libceph: connect (1)[c::]:6789 error -22 [ 982.650721][ T9644] libceph: mon0 (1)[c::]:6789 connect error [ 983.283349][ T9644] libceph: connect (1)[c::]:6789 error -22 [ 983.290140][ T9644] libceph: mon0 (1)[c::]:6789 connect error [ 983.361689][ T5845] Bluetooth: hci2: command tx timeout [ 984.316814][ T5845] Bluetooth: hci1: command tx timeout [ 984.379947][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.398569][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.410059][ T2989] bond0 (unregistering): Released all slaves [ 984.427362][T12492] chnl_net:caif_netlink_parms(): no params data found [ 984.620268][ T2989] hsr_slave_0: left promiscuous mode [ 984.628063][ T2989] hsr_slave_1: left promiscuous mode [ 984.640958][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.656839][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.522517][ T5845] Bluetooth: hci2: command tx timeout [ 986.471510][T12590] ptrace attach of "./syz-executor exec"[9447] was attempted by "./syz-executor exec"[12590] [ 986.600781][T12590] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 986.608976][T12590] overlayfs: failed to set xattr on upper [ 986.615306][T12590] overlayfs: ...falling back to redirect_dir=nofollow. [ 986.626404][T12590] overlayfs: ...falling back to index=off. [ 986.650801][T12590] overlayfs: ...falling back to uuid=null. [ 986.835706][T12590] overlayfs: maximum fs stacking depth exceeded [ 987.752719][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 987.884471][T12599] ubi: mtd0 is already attached to ubi31 [ 988.320856][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 989.784544][T12606] fuse: Unknown parameter '0x0000000000000009' [ 992.278329][T12610] ceph: No mds server is up or the cluster is laggy [ 992.293114][ T24] libceph: connect (1)[c::]:6789 error -22 [ 992.364669][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 993.030254][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.085242][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.927098][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.935802][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.964237][T12492] bridge_slave_0: entered allmulticast mode [ 993.973046][T12492] bridge_slave_0: entered promiscuous mode [ 993.985063][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.993080][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.000307][T12492] bridge_slave_1: entered allmulticast mode [ 994.102437][T12492] bridge_slave_1: entered promiscuous mode [ 996.428509][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.520241][T12644] process 'syz.3.1376' launched './file2' with NULL argv: empty string added [ 997.602471][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.803526][T12650] ubi: mtd0 is already attached to ubi31 [ 998.534888][T12492] team0: Port device team_slave_0 added [ 998.625209][T12492] team0: Port device team_slave_1 added [ 999.912278][T12507] chnl_net:caif_netlink_parms(): no params data found [ 999.934691][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.986002][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.129139][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.880988][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.892931][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.954884][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.784501][T12687] fuse: Unknown parameter '0x0000000000000009' [ 1002.451347][ T9954] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1002.736807][ T9954] usb 4-1: config 0 has an invalid interface number: 187 but max is 0 [ 1002.804154][ T9954] usb 4-1: config 0 has no interface number 0 [ 1002.876028][ T9954] usb 4-1: too many endpoints for config 0 interface 187 altsetting 255: 255, using maximum allowed: 30 [ 1003.853403][ T9954] usb 4-1: config 0 interface 187 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1003.889020][ T9954] usb 4-1: config 0 interface 187 has no altsetting 0 [ 1004.022393][ T9954] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1004.051708][ T9954] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1004.102248][ T9954] usb 4-1: Product: syz [ 1004.145822][ T9954] usb 4-1: Manufacturer: syz [ 1004.150500][ T9954] usb 4-1: SerialNumber: syz [ 1004.170220][ T9954] usb 4-1: config 0 descriptor?? [ 1004.227313][T12507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.882449][T12507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.889858][T12507] bridge_slave_0: entered allmulticast mode [ 1004.906344][T12507] bridge_slave_0: entered promiscuous mode [ 1004.947302][ T9954] asix 4-1:0.187 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1004.966046][ T9954] asix 4-1:0.187: probe with driver asix failed with error -71 [ 1004.983516][ T9954] usb 4-1: USB disconnect, device number 12 [ 1005.001487][T12492] hsr_slave_0: entered promiscuous mode [ 1005.067429][T12492] hsr_slave_1: entered promiscuous mode [ 1005.517394][T12704] __nla_validate_parse: 45 callbacks suppressed [ 1005.517418][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.532935][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.541995][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.550970][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.559973][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.569085][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.578022][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.587859][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.596821][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1005.605762][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 1007.539298][T12507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.577727][T12507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.598557][T12507] bridge_slave_1: entered allmulticast mode [ 1007.643165][T12507] bridge_slave_1: entered promiscuous mode [ 1008.833051][T12726] ptrace attach of "./syz-executor exec"[9447] was attempted by "./syz-executor exec"[12726] [ 1008.873258][T12726] overlayfs: workdir and upperdir must reside under the same mount [ 1011.241064][T12507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.325553][T12507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.915873][T12750] ptrace attach of "./syz-executor exec"[9447] was attempted by "./syz-executor exec"[12750] [ 1013.002227][T12750] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1013.011180][T12750] overlayfs: failed to set xattr on upper [ 1013.016987][T12750] overlayfs: ...falling back to redirect_dir=nofollow. [ 1013.024476][T12750] overlayfs: ...falling back to index=off. [ 1013.030491][T12750] overlayfs: ...falling back to uuid=null. [ 1013.037203][T12750] overlayfs: maximum fs stacking depth exceeded [ 1013.051736][ T5902] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1013.295097][ T5902] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1013.329632][ T5902] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1013.407322][T12507] team0: Port device team_slave_0 added [ 1013.413060][ T5902] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1013.422334][ T5902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1013.434360][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1013.434986][T12507] team0: Port device team_slave_1 added [ 1013.450676][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1013.544794][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1013.777405][ T5902] usb 4-1: string descriptor 0 read error: -22 [ 1013.906755][ T5902] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1014.055148][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.240415][ T5902] usb 4-1: config 0 descriptor?? [ 1014.252051][ T5902] hub 4-1:0.0: bad descriptor, ignoring hub [ 1014.258093][ T5902] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1014.474485][ T5902] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 1014.544830][T12747] loop3: detected capacity change from 0 to 128 [ 1014.600830][T12747] befs: (loop3): No write support. Marking filesystem read-only [ 1014.656721][T12747] befs: (loop3): invalid magic header [ 1015.393746][T12507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.406224][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.465498][T12507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.493498][T12507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.524386][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.550706][T12507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.323174][T12507] hsr_slave_0: entered promiscuous mode [ 1016.330127][T12507] hsr_slave_1: entered promiscuous mode [ 1016.336642][T12507] debugfs: 'hsr0' already exists in 'hsr' [ 1016.343140][T12507] Cannot create hsr debugfs directory [ 1016.348972][ T2989] bridge_slave_1: left allmulticast mode [ 1016.362781][ T2989] bridge_slave_1: left promiscuous mode [ 1016.368717][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.505573][ T2989] bridge_slave_0: left allmulticast mode [ 1016.515033][ T979] usb 4-1: USB disconnect, device number 13 [ 1016.579717][ T2989] bridge_slave_0: left promiscuous mode [ 1016.596448][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.755030][ T5902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1017.001227][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 1017.008099][ T5902] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1017.016921][ T5902] usb 1-1: config 0 has no interface number 0 [ 1017.025691][ T5902] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1017.046903][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1017.062283][ T5902] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1017.070536][ T5902] usb 1-1: Product: syz [ 1017.076364][ T5902] usb 1-1: Manufacturer: syz [ 1017.081045][ T5902] usb 1-1: SerialNumber: syz [ 1017.090049][ T5902] usb 1-1: config 0 descriptor?? [ 1017.108936][ T5902] smsc75xx v1.0.0 [ 1017.138694][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.254958][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.281295][ T2989] bond0 (unregistering): Released all slaves [ 1017.516089][ T2989] hsr_slave_0: left promiscuous mode [ 1017.528446][ T2989] hsr_slave_1: left promiscuous mode [ 1017.722152][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.730111][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.794264][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1018.398531][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1019.068519][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1019.501722][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1019.511733][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1019.524057][ T5902] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1019.537451][ T5902] usb 1-1: USB disconnect, device number 12 [ 1019.673495][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 1019.996704][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 1020.069398][T12796] fuse: Unknown parameter 'fd0x0000000000000009' [ 1020.930069][ T5922] libceph: connect (1)[c::]:6789 error -22 [ 1020.993411][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 1021.043460][T12800] ceph: No mds server is up or the cluster is laggy [ 1029.081740][T12492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1029.130575][T12492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1029.325444][T12492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1029.621837][T12492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1029.715437][T12838] xt_cgroup: invalid path, errno=-2 [ 1031.262808][T12851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.100412][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.216131][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.272995][T12492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1032.284245][T12492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.078130][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.085362][T10981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.113828][T10981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.121034][T10981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.252238][T12865] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.258487][T12865] binder: 12861:12865 ioctl 4018620d 200000000040 returned -16 [ 1033.268511][T12866] __nla_validate_parse: 44 callbacks suppressed [ 1033.268538][T12866] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1426'. [ 1033.312033][T12507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1033.326892][T12865] binder: 12861:12865 ioctl c0306201 2000000003c0 returned -14 [ 1033.365555][T12507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1033.452453][T12507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1033.510968][T12507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1033.698695][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.536849][T12507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.681372][T12507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.738875][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.746072][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.439939][T10982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.447187][T10982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.054406][T12507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1037.600263][T11532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1037.615621][T11532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1037.623491][T11532] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.634365][T11532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.650543][T11532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1038.609548][ T5922] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1038.771635][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1038.781058][ T5922] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1038.799821][ T5922] usb 4-1: config 0 has no interface number 0 [ 1039.793510][ T5922] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1039.830125][T11532] Bluetooth: hci1: command tx timeout [ 1040.028924][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1040.254414][ T5922] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1040.271280][ T5922] usb 4-1: Product: syz [ 1040.275507][ T5922] usb 4-1: Manufacturer: syz [ 1040.280131][ T5922] usb 4-1: SerialNumber: syz [ 1040.292008][ T5922] usb 4-1: config 0 descriptor?? [ 1040.303814][ T5922] smsc75xx v1.0.0 [ 1040.436717][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.445584][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.482572][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.500429][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.572489][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1041.178456][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1041.217946][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1041.357618][T12937] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12937] [ 1041.431683][T12937] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1041.439025][T12937] overlayfs: failed to set xattr on upper [ 1041.445440][T12937] overlayfs: ...falling back to redirect_dir=nofollow. [ 1041.452578][T12937] overlayfs: ...falling back to index=off. [ 1041.458710][T12937] overlayfs: ...falling back to uuid=null. [ 1041.465396][T12937] overlayfs: maximum fs stacking depth exceeded [ 1041.917129][T11532] Bluetooth: hci1: command tx timeout [ 1042.074086][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1042.139455][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1042.351193][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1042.371919][ T5922] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1042.418055][ T5922] usb 4-1: USB disconnect, device number 14 [ 1042.634450][T11532] Bluetooth: hci2: command tx timeout [ 1043.657946][ T5994] bridge_slave_1: left allmulticast mode [ 1043.687548][ T5994] bridge_slave_1: left promiscuous mode [ 1043.693463][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.714203][ T5994] bridge_slave_0: left allmulticast mode [ 1043.756105][ T5994] bridge_slave_0: left promiscuous mode [ 1043.775389][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.991391][T11532] Bluetooth: hci1: command tx timeout [ 1044.711591][T11532] Bluetooth: hci2: command tx timeout [ 1046.071742][T11532] Bluetooth: hci1: command tx timeout [ 1046.811258][T11532] Bluetooth: hci2: command tx timeout [ 1047.303678][T12991] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12991] [ 1047.468515][T12991] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1047.481214][T12991] overlayfs: failed to set xattr on upper [ 1047.487219][T12991] overlayfs: ...falling back to redirect_dir=nofollow. [ 1047.494508][T12991] overlayfs: ...falling back to index=off. [ 1047.502477][T12991] overlayfs: ...falling back to uuid=null. [ 1047.508657][T12991] overlayfs: maximum fs stacking depth exceeded [ 1048.871364][T11532] Bluetooth: hci2: command tx timeout [ 1048.973997][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.000224][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.013809][ T5994] bond0 (unregistering): Released all slaves [ 1049.369923][T12900] chnl_net:caif_netlink_parms(): no params data found [ 1049.493168][ T5994] hsr_slave_0: left promiscuous mode [ 1049.500407][ T5994] hsr_slave_1: left promiscuous mode [ 1049.523208][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.566603][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.648065][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 1050.801307][ T24] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 1050.813431][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 1050.963222][ T24] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1050.996040][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1051.009014][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1051.028889][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1051.047438][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1051.058750][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1051.072744][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1051.091876][ T24] usb 1-1: string descriptor 0 read error: -22 [ 