last executing test programs: 4m4.902235661s ago: executing program 0 (id=611): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x8001, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) 4m4.673437574s ago: executing program 0 (id=613): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x2, 0x0) 4m3.587707105s ago: executing program 0 (id=621): socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x40088c0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4m3.147489174s ago: executing program 0 (id=626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m3.078783367s ago: executing program 0 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) 4m2.727599317s ago: executing program 0 (id=631): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 3m47.671406015s ago: executing program 32 (id=631): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 3m43.313152649s ago: executing program 3 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='65535\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='writesame_16\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127b, &(0x7f0000000000)={0x0, 0x1000}) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) 3m43.164014831s ago: executing program 3 (id=740): syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa0f9390728091893}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x6002}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m42.288574769s ago: executing program 3 (id=753): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r3, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, 0x8) 3m41.91445426s ago: executing program 3 (id=747): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m41.775429405s ago: executing program 3 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) 3m41.691869039s ago: executing program 3 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3m36.468621765s ago: executing program 4 (id=785): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44014) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) ptrace$cont(0x15, r1, 0x6, 0x4d3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3m36.403597305s ago: executing program 4 (id=788): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') stat64(&(0x7f0000000240)='./file1\x00', 0x0) linkat(r1, &(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') 3m36.34918787s ago: executing program 4 (id=790): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) 3m35.457557419s ago: executing program 4 (id=794): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) 3m35.135324799s ago: executing program 4 (id=796): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) 3m35.049099904s ago: executing program 4 (id=797): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x2f, 0x6, 0x0, {0x2, 0x1, 0x6, 0x0, '\\&\\\xf2&)'}}, 0x2f) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r3, r1, 0x0) 3m26.626373169s ago: executing program 33 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3m19.660368474s ago: executing program 34 (id=797): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x2f, 0x6, 0x0, {0x2, 0x1, 0x6, 0x0, '\\&\\\xf2&)'}}, 0x2f) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r3, r1, 0x0) 42.05106913s ago: executing program 1 (id=2346): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x5}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x12}, 0x68880) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0xb, @val=@perf_event={0xa}}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x4c880) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 41.995203198s ago: executing program 1 (id=2348): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 41.929396586s ago: executing program 1 (id=2350): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) setreuid(0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {r1, r2+60000000}}, &(0x7f0000000180)) 41.420161301s ago: executing program 1 (id=2354): socket$inet_smc(0x2b, 0x1, 0x0) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x3}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x2004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 41.359242523s ago: executing program 1 (id=2356): setitimer(0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, &(0x7f0000000100)={0x6, [[0x1, 0x1797, 0x15e, 0x9fc, 0x0, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x0, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x3, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000000, 0x6}, {}, {}, {}, {0x8, 0x7}, {0x4000, 0x400}, {0xfffffffc}], '\x00', 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) stat64(&(0x7f0000000100)='./cgroup/../file0\x00', 0x0) 39.255028259s ago: executing program 1 (id=2373): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r3, 0x100000) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) 39.117221355s ago: executing program 35 (id=2373): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r3, 0x100000) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) 4.0867972s ago: executing program 7 (id=2677): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r4 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r2, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.692312597s ago: executing program 7 (id=2678): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x78}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r0}) syz_clone3(&(0x7f00000005c0)={0x1a000200, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000003c0), {0x34}, &(0x7f0000000400)=""/27, 0x1b, &(0x7f0000000440)=""/220, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r4], 0x6}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.329807927s ago: executing program 7 (id=2688): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) getgroups(0x5, &(0x7f0000006580)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1bb0}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c8e0}, 0x20000804) 2.790042856s ago: executing program 6 (id=2692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) set_robust_list(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x2004, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000140)={0x30000018}) timer_create(0x4, &(0x7f0000000040)={0x0, 0x11, 0x4}, &(0x7f0000044000)) read(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.478310525s ago: executing program 6 (id=2694): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x254, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x228, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x4}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8001, 0x0, 0x7, 0xd, 0xe, 0x18, 0x1}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000270009002abd7000fddbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f0000000100)=0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.477559921s ago: executing program 7 (id=2696): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0xee, 0x4c, 0xbe, 0x10, 0x8ca, 0x111, 0x2fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x10, 0x3, "", [{{0x9, 0x4, 0x37, 0x8, 0x0, 0x96, 0x9b, 0xa7, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000300000007e2ff910f000005000000000900000003000000b050000008000000050000000010000009000000000000004d10ffff0e00000001000000050000000700000003000000050000000f00000000000001000000005c004100100000000000001004000000002e00"], &(0x7f0000000440)=""/102, 0x7f, 0x66, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503feffffff000000001600000014000180a27fa62670d2fc7c7a39ad0628b8000004000000010002004e23ac1e01010000000000000000000002000a004e21fffffff3fe8800000000000000000000000000011800000000000680000003002d6bd7c7ee4bffcc781f16735256a9effc8c2edaf6f8da9d0bf3ecae3f7817d5b8e43cb5650cd96b032a7a5fff1a02b9b3700fc7e7f031b72066703af28bc612593085263f9678ebbda92d080f3144894d224a035f6f9ef6a36d747944234d26b6a6e11a21c6090fbcec98f2f6dcd97b1d4ab86ce307d5af44d4e0a056834600000005000000010009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x163, 0x3ff, 0x621f, 0x8200, 0xffffffffffffffff, 0xb, '\x00', 0x0, r0, 0x5, 0x2, 0x4, 0x8}, 0x50) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r3, 0x1b00}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) unshare(0x62040200) 2.433763261s ago: executing program 2 (id=2697): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x31c, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x10}, {0x0, 0xfd}, {0x0, 0x0, 0x0, 0x51}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xec, 0x134, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @inet=@rpfilter={{0x24}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) 2.282622726s ago: executing program 6 (id=2698): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r3, 0x100000) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) 1.990532626s ago: executing program 2 (id=2699): pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000200)={{0x5, 0x4}, 0x1, 0x5, 0x5, {0xa}, 0x3, 0x5}) socket$packet(0x11, 0x2, 0x300) 1.684209547s ago: executing program 5 (id=2701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.620886372s ago: executing program 5 (id=2702): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/100, 0x64) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r3 = eventfd2(0x0, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) sendmsg$xdp(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440c4}, 0x4040040) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r4, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="c109000000000000001d1e010e7126", 0xf}], 0x1}, 0x0) 1.61908887s ago: executing program 2 (id=2710): r0 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x3}}, @sco={0x1f, @none}, @xdp={0x2c, 0x1f, 0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)='vxcan1\x00', 0x9, 0x6, 0x70cb}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r4) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) close(r1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r6, r7, r6) 1.585937027s ago: executing program 5 (id=2703): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f0000000280)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x20, r4, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008c8000/0x2000)=nil, 0x2000, 0x9) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000140)=""/210) 1.489299952s ago: executing program 2 (id=2704): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e27}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x66}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 1.39050265s ago: executing program 2 (id=2705): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x80000000) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1.309138649s ago: executing program 6 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$link(0x8, 0x0, 0xfffffffffffffffe) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x1) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) setns(0xc9, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r0, 0x0, 0x0) 1.041851169s ago: executing program 7 (id=2707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fadvise64(0xffffffffffffffff, 0xff, 0x0, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r5, &(0x7f00000002c0)=@random={'trusted.', 'system.posix_acl_default\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0x6, 0x0, 0x2, 0x5, 0x5}, &(0x7f00000000c0)=0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x4000) 996.398886ms ago: executing program 5 (id=2708): syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x58, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0xf, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x6, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1000}, {@empty, 0x100}]}, @ssrr={0x89, 0x3, 0xf1}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) mlockall(0x6) brk(0x55555ede6001) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000009c0)={0x2, 0xffffffff, 0x16, 0x6, 0xaf, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x24040811) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x11, @private=0xa010101, 0x4e20, 0x3, 'dh\x00', 0x52, 0x8, 0x38}, 0x2c) 726.384565ms ago: executing program 5 (id=2709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 508.646746ms ago: executing program 6 (id=2711): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x76798000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001440)=""/40, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 186.330669ms ago: executing program 2 (id=2712): gettid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001040)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/48, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x81}, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 185.781358ms ago: executing program 6 (id=2713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket(0x25, 0x5, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(r1, &(0x7f0000008840), 0x0, 0x40000001, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000580)='7', 0x1) write$char_usb(r3, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r2) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) 278.527µs ago: executing program 7 (id=2714): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) write(r1, &(0x7f0000000180)='1', 0x1) membarrier(0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="eed9", 0x2, 0x8091, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240), 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2490b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x56, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_LINK={0x8}, @IFLA_LINK_NETNSID={0x8}]}, 0x6c}}, 0x0) write(r2, &(0x7f0000000340), 0x0) 0s ago: executing program 5 (id=2715): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a0020000000000000000000050014000000000008000400", @ANYRES32=0x0, @ANYBLOB="0c000e"], 0x38}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000280)={'vcan0\x00', @ifru_data=&(0x7f0000000140)="c0d1f1b2ac0b2019d9299b9a4d03bc3daa3e8d7d5d106e33c7c9306f87396ae7"}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) kernel console output (not intermixed with test programs): : type=1326 audit(1785973526.964:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.090108][ T42] audit: type=1326 audit(1785973526.964:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.100405][ T42] audit: type=1326 audit(1785973526.974:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.108530][ T42] audit: type=1326 audit(1785973526.974:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.116338][ T42] audit: type=1326 audit(1785973526.974:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.123584][ T42] audit: type=1326 audit(1785973526.974:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.130430][ T42] audit: type=1326 audit(1785973526.974:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.138319][ T42] audit: type=1326 audit(1785973526.974:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.145312][ T42] audit: type=1326 audit(1785973526.974:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.149878][ T5844] usb 11-1: config 0 has no interfaces? [ 192.152242][ T42] audit: type=1326 audit(1785973526.974:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.154807][ T5844] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 192.164343][ T5844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.165599][ T9382] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1122'. [ 192.173524][ T5844] usb 11-1: config 0 descriptor?? [ 192.442835][ T5844] usb 11-1: USB disconnect, device number 4 [ 192.921793][ T9395] netlink: 'syz.2.1125': attribute type 1 has an invalid length. [ 192.934830][ T9395] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.960786][ T9395] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 193.065323][ T9405] netlink: 'syz.6.1129': attribute type 4 has an invalid length. [ 193.078249][ T9405] netlink: 'syz.6.1129': attribute type 4 has an invalid length. [ 193.086718][ T9405] kernel profiling enabled (shift: 9) [ 193.507004][ T9425] netlink: 'syz.6.1136': attribute type 1 has an invalid length. [ 193.531434][ T9425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.554646][ T9425] bond2: (slave veth0_to_bond): making interface the new active one [ 193.558438][ T9425] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 193.801438][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.933913][ T9431] fuse: fd is not a fuse device [ 193.980198][ T9433] CIFS: Attempting to mount //127.0.0.1/share [ 193.982631][ T9433] CIFS: VFS: Error connecting to socket. Aborting operation. [ 193.985546][ T9433] CIFS: VFS: cifs_mount failed w/return code = -101 [ 194.896046][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1154'. [ 194.900314][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1154'. [ 194.955049][ T6684] libceph: connect (1)[c::]:6789 error -101 [ 194.957818][ T6684] libceph: mon0 (1)[c::]:6789 connect error [ 195.043096][ T9475] ceph: No mds server is up or the cluster is laggy [ 195.107741][ T9488] virt_wifi0: entered promiscuous mode [ 195.117702][ T9488] macsec1: entered promiscuous mode [ 195.377302][ T9510] Invalid argument reading file caps for ./file0 [ 195.449270][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1170'. [ 195.504391][ T9520] openvswitch: netlink: ct_state flags 0001010a unsupported [ 196.196725][ T9540] fuse: fd is not a fuse device [ 196.718844][ T9557] binder: 9556:9557 unknown command 0 [ 196.728091][ T9557] binder: 9556:9557 ioctl c0306201 800004c0 returned -22 [ 196.735545][ T9557] binder: 9556:9557 ioctl c0306201 80000180 returned -14 [ 196.890931][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'. [ 196.928530][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1194'. [ 197.007279][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1188'. [ 197.034657][ T9567] bond3: entered promiscuous mode [ 197.036821][ T9567] bond3: entered allmulticast mode [ 197.089938][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1189'. [ 198.051555][ T9601] netlink: 'syz.6.1199': attribute type 1 has an invalid length. [ 198.101140][ T9601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.105413][ T9601] bond5: (slave bond6): making interface the new active one [ 198.111008][ T9601] bond5: (slave bond6): Enslaving as an active interface with an up link [ 198.145834][ T9601] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 198.194409][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1203'. [ 198.668041][ T6094] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 198.834665][ T6094] usb 11-1: config 0 has no interfaces? [ 198.837152][ T6094] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 198.841261][ T6094] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.850128][ T6094] usb 11-1: config 0 descriptor?? [ 199.061825][ T6684] usb 11-1: USB disconnect, device number 5 [ 200.548800][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 201.047973][ T1355] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 201.207980][ T1355] usb 11-1: Using ep0 maxpacket: 8 [ 201.211380][ T1355] usb 11-1: config 0 has no interfaces? [ 201.213418][ T1355] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.216441][ T1355] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.223410][ T1355] usb 11-1: config 0 descriptor?? [ 201.438071][ T6684] usb 11-1: USB disconnect, device number 6 [ 201.487666][ T9668] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 201.524346][ T9668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.528923][ T9668] bond3: (slave bond4): making interface the new active one [ 201.531686][ T9668] bond3: (slave bond4): Enslaving as an active interface with an up link [ 201.576822][ T9668] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 201.590018][ T9672] fuse: fd is not a fuse device [ 201.774143][ T9683] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 201.950985][ T9693] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 203.273232][ T9714] fuse: fd is not a fuse device [ 203.364031][ T9716] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1239'. [ 205.007112][ T9741] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 205.338231][ T9756] netlink: 'syz.5.1256': attribute type 1 has an invalid length. [ 205.397172][ T9756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.471431][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 205.495183][ T9762] bond3: (slave veth5): Enslaving as an active interface with a down link [ 205.603203][ T9756] bond3: (slave dummy0): making interface the new active one [ 205.610780][ T9756] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 205.630757][ T9756] netlink: 'syz.5.1256': attribute type 10 has an invalid length. [ 205.634766][ T9756] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1256'. [ 205.664730][ T9756] dummy0: entered promiscuous mode [ 205.674293][ T9756] bond3: (slave dummy0): Releasing active interface [ 205.746099][ T42] kauditd_printk_skb: 5628 callbacks suppressed [ 205.746115][ T42] audit: type=1326 audit(1785973540.634:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1259" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f74fec code=0x0 [ 206.012567][ T9782] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 206.033702][ T9782] bond5: entered promiscuous mode [ 206.036361][ T9782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.070395][ T9782] bond5: (slave bridge3): making interface the new active one [ 206.073620][ T9782] bridge3: entered promiscuous mode [ 206.077133][ T9782] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 206.106050][ T9782] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.111495][ T9782] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 207.868200][ T5102] Bluetooth: hci1: command 0x2016 tx timeout [ 208.396642][ T9834] (NULL device *): [drm] All connectors must have at least one possible encoder [ 208.699756][ T9847] batman_adv: batadv0: Adding interface: dummy0 [ 208.702378][ T9847] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.713595][ T9847] batman_adv: batadv0: Interface activated: dummy0 [ 208.729729][ T9847] batadv0: mtu less than device minimum [ 208.732837][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.738793][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.742679][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.746311][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.750061][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.753719][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.757427][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.761145][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.764834][ T9847] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.782915][ T9847] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 208.787765][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.790878][ T9847] batadv0: entered promiscuous mode [ 208.792650][ T9847] batadv0: entered allmulticast mode [ 208.794747][ T9847] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 208.853778][ T9853] netlink: 'syz.2.1291': attribute type 3 has an invalid length. [ 208.961361][ T9859] overlayfs: failed to clone upperpath [ 208.965156][ T9859] overlayfs: failed to clone upperpath [ 209.097719][ T9869] lo: entered allmulticast mode [ 209.100838][ T9869] lo: left allmulticast mode [ 209.360294][ T9875] fuse: fd is not a fuse device [ 209.948198][ T5746] Bluetooth: hci1: command 0x2016 tx timeout [ 210.640115][ T9899] loop6: detected capacity change from 0 to 2640 [ 210.650475][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.654245][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.657265][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.660169][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.662920][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.665924][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.668880][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.671501][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.674241][ T9899] ldm_validate_partition_table(): Disk read failed. [ 210.676981][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.680693][ T9899] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.683220][ T9899] Dev loop6: unable to read RDB block 0 [ 210.685028][ T9899] loop6: unable to read partition table [ 210.686849][ T9899] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 210.748548][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1308'. [ 210.758606][ T9899] loop6: detected capacity change from 2640 to 524288000 [ 210.816749][ T9904] batman_adv: batadv0: Adding interface: dummy0 [ 210.819916][ T9904] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.829850][ T9904] batman_adv: batadv0: Interface activated: dummy0 [ 210.870860][ T9904] netlink: 'syz.6.1309': attribute type 10 has an invalid length. [ 210.878545][ T9904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.881973][ T9904] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 212.187166][ T9932] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1321'. [ 212.320668][ T9930] macsec2: entered promiscuous mode [ 212.322547][ T9930] bridge0: entered promiscuous mode [ 212.354432][ T9935] fuse: fd is not a fuse device [ 212.379698][ T9937] netlink: 'syz.6.1323': attribute type 1 has an invalid length. [ 212.394211][ T9937] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.403057][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 212.436454][ T9937] bond7: (slave veth3): Enslaving as an active interface with a down link [ 212.445402][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 212.464004][ T9937] batman_adv: batadv0: Interface deactivated: dummy0 [ 212.466630][ T9937] batman_adv: batadv0: Removing interface: dummy0 [ 212.472322][ T9937] bond7: (slave dummy0): making interface the new active one [ 212.475355][ T9937] dummy0: entered promiscuous mode [ 212.477351][ T9937] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 212.495941][ T9937] netlink: 'syz.6.1323': attribute type 10 has an invalid length. [ 212.499300][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1323'. [ 212.504605][ T9937] bond7: (slave dummy0): Releasing active interface [ 212.713229][ T9951] overlayfs: failed to resolve './file2': -2 [ 212.916848][ T9954] netlink: 'syz.5.1330': attribute type 11 has an invalid length. [ 212.990123][ T9954] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 212.993093][ T9954] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 213.061259][ T9960] netlink: 'syz.5.1333': attribute type 1 has an invalid length. [ 213.089737][ T13] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 213.095175][ T13] bond3: (slave veth5): making interface the new active one [ 213.100680][ T13] bond3: active interface up! [ 213.110903][ T9960] bridge1: entered promiscuous mode [ 213.115433][ T9960] bond4: (slave bridge1): making interface the new active one [ 213.119898][ T9960] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 213.155196][ T9966] fuse: fd is not a fuse device [ 213.597298][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1338'. [ 213.618708][ T9975] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 213.676208][ T9977] batman_adv: batadv0: Adding interface: dummy0 [ 213.678456][ T9977] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.686407][ T9977] batman_adv: batadv0: Interface activated: dummy0 [ 213.714600][ T9977] netlink: 'syz.5.1339': attribute type 10 has an invalid length. [ 