last executing test programs: 4m29.500321235s ago: executing program 4 (id=214): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m25.433279278s ago: executing program 4 (id=224): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) 4m25.156453877s ago: executing program 4 (id=230): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) unshare(0x2a000400) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) 4m23.398738932s ago: executing program 1 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x113, 0x2, 0x0, 0x0) 4m20.995504957s ago: executing program 4 (id=236): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m20.403978357s ago: executing program 1 (id=240): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 4m19.518681193s ago: executing program 1 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 4m18.214705423s ago: executing program 1 (id=248): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="503ed016f1c8", 0x0, 0xea, 0x0, 0xfffffbff, 0x0}) 4m18.179704994s ago: executing program 4 (id=249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r1 = gettid() r2 = epoll_create(0x20003fd) r3 = eventfd(0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r6, 0x203}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x2}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, 0x0) 4m15.384566933s ago: executing program 1 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x113, 0x2, 0x0, 0x0) 4m15.320501892s ago: executing program 4 (id=253): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f00002ed000/0x3000)=nil, 0x3000, 0x80000000e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7c42d4ec, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x1ff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x20002, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xfffffffb, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x7, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x2, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x7, 0x9, 0x7fff, 0x2c, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xd, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x3ff, 0x8000006, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x3, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 4m14.076540159s ago: executing program 1 (id=255): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_unlink(0x0) 3m59.755348638s ago: executing program 32 (id=253): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f00002ed000/0x3000)=nil, 0x3000, 0x80000000e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7c42d4ec, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x1ff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x20002, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xfffffffb, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x7, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x2, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x7, 0x9, 0x7fff, 0x2c, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xd, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x3ff, 0x8000006, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x3, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 3m58.444400739s ago: executing program 33 (id=255): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_unlink(0x0) 2m3.495349428s ago: executing program 6 (id=572): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) 2m1.7661538s ago: executing program 6 (id=576): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m0.883844249s ago: executing program 6 (id=579): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, 0x0, &(0x7f00000004c0)=r2}, 0x1c) read$FUSE(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) rmdir(0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) rmdir(&(0x7f0000000040)='./control\x00') 1m48.694287089s ago: executing program 6 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x4, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) 1m47.258860653s ago: executing program 6 (id=606): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 1m44.176306028s ago: executing program 6 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@local, @remote, 0x0}, &(0x7f0000000340)=0xc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0xa1c4, r1, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa36f, '\x00', r2, r3, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c0001800600a200800a00000800050007000000080002800400dcc18a80b5e80adedc830958e8b5d73a24d6e615a442928c4875db01c39fc3b68231f6688b7242e521a4e98ed9cc528a51bd18886cc6e96449db3b231ad5b65037ec0a62ba52dfc119d6d1224f3ccd2d5ace02567264709b06d8fc246311abedb6cdbe2e3864bf96d8d69ef5165163e23c501fad3b6a9fa7a014ceeca435a04071416d5b898724ebb2dbaf53cda892504af2152bf092a3ef342a661e6ef7aeb4d39f2d1fd91f8b8d62f2946901d30067fda22e008c0947fa844e4c813fbeab"], 0x34}}, 0xc000) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x410100, 0xc1) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 1m26.33280181s ago: executing program 34 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@local, @remote, 0x0}, &(0x7f0000000340)=0xc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0xa1c4, r1, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa36f, '\x00', r2, r3, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c0001800600a200800a00000800050007000000080002800400dcc18a80b5e80adedc830958e8b5d73a24d6e615a442928c4875db01c39fc3b68231f6688b7242e521a4e98ed9cc528a51bd18886cc6e96449db3b231ad5b65037ec0a62ba52dfc119d6d1224f3ccd2d5ace02567264709b06d8fc246311abedb6cdbe2e3864bf96d8d69ef5165163e23c501fad3b6a9fa7a014ceeca435a04071416d5b898724ebb2dbaf53cda892504af2152bf092a3ef342a661e6ef7aeb4d39f2d1fd91f8b8d62f2946901d30067fda22e008c0947fa844e4c813fbeab"], 0x34}}, 0xc000) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x410100, 0xc1) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 1m16.659748253s ago: executing program 5 (id=664): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m16.161983987s ago: executing program 5 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 1m14.970178189s ago: executing program 5 (id=668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0xa6e, 0x400142) openat$audio(0xffffffffffffff9c, 0x0, 0xe480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1m13.984647183s ago: executing program 5 (id=670): iopl(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xe, &(0x7f0000000a00)=ANY=[@ANYRESOCT], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffe}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000018410000fdffffff0000000000000000187600000b0000000000fdff030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x800000, 0x2d, &(0x7f00000000c0)=""/45, 0x0, 0xe, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x8, 0x8, 0x6}, 0x10, 0x26eec, r1, 0x2, 0x0, &(0x7f0000000180)=[{0x0, 0x3, 0xf, 0xa}, {0x3, 0x5, 0xe}], 0x10, 0xb25, @void, @value}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x20000005) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) 1m10.354314761s ago: executing program 5 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m7.912535022s ago: executing program 5 (id=678): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 51.409113625s ago: executing program 35 (id=678): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 13.080153877s ago: executing program 0 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x113, 0x2, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in=@remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x0, @multicast2}}]}, 0xa8}}, 0x0) 11.030206725s ago: executing program 7 (id=795): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 10.58908958s ago: executing program 7 (id=797): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) gettid() r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff000) 9.46691834s ago: executing program 3 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000130000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.150224102s ago: executing program 7 (id=800): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mlockall(0x2) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) bind$packet(r2, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x90, 0x12, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='blkio.reset_stats\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r4, 0x5, 0x200, 0x100000000}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 7.903391922s ago: executing program 3 (id=801): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.575076627s ago: executing program 0 (id=803): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x23c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x22b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x14c, 0x64, 0x0, 0x1, [@nested={0x7f, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @nested={0x4d, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f"]}]}, @nested={0xc5, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b1636", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb64"]}]}, 0x23c}], 0x1}, 0x0) 6.483317829s ago: executing program 2 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="515adf3db9874cba7a1b084df61328ed1c9036cb67826794831b12b9e3ee730733cc7003ae162175510a5e8f45baf4a76ce8237a3f89527fb4e32de614d7fb06532f73ac7f32fe", 0x47, 0x4028041, &(0x7f0000000300)={0xa, 0x4e22, 0x1e0e, @private2, 0x3}, 0x1c) ptrace$setsig(0x4203, 0x0, 0x9, &(0x7f0000000540)={0x3f, 0x2, 0xffffff16}) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ptrace$poke(0x4, 0x0, &(0x7f0000000340), 0xce1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0xffffffffffffffff, 0x100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x50, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 6.398606987s ago: executing program 7 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ea, 0x1) ioctl$EVIOCGSW(r3, 0x8040451b, 0x0) 6.31977251s ago: executing program 3 (id=806): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000080)={0x28, 0x3, 0x0, r5, 0x9, 0x8000000000000001, 0x3ff}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x1, 0x0, r5, 0xfffffffffffffff9}) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.936455678s ago: executing program 0 (id=807): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 4.78458536s ago: executing program 2 (id=808): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4.580325135s ago: executing program 0 (id=809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) ioperm(0x0, 0x6e, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc010643a, &(0x7f00000000c0)={0x4000000, 0x1, 0xa2}) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ff010000000000009f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ff8e4cb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000180000000200000000000000000400000e65100001000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x8c8e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='ext4_unlink_exit\x00', r3, 0x0, 0x3}, 0x18) close(r5) 4.559160068s ago: executing program 2 (id=810): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000730106000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.387084025s ago: executing program 3 (id=811): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000130000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.329300068s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 2.954479825s ago: executing program 3 (id=813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005740)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="f143e5e47322719b90f4f8", 0xb}], 0x1, 0x0, 0x0, 0xd9c3b26fccd5de9f}], 0x1, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 2.232990928s ago: executing program 0 (id=814): sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004c818) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) 1.927751291s ago: executing program 2 (id=815): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mlockall(0x2) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) bind$packet(r2, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x90, 0x12, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='blkio.reset_stats\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r4, 0x5, 0x200, 0x100000000}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 1.773431466s ago: executing program 7 (id=816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.37630733s ago: executing program 3 (id=817): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20000000) 674.173792ms ago: executing program 0 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x301}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f0000000100)='./file0\x00') preadv(r6, &(0x7f0000002240)=[{&(0x7f0000001100)=""/4101, 0x1005}], 0x1, 0x2, 0x6) 112.744854ms ago: executing program 2 (id=819): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, 0x0) 0s ago: executing program 7 (id=820): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rmdir(&(0x7f0000000380)='./file0/../file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 68.188420][ T5819] cgroup: Unknown subsys name 'net' [ 68.345801][ T5819] cgroup: Unknown subsys name 'cpuset' [ 68.355861][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.738654][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.945553][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.952005][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.371272][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.382752][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.382761][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.390845][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.406480][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.414013][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.414795][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.423281][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.437241][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.437851][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.447474][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.455276][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.466109][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.468619][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.477228][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.481187][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.505753][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.514263][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.522103][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.532134][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.542136][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.543009][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.573485][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.580904][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.604650][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.622421][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.633318][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.641311][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.651304][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.667129][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.675118][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.682669][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.689815][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.698842][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.714876][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.730945][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.102749][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.115895][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.185792][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 