1051.098197][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1051.111706][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.143468][ T24] usb 1-1: config 0 descriptor?? [ 1051.150770][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 1051.161174][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1051.175427][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 1051.412976][T13009] loop0: detected capacity change from 0 to 128 [ 1051.420349][T13009] befs: (loop0): No write support. Marking filesystem read-only [ 1051.429471][T13009] befs: (loop0): invalid magic header [ 1053.790633][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.809545][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.838591][T12900] bridge_slave_0: entered allmulticast mode [ 1053.902728][T12900] bridge_slave_0: entered promiscuous mode [ 1053.967046][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.988385][ T24] usb 1-1: USB disconnect, device number 13 [ 1053.998178][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.039891][T12900] bridge_slave_1: entered allmulticast mode [ 1054.497525][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.515524][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.110417][T12900] bridge_slave_1: entered promiscuous mode [ 1055.233609][T12922] chnl_net:caif_netlink_parms(): no params data found [ 1055.988648][T12900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.122097][ T24] libceph: connect (1)[c::]:6789 error -22 [ 1056.184713][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1056.244812][T12900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.289881][T13050] ceph: No mds server is up or the cluster is laggy [ 1059.521561][T13063] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13063] [ 1059.574506][T12900] team0: Port device team_slave_0 added [ 1059.646072][T13064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1059.692340][T13064] overlayfs: failed to set xattr on upper [ 1059.718531][T13064] overlayfs: ...falling back to redirect_dir=nofollow. [ 1059.745487][T13064] overlayfs: ...falling back to index=off. [ 1059.941632][T13064] overlayfs: ...falling back to uuid=null. [ 1059.968932][T13064] overlayfs: maximum fs stacking depth exceeded [ 1059.969405][T13068] o2cb: This node has not been configured. [ 1059.981783][T13068] o2cb: Cluster check failed. Fix errors before retrying. [ 1059.991164][T13068] (syz.0.1470,13068,0):user_dlm_register:674 ERROR: status = -22 [ 1059.999143][T13068] (syz.0.1470,13068,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1060.049503][T12900] team0: Port device team_slave_1 added [ 1060.618797][T12922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.626592][T12922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.650873][T12922] bridge_slave_0: entered allmulticast mode [ 1061.393825][T12922] bridge_slave_0: entered promiscuous mode [ 1061.403456][T12922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.410621][T12922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.441514][T12922] bridge_slave_1: entered allmulticast mode [ 1061.449257][T12922] bridge_slave_1: entered promiscuous mode [ 1061.714851][T12900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.756367][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.792679][T12900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.891562][ T9644] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1062.902973][T12922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.916428][T12922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.927027][T12900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.935478][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.078649][T13089] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1476'. [ 1063.123360][T12900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.601463][ T43] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 1063.601771][ T9644] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1063.631371][ T9644] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1063.641383][ T9644] usb 1-1: Product: syz [ 1063.799979][ T43] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1063.805650][ T9644] usb 1-1: Manufacturer: syz [ 1063.836032][ T43] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1063.876527][ T9644] usb 1-1: SerialNumber: syz [ 1063.951466][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1063.994113][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1063.999520][ T9644] usb 1-1: config 0 descriptor?? [ 1064.006102][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1064.062609][T12922] team0: Port device team_slave_0 added [ 1064.081233][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1064.103458][T12922] team0: Port device team_slave_1 added [ 1064.117150][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1064.138920][ T43] usb 4-1: string descriptor 0 read error: -22 [ 1064.147580][ T43] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1064.163948][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.206675][ T43] usb 4-1: config 0 descriptor?? [ 1064.223976][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 1064.230334][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1064.269792][ T43] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 1064.377369][T12922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.399897][T12922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.474397][T12922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.508204][T12900] hsr_slave_0: entered promiscuous mode [ 1064.514802][T13101] loop3: detected capacity change from 0 to 128 [ 1064.515951][T12900] hsr_slave_1: entered promiscuous mode [ 1064.522635][T13101] befs: (loop3): No write support. Marking filesystem read-only [ 1064.540875][T13101] befs: (loop3): invalid magic header [ 1064.543816][T12922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.571767][ T9644] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1064.584854][ T9644] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1064.597330][T12922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.626961][ T9644] usb 1-1: USB disconnect, device number 14 [ 1064.674435][T12922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.055559][T12922] hsr_slave_0: entered promiscuous mode [ 1065.062558][T12922] hsr_slave_1: entered promiscuous mode [ 1065.069002][T12922] debugfs: 'hsr0' already exists in 'hsr' [ 1065.076377][T12922] Cannot create hsr debugfs directory [ 1065.420146][ T5994] bridge_slave_1: left allmulticast mode [ 1065.448631][ T5994] bridge_slave_1: left promiscuous mode [ 1065.479958][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.668883][ T5994] bridge_slave_0: left allmulticast mode [ 1065.674735][ T5994] bridge_slave_0: left promiscuous mode [ 1065.681482][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.803746][ T9644] usb 4-1: USB disconnect, device number 15 [ 1070.361490][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.437494][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.590545][ T5994] bond0 (unregistering): Released all slaves [ 1070.997875][ T5994] hsr_slave_0: left promiscuous mode [ 1071.067920][ T5994] hsr_slave_1: left promiscuous mode [ 1071.178822][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.310927][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.003665][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 1074.336016][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 1074.621994][ T30] audit: type=1800 audit(1751500876.495:15): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1497" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1074.857799][ T43] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1075.063340][ T43] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1075.081402][ T43] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1075.095779][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1075.134266][ T43] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1075.196739][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1075.210255][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1075.251012][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1075.764929][ T43] usb 7-1: string descriptor 0 read error: -22 [ 1075.818217][ T43] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1075.831473][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.860372][ T43] usb 7-1: config 0 descriptor?? [ 1075.887148][ T43] hub 7-1:0.0: bad descriptor, ignoring hub [ 1075.910571][ T43] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1075.962558][ T43] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input15 [ 1076.211259][T13214] loop6: detected capacity change from 0 to 128 [ 1076.218709][T13214] befs: (loop6): No write support. Marking filesystem read-only [ 1076.242476][T13214] befs: (loop6): invalid magic header [ 1076.720180][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.729326][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.738359][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.748342][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.758500][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.767485][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.776456][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.785380][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.794788][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1076.803749][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1078.367003][ T9644] usb 7-1: USB disconnect, device number 6 [ 1078.689992][T13236] netdevsim netdevsim6: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 1078.710371][T13236] netdevsim netdevsim6: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 1078.788454][T13237] tmpfs: Bad value for 'mpol' [ 1081.872996][T13248] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.879563][T13248] binder: 13242:13248 ioctl 4018620d 200000000040 returned -16 [ 1081.888853][T13248] binder: 13242:13248 ioctl c0306201 2000000003c0 returned -14 [ 1081.988933][T13249] __nla_validate_parse: 43 callbacks suppressed [ 1081.988961][T13249] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1505'. [ 1083.015410][T12900] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1083.077324][T12900] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1083.202640][T12900] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1083.265394][T12900] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1083.504764][T13261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.264625][T13272] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13272] [ 1084.289977][T13272] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1084.298966][T13272] overlayfs: failed to set xattr on upper [ 1084.305146][T13272] overlayfs: ...falling back to redirect_dir=nofollow. [ 1084.312490][T13272] overlayfs: ...falling back to index=off. [ 1084.318461][T13272] overlayfs: ...falling back to uuid=null. [ 1084.324540][T13272] overlayfs: maximum fs stacking depth exceeded [ 1086.319191][T12900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.444636][T12900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.558101][T12922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1086.663089][T12922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1087.006673][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.013893][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.248336][T12922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1087.474951][T12922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1087.672453][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.679660][ T6292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.020123][T13301] xt_cgroup: invalid path, errno=-2 [ 1089.332976][T13309] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13309] [ 1089.595551][T13309] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1089.604086][T13309] overlayfs: failed to set xattr on upper [ 1089.610232][T13309] overlayfs: ...falling back to redirect_dir=nofollow. [ 1089.617530][T13309] overlayfs: ...falling back to index=off. [ 1089.623823][T13309] overlayfs: ...falling back to uuid=null. [ 1089.629710][T13309] overlayfs: maximum fs stacking depth exceeded [ 1090.988277][T13323] binder: 13319:13323 ioctl c0306201 2000000003c0 returned -14 [ 1091.246585][T12922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.441028][T13326] tmpfs: Bad value for 'mpol' [ 1091.535011][T13322] netdevsim netdevsim6: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 1091.554690][T13322] netdevsim netdevsim6: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 1092.355008][T12922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.410359][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.417597][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.773863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.781412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.819730][T12900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.688490][T12922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.242118][T13384] xt_cgroup: invalid path, errno=-2 [ 1097.385375][T13393] vivid-003: disconnect [ 1098.129468][T13389] vivid-003: reconnect [ 1099.299093][T12900] syz-executor (12900) used greatest stack depth: 19392 bytes left [ 1099.470700][T13407] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1531'. [ 1100.940380][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1100.952453][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1100.970664][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1101.010756][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1101.028734][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1101.307547][T11532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1101.317079][T11532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1101.324945][T11532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1101.333456][T11532] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1101.341041][T11532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1103.121304][ T5845] Bluetooth: hci1: command tx timeout [ 1103.431279][ T5845] Bluetooth: hci5: command tx timeout [ 1104.092961][T13444] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1538'. [ 1105.191218][ T5845] Bluetooth: hci1: command tx timeout [ 1105.409760][T13463] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.418039][T13463] binder: 13458:13463 ioctl 4018620d 200000000040 returned -16 [ 1105.468606][T13463] binder: 13458:13463 ioctl c0306201 2000000003c0 returned -14 [ 1105.556985][ T5845] Bluetooth: hci5: command tx timeout [ 1105.801492][T13464] vivid-003: disconnect [ 1106.125908][T13461] vivid-003: reconnect [ 1106.154932][T13418] chnl_net:caif_netlink_parms(): no params data found [ 1107.286094][ T5845] Bluetooth: hci1: command tx timeout [ 1107.406750][ T6961] bridge_slave_1: left allmulticast mode [ 1107.845374][ T5845] Bluetooth: hci5: command tx timeout [ 1107.976924][ T6961] bridge_slave_1: left promiscuous mode [ 1108.124196][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.948327][ T5845] Bluetooth: hci1: command tx timeout [ 1109.948694][T11532] Bluetooth: hci5: command tx timeout [ 1110.523134][ T6961] bridge_slave_0: left allmulticast mode [ 1110.601899][ T6961] bridge_slave_0: left promiscuous mode [ 1110.607643][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.758720][T13511] vivid-001: disconnect [ 1113.541419][T13509] vivid-001: reconnect [ 1115.406620][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.462958][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.495408][ T6961] bond0 (unregistering): Released all slaves [ 1116.293285][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.299592][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.221733][ T6961] hsr_slave_0: left promiscuous mode [ 1120.248261][ T6961] hsr_slave_1: left promiscuous mode [ 1120.270032][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.394986][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.815522][ T30] audit: type=1800 audit(1751500922.655:16): pid=13537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1558" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1121.058235][T13537] syz.3.1558 (13537) used greatest stack depth: 19336 bytes left [ 1123.690925][T13557] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1564'. [ 1124.125504][ T6961] team0 (unregistering): Port device team_slave_1 removed [ 1124.230057][ T6961] team0 (unregistering): Port device team_slave_0 removed [ 1130.703236][T13594] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13594] [ 1131.160782][T13418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.188378][T13418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.202251][T13418] bridge_slave_0: entered allmulticast mode [ 1131.210453][T13418] bridge_slave_0: entered promiscuous mode [ 1131.329367][T13418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.350010][T13418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.414410][T13418] bridge_slave_1: entered allmulticast mode [ 1131.520497][T13418] bridge_slave_1: entered promiscuous mode [ 1131.853178][T13424] chnl_net:caif_netlink_parms(): no params data found [ 1132.609360][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1573'. [ 1132.735544][T13418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.664839][T13418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.072899][T13615] program syz.3.