213.719805][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.723299][ T9977] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.931026][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 213.949981][ T5844] net_ratelimit: 53 callbacks suppressed [ 213.949998][ T5844] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 214.108605][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.114575][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.118425][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.122236][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.126071][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.129822][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.053398][ T42] audit: type=1326 audit(1785973549.944:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.063640][ T42] audit: type=1326 audit(1785973549.944:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.080472][ T42] audit: type=1326 audit(1785973549.944:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.092105][ T42] audit: type=1326 audit(1785973549.944:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.099647][ T42] audit: type=1326 audit(1785973549.944:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.107717][ T42] audit: type=1326 audit(1785973549.944:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.114934][ T42] audit: type=1326 audit(1785973549.944:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.122165][ T42] audit: type=1326 audit(1785973549.944:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.130813][ T42] audit: type=1326 audit(1785973549.944:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 215.138034][ T42] audit: type=1326 audit(1785973549.944:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 216.588081][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.885183][T10035] netlink: 'syz.5.1365': attribute type 1 has an invalid length. [ 216.887194][T10037] fuse: fd is not a fuse device [ 216.904072][T10040] xt_connbytes: Forcing CT accounting to be enabled [ 216.911914][T10040] xt_SECMARK: invalid mode: 0 [ 216.919778][T10035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.969028][T10035] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.972767][T10035] dummy0: left promiscuous mode [ 216.976203][T10035] batman_adv: batadv0: Removing interface: dummy0 [ 217.010385][T10035] bond6: (slave dummy0): making interface the new active one [ 217.014803][T10035] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 217.101052][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.238324][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.243683][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.247384][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.403539][T10061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1372'. [ 217.482459][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1373'. [ 217.802745][T10075] netlink: 'syz.2.1378': attribute type 13 has an invalid length. [ 218.063003][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1382'. [ 218.183574][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 218.668242][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.891173][T10121] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1394'. [ 218.895938][T10122] netlink: 'syz.5.1396': attribute type 1 has an invalid length. [ 218.952221][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'. [ 218.963350][T10122] bridge3: entered promiscuous mode [ 218.972906][T10122] bond7: (slave bridge3): making interface the new active one [ 218.975871][T10122] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 219.081574][ T5746] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 219.870850][T10159] netlink: 'syz.1.1411': attribute type 4 has an invalid length. [ 220.037977][ T55] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 220.047335][ T55] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 220.358273][ C3] net_ratelimit: 2 callbacks suppressed [ 220.358292][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.364588][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.368372][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.372128][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.381500][T10173] syzkaller0: entered promiscuous mode [ 220.383639][T10173] syzkaller0: entered allmulticast mode [ 220.565570][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.300444][T10198] netlink: 'syz.2.1426': attribute type 11 has an invalid length. [ 221.351553][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.354499][T10198] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.356937][T10198] tipc: Resetting bearer [ 221.359281][T10198] batman_adv: batadv0: Interface activated: dummy0 [ 221.361526][T10198] batadv0: mtu less than device minimum [ 221.364013][T10198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.367767][T10198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.371545][T10198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.375453][T10198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.379177][T10198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.393811][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.421064][T10198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.425563][T10198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.433903][T10198] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 221.441893][T10198] veth1_macvtap: left promiscuous mode [ 221.445218][T10198] veth0_macvtap: left promiscuous mode [ 221.449050][T10198] veth0_macvtap: entered promiscuous mode [ 221.452360][T10198] veth1_macvtap: entered promiscuous mode [ 221.460560][T10198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.464339][T10198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.468617][T10198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.472472][T10198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.504216][T10199] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 221.527996][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.531675][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.535597][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.540199][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.587760][T10206] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 221.894590][T10217] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1432'. [ 221.904626][T10217] veth0: entered promiscuous mode [ 221.908544][T10216] veth0: left promiscuous mode [ 222.846278][T10236] netlink: 'syz.6.1438': attribute type 11 has an invalid length. [ 222.906640][T10236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.908198][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.911229][T10236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.914155][T10236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.918207][T10236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.973145][T10236] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 222.975402][T10236] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 223.045613][T10238] bridge0: port 1(syz_tun) entered disabled state [ 223.074624][T10238] tipc: Resetting bearer [ 223.082283][T10238] batman_adv: batadv0: Interface deactivated: dummy0 [ 223.183398][T10238] tipc: Resetting bearer [ 223.304495][T10238] bond0: left allmulticast mode [ 223.307539][T10238] batadv0: left allmulticast mode [ 223.312943][T10238] bond0: left promiscuous mode [ 223.317643][T10238] batadv0: left promiscuous mode [ 223.409357][ T5821] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.415224][ T5821] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.420562][ T5821] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.423728][ T5821] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.428829][ T5821] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 223.437248][ T5821] bond7: (slave veth3): making interface the new active one [ 223.443579][ T5821] bond7: active interface up! [ 223.476547][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 223.498219][T10249] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.571246][T10249] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 223.657958][T10242] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 223.818090][T10242] usb 11-1: Using ep0 maxpacket: 32 [ 223.825432][T10242] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 223.832154][T10242] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 223.838228][T10242] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.845618][T10242] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 223.854384][T10242] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 223.858531][T10242] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.861696][T10242] usb 11-1: Product: syz [ 223.863405][T10242] usb 11-1: Manufacturer: syz [ 223.865450][T10242] usb 11-1: SerialNumber: syz [ 223.885081][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 223.894738][T10242] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input11 [ 224.127964][T10242] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 224.132013][T10242] (id 0x00) [ 