73.361195][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.369527][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.377111][ T5831] bridge_slave_0: entered allmulticast mode [ 73.384572][ T5831] bridge_slave_0: entered promiscuous mode [ 73.419765][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 73.431095][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.439408][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.446755][ T5831] bridge_slave_1: entered allmulticast mode [ 73.453645][ T5831] bridge_slave_1: entered promiscuous mode [ 73.472749][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.479896][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.487418][ T5830] bridge_slave_0: entered allmulticast mode [ 73.495020][ T5830] bridge_slave_0: entered promiscuous mode [ 73.546548][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.553902][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.561217][ T5830] bridge_slave_1: entered allmulticast mode [ 73.568405][ T5830] bridge_slave_1: entered promiscuous mode [ 73.589002][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.596497][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.604311][ T5832] bridge_slave_0: entered allmulticast mode [ 73.611375][ T5832] bridge_slave_0: entered promiscuous mode [ 73.678859][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.686236][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.693772][ T5832] bridge_slave_1: entered allmulticast mode [ 73.700710][ T5832] bridge_slave_1: entered promiscuous mode [ 73.719186][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.731239][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.753513][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.792120][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 73.840498][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.856638][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.870839][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.905190][ T5831] team0: Port device team_slave_0 added [ 73.941370][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.949716][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.957212][ T5839] bridge_slave_0: entered allmulticast mode [ 73.965300][ T5839] bridge_slave_0: entered promiscuous mode [ 73.974134][ T5831] team0: Port device team_slave_1 added [ 73.980075][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.987478][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.994745][ T5839] bridge_slave_1: entered allmulticast mode [ 74.001935][ T5839] bridge_slave_1: entered promiscuous mode [ 74.023371][ T5830] team0: Port device team_slave_0 added [ 74.080143][ T5830] team0: Port device team_slave_1 added [ 74.095871][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 74.108237][ T5832] team0: Port device team_slave_0 added [ 74.117250][ T5832] team0: Port device team_slave_1 added [ 74.148195][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.155500][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.182275][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.207163][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.231363][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.242046][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.268623][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.286832][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.293964][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.320216][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.361307][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.368470][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.394826][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.408187][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.429089][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.436348][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.462983][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.482914][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.490092][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.497528][ T5845] bridge_slave_0: entered allmulticast mode [ 74.504400][ T5845] bridge_slave_0: entered promiscuous mode [ 74.552079][ T5846] Bluetooth: hci2: command tx timeout [ 74.559197][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.566577][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.592560][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.604984][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.612222][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.619364][ T5845] bridge_slave_1: entered allmulticast mode [ 74.626384][ T5846] Bluetooth: hci1: command tx timeout [ 74.628473][ T5845] bridge_slave_1: entered promiscuous mode [ 74.651261][ T5839] team0: Port device team_slave_0 added [ 74.679735][ T5839] team0: Port device team_slave_1 added [ 74.701752][ T5846] Bluetooth: hci3: command tx timeout [ 74.701806][ T55] Bluetooth: hci4: command tx timeout [ 74.707495][ T5846] Bluetooth: hci0: command tx timeout [ 74.766693][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.782453][ T5846] Bluetooth: hci5: command tx timeout [ 74.796275][ T5830] hsr_slave_0: entered promiscuous mode [ 74.802735][ T5830] hsr_slave_1: entered promiscuous mode [ 74.809550][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.817285][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.824838][ T5836] bridge_slave_0: entered allmulticast mode [ 74.832150][ T5836] bridge_slave_0: entered promiscuous mode [ 74.840527][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.847707][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.855218][ T5836] bridge_slave_1: entered allmulticast mode [ 74.862664][ T5836] bridge_slave_1: entered promiscuous mode [ 74.873929][ T5831] hsr_slave_0: entered promiscuous mode [ 74.880219][ T5831] hsr_slave_1: entered promiscuous mode [ 74.886421][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.894366][ T5831] Cannot create hsr debugfs directory [ 74.902102][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.923071][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.930070][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.956159][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.028631][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.038501][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.065092][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.102327][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.114487][ T5845] team0: Port device team_slave_0 added [ 75.144642][ T5832] hsr_slave_0: entered promiscuous mode [ 75.151092][ T5832] hsr_slave_1: entered promiscuous mode [ 75.157646][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.165446][ T5832] Cannot create hsr debugfs directory [ 75.188457][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.209977][ T5845] team0: Port device team_slave_1 added [ 75.275279][ T5836] team0: Port device team_slave_0 added [ 75.283060][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.290147][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.316490][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.329672][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.337028][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.363126][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.408016][ T5836] team0: Port device team_slave_1 added [ 75.462554][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.469547][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.495946][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.521846][ T5839] hsr_slave_0: entered promiscuous mode [ 75.528100][ T5839] hsr_slave_1: entered promiscuous mode [ 75.534574][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.542753][ T5839] Cannot create hsr debugfs directory [ 75.589773][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.597070][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.623142][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.643979][ T5845] hsr_slave_0: entered promiscuous mode [ 75.651265][ T5845] hsr_slave_1: entered promiscuous mode [ 75.657544][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.665201][ T5845] Cannot create hsr debugfs directory [ 75.798369][ T5836] hsr_slave_0: entered promiscuous mode [ 75.805294][ T5836] hsr_slave_1: entered promiscuous mode [ 75.811310][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.819633][ T5836] Cannot create hsr debugfs directory [ 75.956216][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.007991][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.019584][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.079984][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.175226][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.187392][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.198064][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.211439][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.308092][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.333214][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.348809][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.375421][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.453971][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.479474][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.490222][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.534361][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.547306][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.560782][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.577021][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.608345][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.622063][ T5846] Bluetooth: hci2: command tx timeout [ 76.633272][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.653915][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.684544][ T5836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.697979][ T5836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.705217][ T5846] Bluetooth: hci1: command tx timeout [ 76.731567][ T5836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.750663][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.765929][ T5836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.782031][ T5846] Bluetooth: hci0: command tx timeout [ 76.782690][ T5852] Bluetooth: hci4: command tx timeout [ 76.787459][ T5846] Bluetooth: hci3: command tx timeout [ 76.805819][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.828196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.835687][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.863501][ T5846] Bluetooth: hci5: command tx timeout [ 76.900711][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.907930][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.920173][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.927361][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.976474][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.984018][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.060332][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.080434][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.138681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.145828][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.157002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.164138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.189733][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.243216][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.266715][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.297156][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.338484][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.374207][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.381384][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.438228][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.445452][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.469380][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.500573][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.513723][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.548045][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.568602][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.575799][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.590733][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.597949][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.622970][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.630300][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.705776][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.712987][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.820205][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.849038][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.870332][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.946914][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.004867][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.105105][ T5831] veth0_vlan: entered promiscuous mode [ 78.181258][ T5831] veth1_vlan: entered promiscuous mode [ 78.241565][ T5839] veth0_vlan: entered promiscuous mode [ 