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1134.399425][T13418] team0: Port device team_slave_0 added [ 1134.838634][T13418] team0: Port device team_slave_1 added [ 1134.941980][ T5922] hid_parser_main: 73 callbacks suppressed [ 1134.941997][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1134.962161][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.093733][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.102231][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.109677][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.117638][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.125778][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.133540][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.140982][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.149166][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1135.176187][ T5922] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1136.534887][T13418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.548000][T13418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.617572][T13418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.764886][T13424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.811318][T13424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.818608][T13424] bridge_slave_0: entered allmulticast mode [ 1136.856858][T13424] bridge_slave_0: entered promiscuous mode [ 1136.907523][T13424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.062016][T13424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.075110][T13424] bridge_slave_1: entered allmulticast mode [ 1137.092285][T13424] bridge_slave_1: entered promiscuous mode [ 1137.116020][T13418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.811358][T13418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.838077][T13418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.158619][T13424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.346984][T13418] hsr_slave_0: entered promiscuous mode [ 1139.376648][T13418] hsr_slave_1: entered promiscuous mode [ 1139.393641][T13687] Cache volume key already in use (9p,(null),) [ 1139.451297][ T30] audit: type=1800 audit(1751500941.325:17): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1587" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1139.500606][T13424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.004624][T13424] team0: Port device team_slave_0 added [ 1140.516225][T13424] team0: Port device team_slave_1 added [ 1141.503706][ T30] audit: type=1326 audit(1751500943.385:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a258e929 code=0x0 [ 1143.507635][T13731] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.514060][T13731] binder: 13728:13731 ioctl 4018620d 200000000040 returned -16 [ 1143.886407][T13424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.033458][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.245557][T13424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.321391][T13424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.328390][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.358722][T13729] binder: 13728:13729 ioctl c0306201 2000000003c0 returned -14 [ 1144.541930][T13424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.398543][T13424] hsr_slave_0: entered promiscuous mode [ 1145.430637][T13424] hsr_slave_1: entered promiscuous mode [ 1145.512805][T13424] debugfs: 'hsr0' already exists in 'hsr' [ 1145.518584][T13424] Cannot create hsr debugfs directory [ 1147.665834][ T6961] bridge_slave_1: left allmulticast mode [ 1147.678434][ T6961] bridge_slave_1: left promiscuous mode [ 1147.740497][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.804822][ T6961] bridge_slave_0: left allmulticast mode [ 1147.820483][ T6961] bridge_slave_0: left promiscuous mode [ 1147.831540][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.675856][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.709863][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.725956][ T6961] bond0 (unregistering): Released all slaves [ 1150.751205][ T9954] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1150.960951][ T9954] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1151.018531][ T9954] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1151.034478][ T6961] hsr_slave_0: left promiscuous mode [ 1151.055808][ T9954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1151.065941][ T6961] hsr_slave_1: left promiscuous mode [ 1151.505869][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.514553][ T9954] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1151.549942][ T9954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1151.583009][ T9954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1151.852072][ T9954] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1151.938956][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.011195][ T9954] usb 4-1: string descriptor 0 read error: -22 [ 1152.017530][ T9954] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1152.091606][ T9954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.239504][ T9954] usb 4-1: config 0 descriptor?? [ 1152.279515][ T9954] hub 4-1:0.0: bad descriptor, ignoring hub [ 1152.301689][ T9954] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1152.358954][ T9954] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 1152.578503][T13814] loop3: detected capacity change from 0 to 128 [ 1152.585792][T13814] befs: (loop3): No write support. Marking filesystem read-only [ 1152.594801][T13814] befs: (loop3): invalid magic header [ 1154.007862][T13826] binder: 13823:13826 ioctl c0306201 2000000003c0 returned -14 [ 1155.215804][ T30] audit: type=1326 audit(1751500957.095:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a258e929 code=0x0 [ 1155.326849][ T6961] team0 (unregistering): Port device team_slave_1 removed [ 1155.514435][ T6961] team0 (unregistering): Port device team_slave_0 removed [ 1157.917739][T13856] tmpfs: Bad value for 'mpol' [ 1157.959293][T13853] netdevsim netdevsim0: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 1157.983034][T13853] netdevsim netdevsim0: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 1157.985260][ T10] usb 4-1: USB disconnect, device number 16 [ 1158.159106][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1158.243882][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1158.252731][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1158.261848][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1158.270765][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1159.038531][T13865] binder: 13860:13865 ioctl c0306201 2000000003c0 returned -14 [ 1159.089762][T13865] binder_alloc: 13860: binder_alloc_buf, no vma [ 1159.339101][T13871] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1629'. [ 1160.328674][T11532] Bluetooth: hci2: command tx timeout [ 1162.391302][T11532] Bluetooth: hci2: command tx timeout [ 1162.509317][T13858] chnl_net:caif_netlink_parms(): no params data found [ 1162.812408][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1162.825712][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1162.844662][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1162.862077][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1162.873042][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1164.531200][ T5845] Bluetooth: hci2: command tx timeout [ 1164.839767][ T9954] libceph: connect (1)[c::]:6789 error -22 [ 1164.849086][ T9954] libceph: mon0 (1)[c::]:6789 connect error [ 1165.069949][T13917] ceph: No mds server is up or the cluster is laggy [ 1165.272221][ T5845] Bluetooth: hci1: command tx timeout [ 1165.312535][ T5956] libceph: connect (1)[c::]:6789 error -22 [ 1165.586975][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 1165.811630][T13858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.818838][T13858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.968716][T13858] bridge_slave_0: entered allmulticast mode [ 1165.977291][T13858] bridge_slave_0: entered promiscuous mode [ 1166.011299][T13858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.018495][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.032538][T13858] bridge_slave_1: entered allmulticast mode [ 1166.040481][T13936] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1640'. [ 1166.054755][T13858] bridge_slave_1: entered promiscuous mode [ 1166.379713][T13858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.457741][T13858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.554112][ T5845] Bluetooth: hci2: command tx timeout [ 1167.351320][ T5845] Bluetooth: hci1: command tx timeout [ 1169.431248][ T5845] Bluetooth: hci1: command tx timeout [ 1169.796715][T13858] team0: Port device team_slave_0 added [ 1169.821470][T13965] Bluetooth: MGMT ver 1.23 [ 1169.852513][T13858] team0: Port device team_slave_1 added [ 1171.289534][T13986] o2cb: This node has not been configured. [ 1171.295843][T13986] o2cb: Cluster check failed. Fix errors before retrying. [ 1171.391951][ T5994] bridge_slave_1: left allmulticast mode [ 1171.397706][ T5994] bridge_slave_1: left promiscuous mode [ 1171.411268][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.418489][T13986] (syz.6.1648,13986,1):user_dlm_register:674 ERROR: status = -22 [ 1171.493715][T13986] (syz.6.1648,13986,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1171.513096][ T5845] Bluetooth: hci1: command tx timeout [ 1171.794462][T13991] xt_cgroup: invalid path, errno=-2 [ 1171.898419][ T5994] bridge_slave_0: left allmulticast mode [ 1171.904298][ T5994] bridge_slave_0: left promiscuous mode [ 1172.111200][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.600644][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.701769][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.825633][ T5994] bond0 (unregistering): Released all slaves [ 1173.863271][T14016] o2cb: This node has not been configured. [ 1173.869286][T14016] o2cb: Cluster check failed. Fix errors before retrying. [ 1173.878684][T14016] (syz.6.1654,14016,0):user_dlm_register:674 