224.179392][T10242] rc_core: IR keymap rc-imon-pad not found [ 224.181206][T10242] Registered IR keymap rc-empty [ 224.183247][T10242] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 224.187914][T10242] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 224.328891][T10242] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 224.335343][T10242] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input12 [ 224.341397][T10242] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:7> initialized [ 224.599699][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.602367][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.631217][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.635843][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.708139][ T5800] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.714223][ T5800] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.719140][ T5800] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.722661][ T5800] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.070639][T10282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.083891][ T5102] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 225.165666][T10288] bridge0: port 1(syz_tun) entered blocking state [ 225.167934][T10288] bridge0: port 1(syz_tun) entered forwarding state [ 225.173212][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.176603][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.180725][T10288] tipc: Resetting bearer [ 225.183119][T10288] batman_adv: batadv0: Interface activated: dummy0 [ 225.202058][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.240971][T10288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.245720][T10288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.256489][T10288] veth1_macvtap: left promiscuous mode [ 225.260846][T10288] veth0_macvtap: left promiscuous mode [ 225.264481][T10288] veth0_macvtap: entered promiscuous mode [ 225.269538][T10288] veth1_macvtap: entered promiscuous mode [ 225.279356][T10288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.284493][T10288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.290966][T10288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.296509][T10288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.306933][T10288] tipc: Resetting bearer [ 225.363559][T10288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.370354][T10288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 225.373729][T10288] bond0: entered allmulticast mode [ 225.375945][T10288] batadv0: entered allmulticast mode [ 225.378652][T10288] batadv0: entered promiscuous mode [ 225.382843][T10288] bond0: entered promiscuous mode [ 225.385568][T10288] macvlan2: left promiscuous mode [ 225.387784][T10288] bond0: left promiscuous mode [ 225.391741][T10288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.398828][T10288] bond2: left promiscuous mode [ 225.401116][T10288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.412331][T10288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.415863][T10288] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.419201][T10288] bond5: left promiscuous mode [ 225.420979][T10288] bridge3: left promiscuous mode [ 225.424054][T10288] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.428310][ T5800] net_ratelimit: 48 callbacks suppressed [ 225.428322][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 225.429657][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.457169][ T7318] bridge2: port 1(veth7) entered blocking state [ 225.459274][ T7318] bridge2: port 1(veth7) entered forwarding state [ 225.463153][ T7318] bridge2: port 2(veth9) entered blocking state [ 225.465329][ T7318] bridge2: port 2(veth9) entered forwarding state [ 225.488198][ T8442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.491057][ T8442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.495613][ T8442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.617482][T10298] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 225.631536][T10298] bond8: entered promiscuous mode [ 225.632012][T10295] imon:send_packet: task interrupted [ 225.633492][T10298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.635277][T10295] imon:send_packet: packet tx failed (-512) [ 225.640035][T10295] imon:vfd_write: send packet #3 failed [ 225.659363][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1468'. [ 225.662936][T10298] bond8: entered allmulticast mode [ 225.680044][T10298] bond8: (slave bridge4): making interface the new active one [ 225.682544][T10298] bridge4: entered promiscuous mode [ 225.684453][T10298] bridge4: entered allmulticast mode [ 225.690926][T10298] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 225.788714][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 225.812136][ T5566] usb 11-1: USB disconnect, device number 7 [ 225.938065][ T8442] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.308061][ T8442] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.369081][T10313] overlayfs: failed to clone upperpath [ 226.421644][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.425048][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.458001][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.482416][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.487564][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.558006][ T8442] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.568145][ T8442] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.571186][ T8442] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.574187][ T8442] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.631070][T10318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.832533][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.855605][T10326] fuse: fd is not a fuse device [ 226.968614][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.310741][T10340] tipc: Resetting bearer [ 227.314998][T10340] batman_adv: batadv0: Interface deactivated: dummy0 [ 227.348857][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.407790][T10344] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 227.415027][T10344] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 227.459245][ T5102] Bluetooth: hci1: connection err: -111 [ 227.524603][T10341] bridge0: port 1(syz_tun) entered disabled state [ 227.551412][T10341] batadv0: left promiscuous mode [ 227.557062][T10341] tipc: Resetting bearer [ 227.563096][T10341] batman_adv: batadv0: Interface deactivated: dummy0 [ 227.708568][T10341] tipc: Resetting bearer [ 227.801796][T10341] bond0: left allmulticast mode [ 227.806133][T10341] batadv0: left allmulticast mode [ 227.809960][T10341] macvlan2: left allmulticast mode [ 227.821449][T10341] bond2: left allmulticast mode [ 227.825676][T10341] bridge2: port 2(veth9) entered disabled state [ 227.827997][T10341] bridge2: port 1(veth7) entered disabled state [ 227.878062][ T8442] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.881878][ T8442] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.885574][ T8442] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.889700][ T8442] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.893476][ T8442] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.897206][ T8442] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.900986][ T8442] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.904679][ T8442] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.278778][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 228.306205][T10353] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.310215][T10357] netlink: 'syz.5.1482': attribute type 4 has an invalid length. [ 228.330356][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 228.335403][T10353] bond7: entered promiscuous mode [ 228.337496][T10353] bond7: entered allmulticast mode [ 228.344831][T10353] batman_adv: batadv0: Removing interface: dummy0 [ 228.353157][T10353] dummy0: entered promiscuous mode [ 228.355623][T10353] dummy0: entered allmulticast mode [ 228.358970][T10353] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 228.407150][T10360] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1485'. [ 228.410576][T10362] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 228.481196][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 228.489789][T10362] bridge4: entered promiscuous mode [ 228.495263][T10362] bond8: (slave bridge4): making interface the new active one [ 228.498590][T10362] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 228.767495][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1492'. [ 229.271253][T10413] fuse: fd is not a fuse device [ 230.226202][T10433] bond1: entered allmulticast mode [ 230.231541][T10432] bond1: left allmulticast mode [ 230.379164][T10441] team0: No ports can be present during mode change [ 230.410928][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 231.860791][T10489] fuse: fd is not a fuse device [ 232.036378][T10500] fuse: fd is not a fuse device [ 232.784246][T10513] dummy0: left promiscuous mode [ 232.791344][T10513] ptrace attach of "/syz-executor exec"[8485] was attempted by "/syz-executor exec"[10513] [ 