78.292666][ T5839] veth1_vlan: entered promiscuous mode [ 78.391551][ T5831] veth0_macvtap: entered promiscuous mode [ 78.416580][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.437944][ T5831] veth1_macvtap: entered promiscuous mode [ 78.467493][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.508330][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.537935][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.583032][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.599444][ T5839] veth0_macvtap: entered promiscuous mode [ 78.609270][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.619168][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.630121][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.639432][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.702084][ T5846] Bluetooth: hci2: command tx timeout [ 78.708381][ T5830] veth0_vlan: entered promiscuous mode [ 78.717852][ T5845] veth0_vlan: entered promiscuous mode [ 78.730259][ T5839] veth1_macvtap: entered promiscuous mode [ 78.756663][ T5832] veth0_vlan: entered promiscuous mode [ 78.779207][ T5845] veth1_vlan: entered promiscuous mode [ 78.784940][ T5846] Bluetooth: hci1: command tx timeout [ 78.808939][ T5832] veth1_vlan: entered promiscuous mode [ 78.824222][ T5830] veth1_vlan: entered promiscuous mode [ 78.862024][ T5846] Bluetooth: hci3: command tx timeout [ 78.872997][ T5846] Bluetooth: hci4: command tx timeout [ 78.878410][ T5852] Bluetooth: hci0: command tx timeout [ 78.923141][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.933767][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.945346][ T5846] Bluetooth: hci5: command tx timeout [ 78.948138][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.960746][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.971659][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.983996][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.030811][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.040104][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.049007][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.057820][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.074312][ T5845] veth0_macvtap: entered promiscuous mode [ 79.095281][ T5830] veth0_macvtap: entered promiscuous mode [ 79.110331][ T5845] veth1_macvtap: entered promiscuous mode [ 79.122935][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.134900][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.138854][ T5832] veth0_macvtap: entered promiscuous mode [ 79.161155][ T5830] veth1_macvtap: entered promiscuous mode [ 79.193366][ T5832] veth1_macvtap: entered promiscuous mode [ 79.220930][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.229344][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.250695][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.269066][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.279352][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.290603][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.301481][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.335892][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.355078][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.367560][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.378349][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.390291][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.415164][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.431625][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.449500][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.461177][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.472594][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.483219][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.494757][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.504856][ T5836] veth0_vlan: entered promiscuous mode [ 79.511777][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.522881][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.532867][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.543665][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.553702][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.564375][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.574294][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.585159][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.597588][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.606892][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.637980][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.647382][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.656545][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.665730][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.678935][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.690650][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.700635][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.711264][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.721177][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.731680][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.742951][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.755249][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.778624][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.782986][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.799744][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.812761][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.823941][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.833815][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.844478][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.861476][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.879264][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.895100][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.923192][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.940560][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.949617][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.967157][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.046668][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.078839][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.098368][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.109908][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.128004][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.137682][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.157186][ T5836] veth1_vlan: entered promiscuous mode [ 80.460664][ T5938] lo speed is unknown, defaulting to 1000 [ 80.467587][ T5938] lo speed is unknown, defaulting to 1000 [ 80.479336][ T5938] lo speed is unknown, defaulting to 1000 [ 80.500437][ T5938] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.540470][ T5938] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.763070][ T5938] lo speed is unknown, defaulting to 1000 [ 80.770199][ T5938] lo speed is unknown, defaulting to 1000 [ 80.777692][ T5938] lo speed is unknown, defaulting to 1000 [ 80.784590][ T5938] lo speed is unknown, defaulting to 1000 [ 80.791871][ T5938] lo speed is unknown, defaulting to 1000 [ 80.798651][ T5938] lo speed is unknown, defaulting to 1000 [ 80.838351][ T5846] Bluetooth: hci2: command tx timeout [ 80.862184][ T5846] Bluetooth: hci1: command tx timeout [ 80.876898][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.890623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.946369][ T5846] Bluetooth: hci4: command tx timeout [ 80.953586][ T5852] Bluetooth: hci0: command tx timeout [ 80.959011][ T5852] Bluetooth: hci3: command tx timeout [ 81.039992][ T5852] Bluetooth: hci5: command tx timeout [ 81.109774][ T5836] veth0_macvtap: entered promiscuous mode [ 81.134146][ T5942] Zero length message leads to an empty skb [ 81.181344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.336973][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.404220][ T5836] veth1_macvtap: entered promiscuous mode [ 81.506823][ T5946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.517713][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.740681][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.773035][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.852490][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.881830][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.067801][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.323493][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.339785][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.361259][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.371350][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.717686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.120858][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.150033][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.175006][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.190730][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.429228][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.441817][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.462608][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.470605][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.587975][ T5958] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 83.609920][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.713329][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.914273][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.081307][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.121740][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.179487][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.212222][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.275857][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.312108][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.357174][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.367664][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.379051][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.390691][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.447756][ T5836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481651][ T5836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.490376][ T5836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.507967][ T5836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.030364][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.045065][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 85.053920][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 86.507525][ T9] cfg80211: failed to load regulatory.db [ 86.610533][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.648953][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.787944][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.817081][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.701906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.972053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.146470][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.157473][ T6012] siw: device registration error -23 [ 89.521262][ T6019] warning: `syz.4.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.771071][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 89.811317][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 89.822104][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 90.483481][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.495565][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.521633][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.601915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.012641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.032157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.074550][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 91.151701][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.255690][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.300275][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.300329][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.306961][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 91.307009][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.307043][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.307074][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.307105][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.315477][ T9] usb 3-1: string descriptor 0 read error: -22 [ 91.315584][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.315612][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.421940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 91.422034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 91.422082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 91.937564][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 91.994689][ T6037] xt_cgroup: path and classid specified [ 92.102528][ T10] usb 3-1: USB disconnect, device number 2 [ 92.581041][ T6049] x_tables: ip_tables: osf match: only valid for protocol 6 [ 94.741234][ T6081] ntfs3(nullb0): Primary boot signature is not NTFS. [ 94.749052][ T6081] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 94.943066][ T5846] Bluetooth: hci6: command 0x1003 tx timeout [ 95.022340][ T5852] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 101.076269][ T6129] ntfs3(nullb0): Primary boot signature is not NTFS. [ 101.083224][ T6129] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 103.698275][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 103.988906][ T6157] 9pnet_fd: Insufficient options for proto=fd [ 104.174763][ T6163] process 'syz.5.68' launched './file2' with NULL argv: empty string added [ 104.531044][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.68'. [ 107.451746][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 107.743237][ T6200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.952951][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 109.000172][ T6209] bridge_slave_1: left allmulticast mode [ 109.060642][ T6209] bridge_slave_1: left promiscuous mode [ 109.072220][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.119260][ T6209] bridge_slave_0: left allmulticast mode [ 109.154144][ T6209] bridge_slave_0: left promiscuous mode [ 109.170244][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.523381][ T972] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.692322][ T972] usb 2-1: Using ep0 maxpacket: 32 [ 109.863317][ T972] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 