ERROR: status = -22 [ 1173.886806][T14016] (syz.6.1654,14016,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1174.094660][T13858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.125699][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.896631][T13858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.181430][T13858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.188445][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.371162][T13858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.876578][ T5994] hsr_slave_0: left promiscuous mode [ 1175.885476][ T5994] hsr_slave_1: left promiscuous mode [ 1175.907352][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.929686][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.285496][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.291899][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.727453][ T10] libceph: connect (1)[c::]:6789 error -22 [ 1177.761352][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1177.868055][T14049] ceph: No mds server is up or the cluster is laggy [ 1178.482317][ T10] libceph: connect (1)[c::]:6789 error -22 [ 1178.508669][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1178.834623][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 1179.731845][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 1181.125681][T14068] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1665'. [ 1182.041541][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1182.096491][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1182.161409][T14071] ceph: No mds server is up or the cluster is laggy [ 1182.903534][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1182.909731][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1183.459521][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1183.463958][T14084] o2cb: This node has not been configured. [ 1183.471715][T14084] o2cb: Cluster check failed. Fix errors before retrying. [ 1183.479787][T14084] (syz.0.1667,14084,0):user_dlm_register:674 ERROR: status = -22 [ 1183.492074][T14084] (syz.0.1667,14084,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1183.501487][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1184.069336][T14088] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[14088] [ 1184.579128][T13858] hsr_slave_0: entered promiscuous mode [ 1184.602917][T13858] hsr_slave_1: entered promiscuous mode [ 1184.827411][T13907] chnl_net:caif_netlink_parms(): no params data found [ 1184.922858][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1185.091329][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 1185.106012][ T5903] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1185.121001][ T5903] usb 7-1: config 0 has no interface number 0 [ 1185.133854][ T5903] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1185.143790][ T5903] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1185.153235][ T5903] usb 7-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1185.162611][ T5903] usb 7-1: Product: syz [ 1185.167428][ T5903] usb 7-1: Manufacturer: syz [ 1185.191359][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1185.210213][ T5903] usb 7-1: SerialNumber: syz [ 1185.235953][ T5903] usb 7-1: config 0 descriptor?? [ 1185.248080][ T5903] smsc75xx v1.0.0 [ 1185.371139][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1185.384761][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1185.394089][ T24] usb 1-1: config 0 has no interface number 0 [ 1185.401669][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1185.411955][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1185.421485][ T24] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1185.429697][ T24] usb 1-1: Product: syz [ 1185.436843][ T24] usb 1-1: Manufacturer: syz [ 1185.445532][ T24] usb 1-1: SerialNumber: syz [ 1185.470736][ T24] usb 1-1: config 0 descriptor?? [ 1185.488505][ T24] smsc75xx v1.0.0 [ 1185.619414][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.630188][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.646026][T13907] bridge_slave_0: entered allmulticast mode [ 1185.656147][T13907] bridge_slave_0: entered promiscuous mode [ 1185.700985][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.720087][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.760278][T13907] bridge_slave_1: entered allmulticast mode [ 1185.770519][T13907] bridge_slave_1: entered promiscuous mode [ 1185.864962][ T5903] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1185.867244][T13907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.896238][ T5903] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1185.944691][T13907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.100407][T14119] binder: 14116:14119 ioctl c0306201 2000000003c0 returned -14 [ 1186.119452][ T5903] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1186.228011][ T5903] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1186.462528][ T5903] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1186.544432][ T5903] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1186.612348][ T5903] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1186.635423][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1186.696780][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1186.737665][T13907] team0: Port device team_slave_0 added [ 1186.773757][T13907] team0: Port device team_slave_1 added [ 1186.878433][ T5994] bridge_slave_1: left allmulticast mode [ 1186.912663][ T5994] bridge_slave_1: left promiscuous mode [ 1186.944048][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.956317][ T30] audit: type=1326 audit(1751500988.835:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14126 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34cd8e929 code=0x0 [ 1187.166024][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1187.213594][ T5994] bridge_slave_0: left allmulticast mode [ 1187.219388][ T5994] bridge_slave_0: left promiscuous mode [ 1187.240897][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.283422][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1187.338955][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1187.349342][ C1] ================================================================== [ 1187.349357][ C1] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 1187.349383][ C1] Write of size 8 at addr ffff88807d3f3500 by task kworker/1:0/24 [ 1187.349399][ C1] [ 1187.349412][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 1187.349428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1187.349438][ C1] Workqueue: usb_hub_wq hub_event [ 1187.349463][ C1] Call Trace: [ 1187.349470][ C1] [ 1187.349476][ C1] dump_stack_lvl+0x189/0x250 [ 1187.349497][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 1187.349508][ C1] ? rcu_is_watching+0x15/0xb0 [ 1187.349526][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.349544][ C1] ? rcu_is_watching+0x15/0xb0 [ 1187.349561][ C1] ? lock_release+0x4b/0x3e0 [ 1187.349578][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 1187.349589][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 1187.349601][ C1] print_report+0xd2/0x2b0 [ 1187.349618][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 1187.349629][ C1] kasan_report+0x118/0x150 [ 1187.349642][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 1187.349657][ C1] kasan_check_range+0x2b0/0x2c0 [ 1187.349670][ C1] flush_tlb_func+0x23d/0x6c0 [ 1187.349685][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1187.349697][ C1] ? sched_clock_cpu+0x74/0x430 [ 1187.349714][ C1] ? rcu_is_watching+0x15/0xb0 [ 1187.349731][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1187.349744][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 1187.349762][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1187.349776][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 1187.349791][ C1] sysvec_call_function_single+0x9e/0xc0 [ 1187.349811][ C1] [ 1187.349815][ C1] [ 1187.349820][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 1187.349836][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1187.349849][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 1187.349861][ C1] RSP: 0018:ffffc900001e60a0 EFLAGS: 00000287 [ 1187.349872][ C1] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000100000 [ 1187.349882][ C1] RDX: ffffc90018ed2000 RSI: 000000000002be0b RDI: 000000000002be0c [ 1187.349890][ C1] RBP: ffffc900001e61f0 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 1187.349900][ C1] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 1187.349910][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 1187.349926][ C1] ? console_flush_all+0x13a/0xc40 [ 1187.349940][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1187.349955][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1187.349969][ C1] console_unlock+0xc4/0x270 [ 1187.349994][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1187.350021][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1187.350041][ C1] vprintk_emit+0x5b7/0x7a0 [ 1187.350069][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1187.350088][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.350108][ C1] ? __pfx_snprintf+0x10/0x10 [ 1187.350147][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1187.350162][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1187.350181][ C1] dev_printk_emit+0xe0/0x130 [ 1187.350192][ C1] ? trace_irq_disable+0x37/0x110 [ 1187.350208][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1187.350231][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1187.350245][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.350269][ C1] __netdev_printk+0x3d7/0x4d0 [ 1187.350292][ C1] netdev_warn+0x10a/0x160 [ 1187.350309][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.350329][ C1] ? trace_rpm_return_int+0x83/0x200 [ 1187.350353][ C1] ? __pfx_netdev_warn+0x10/0x10 [ 1187.350371][ C1] ? __pm_runtime_idle+0x13c/0x1a0 [ 1187.350391][ C1] ? usbnet_read_cmd+0xbb/0xe0 [ 1187.350412][ C1] smsc75xx_reset+0xb19/0x4110 [ 1187.350433][ C1] ? __pfx_smsc75xx_reset+0x10/0x10 [ 1187.350450][ C1] ? __asan_memset+0x22/0x50 [ 1187.350467][ C1] ? crng_fast_key_erasure+0x181/0x240 [ 1187.350484][ C1] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1187.350504][ C1] ? crng_make_state+0x34c/0x700 [ 1187.350519][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.350541][ C1] ? crng_make_state+0x3fc/0x700 [ 1187.350556][ C1] ? crng_make_state+0x13a/0x700 [ 1187.350571][ C1] ? __pfx_crng_make_state+0x10/0x10 [ 1187.350586][ C1] ? usbnet_read_cmd+0xbb/0xe0 [ 1187.350608][ C1] ? __asan_memset+0x22/0x50 [ 1187.350625][ C1] ? _get_random_bytes+0x1bd/0x210 [ 1187.350638][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 1187.350654][ C1] ? dev_addr_check+0x20/0x250 [ 1187.350672][ C1] ? __asan_memset+0x22/0x50 [ 1187.350689][ C1] ? dev_addr_mod+0x2ce/0x3d0 [ 1187.350708][ C1] smsc75xx_bind+0x791/0xcb0 [ 1187.350723][ C1] ? __pfx_smsc75xx_bind+0x10/0x10 [ 1187.350739][ C1] ? usbnet_probe+0x8f6/0x2860 [ 1187.350759][ C1] usbnet_probe+0xa91/0x2860 [ 1187.350778][ C1] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 1187.350804][ C1] ? __pfx_usbnet_probe+0x10/0x10 [ 1187.350821][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.350842][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.350862][ C1] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 1187.350884][ C1] ? usb_disable_lpm+0x77/0x3e0 [ 1187.350904][ C1] usb_probe_interface+0x637/0xbf0 [ 1187.350922][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 1187.350934][ C1] really_probe+0x26a/0x9a0 [ 1187.350949][ C1] __driver_probe_device+0x18c/0x2f0 [ 1187.350972][ C1] driver_probe_device+0x4f/0x430 [ 1187.350987][ C1] __device_attach_driver+0x2ce/0x530 [ 1187.351001][ C1] bus_for_each_drv+0x251/0x2e0 [ 1187.351018][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1187.351031][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1187.351053][ C1] __device_attach+0x2b8/0x400 [ 1187.351083][ C1] ? __pfx___device_attach+0x10/0x10 [ 1187.351113][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1187.351136][ C1] bus_probe_device+0x185/0x260 [ 1187.351163][ C1] device_add+0x7b6/0xb50 [ 1187.351185][ C1] usb_set_configuration+0x1a87/0x20e0 [ 1187.351216][ C1] usb_generic_driver_probe+0x8d/0x150 [ 1187.351238][ C1] usb_probe_device+0x1c1/0x390 [ 1187.351252][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 1187.351264][ C1] really_probe+0x26a/0x9a0 [ 1187.351278][ C1] __driver_probe_device+0x18c/0x2f0 [ 1187.351300][ C1] driver_probe_device+0x4f/0x430 [ 1187.351314][ C1] __device_attach_driver+0x2ce/0x530 [ 1187.351350][ C1] bus_for_each_drv+0x251/0x2e0 [ 1187.351366][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1187.351397][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1187.351417][ C1] __device_attach+0x2b8/0x400 [ 1187.351438][ C1] ? __pfx___device_attach+0x10/0x10 [ 1187.351460][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1187.351475][ C1] bus_probe_device+0x185/0x260 [ 1187.351492][ C1] device_add+0x7b6/0xb50 [ 1187.351512][ C1] usb_new_device+0xa39/0x16f0 [ 1187.351534][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1187.351552][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.351571][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.351593][ C1] hub_event+0x2941/0x4a00 [ 1187.351632][ C1] ? __pfx_hub_event+0x10/0x10 [ 1187.351651][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.351672][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.351691][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.351709][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.351727][ C1] process_scheduled_works+0xae1/0x17b0 [ 1187.351756][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1187.351780][ C1] worker_thread+0x8a0/0xda0 [ 1187.351809][ C1] kthread+0x70e/0x8a0 [ 1187.351823][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1187.351841][ C1] ? __pfx_kthread+0x10/0x10 [ 1187.351854][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.351873][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.351894][ C1] ? __pfx_kthread+0x10/0x10 [ 1187.351906][ C1] ret_from_fork+0x3fc/0x770 [ 1187.351925][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.351945][ C1] ? __switch_to_asm+0x39/0x70 [ 1187.351958][ C1] ? __switch_to_asm+0x33/0x70 [ 1187.351971][ C1] ? __pfx_kthread+0x10/0x10 [ 1187.351983][ C1] ret_from_fork_asm+0x1a/0x30 [ 1187.352003][ C1] [ 1187.352008][ C1] [ 1187.352013][ C1] Allocated by task 14115: [ 1187.352025][ C1] kasan_save_track+0x3e/0x80 [ 1187.352045][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1187.352063][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1187.352085][ C1] copy_mm+0xdb/0x4b0 [ 1187.352104][ C1] copy_process+0x1706/0x3c00 [ 1187.352122][ C1] kernel_clone+0x21e/0x870 [ 1187.352141][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1187.352152][ C1] do_syscall_64+0xfa/0x3b0 [ 1187.352164][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.352177][ C1] [ 1187.352182][ C1] Freed by task 14131: [ 1187.352194][ C1] kasan_save_track+0x3e/0x80 [ 1187.352219][ C1] kasan_save_free_info+0x46/0x50 [ 1187.352241][ C1] __kasan_slab_free+0x62/0x70 [ 1187.352269][ C1] kmem_cache_free+0x18f/0x400 [ 1187.352290][ C1] exit_mm+0x1da/0x2c0 [ 1187.352301][ C1] do_exit+0x648/0x2300 [ 1187.352313][ C1] do_group_exit+0x21c/0x2d0 [ 1187.352325][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1187.352344][ C1] x64_sys_call+0x21f7/0x2200 [ 1187.352356][ C1] do_syscall_64+0xfa/0x3b0 [ 1187.352369][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.352382][ C1] [ 1187.352385][ C1] The buggy address belongs to the object at ffff88807d3f2b00 [ 1187.352385][ C1] which belongs to the cache mm_struct of size 2584 [ 1187.352398][ C1] The buggy address is located 2560 bytes inside of [ 1187.352398][ C1] freed 2584-byte region [ffff88807d3f2b00, ffff88807d3f3518) [ 1187.352413][ C1] [ 1187.352417][ C1] The buggy address belongs to the physical page: [ 1187.352425][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d3f1580 pfn:0x7d3f0 [ 1187.352440][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1187.352451][ C1] memcg:ffff888078dfec81 [ 1187.352458][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1187.352477][ C1] page_type: f5(slab) [ 1187.352502][ C1] raw: 00fff00000000040 ffff88801a44bb40 0000000000000000 dead000000000001 [ 1187.352515][ C1] raw: ffff88807d3f1580 00000000800b0008 00000000f5000000 ffff888078dfec81 [ 1187.352528][ C1] head: 00fff00000000040 ffff88801a44bb40 0000000000000000 dead000000000001 [ 1187.352541][ C1] head: ffff88807d3f1580 00000000800b0008 00000000f5000000 ffff888078dfec81 [ 1187.352554][ C1] head: 00fff00000000003 ffffea0001f4fc01 00000000ffffffff 00000000ffffffff [ 1187.352577][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1187.352585][ C1] page dumped because: kasan: bad access detected [ 1187.352595][ C1] page_owner tracks the page as allocated [ 1187.352600][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5567, tgid 5567 (dhcpcd-run-hook), ts 55506184916, free_ts 55399669799 [ 1187.352623][ C1] post_alloc_hook+0x240/0x2a0 [ 1187.352642][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 1187.352656][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 1187.352669][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1187.352687][ C1] allocate_slab+0x8a/0x370 [ 1187.352701][ C1] ___slab_alloc+0xbeb/0x1410 [ 1187.352712][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 1187.352729][ C1] mm_alloc+0x23/0xd0 [ 1187.352743][ C1] alloc_bprm+0x378/0x5b0 [ 1187.352759][ C1] do_execveat_common+0x1b3/0x6a0 [ 1187.352777][ C1] __x64_sys_execve+0x94/0xb0 [ 1187.352793][ C1] do_syscall_64+0xfa/0x3b0 [ 1187.352804][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.352815][ C1] page last free pid 5563 tgid 5563 stack trace: [ 1187.352823][ C1] __free_frozen_pages+0xb80/0xd80 [ 1187.352834][ C1] __put_partials+0x156/0x1a0 [ 1187.352845][ C1] put_cpu_partial+0x17c/0x250 [ 1187.352858][ C1] __slab_free+0x2d5/0x3c0 [ 1187.352871][ C1] qlist_free_all+0x97/0x140 [ 1187.352886][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1187.352903][ C1] __kasan_slab_alloc+0x22/0x80 [ 1187.352920][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1187.352937][ C1] vm_area_alloc+0x24/0x140 [ 1187.352949][ C1] mmap_region+0xdc7/0x20c0 [ 1187.352963][ C1] do_mmap+0xc45/0x10d0 [ 1187.352979][ C1] vm_mmap_pgoff+0x31b/0x4c0 [ 1187.352994][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 1187.353010][ C1] do_syscall_64+0xfa/0x3b0 [ 1187.353021][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.353033][ C1] [ 1187.353036][ C1] Memory state around the buggy address: [ 1187.353043][ C1] ffff88807d3f3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1187.353052][ C1] ffff88807d3f3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1187.353061][ C1] >ffff88807d3f3500: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1187.353080][ C1] ^ [ 1187.353088][ C1] ffff88807d3f3580: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1187.353096][ C1] ffff88807d3f3600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1187.353104][ C1] ================================================================== [ 1187.353133][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1187.353143][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 1187.353160][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1187.353169][ C1] Workqueue: usb_hub_wq hub_event [ 1187.353191][ C1] Call Trace: [ 1187.353196][ C1] [ 1187.353202][ C1] dump_stack_lvl+0x99/0x250 [ 1187.353224][ C1] ? __asan_memcpy+0x40/0x70 [ 1187.353241][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.353262][ C1] ? __pfx__printk+0x10/0x10 [ 1187.353282][ C1] panic+0x2db/0x790 [ 1187.353314][ C1] ? __pfx_panic+0x10/0x10 [ 1187.353354][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.353386][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.353406][ C1] ? print_memory_metadata+0x314/0x400 [ 1187.353427][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 1187.353440][ C1] check_panic_on_warn+0x89/0xb0 [ 1187.353455][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 1187.353469][ C1] end_report+0x78/0x160 [ 1187.353481][ C1] kasan_report+0x129/0x150 [ 1187.353494][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 1187.353511][ C1] kasan_check_range+0x2b0/0x2c0 [ 1187.353526][ C1] flush_tlb_func+0x23d/0x6c0 [ 1187.353543][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1187.353556][ C1] ? sched_clock_cpu+0x74/0x430 [ 1187.353576][ C1] ? rcu_is_watching+0x15/0xb0 [ 1187.353595][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1187.353609][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 1187.353629][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1187.353645][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 1187.353661][ C1] sysvec_call_function_single+0x9e/0xc0 [ 1187.353682][ C1] [ 1187.353687][ C1] [ 1187.353693][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 1187.353708][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1187.353722][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 1187.353734][ C1] RSP: 0018:ffffc900001e60a0 EFLAGS: 00000287 [ 1187.353746][ C1] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000100000 [ 1187.353758][ C1] RDX: ffffc90018ed2000 RSI: 000000000002be0b RDI: 000000000002be0c [ 1187.353768][ C1] RBP: ffffc900001e61f0 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 1187.353779][ C1] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 1187.353790][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 1187.353809][ C1] ? console_flush_all+0x13a/0xc40 [ 1187.353824][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1187.353841][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1187.353858][ C1] console_unlock+0xc4/0x270 [ 1187.353879][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1187.353901][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1187.353918][ C1] vprintk_emit+0x5b7/0x7a0 [ 1187.353939][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1187.353959][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.353981][ C1] ? __pfx_snprintf+0x10/0x10 [ 1187.354004][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1187.354019][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1187.354039][ C1] dev_printk_emit+0xe0/0x130 [ 1187.354051][ C1] ? trace_irq_disable+0x37/0x110 [ 1187.354067][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1187.354091][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1187.354105][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.354130][ C1] __netdev_printk+0x3d7/0x4d0 [ 1187.354153][ C1] netdev_warn+0x10a/0x160 [ 1187.354170][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.354191][ C1] ? trace_rpm_return_int+0x83/0x200 [ 1187.354205][ C1] ? __pfx_netdev_warn+0x10/0x10 [ 1187.354223][ C1] ? __pm_runtime_idle+0x13c/0x1a0 [ 1187.354243][ C1] ? usbnet_read_cmd+0xbb/0xe0 [ 1187.354265][ C1] smsc75xx_reset+0xb19/0x4110 [ 1187.354285][ C1] ? __pfx_smsc75xx_reset+0x10/0x10 [ 1187.354302][ C1] ? __asan_memset+0x22/0x50 [ 1187.354319][ C1] ? crng_fast_key_erasure+0x181/0x240 [ 1187.354342][ C1] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1187.354362][ C1] ? crng_make_state+0x34c/0x700 [ 1187.354376][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.354399][ C1] ? crng_make_state+0x3fc/0x700 [ 1187.354422][ C1] ? crng_make_state+0x13a/0x700 [ 1187.354444][ C1] ? __pfx_crng_make_state+0x10/0x10 [ 1187.354466][ C1] ? usbnet_read_cmd+0xbb/0xe0 [ 1187.354497][ C1] ? __asan_memset+0x22/0x50 [ 1187.354515][ C1] ? _get_random_bytes+0x1bd/0x210 [ 1187.354528][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 1187.354544][ C1] ? dev_addr_check+0x20/0x250 [ 1187.354563][ C1] ? __asan_memset+0x22/0x50 [ 1187.354580][ C1] ? dev_addr_mod+0x2ce/0x3d0 [ 1187.354599][ C1] smsc75xx_bind+0x791/0xcb0 [ 1187.354614][ C1] ? __pfx_smsc75xx_bind+0x10/0x10 [ 1187.354631][ C1] ? usbnet_probe+0x8f6/0x2860 [ 1187.354651][ C1] usbnet_probe+0xa91/0x2860 [ 1187.354669][ C1] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 1187.354695][ C1] ? __pfx_usbnet_probe+0x10/0x10 [ 1187.354713][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.354734][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.354754][ C1] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 1187.354775][ C1] ? usb_disable_lpm+0x77/0x3e0 [ 1187.354796][ C1] usb_probe_interface+0x637/0xbf0 [ 1187.354813][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 1187.354825][ C1] really_probe+0x26a/0x9a0 [ 1187.354841][ C1] __driver_probe_device+0x18c/0x2f0 [ 1187.354863][ C1] driver_probe_device+0x4f/0x430 [ 1187.354877][ C1] __device_attach_driver+0x2ce/0x530 [ 1187.354891][ C1] bus_for_each_drv+0x251/0x2e0 [ 1187.354908][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1187.354921][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1187.354942][ C1] __device_attach+0x2b8/0x400 [ 1187.354963][ C1] ? __pfx___device_attach+0x10/0x10 [ 1187.354985][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1187.355000][ C1] bus_probe_device+0x185/0x260 [ 1187.355018][ C1] device_add+0x7b6/0xb50 [ 1187.355039][ C1] usb_set_configuration+0x1a87/0x20e0 [ 1187.355070][ C1] usb_generic_driver_probe+0x8d/0x150 [ 1187.355093][ C1] usb_probe_device+0x1c1/0x390 [ 1187.355107][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 1187.355119][ C1] really_probe+0x26a/0x9a0 [ 1187.355134][ C1] __driver_probe_device+0x18c/0x2f0 [ 1187.355156][ C1] driver_probe_device+0x4f/0x430 [ 1187.355169][ C1] __device_attach_driver+0x2ce/0x530 [ 1187.355184][ C1] bus_for_each_drv+0x251/0x2e0 [ 1187.355201][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1187.355214][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1187.355234][ C1] __device_attach+0x2b8/0x400 [ 1187.355256][ C1] ? __pfx___device_attach+0x10/0x10 [ 1187.355290][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1187.355305][ C1] bus_probe_device+0x185/0x260 [ 1187.355322][ C1] device_add+0x7b6/0xb50 [ 1187.355347][ C1] usb_new_device+0xa39/0x16f0 [ 1187.355368][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1187.355385][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.355404][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.355426][ C1] hub_event+0x2941/0x4a00 [ 1187.355463][ C1] ? __pfx_hub_event+0x10/0x10 [ 1187.355482][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.355502][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.355529][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.355554][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.355581][ C1] process_scheduled_works+0xae1/0x17b0 [ 1187.355625][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1187.355648][ C1] worker_thread+0x8a0/0xda0 [ 1187.355673][ C1] kthread+0x70e/0x8a0 [ 1187.355686][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1187.355703][ C1] ? __pfx_kthread+0x10/0x10 [ 1187.355715][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.355733][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.355752][ C1] ? __pfx_kthread+0x10/0x10 [ 1187.355763][ C1] ret_from_fork+0x3fc/0x770 [ 1187.355780][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.355798][ C1] ? __switch_to_asm+0x39/0x70 [ 1187.355811][ C1] ? __switch_to_asm+0x33/0x70 [ 1187.355822][ C1] ? __pfx_kthread+0x10/0x10 [ 1187.355834][ C1] ret_from_fork_asm+0x1a/0x30 [ 1187.355852][ C1] [ 1187.356232][ C1] Kernel Offset: disabled