232.792244][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 232.796580][T10519] netlink: 'syz.5.1539': attribute type 13 has an invalid length. [ 232.851387][T10522] syz.6.1540 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 232.862868][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 233.424934][T10563] fuse: fd is not a fuse device [ 234.566110][T10605] netlink: 'syz.1.1557': attribute type 1 has an invalid length. [ 234.611351][T10605] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 234.617631][T10605] bond11 (unregistering): Released all slaves [ 234.655191][T10609] bridge5: entered promiscuous mode [ 234.659789][T10609] bond10: (slave bridge5): making interface the new active one [ 234.662800][T10609] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 234.809280][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'. [ 235.635430][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 236.089185][T10650] mmap: syz.5.1572 (10650) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 236.510312][T10653] fuse: fd is not a fuse device [ 237.182557][T10675] netlink: 'syz.5.1583': attribute type 1 has an invalid length. [ 237.202540][T10675] 8021q: adding VLAN 0 to HW filter on device bond9 [ 237.222076][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1583'. [ 237.233762][T10675] bond9: entered promiscuous mode [ 237.235624][T10675] bond9: entered allmulticast mode [ 237.245871][T10675] bond6: (slave dummy0): Releasing active interface [ 237.258096][T10675] bond9: (slave dummy0): making interface the new active one [ 237.260678][T10675] dummy0: entered promiscuous mode [ 237.262475][T10675] dummy0: entered allmulticast mode [ 237.264821][T10675] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 237.320481][T10680] team0: No ports can be present during mode change [ 237.611237][T10692] bridge0: left promiscuous mode [ 237.618943][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.621821][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.648141][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.752196][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.770188][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.787610][T10692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.797996][T10692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.813993][T10692] virt_wifi0: left promiscuous mode [ 237.826634][T10692] veth1_macvtap: left promiscuous mode [ 237.832886][T10692] veth0_macvtap: left promiscuous mode [ 237.837591][T10692] veth0_macvtap: entered promiscuous mode [ 237.842525][T10692] veth1_macvtap: entered promiscuous mode [ 237.854761][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.859770][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.865225][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.871628][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.875862][T10692] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 237.915225][T10692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.920595][T10692] bond2: left promiscuous mode [ 237.933823][T10692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.939546][T10692] virt_wifi0: entered promiscuous mode [ 237.941477][T10692] macsec1: left promiscuous mode [ 237.946929][T10692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.954809][T10692] bridge0: entered promiscuous mode [ 237.957501][T10692] macsec2: left promiscuous mode [ 237.962044][T10692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.965029][T10692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.979215][T10692] bridge1: left promiscuous mode [ 237.982379][T10692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.988803][T10692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.992560][T10692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 237.995626][T10692] bridge3: left promiscuous mode [ 237.998271][T10692] bond9: left promiscuous mode [ 237.999825][T10692] dummy0: left promiscuous mode [ 238.001701][T10692] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.021035][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.024108][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.038080][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.040829][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.064217][ T8442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.085042][T10702] netlink: 'syz.6.1589': attribute type 1 has an invalid length. [ 238.089425][ T8442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.207196][T10705] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.216130][T10705] bond8: (slave bond9): making interface the new active one [ 238.218955][T10705] bond8: (slave bond9): Enslaving as an active interface with an up link [ 238.227268][T10708] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 238.288016][T10708] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.290588][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1589'. [ 238.294215][T10705] bond8: entered promiscuous mode [ 238.295911][T10705] bond9: entered promiscuous mode [ 238.303713][T10705] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.328215][T10710] bond9: (slave ip6gretap1): making interface the new active one [ 238.348807][T10710] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 238.369958][T10712] fuse: Bad value for 'fd' [ 238.376975][T10708] batman_adv: batadv0: Removing interface: dummy0 [ 238.381707][T10708] bond0: (slave batadv0): Releasing backup interface [ 238.387369][T10708] bond7: (slave veth0_to_bond): Releasing active interface [ 238.391297][T10708] team0: Port device xfrm0 removed [ 238.393192][T10708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.409292][ T5800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.416996][ T5800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.419590][ T6889] libceph: connect (1)[c::]:6789 error -99 [ 238.422306][ T6889] libceph: mon0 (1)[c::]:6789 connect error [ 238.561922][T10714] ceph: No mds server is up or the cluster is laggy [ 238.876247][T10735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.642085][T10741] fuse: fd is not a fuse device [ 240.562629][T10763] netlink: 'syz.6.1610': attribute type 1 has an invalid length. [ 240.576950][T10763] 8021q: adding VLAN 0 to HW filter on device bond10 [ 240.652003][T10766] gretap2: entered promiscuous mode [ 240.741593][T10771] netlink: 'syz.5.1612': attribute type 1 has an invalid length. [ 240.767292][T10771] 8021q: adding VLAN 0 to HW filter on device bond11 [ 240.771191][T10771] bond10: (slave bond11): making interface the new active one [ 240.775022][T10771] bond10: (slave bond11): Enslaving as an active interface with an up link [ 240.793657][T10771] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 240.838299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.842014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.845707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.849372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.253650][T10778] netlink: 'syz.6.1615': attribute type 13 has an invalid length. [ 241.669676][T10784] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.250630][T10797] futex_wake_op: syz.6.1621 tries to shift op by 32; fix this program [ 242.946459][T10811] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 242.947020][T10810] IPVS: stopping backup sync thread 10811 ... [ 244.772981][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 244.772993][ T42] audit: type=1326 audit(1785973579.664:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.5.1636" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf70aefec code=0x0 [ 244.838439][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.842259][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.845976][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.849921][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.853760][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.021007][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'. [ 245.165144][T10853] netlink: 'syz.2.1640': attribute type 4 has an invalid length. [ 245.168797][T10853] netlink: 'syz.2.1640': attribute type 4 has an invalid length. [ 245.784847][T10876] fuse: fd is not a fuse device [ 245.941125][T10884] dummy0: left promiscuous mode [ 245.948162][T10884] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 245.951204][T10884] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 245.956139][T10884] ip6gre1: left promiscuous mode [ 245.958537][T10884] ip6gre1: left allmulticast mode [ 245.961144][T10884] bond3: left promiscuous mode [ 245.963203][T10884] bridge2: left promiscuous mode [ 245.967002][T10884] bond8: left promiscuous mode [ 245.970107][T10884] bridge4: left promiscuous mode [ 245.972441][T10884] bond8: left allmulticast mode [ 245.974533][T10884] bridge4: left allmulticast mode [ 246.404288][T10887] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1655'. [ 246.902610][T10908] syzkaller0: Caught tx_queue_len zero misconfig [ 246.995383][T10906] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.023474][T10912] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 