110.557372][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.568714][ T972] usb 2-1: config 0 has no interface number 0 [ 110.576551][ T972] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 110.763658][ T972] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.995511][ T972] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 111.196718][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.371691][ T972] usb 2-1: Product: syz [ 111.568523][ T972] usb 2-1: Manufacturer: syz [ 111.651328][ T972] usb 2-1: SerialNumber: syz [ 111.779661][ T972] usb 2-1: config 0 descriptor?? [ 111.840749][ T6214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.480497][ T972] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.627023][ T972] usb 2-1: invalid MIDI in EP 0 [ 113.183778][ T972] snd-usb-audio 2-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 113.194148][ T6308] veth0_macvtap: left promiscuous mode [ 113.254013][ T972] usb 2-1: USB disconnect, device number 2 [ 113.457656][ T6308] macvtap0: entered promiscuous mode [ 113.503065][ T6308] veth0_macvtap: entered promiscuous mode [ 113.576728][ T6308] team0: Device macvtap0 failed to register rx_handler [ 113.617170][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.682287][ T6308] veth0_macvtap: left promiscuous mode [ 123.557655][ T6402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.725228][ T6383] syz.1.116 (6383): drop_caches: 2 [ 126.376958][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 128.525240][ T6461] siw: device registration error -23 [ 130.010924][ T6468] (syz.2.146,6468,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 130.020135][ T6468] (syz.2.146,6468,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 130.252621][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.148'. [ 130.411686][ T5890] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 130.594383][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.102596][ T5890] usb 2-1: not running at top speed; connect to a high speed hub [ 131.175475][ T5890] usb 2-1: config 1 interface 0 has no altsetting 0 [ 131.280255][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.386069][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.438195][ T5890] usb 2-1: Product: syz [ 131.583453][ T5890] usb 2-1: Manufacturer: syz [ 131.597002][ T5890] usb 2-1: SerialNumber: syz [ 132.441364][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.447933][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.886183][ T6507] x_tables: ip_tables: osf match: only valid for protocol 6 [ 133.342536][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'. [ 133.497704][ T972] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.932190][ T5890] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 133.991669][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 134.012118][ T5890] usb 2-1: USB disconnect, device number 3 [ 134.033111][ T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.089315][ T972] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.098779][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.118437][ T972] usb 1-1: Product: syz [ 134.178615][ T972] usb 1-1: Manufacturer: syz [ 134.192019][ T972] usb 1-1: SerialNumber: syz [ 134.223313][ T972] usb 1-1: config 0 descriptor?? [ 134.260322][ T972] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.319017][ T972] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 135.537891][ T972] em28xx 1-1:0.0: chip ID is em2800 [ 136.118240][ T972] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 136.152322][ T972] em28xx 1-1:0.0: board has no eeprom [ 136.292096][ T972] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 136.328396][ T972] em28xx 1-1:0.0: dvb set to bulk mode. [ 136.434983][ T10] em28xx 1-1:0.0: Binding DVB extension [ 136.478065][ T972] usb 1-1: USB disconnect, device number 2 [ 136.899638][ T972] em28xx 1-1:0.0: Disconnecting em28xx [ 137.220410][ T10] em28xx 1-1:0.0: Registering input extension [ 137.240969][ T972] em28xx 1-1:0.0: Closing input extension [ 137.324169][ T972] em28xx 1-1:0.0: Freeing device [ 137.364916][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 139.182759][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.181'. [ 139.618742][ T6577] : entered promiscuous mode [ 141.213897][ T6582] ntfs3(nullb0): Primary boot signature is not NTFS. [ 141.220783][ T6582] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 142.415941][ T6601] netlink: 'syz.5.192': attribute type 1 has an invalid length. [ 142.449480][ T6601] netlink: 224 bytes leftover after parsing attributes in process `syz.5.192'. [ 146.838712][ T6645] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 146.881776][ T6645] overlayfs: failed to set xattr on upper [ 146.932718][ T6645] overlayfs: ...falling back to redirect_dir=nofollow. [ 146.939624][ T6645] overlayfs: ...falling back to index=off. [ 147.035446][ T6645] overlayfs: ...falling back to uuid=null. [ 147.145512][ T6655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.473450][ T6695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.788542][ T6707] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.849981][ T6707] overlayfs: failed to set xattr on upper [ 152.896721][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.925126][ T6707] overlayfs: ...falling back to redirect_dir=nofollow. [ 153.355496][ T6707] overlayfs: ...falling back to index=off. [ 153.359111][ T6709] netlink: 14 bytes leftover after parsing attributes in process `syz.3.229'. [ 153.382196][ T6707] overlayfs: ...falling back to uuid=null. [ 154.451939][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 154.523868][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 154.654321][ T5905] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.726007][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.816246][ T5905] usb 1-1: Product: syz [ 154.858463][ T5905] usb 1-1: Manufacturer: syz [ 154.925528][ T5905] usb 1-1: SerialNumber: syz [ 155.186771][ T5905] usb 1-1: config 0 descriptor?? [ 156.762530][ T5905] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.822386][ T5905] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 156.939099][ T6709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.952171][ T5905] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 157.207390][ T6709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.217665][ T5905] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 157.245927][ T5905] em28xx 1-1:0.0: board has no eeprom [ 157.276863][ T6709] bond0 (unregistering): Released all slaves [ 157.406912][ T5905] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 157.429723][ T5905] em28xx 1-1:0.0: dvb set to bulk mode. [ 157.435583][ T5892] em28xx 1-1:0.0: Binding DVB extension [ 157.446935][ T5905] usb 1-1: USB disconnect, device number 3 [ 157.482571][ T5905] em28xx 1-1:0.0: Disconnecting em28xx [ 158.062333][ T5892] em28xx 1-1:0.0: Registering input extension [ 158.082514][ T5905] em28xx 1-1:0.0: Closing input extension [ 158.182434][ T6745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.185184][ T5905] em28xx 1-1:0.0: Freeing device [ 159.686270][ T6763] capability: warning: `syz.1.248' uses deprecated v2 capabilities in a way that may be insecure [ 160.936787][ T6776] 9pnet_fd: Insufficient options for proto=fd [ 165.694314][ T6804] ntfs3(nullb0): Primary boot signature is not NTFS. [ 165.701129][ T6804] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 168.574597][ T6821] syz.3.264: attempt to access beyond end of device [ 168.574597][ T6821] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 168.683685][ T6821] getblk(): invalid block size 512 requested [ 168.689724][ T6821] logical block size: 1024 [ 168.730635][ T6826] nbd3: detected capacity change from 0 to 510 [ 168.773184][ T5990] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.781220][ T5990] Buffer I/O error on dev nbd3, logical block 1, async page read [ 168.828716][ T5990] Buffer I/O error on dev nbd3, logical block 2, async page read [ 168.847900][ T5990] Buffer I/O error on dev nbd3, logical block 3, async page read [ 168.860677][ T5990] Buffer I/O error on dev nbd3, logical block 4, async page read [ 168.871917][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.3.264 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 168.871941][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.871952][ T6821] Call Trace: [ 168.871958][ T6821] [ 168.871966][ T6821] dump_stack_lvl+0x241/0x360 [ 168.871993][ T6821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.872014][ T6821] ? __pfx__printk+0x10/0x10 [ 168.872041][ T6821] bdev_getblk+0x59c/0x670 [ 168.872068][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872097][ T6821] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 168.872128][ T6821] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.872159][ T6821] __bread_gfp+0x86/0x400 [ 168.872187][ T6821] udf_read_tagged+0xa6/0xe00 [ 168.872215][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872248][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872278][ T6821] ? __pfx_call_rcu+0x10/0x10 [ 168.872303][ T6821] udf_check_anchor_block+0xba/0x550 [ 168.872330][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872357][ T6821] ? udf_get_last_block+0x2e7/0x3b0 [ 168.872379][ T6821] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 168.872402][ T6821] ? __bread_gfp+0x23c/0x400 [ 168.872435][ T6821] udf_load_vrs+0x767/0x1130 [ 168.872458][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872497][ T6821] ? __pfx_udf_load_vrs+0x10/0x10 [ 168.872528][ T6821] ? udf_get_last_session+0x121/0x2d0 [ 168.872550][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872581][ T6821] ? __raw_spin_lock_init+0x45/0x100 [ 168.872607][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872639][ T6821] udf_fill_super+0x5f2/0x1cb0 [ 168.872672][ T6821] ? __pfx_udf_fill_super+0x10/0x10 [ 168.872696][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872724][ T6821] ? set_blocksize+0x1fc/0x360 [ 168.872756][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872784][ T6821] ? sb_set_blocksize+0x98/0xf0 [ 168.872814][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.872842][ T6821] ? setup_bdev_super+0x4e6/0x5d0 [ 168.872867][ T6821] get_tree_bdev_flags+0x48e/0x5c0 [ 168.872888][ T6821] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 168.872916][ T6821] ? __pfx_udf_fill_super+0x10/0x10 [ 168.872940][ T6821] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 168.872964][ T6821] ? apparmor_capable+0x13b/0x1b0 [ 168.872991][ T6821] vfs_get_tree+0x92/0x2b0 [ 168.873015][ T6821] do_new_mount+0x2be/0xb40 [ 168.873041][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.873073][ T6821] ? __pfx_do_new_mount+0x10/0x10 [ 168.873107][ T6821] __se_sys_mount+0x2d6/0x3c0 [ 168.873133][ T6821] ? lockdep_hardirqs_on+0x99/0x150 [ 168.873165][ T6821] ? __pfx___se_sys_mount+0x10/0x10 [ 168.873197][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.873225][ T6821] ? __x64_sys_mount+0x20/0xc0 [ 168.873254][ T6821] do_syscall_64+0xf3/0x230 [ 168.873275][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.873300][ T6821] RIP: 0033:0x7f637098d169 [ 168.873315][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.873330][ T6821] RSP: 002b:00007f6371729038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.873349][ T6821] RAX: ffffffffffffffda RBX: 00007f6370ba5fa0 RCX: 00007f637098d169 [ 168.873362][ T6821] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 168.873375][ T6821] RBP: 00007f6370a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 168.873386][ T6821] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 168.873397][ T6821] R13: 0000000000000000 R14: 00007f6370ba5fa0 R15: 00007ffddd547218 [ 168.873423][ T6821] [ 168.873456][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 169.248339][ T5990] Buffer I/O error on dev nbd3, logical block 5, async page read [ 169.263523][ T5990] Buffer I/O error on dev nbd3, logical block 6, async page read [ 169.271342][ T5990] Buffer I/O error on dev nbd3, logical block 7, async page read [ 169.287758][ T5990] Buffer I/O error on dev nbd3, logical block 0, async page read [ 169.326674][ T5990] Buffer I/O error on dev nbd3, logical block 1, async page read [ 169.339838][ T5990] ldm_validate_partition_table(): Disk read failed. [ 169.377522][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 169.408643][ T5990] Dev nbd3: unable to read RDB block 0 [ 169.420515][ T5990] nbd3: unable to read partition table [ 169.435685][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 169.544829][ T6821] getblk(): invalid block size 512 requested [ 169.550933][ T6821] logical block size: 1024 [ 170.086091][ T6821] CPU: 1 UID: 0 PID: 6821 Comm: syz.3.264 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 170.086126][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.086141][ T6821] Call Trace: [ 170.086149][ T6821] [ 170.086159][ T6821] dump_stack_lvl+0x241/0x360 [ 170.086194][ T6821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.086222][ T6821] ? __pfx__printk+0x10/0x10 [ 170.086249][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.086290][ T6821] ? _udf_err+0x13b/0x190 [ 170.086327][ T6821] bdev_getblk+0x59c/0x670 [ 170.086360][ T6821] ? submit_bio_noacct+0xd9e/0x1af0 [ 170.086412][ T6821] __bread_gfp+0x86/0x400 [ 170.086451][ T6821] udf_read_tagged+0xa6/0xe00 [ 170.086493][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.086539][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.086582][ T6821] ? __pfx_call_rcu+0x10/0x10 [ 170.086620][ T6821] udf_check_anchor_block+0xba/0x550 [ 170.086657][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.086696][ T6821] ? udf_get_last_block+0x2e7/0x3b0 [ 170.086726][ T6821] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 170.086757][ T6821] ? __bread_gfp+0x23c/0x400 [ 170.086807][ T6821] udf_load_vrs+0xc3d/0x1130 [ 170.086838][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.086894][ T6821] ? __pfx_udf_load_vrs+0x10/0x10 [ 170.086923][ T6821] ? udf_get_last_session+0x121/0x2d0 [ 170.086952][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.086992][ T6821] ? __raw_spin_lock_init+0x45/0x100 [ 170.087028][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.087071][ T6821] udf_fill_super+0x5f2/0x1cb0 [ 170.087117][ T6821] ? __pfx_udf_fill_super+0x10/0x10 [ 170.087150][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.087190][ T6821] ? set_blocksize+0x1fc/0x360 [ 170.087235][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.087275][ T6821] ? sb_set_blocksize+0x98/0xf0 [ 170.087316][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.087355][ T6821] ? setup_bdev_super+0x4e6/0x5d0 [ 170.087389][ T6821] get_tree_bdev_flags+0x48e/0x5c0 [ 170.087419][ T6821] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 170.087458][ T6821] ? __pfx_udf_fill_super+0x10/0x10 [ 170.087490][ T6821] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 170.087524][ T6821] ? apparmor_capable+0x13b/0x1b0 [ 170.087562][ T6821] vfs_get_tree+0x92/0x2b0 [ 170.087595][ T6821] do_new_mount+0x2be/0xb40 [ 170.087630][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.087676][ T6821] ? __pfx_do_new_mount+0x10/0x10 [ 170.087722][ T6821] __se_sys_mount+0x2d6/0x3c0 [ 170.087757][ T6821] ? lockdep_hardirqs_on+0x99/0x150 [ 170.087811][ T6821] ? __pfx___se_sys_mount+0x10/0x10 [ 170.087855][ T6821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.087894][ T6821] ? __x64_sys_mount+0x20/0xc0 [ 170.087934][ T6821] do_syscall_64+0xf3/0x230 [ 170.087963][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.087998][ T6821] RIP: 0033:0x7f637098d169 [ 170.088019][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.088039][ T6821] RSP: 002b:00007f6371729038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.088065][ T6821] RAX: ffffffffffffffda RBX: 00007f6370ba5fa0 RCX: 00007f637098d169 [ 170.088083][ T6821] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 170.088101][ T6821] RBP: 00007f6370a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.088117][ T6821] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 170.088133][ T6821] R13: 0000000000000000 R14: 00007f6370ba5fa0 R15: 00007ffddd547218 [ 170.088168][ T6821] [ 170.088178][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 170.645930][ T6821] block nbd3: Send control failed (result -89) [ 170.694559][ T6821] block nbd3: Request send failed, requeueing [ 170.755922][ T6824] block nbd3: shutting down sockets [ 170.973967][ T11] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.993042][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 171.082694][ T27] I/O error, dev nbd3, sector 508 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.096028][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=254, location=254 [ 171.113763][ T6821] I/O error, dev nbd3, sector 506 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.123777][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=253, location=253 [ 171.134275][ T6821] I/O error, dev nbd3, sector 504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.168257][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=252, location=252 [ 171.211754][ T6821] I/O error, dev nbd3, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.240341][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=104, location=104 [ 171.269417][ T6821] I/O error, dev nbd3, sector 204 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.300856][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=102, location=102 [ 171.334085][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 171.373683][ T6821] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.414399][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 171.450036][ T6821] I/O error, dev nbd3, sector 504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.566782][ T6857] ntfs3(nullb0): Primary boot signature is not NTFS. [ 171.573695][ T6857] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 171.644315][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=126, location=126 [ 171.692086][ T6821] I/O error, dev nbd3, sector 500 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.739923][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=125, location=125 [ 171.780471][ T6821] I/O error, dev nbd3, sector 496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.810376][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=124, location=124 [ 171.912002][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 172.085045][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 172.478237][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=62, location=62 [ 172.669284][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=61, location=61 [ 172.704927][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=60, location=60 [ 172.739662][ T6821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 172.790384][ T6821] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 177.655099][ T6880] netlink: 277 bytes leftover after parsing attributes in process `syz.0.278'. [ 180.985370][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.448569][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.456395][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.464470][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.472329][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 181.479496][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.524231][ T6899] lo speed is unknown, defaulting to 1000 [ 183.547933][ T5846] Bluetooth: hci6: command tx timeout [ 183.551732][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.562312][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.570098][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.578029][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.588056][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 183.596149][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.712357][ T6916] lo speed is unknown, defaulting to 1000 [ 185.482729][ T6944] netlink: 277 bytes leftover after parsing attributes in process `syz.0.294'. [ 185.592862][ T5852] Bluetooth: hci6: command tx timeout [ 185.662951][ T5852] Bluetooth: hci7: command tx timeout [ 186.253595][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 186.482065][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 186.930194][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 187.661713][ T5852] Bluetooth: hci6: command tx timeout [ 188.704949][ T5852] Bluetooth: hci7: command tx timeout [ 189.711081][ T6969] netlink: 173 bytes leftover after parsing attributes in process `syz.0.300'. [ 189.751883][ T5852] Bluetooth: hci6: command tx timeout [ 190.078642][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.096298][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.117941][ T6899] bridge_slave_0: entered allmulticast mode [ 190.146925][ T6899] bridge_slave_0: entered promiscuous mode [ 190.172882][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.189981][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.198646][ T6916] bridge_slave_0: entered allmulticast mode [ 190.407523][ T6916] bridge_slave_0: entered promiscuous mode [ 190.419667][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.428573][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.449281][ T6899] bridge_slave_1: entered allmulticast mode [ 190.511457][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.5.304'. [ 190.792037][ T5852] Bluetooth: hci7: command tx timeout [ 191.323276][ T6899] bridge_slave_1: entered promiscuous mode [ 191.345061][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.372936][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.380393][ T6916] bridge_slave_1: entered allmulticast mode [ 191.395849][ T6916] bridge_slave_1: entered promiscuous mode [ 192.118551][ T6998] netlink: 277 bytes leftover after parsing attributes in process `syz.3.307'. [ 192.773631][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.835266][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.837882][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 192.862955][ T5852] Bluetooth: hci7: command tx timeout [ 193.039422][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.081067][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.646193][ T7013] trusted_key: encrypted_key: insufficient parameters specified [ 193.862684][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.869196][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.599718][ T6899] team0: Port device team_slave_0 added [ 194.635201][ T6916] team0: Port device team_slave_0 added [ 194.698805][ T6916] team0: Port device team_slave_1 added [ 194.917894][ T6899] team0: Port device team_slave_1 added [ 195.350526][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.350550][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.350577][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.351958][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.351977][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.352001][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.355222][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.355237][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.355260][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.358951][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.358970][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.359006][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.020619][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 196.020851][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 196.021290][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 196.024784][ T5852] Bluetooth: hci5: command 0x0405 tx timeout [ 196.081179][ T7028] netlink: 173 bytes leftover after parsing attributes in process `syz.0.315'. [ 196.363881][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.587281][ T6899] hsr_slave_0: entered promiscuous mode [ 196.588283][ T6899] hsr_slave_1: entered promiscuous mode [ 196.591287][ T6899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.591368][ T6899] Cannot create hsr debugfs directory [ 197.442372][ T6916] hsr_slave_0: entered promiscuous mode [ 197.443099][ T6916] hsr_slave_1: entered promiscuous mode [ 197.443537][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.443561][ T6916] Cannot create hsr debugfs directory [ 199.703797][ T6916] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.753248][ T6916] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.918386][ T6916] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.983959][ T6916] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 200.049701][ T6899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.109236][ T6899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.130193][ T6899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.206923][ T6899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.669220][ T7066] netlink: 'syz.2.327': attribute type 3 has an invalid length. [ 202.305354][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.122958][ T7070] netlink: 173 bytes leftover after parsing attributes in process `syz.0.329'. [ 203.149392][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.220125][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.227386][ T6270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.340880][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.443823][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.450979][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.483783][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.505667][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.512827][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.755189][ T7087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.168395][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.175583][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.327818][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.338155][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.5.337'. [ 207.442523][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.683782][ T6899] veth0_vlan: entered promiscuous mode [ 207.727099][ T6899] veth1_vlan: entered promiscuous mode [ 207.813862][ T6899] veth0_macvtap: entered promiscuous mode [ 207.867177][ T6899] veth1_macvtap: entered promiscuous mode [ 207.976530][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.008206][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.078161][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.098262][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.111194][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.122473][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.133718][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.145729][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.173342][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.204640][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.220999][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.258715][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.283067][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.328479][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.349468][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.392680][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.429398][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.446476][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.459709][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.482923][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.501756][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.519788][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.531689][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 208.539467][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.562585][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.584232][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.628734][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.678814][ T6899] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.700823][ T6899] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.711312][ T6899] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.721454][ T6899] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.825979][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 208.867016][ T6916] veth0_vlan: entered promiscuous mode [ 208.877074][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 208.909275][ T5892] usb 4-1: can't read configurations, error -61 [ 208.910497][ T6916] veth1_vlan: entered promiscuous mode [ 209.013379][ T6916] veth0_macvtap: entered promiscuous mode [ 209.050075][ T6270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.084297][ T6916] veth1_macvtap: entered promiscuous mode [ 209.103246][ T6270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.133211][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.144763][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.157640][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.163972][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 209.168413][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.229138][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.250828][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.271256][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.298331][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.338956][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.350987][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.381657][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.425651][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.449825][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.465939][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 209.480880][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.495265][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 209.509916][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.541635][ T5892] usb 4-1: can't read configurations, error -61 [ 209.569511][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.587235][ T5892] usb usb4-port1: attempt power cycle [ 209.595141][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.605855][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.619131][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.637054][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.668595][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.688858][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.707187][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.719450][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.730687][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.740910][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.752985][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.764237][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.784697][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.837058][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.917045][ T6916] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.941628][ T6916] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.957598][ T6916] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.970866][ T6916] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.992270][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.055904][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 210.080554][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 210.518687][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.574601][ T5892] usb 4-1: can't read configurations, error -61 [ 210.594327][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.721751][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.784378][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 210.852141][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.860088][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.860322][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 210.901612][ T5892] usb 4-1: can't read configurations, error -61 [ 210.933246][ T5892] usb usb4-port1: unable to enumerate USB device [ 210.960196][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.974717][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.295204][ T7145] 9pnet_fd: Insufficient options for proto=fd [ 216.679495][ T7236] block nbd5: Device being setup by another task [ 217.825918][ T55] block nbd5: Receive control failed (result -32) [ 217.846254][ T7230] block nbd5: shutting down sockets [ 218.245813][ T7259] netlink: 277 bytes leftover after parsing attributes in process `syz.6.355'. [ 219.026312][ T7290] 9pnet_fd: Insufficient options for proto=fd [ 219.967465][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.359'. [ 219.976979][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.359'. [ 226.378701][ T30] audit: type=1326 audit(1742615432.626:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 226.437293][ T30] audit: type=1326 audit(1742615432.626:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 226.557300][ T30] audit: type=1326 audit(1742615432.626:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 227.121626][ T30] audit: type=1326 audit(1742615432.626:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 227.222710][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 227.232438][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.376'. [ 227.810868][ T30] audit: type=1326 audit(1742615432.626:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 227.835116][ T30] audit: type=1326 audit(1742615432.636:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 227.857253][ T30] audit: type=1326 audit(1742615432.636:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 228.272183][ T30] audit: type=1326 audit(1742615432.636:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d518d169 code=0x7ffc0000 [ 231.448629][ T7450] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 231.642113][ T7454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.699199][ T7454] overlayfs: failed to set xattr on upper [ 231.723558][ T7454] overlayfs: ...falling back to redirect_dir=nofollow. [ 231.756219][ T7454] overlayfs: ...falling back to index=off. [ 231.763294][ T7454] overlayfs: ...falling back to uuid=null. [ 235.096196][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.392'. [ 236.921724][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 237.165353][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 237.185901][ T5890] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 237.194872][ T5890] usb 6-1: config 0 has no interface number 0 [ 237.586036][ T5890] usb 6-1: config 0 interface 108 has no altsetting 0 [ 237.625406][ T5890] usb 6-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 237.646877][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.691603][ T5890] usb 6-1: Product: syz [ 237.733816][ T5890] usb 6-1: Manufacturer: syz [ 237.738431][ T5890] usb 6-1: SerialNumber: syz [ 237.777776][ T5890] usb 6-1: config 0 descriptor?? [ 237.804650][ T5890] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 238.007076][ T7488] netlink: 100 bytes leftover after parsing attributes in process `syz.5.397'. [ 238.128651][ T5890] usb 6-1: USB disconnect, device number 2 [ 239.842219][ T7512] syz_tun: entered allmulticast mode [ 239.875015][ T7512] syz_tun: left allmulticast mode [ 240.065322][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 240.919865][ T10] lo speed is unknown, defaulting to 1000 [ 246.095172][ T7569] syz_tun: entered allmulticast mode [ 246.104474][ T7569] syz_tun: left allmulticast mode [ 246.116136][ T7570] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 250.563146][ T6287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.553223][ T6287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.267628][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.274115][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.383255][ T6287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.750179][ T7658] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 257.103185][ T6287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.439600][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.7.451'. [ 259.121231][ T7653] syz.0.448 (7653): drop_caches: 2 [ 259.519974][ T6287] bridge_slave_1: left allmulticast mode [ 259.542026][ T6287] bridge_slave_1: left promiscuous mode [ 259.549469][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.619026][ T6287] bridge_slave_0: left allmulticast mode [ 260.703786][ T6287] bridge_slave_0: left promiscuous mode [ 260.709731][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.929253][ T7686] kernel profiling enabled (shift: 7) [ 262.238124][ T7697] syz.3.464: attempt to access beyond end of device [ 262.238124][ T7697] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 263.990469][ T7722] syz.3.469 (7722): drop_caches: 2 [ 264.291620][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 264.472198][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 264.571380][ T26] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 264.683011][ T26] usb 1-1: config 0 has no interface number 0 [ 264.827932][ T26] usb 1-1: config 0 interface 108 has no altsetting 0 [ 265.025565][ T26] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 265.152941][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.322164][ T26] usb 1-1: Product: syz [ 265.471643][ T26] usb 1-1: Manufacturer: syz [ 265.476521][ T26] usb 1-1: SerialNumber: syz [ 265.514874][ T26] usb 1-1: config 0 descriptor?? [ 265.575896][ T26] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 266.357605][ T26] usb 1-1: USB disconnect, device number 4 [ 267.202753][ T6287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.431991][ T6287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.537410][ T6287] bond0 (unregistering): Released all slaves [ 268.015703][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.471'. [ 270.610624][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 272.923995][ T6287] hsr_slave_0: left promiscuous mode [ 272.997369][ T7836] netlink: 173 bytes leftover after parsing attributes in process `syz.7.501'. [ 273.302022][ T6287] hsr_slave_1: left promiscuous mode [ 273.313194][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.340173][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.617838][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.651190][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.134096][ T6287] veth1_macvtap: left promiscuous mode [ 274.191974][ T6287] veth0_macvtap: left promiscuous mode [ 274.197651][ T6287] veth1_vlan: left promiscuous mode [ 274.221754][ T6287] veth0_vlan: left promiscuous mode [ 274.538085][ T7851] netlink: 208 bytes leftover after parsing attributes in process `syz.6.509'. [ 275.218239][ T9] IPVS: starting estimator thread 0... [ 275.333067][ T7861] IPVS: using max 19 ests per chain, 45600 per kthread [ 276.716447][ T6287] team0 (unregistering): Port device team_slave_1 removed [ 276.754812][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 277.127597][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.5.503'. [ 277.177377][ T7881] syz_tun: entered allmulticast mode [ 277.222590][ T7879] syz_tun: left allmulticast mode [ 280.276901][ T7901] block nbd5: shutting down sockets [ 281.737759][ T7906] syz.0.526 (7906): drop_caches: 2 [ 282.606015][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 283.336149][ T6287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.637072][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.535'. [ 284.789588][ T7962] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 284.797567][ T7962] netlink: 208 bytes leftover after parsing attributes in process `syz.3.541'. [ 285.323666][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.543'. [ 286.131798][ T6287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.254264][ T7968] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 287.555267][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 287.618666][ T6287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.810054][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 287.935957][ T5890] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 288.171039][ T5890] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 288.267614][ T6287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.361981][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 288.559848][ T5890] usb 7-1: Product: syz [ 288.699458][ T5890] usb 7-1: Manufacturer: syz [ 288.704113][ T5890] usb 7-1: SerialNumber: syz [ 288.715836][ T7991] mmap: syz.0.552 (7991) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 288.793933][ T5890] usb 7-1: config 0 descriptor?? [ 288.858298][ T7982] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 289.158623][ T5835] usb 7-1: USB disconnect, device number 2 [ 291.096590][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 291.141137][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 291.628705][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 291.655952][ T5892] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 291.686477][ T5892] usb 6-1: config 0 has no interface number 0 [ 291.692635][ T5892] usb 6-1: config 0 interface 108 has no altsetting 0 [ 291.748205][ T5892] usb 6-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 291.774750][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.785001][ T5892] usb 6-1: Product: syz [ 291.790061][ T5892] usb 6-1: Manufacturer: syz [ 291.797477][ T5892] usb 6-1: SerialNumber: syz [ 291.854337][ T5892] usb 6-1: config 0 descriptor?? [ 291.912560][ T5892] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 292.123419][ T8016] netlink: 100 bytes leftover after parsing attributes in process `syz.5.559'. [ 292.331679][ T5892] usb 6-1: USB disconnect, device number 3 [ 292.995362][ T8046] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 293.057663][ T6287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.112839][ T6287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.140639][ T6287] bond0 (unregistering): Released all slaves [ 293.179088][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.7.556'. [ 296.430932][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.575'. [ 296.980673][ T6287] hsr_slave_0: left promiscuous mode [ 297.050486][ T6287] hsr_slave_1: left promiscuous mode [ 297.056498][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.116446][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.178458][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.212349][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.546429][ T6287] veth1_macvtap: left promiscuous mode [ 297.556110][ T6287] veth0_macvtap: left promiscuous mode [ 297.565934][ T6287] veth1_vlan: left promiscuous mode [ 298.725018][ T6287] veth0_vlan: left promiscuous mode [ 303.590593][ T5846] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.598312][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 304.323084][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 305.244580][ T6287] team0 (unregistering): Port device team_slave_1 removed [ 306.583180][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 308.840293][ T8140] : entered promiscuous mode [ 309.025134][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.596'. [ 310.714912][ T5850] Bluetooth: hci6: command 0x0406 tx timeout [ 310.721067][ T5850] Bluetooth: hci7: command 0x0406 