247.029335][T10912] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 247.038204][T10912] syzkaller0: left promiscuous mode [ 247.040022][T10912] syzkaller0: left allmulticast mode [ 247.041950][T10912] bond3: left promiscuous mode [ 247.043578][T10912] bond3: left allmulticast mode [ 247.049132][T10912] bond8: left promiscuous mode [ 247.050695][T10912] bond9: left promiscuous mode [ 247.063188][T10912] gretap2: left promiscuous mode [ 248.215212][T10929] fuse: Bad value for 'fd' [ 248.305287][T10936] lo: Caught tx_queue_len zero misconfig [ 249.945850][T10961] fuse: fd is not a fuse device [ 249.949571][T10961] fuse: fd is not a fuse device [ 250.001315][T10966] CIFS: Attempting to mount //::1/share [ 250.005541][T10966] CIFS: VFS: Error connecting to socket. Aborting operation. [ 250.008017][T10966] CIFS: VFS: cifs_mount failed w/return code = -99 [ 250.019779][T10969] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 250.036119][T10969] 8021q: adding VLAN 0 to HW filter on device bond10 [ 250.046827][T10969] bond10: (slave dummy0): making interface the new active one [ 250.050739][T10969] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 250.632947][T10978] VFS: file-max limit 0 reached [ 251.022768][T10999] fuse: fd is not a fuse device [ 251.098567][ T42] audit: type=1326 audit(1785973585.994:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.5.1699" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 251.318140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.321197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.323927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.326749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.329661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.813809][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 251.829853][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 251.871407][T11031] overlayfs: failed to clone upperpath [ 251.874973][T11031] overlayfs: failed to clone upperpath [ 252.095330][T11040] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 252.107928][T11040] 8021q: adding VLAN 0 to HW filter on device bond11 [ 252.131202][T11040] bond11: (slave bridge6): making interface the new active one [ 252.135257][T11040] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 252.232794][T11045] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1714'. [ 252.239489][T11045] bond10: (slave dummy0): Releasing active interface [ 252.920689][T11066] netlink: 'syz.5.1721': attribute type 1 has an invalid length. [ 253.009084][T11076] fuse: fd is not a fuse device [ 253.022935][T11066] 8021q: adding VLAN 0 to HW filter on device bond13 [ 253.031646][T11066] bond12: (slave bond13): making interface the new active one [ 253.040653][T11066] bond12: (slave bond13): Enslaving as an active interface with an up link [ 253.068145][T11080] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 253.087310][T11080] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.094134][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1721'. [ 253.098720][T11066] bond12: entered promiscuous mode [ 253.101097][T11066] bond13: entered promiscuous mode [ 253.104749][T11066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 253.115647][T11080] bond11: (slave ip6gretap1): making interface the new active one [ 253.119620][T11080] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.172586][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 253.176939][T11083] netlink: 'syz.5.1724': attribute type 30 has an invalid length. [ 253.229116][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 253.232954][T11084] netlink: 'syz.5.1724': attribute type 30 has an invalid length. [ 253.784165][T11080] bond6: (slave gretap0): Releasing backup interface [ 253.789484][T11080] syz_tun: left promiscuous mode [ 253.791454][T11080] bridge0: port 1(syz_tun) entered disabled state [ 253.797369][T11080] bond7: (slave dummy0): Releasing backup interface [ 253.807047][T11080] dummy0: left promiscuous mode [ 253.810183][T11080] dummy0: left allmulticast mode [ 253.816545][T11080] bond0: (slave batadv0): Releasing backup interface [ 253.821164][T11080] team0: Port device xfrm0 removed [ 253.823065][T11080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.880920][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 253.890412][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.893653][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.896832][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.900300][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.931129][T11098] 9p: Bad value for 'wfdno' [ 253.988887][T11094] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 253.994173][T11094] syz.1.1727 (11094) used greatest stack depth: 19104 bytes left [ 254.418609][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.421116][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.451497][T11118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.456252][T11118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.487812][T11118] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 254.545878][T11118] bond9: left allmulticast mode [ 254.547499][T11118] dummy0: left allmulticast mode [ 254.556158][T11118] bond12: left promiscuous mode [ 254.557809][T11118] bond13: left promiscuous mode [ 254.588105][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.594106][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.600277][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.606184][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.610477][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.616609][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.622833][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.627913][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.232771][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.872509][T11150] netlink: 'syz.6.1748': attribute type 1 has an invalid length. [ 255.884073][T11150] 8021q: adding VLAN 0 to HW filter on device bond11 [ 255.921897][T11150] bond11: (slave dummy0): making interface the new active one [ 255.925352][T11150] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 256.166009][T11158] team0: entered allmulticast mode [ 257.798573][T11186] tipc: Started in network mode [ 257.800220][T11186] tipc: Node identity 86486640ead5, cluster identity 4711 [ 257.808097][T11186] tipc: Enabled bearer , priority 0 [ 258.035645][T11184] IPVS: length: 4096 != 8 [ 258.707265][ T5844] IPVS: starting estimator thread 0... [ 258.807946][T11212] IPVS: using max 43 ests per chain, 103200 per kthread [ 258.817998][ T5844] tipc: Node number set to 1822254656 [ 259.116105][T11226] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1773'. [ 259.730606][T11244] netlink: 'syz.5.1777': attribute type 1 has an invalid length. [ 259.756232][T11244] 8021q: adding VLAN 0 to HW filter on device bond14 [ 259.789388][T11244] bond14: (slave bridge5): making interface the new active one [ 259.797367][T11244] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 259.827894][T11249] fuse: fd is not a fuse device [ 259.893713][T11255] netlink: 'syz.5.1779': attribute type 1 has an invalid length. [ 259.921993][T11255] 8021q: adding VLAN 0 to HW filter on device bond15 [ 259.992742][T11255] bond15: (slave ip6gretap1): making interface the new active one [ 259.998907][T11255] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.021550][T11255] bond9: (slave dummy0): Releasing active interface [ 260.027720][T11255] bond0: (slave batadv0): Releasing backup interface [ 260.033047][T11255] bridge_slave_0: left allmulticast mode [ 260.034946][T11255] bridge_slave_0: left promiscuous mode [ 260.036933][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.044287][T11255] bridge_slave_1: left allmulticast mode [ 260.047973][T11255] bridge_slave_1: left promiscuous mode [ 260.050045][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.055829][T11255] bond1: (slave veth0_to_bond): Releasing active interface [ 260.060497][T11255] bond0: (slave bond_slave_0): Releasing backup interface [ 260.065365][T11255] bond0: (slave bond_slave_1): Releasing backup interface [ 260.077352][T11255] team0: Port device team_slave_0 removed [ 260.083291][T11255] team0: Port device team_slave_1 removed [ 260.086033][T11255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.095217][T11255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.104930][T11255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.223138][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1783'. [ 260.232261][T11262] hsr_slave_0: left promiscuous mode [ 260.240180][T11262] hsr_slave_1: left promiscuous mode [ 260.436867][T11265] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1784'. [ 260.444000][T11265] bond11: (slave dummy0): Releasing active interface [ 261.429340][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'. [ 262.327499][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.384732][T11328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.392654][T11328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.542106][T11388] can: request_module (can-proto-3) failed. [ 