tx timeout [ 311.545275][ T8198] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 311.884110][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 311.978408][ T8206] syz_tun: entered allmulticast mode [ 312.461544][ T8206] syz_tun: left allmulticast mode [ 312.706772][ T8215] netlink: 173 bytes leftover after parsing attributes in process `syz.2.609'. [ 313.174022][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 316.847137][ T8249] : entered promiscuous mode [ 319.158136][ T8266] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 319.430423][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.481554][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.848921][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 321.448411][ T8283] syz_tun: entered allmulticast mode [ 321.460210][ T8283] syz_tun: left allmulticast mode [ 322.345337][ T8295] kAFS: No cell specified [ 324.409134][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.631'. [ 327.322387][ T8337] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 329.023206][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.638'. [ 329.041404][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.7.638'. [ 335.444981][ T8398] netlink: 84 bytes leftover after parsing attributes in process `syz.3.652'. [ 335.454022][ T8398] netlink: 120 bytes leftover after parsing attributes in process `syz.3.652'. [ 336.476997][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 336.486069][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 339.521238][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.533488][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.544889][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.560827][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.573772][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.581952][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.065736][ T5835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 341.141239][ T7221] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.297329][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.314699][ T8428] lo speed is unknown, defaulting to 1000 [ 341.353007][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.446107][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.495205][ T7221] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.509742][ T5835] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.550264][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.609993][ T5835] usb 8-1: config 0 descriptor?? [ 341.886901][ T8454] netlink: 14 bytes leftover after parsing attributes in process `syz.2.665'. [ 342.447697][ T5835] usbhid 8-1:0.0: can't add hid device: -71 [ 342.470037][ T7221] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.506641][ T5835] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 342.506705][ T8455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.566878][ T5835] usb 8-1: USB disconnect, device number 2 [ 342.922528][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 342.931375][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 343.234136][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.668'. [ 343.243414][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.668'. [ 344.103468][ T8454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.334443][ T8454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.487640][ T8454] bond0 (unregistering): Released all slaves [ 345.733527][ T7221] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.809807][ T8461] ipvlan2: entered allmulticast mode [ 345.815199][ T8461] veth0_vlan: entered allmulticast mode [ 346.983872][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 347.039298][ T7221] bridge_slave_1: left allmulticast mode [ 347.045001][ T7221] bridge_slave_1: left promiscuous mode [ 347.079842][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.174072][ T7221] bridge_slave_0: left allmulticast mode [ 347.196535][ T7221] bridge_slave_0: left promiscuous mode [ 347.230756][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.347046][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.681'. [ 352.356070][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.681'. [ 357.908868][ T8570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.643477][ T7221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.674549][ T7221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.711482][ T7221] bond0 (unregistering): Released all slaves [ 358.811330][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 359.424603][ T7221] : left promiscuous mode [ 361.806656][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.696'. [ 361.816151][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.7.696'. [ 363.810183][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 364.423153][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.506604][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.541142][ T8428] bridge_slave_0: entered allmulticast mode [ 364.598774][ T8428] bridge_slave_0: entered promiscuous mode [ 364.659981][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.650523][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.657907][ T8428] bridge_slave_1: entered allmulticast mode [ 365.673165][ T8428] bridge_slave_1: entered promiscuous mode [ 366.593556][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.669172][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.913014][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 367.072268][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 367.350350][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 367.357466][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.631341][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.642032][ T7221] hsr_slave_0: left promiscuous mode [ 367.648383][ T7221] hsr_slave_1: left promiscuous mode [ 367.657191][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.664375][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.685175][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.705523][ T10] usb 1-1: Product: syz [ 367.712456][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.729090][ T10] usb 1-1: Manufacturer: syz [ 367.729127][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.733717][ T10] usb 1-1: SerialNumber: syz [ 367.758936][ T10] usb 1-1: config 0 descriptor?? [ 367.861132][ T7221] veth1_macvtap: left promiscuous mode [ 367.887164][ T7221] veth0_macvtap: left promiscuous mode [ 367.899460][ T7221] veth1_vlan: left promiscuous mode [ 367.910742][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.910950][ T7221] veth0_vlan: left promiscuous mode [ 367.929614][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.937914][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.958181][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.977203][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 367.992006][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.465831][ T7221] team0 (unregistering): Port device team_slave_1 removed [ 369.648309][ T7221] team0 (unregistering): Port device team_slave_0 removed [ 369.842855][ T8665] syz.7.710 (8665): drop_caches: 2 [ 369.940891][ T52] usb 1-1: USB disconnect, device number 5 [ 370.247781][ T55] Bluetooth: hci3: command tx timeout [ 371.117635][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.711'. [ 371.126954][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.7.711'. [ 372.425870][ T55] Bluetooth: hci3: command tx timeout [ 372.604820][ T8428] team0: Port device team_slave_0 added [ 372.914207][ T8428] team0: Port device team_slave_1 added [ 373.873043][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.361138][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.480914][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.531872][ T8657] lo speed is unknown, defaulting to 1000 [ 374.551494][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.588040][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.630911][ T55] Bluetooth: hci3: command tx timeout [ 374.649245][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.089718][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 375.491024][ T8428] hsr_slave_0: entered promiscuous mode [ 375.561971][ T8428] hsr_slave_1: entered promiscuous mode [ 375.789833][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 376.034599][ T8700] syz.7.721 (8700): drop_caches: 2 [ 376.044274][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.059481][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.118964][ T5835] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.128799][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.136834][ T5835] usb 3-1: Product: syz [ 376.176259][ T5835] usb 3-1: Manufacturer: syz [ 376.183287][ T5835] usb 3-1: SerialNumber: syz [ 376.195021][ T5835] usb 3-1: config 0 descriptor?? [ 376.918476][ T55] Bluetooth: hci3: command tx timeout [ 377.914083][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.727'. [ 378.700977][ T8730] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 378.971930][ T5889] usb 3-1: USB disconnect, device number 3 [ 379.483703][ T7221] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.533358][ T7221] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.925164][ T7221] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.034440][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 381.312424][ T7221] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.468339][ T8766] syz.3.735 (8766): drop_caches: 2 [ 383.005138][ T8428] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.124562][ T8428] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.223656][ T8428] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.541365][ T8428] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.659643][ T7221] bridge_slave_1: left allmulticast mode [ 383.741176][ T7221] bridge_slave_1: left promiscuous mode [ 383.790743][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.810616][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 383.999119][ T7221] bridge_slave_0: left allmulticast mode [ 384.055314][ T7221] bridge_slave_0: left promiscuous mode [ 384.134711][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.080167][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.086701][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.944763][ T8832] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.442763][ T7221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.634095][ T7221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.673369][ T7221] bond0 (unregistering): Released all slaves [ 388.145565][ T55] Bluetooth: hci0: command tx timeout [ 388.150992][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.330975][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.373718][ T8657] bridge_slave_0: entered allmulticast mode [ 388.410861][ T8657] bridge_slave_0: entered promiscuous mode [ 388.694686][ T8840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.701102][ T8840] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 388.753061][ T8840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.759140][ T8840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 388.815495][ T8840] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 388.821790][ T8840] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 388.899559][ T8840] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 388.905762][ T8840] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 388.963328][ T8840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.969624][ T8840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 389.026019][ T8840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 389.064410][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.081282][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.095287][ T8657] bridge_slave_1: entered allmulticast mode [ 389.110401][ T8657] bridge_slave_1: entered promiscuous mode [ 389.295287][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.487134][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.880304][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 390.947986][ T8657] team0: Port device team_slave_0 added [ 390.976839][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 390.983014][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 391.051517][ T5846] Bluetooth: hci7: command 0x0406 tx timeout [ 391.099941][ T8874] input: syz0 as /devices/virtual/input/input8 [ 391.113337][ T7221] hsr_slave_0: left promiscuous mode [ 391.147760][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.180058][ T7221] hsr_slave_1: left promiscuous mode [ 391.186221][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.218861][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.264073][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.297560][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.357203][ T7221] veth1_macvtap: left promiscuous mode [ 391.366149][ T7221] veth0_macvtap: left promiscuous mode [ 391.371890][ T7221] veth1_vlan: left promiscuous mode [ 391.388439][ T7221] veth0_vlan: left promiscuous mode [ 392.083541][ T8883] siw: device registration error -23 [ 392.987659][ T8889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.767'. [ 393.114453][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 393.203739][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 393.219733][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 393.255359][ T8898] ubi31: attaching mtd0 [ 393.288413][ T5846] Bluetooth: hci7: command 0x0406 tx timeout [ 393.360562][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.426078][ T8898] ubi31: scanning is finished [ 393.431431][ T8898] ubi31: empty MTD device detected [ 395.215444][ T8898] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 395.237105][ T8898] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 395.247902][ T8898] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 395.259454][ T8898] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 395.295561][ T8898] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 395.316925][ T8898] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 395.346805][ T8898] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3886616571 [ 395.379299][ T8898] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 395.467225][ T8909] ubi31: background thread "ubi_bgt31d" started, PID 8909 [ 395.595008][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.957440][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.968387][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.977549][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.986572][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.989466][ T7221] team0 (unregistering): Port device team_slave_1 removed [ 397.007994][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 397.015614][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.844051][ T7221] team0 (unregistering): Port device team_slave_0 removed [ 398.932669][ T8936] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 398.940380][ T8936] netlink: 208 bytes leftover after parsing attributes in process `syz.0.779'. [ 399.187343][ T5846] Bluetooth: hci4: command tx timeout [ 399.595726][ T8657] team0: Port device team_slave_1 added [ 399.778692][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.814213][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.922345][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.964117][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.991086][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.156237][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.911462][ T5846] Bluetooth: hci4: command tx timeout [ 402.234275][ T8922] lo speed is unknown, defaulting to 1000 [ 402.435056][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 402.444261][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 402.712900][ T8961] ipvlan2: entered allmulticast mode [ 402.719298][ T8961] veth0_vlan: entered allmulticast mode [ 402.772484][ T8657] hsr_slave_0: entered promiscuous mode [ 402.957900][ T8657] hsr_slave_1: entered promiscuous mode [ 403.044487][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.086552][ T8657] Cannot create hsr debugfs directory [ 404.369670][ T5846] Bluetooth: hci4: command tx timeout [ 404.610668][ T8984] 9pnet_fd: Insufficient options for proto=fd [ 405.259852][ T8992] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 405.267622][ T8992] netlink: 208 bytes leftover after parsing attributes in process `syz.2.791'. [ 406.059103][ T9002] 9pnet_fd: Insufficient options for proto=fd [ 406.531571][ T5846] Bluetooth: hci4: command tx timeout [ 406.572975][ T8657] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 406.626694][ T8657] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 406.851033][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 407.130875][ T8657] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 407.142839][ T8657] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 410.667551][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.178833][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.253410][ T8922] bridge_slave_0: entered allmulticast mode [ 411.282620][ T8922] bridge_slave_0: entered promiscuous mode [ 411.355722][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.362912][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.431265][ T9049] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 411.452815][ T8922] bridge_slave_1: entered allmulticast mode [ 411.470534][ T9049] netlink: 208 bytes leftover after parsing attributes in process `syz.0.803'. [ 411.517833][ T8922] bridge_slave_1: entered promiscuous mode [ 412.236729][ T9064] 9pnet_fd: Insufficient options for proto=fd [ 412.906462][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.039209][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.137235][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.544897][ T8922] team0: Port device team_slave_0 added [ 413.845930][ T8922] team0: Port device team_slave_1 added [ 414.886050][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.253003][ T7221] bridge_slave_1: left allmulticast mode [ 415.259341][ T7221] bridge_slave_1: left promiscuous mode [ 415.301916][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.377277][ T7221] bridge_slave_0: left allmulticast mode [ 415.384206][ T7221] bridge_slave_0: left promiscuous mode [ 415.493246][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.006984][ T9112] ------------[ cut here ]------------ [ 418.012597][ T9112] DEBUG_LOCKS_WARN_ON(1) [ 418.012744][ T9112] WARNING: CPU: 0 PID: 9112 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 [ 418.026827][ T9112] Modules linked in: [ 418.030762][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.818 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 418.041357][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.051443][ T9112] RIP: 0010:__lock_acquire+0x564/0x2100 [ 418.057032][ T9112] Code: 00 00 83 3d b1 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 47 bd e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 418.076803][ T9112] RSP: 0018:ffffc90004d57490 EFLAGS: 00010046 [ 418.082910][ T9112] RAX: 589827d88abe0900 RBX: 0000000000001b20 RCX: 0000000000080000 [ 418.090897][ T9112] RDX: dffffc0000000000 RSI: 0000000000002e72 RDI: 0000000000002e73 [ 418.098872][ T9112] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170c519a [ 418.106879][ T9112] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888061bba8d4 [ 418.114876][ T9112] R13: 0000000000000000 R14: 1ffff1100c377522 R15: ffff888061bba910 [ 418.122851][ T9112] FS: 00007fc898c226c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 418.131786][ T9112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.138369][ T9112] CR2: 00007fc898c21f98 CR3: 000000005e484000 CR4: 0000000000350ef0 [ 418.146342][ T9112] Call Trace: [ 418.149620][ T9112] [ 418.152550][ T9112] ? __warn+0x165/0x4d0 [ 418.156723][ T9112] ? __lock_acquire+0x564/0x2100 [ 418.161680][ T9112] ? report_bug+0x2b3/0x500 [ 418.166202][ T9112] ? __lock_acquire+0x564/0x2100 [ 418.171181][ T9112] ? handle_bug+0x60/0x90 [ 418.175517][ T9112] ? exc_invalid_op+0x1a/0x50 [ 418.180200][ T9112] ? asm_exc_invalid_op+0x1a/0x20 [ 418.185242][ T9112] ? __warn_printk+0x292/0x360 [ 418.190051][ T9112] ? __lock_acquire+0x564/0x2100 [ 418.195021][ T9112] lock_acquire+0x1ed/0x550 [ 418.199540][ T9112] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 418.205102][ T9112] ? __pfx_lock_acquire+0x10/0x10 [ 418.210158][ T9112] ? rcu_note_context_switch+0xd44/0x1060 [ 418.215895][ T9112] ? __pfx_lock_release+0x10/0x10 [ 418.220935][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.226591][ T9112] ? __lock_acquire+0x1397/0x2100 [ 418.231637][ T9112] _raw_spin_lock_nested+0x31/0x40 [ 418.236803][ T9112] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 418.242382][ T9112] raw_spin_rq_lock_nested+0xb0/0x140 [ 418.247775][ T9112] __schedule+0x357/0x4c90 [ 418.252211][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.257955][ T9112] ? sched_clock_cpu+0x76/0x490 [ 418.262813][ T9112] ? __pfx_lock_release+0x10/0x10 [ 418.267856][ T9112] ? __pfx___schedule+0x10/0x10 [ 418.272719][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.278413][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.284061][ T9112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.290058][ T9112] ? preempt_schedule+0xe1/0xf0 [ 418.294930][ T9112] preempt_schedule_common+0x84/0xd0 [ 418.300232][ T9112] preempt_schedule+0xe1/0xf0 [ 418.304920][ T9112] ? __pfx_preempt_schedule+0x10/0x10 [ 418.310302][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.316125][ T9112] ? lockdep_hardirqs_on+0x99/0x150 [ 418.321422][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.327069][ T9112] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.332974][ T9112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.339313][ T9112] preempt_schedule_thunk+0x1a/0x30 [ 418.344531][ T9112] try_to_wake_up+0x9c3/0x1470 [ 418.349331][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.354979][ T9112] ? __pfx_try_to_wake_up+0x10/0x10 [ 418.360193][ T9112] ? __pfx_lock_release+0x10/0x10 [ 418.365227][ T9112] ? plist_del+0x3f1/0x410 [ 418.369651][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.375317][ T9112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 418.380523][ T9112] wake_up_q+0xc8/0x120 [ 418.384688][ T9112] futex_wake+0x523/0x5c0 [ 418.389050][ T9112] ? __pfx_futex_wake+0x10/0x10 [ 418.393924][ T9112] do_futex+0x392/0x560 [ 418.398090][ T9112] ? __pfx_do_futex+0x10/0x10 [ 418.402777][ T9112] __se_sys_futex+0x3f9/0x480 [ 418.407463][ T9112] ? __pfx___se_sys_futex+0x10/0x10 [ 418.412667][ T9112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.419184][ T9112] ? do_syscall_64+0x100/0x230 [ 418.423962][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.429612][ T9112] ? __x64_sys_futex+0x21/0xf0 [ 418.434385][ T9112] do_syscall_64+0xf3/0x230 [ 418.438897][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.444809][ T9112] RIP: 0033:0x7fc897d8d169 [ 418.449255][ T9112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.468970][ T9112] RSP: 002b:00007fc898c220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 418.477491][ T9112] RAX: ffffffffffffffda RBX: 00007fc897fa6168 RCX: 00007fc897d8d169 [ 418.485474][ T9112] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc897fa616c [ 418.493489][ T9112] RBP: 00007fc897fa6160 R08: 7fffffffffffffff R09: 0000000000000000 [ 418.501465][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc897fa616c [ 418.509446][ T9112] R13: 0000000000000000 R14: 00007ffe1da01c30 R15: 00007ffe1da01d18 [ 418.517438][ T9112] [ 418.520462][ T9112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 418.527771][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.818 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 418.538388][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.548456][ T9112] Call Trace: [ 418.551743][ T9112] [ 418.554669][ T9112] dump_stack_lvl+0x241/0x360 [ 418.559357][ T9112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.564588][ T9112] ? __pfx__printk+0x10/0x10 [ 418.569369][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.575028][ T9112] ? vscnprintf+0x5d/0x90 [ 418.579371][ T9112] panic+0x349/0x880 [ 418.583273][ T9112] ? __warn+0x174/0x4d0 [ 418.587442][ T9112] ? __pfx_panic+0x10/0x10 [ 418.591865][ T9112] __warn+0x344/0x4d0 [ 418.595857][ T9112] ? __lock_acquire+0x564/0x2100 [ 418.600807][ T9112] report_bug+0x2b3/0x500 [ 418.605156][ T9112] ? __lock_acquire+0x564/0x2100 [ 418.610115][ T9112] handle_bug+0x60/0x90 [ 418.614274][ T9112] exc_invalid_op+0x1a/0x50 [ 418.618776][ T9112] asm_exc_invalid_op+0x1a/0x20 [ 418.623637][ T9112] RIP: 0010:__lock_acquire+0x564/0x2100 [ 418.629197][ T9112] Code: 00 00 83 3d b1 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 47 bd e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 418.648925][ T9112] RSP: 0018:ffffc90004d57490 EFLAGS: 00010046 [ 418.655013][ T9112] RAX: 589827d88abe0900 RBX: 0000000000001b20 RCX: 0000000000080000 [ 418.663014][ T9112] RDX: dffffc0000000000 RSI: 0000000000002e72 RDI: 0000000000002e73 [ 418.671010][ T9112] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170c519a [ 418.679021][ T9112] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888061bba8d4 [ 418.687000][ T9112] R13: 0000000000000000 R14: 1ffff1100c377522 R15: ffff888061bba910 [ 418.694996][ T9112] ? __warn_printk+0x292/0x360 [ 418.699795][ T9112] lock_acquire+0x1ed/0x550 [ 418.704356][ T9112] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 418.709918][ T9112] ? __pfx_lock_acquire+0x10/0x10 [ 418.714952][ T9112] ? rcu_note_context_switch+0xd44/0x1060 [ 418.720698][ T9112] ? __pfx_lock_release+0x10/0x10 [ 418.725747][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731396][ T9112] ? __lock_acquire+0x1397/0x2100 [ 418.736462][ T9112] _raw_spin_lock_nested+0x31/0x40 [ 418.741675][ T9112] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 418.747234][ T9112] raw_spin_rq_lock_nested+0xb0/0x140 [ 418.752625][ T9112] __schedule+0x357/0x4c90 [ 418.757054][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.762710][ T9112] ? sched_clock_cpu+0x76/0x490 [ 418.767567][ T9112] ? __pfx_lock_release+0x10/0x10 [ 418.772611][ T9112] ? __pfx___schedule+0x10/0x10 [ 418.777508][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.783186][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.788847][ T9112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.794855][ T9112] ? preempt_schedule+0xe1/0xf0 [ 418.799723][ T9112] preempt_schedule_common+0x84/0xd0 [ 418.805072][ T9112] preempt_schedule+0xe1/0xf0 [ 418.809763][ T9112] ? __pfx_preempt_schedule+0x10/0x10 [ 418.815146][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.820791][ T9112] ? lockdep_hardirqs_on+0x99/0x150 [ 418.826001][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.831649][ T9112] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.837555][ T9112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.843895][ T9112] preempt_schedule_thunk+0x1a/0x30 [ 418.849121][ T9112] try_to_wake_up+0x9c3/0x1470 [ 418.853900][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.859555][ T9112] ? __pfx_try_to_wake_up+0x10/0x10 [ 418.864773][ T9112] ? __pfx_lock_release+0x10/0x10 [ 418.869811][ T9112] ? plist_del+0x3f1/0x410 [ 418.874239][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.879887][ T9112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 418.885091][ T9112] wake_up_q+0xc8/0x120 [ 418.889255][ T9112] futex_wake+0x523/0x5c0 [ 418.893601][ T9112] ? __pfx_futex_wake+0x10/0x10 [ 418.898474][ T9112] do_futex+0x392/0x560 [ 418.902641][ T9112] ? __pfx_do_futex+0x10/0x10 [ 418.907328][ T9112] __se_sys_futex+0x3f9/0x480 [ 418.912047][ T9112] ? __pfx___se_sys_futex+0x10/0x10 [ 418.917247][ T9112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.923586][ T9112] ? do_syscall_64+0x100/0x230 [ 418.928347][ T9112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.933987][ T9112] ? __x64_sys_futex+0x21/0xf0 [ 418.938760][ T9112] do_syscall_64+0xf3/0x230 [ 418.943262][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.949248][ T9112] RIP: 0033:0x7fc897d8d169 [ 418.953660][ T9112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.973299][ T9112] RSP: 002b:00007fc898c220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 418.981725][ T9112] RAX: ffffffffffffffda RBX: 00007fc897fa6168 RCX: 00007fc897d8d169 [ 418.989700][ T9112] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc897fa616c [ 418.997695][ T9112] RBP: 00007fc897fa6160 R08: 7fffffffffffffff R09: 0000000000000000 [ 419.005694][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc897fa616c [ 419.013683][ T9112] R13: 0000000000000000 R14: 00007ffe1da01c30 R15: 00007ffe1da01d18 [ 419.021844][ T9112] [ 419.025315][ T9112] Kernel Offset: disabled [ 419.029872][ T9112] Rebooting in 86400 seconds..