267.600479][T11393] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1829'. [ 267.928170][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 267.931214][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 268.356327][T11417] IPVS: length: 4096 != 8 [ 268.629016][T11432] netlink: 'syz.2.1841': attribute type 29 has an invalid length. [ 268.654967][T11432] netlink: 'syz.2.1841': attribute type 29 has an invalid length. [ 268.663370][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 268.732350][T11432] macsec0: entered promiscuous mode [ 268.732618][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1842'. [ 268.734352][T11432] dummy0: entered promiscuous mode [ 268.740232][T11432] macsec0: entered allmulticast mode [ 268.742548][T11432] dummy0: entered allmulticast mode [ 268.783235][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1842'. [ 269.104479][T11457] fuse: fd is not a fuse device [ 269.194620][T11461] ip6gre2: entered allmulticast mode [ 269.197563][ T5800] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 269.505785][T11469] tipc: Enabling of bearer rejected, already enabled [ 270.021872][T11489] bridge6: entered promiscuous mode [ 270.024198][T11489] bridge6: entered allmulticast mode [ 270.029738][T11489] team0: Port device bridge6 added [ 270.035783][T11489] bridge0: port 1(team0) entered blocking state [ 270.042443][T11489] bridge0: port 1(team0) entered disabled state [ 270.046286][T11489] team0: entered allmulticast mode [ 270.053179][T11489] team0: entered promiscuous mode [ 270.083157][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.087254][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.093742][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.124739][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.136058][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.142635][T11490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.146069][T11490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.156593][T11490] veth1_macvtap: left promiscuous mode [ 270.160657][T11490] veth0_macvtap: left promiscuous mode [ 270.161315][T11495] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1862'. [ 270.163215][T11490] veth0_macvtap: entered promiscuous mode [ 270.170588][T11490] veth1_macvtap: entered promiscuous mode [ 270.176471][T11490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.180254][T11490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.183609][T11490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 270.186763][T11490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.190156][T11497] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 270.193731][T11497] overlayfs: failed to clone lowerpath [ 270.197663][T11490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.202818][T11490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.205609][T11490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.209573][T11490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.213037][T11490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.217347][T11490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.230987][T11490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.239224][T11490] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.242070][T11490] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.246112][T11490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.252619][T11490] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 270.259189][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.262092][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.266212][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.268546][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.269432][ T10] IPVS: starting estimator thread 0... [ 270.308165][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.312065][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.315955][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.320327][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.368410][T11501] IPVS: using max 43 ests per chain, 103200 per kthread [ 270.894312][T11516] netlink: 'syz.5.1871': attribute type 1 has an invalid length. [ 270.916866][T11516] 8021q: adding VLAN 0 to HW filter on device bond16 [ 270.967160][T11516] bond16: (slave veth9): Enslaving as an active interface with a down link [ 270.974437][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1871'. [ 270.979143][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1871'. [ 271.074332][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'. [ 271.522594][T11557] bond17: entered promiscuous mode [ 271.524281][T11557] bond17: entered allmulticast mode [ 271.702409][ T42] audit: type=1326 audit(1785973606.594:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.713834][ T42] audit: type=1326 audit(1785973606.604:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.723060][ T42] audit: type=1326 audit(1785973606.604:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.732739][ T42] audit: type=1326 audit(1785973606.604:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.741959][ T42] audit: type=1326 audit(1785973606.604:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.752005][ T42] audit: type=1326 audit(1785973606.604:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.761238][ T42] audit: type=1326 audit(1785973606.604:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.775725][ T42] audit: type=1326 audit(1785973606.604:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.798350][ T42] audit: type=1326 audit(1785973606.604:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 271.808350][ T42] audit: type=1326 audit(1785973606.604:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.1.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 272.644792][T11591] IPVS: length: 4096 != 8 [ 273.348379][T11611] __nla_validate_parse: 3 callbacks suppressed [ 273.348398][T11611] netlink: 420 bytes leftover after parsing attributes in process `syz.6.1901'. [ 273.558220][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 273.742598][T11623] fuse: fd is not a fuse device [ 274.200950][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 274.221157][T11640] hsr_slave_0: left promiscuous mode [ 274.234550][T11640] hsr_slave_1: left promiscuous mode [ 275.590538][T11693] IPVS: length: 4096 != 8 [ 276.033466][T11708] tipc: Enabling of bearer rejected, already enabled [ 276.314701][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.318084][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.326584][T11721] nfs: Unknown parameter 'loc' [ 276.461010][T11728] fuse: fd is not a fuse device [ 277.094756][T11744] SET target dimension over the limit! [ 277.105292][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 277.109665][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 277.802816][ T5102] Bluetooth: hci1: command 0x2016 tx timeout [ 278.011091][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1948'. [ 278.447989][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 278.784230][ T42] kauditd_printk_skb: 1496 callbacks suppressed [ 278.784248][ T42] audit: type=1326 audit(1785973613.674:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.805146][ T42] audit: type=1326 audit(1785973613.674:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.828105][ T42] audit: type=1326 audit(1785973613.674:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.845932][ T42] audit: type=1326 audit(1785973613.674:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.854960][ T42] audit: type=1326 audit(1785973613.674:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.863875][ T42] audit: type=1326 audit(1785973613.674:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.872919][ T42] audit: type=1326 audit(1785973613.674:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.882050][ T42] audit: type=1326 audit(1785973613.674:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.891225][ T42] audit: type=1326 audit(1785973613.674:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 278.900139][ T42] audit: type=1326 audit(1785973613.674:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.1.1958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 279.588875][T11788] IPVS: length: 4096 != 8 [ 279.800971][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1966'. [ 280.801138][T11843] IPVS: length: 4096 != 8 [ 281.391232][T11870] overlayfs: failed to clone upperpath [ 282.593158][T11913] fuse: fd is not a fuse device [ 282.748238][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 282.774673][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 282.797329][T11903] IPVS: length: 4096 != 8 [ 282.843060][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 283.374236][T11959] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 283.475230][T11959] 8021q: adding VLAN 0 to HW filter on device bond13 [ 283.482405][T11959] bond12: (slave bond13): making interface the new active one [ 283.488371][T11959] bond12: (slave bond13): Enslaving as an active interface with an up link [ 283.649333][T11971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.254961][T11986] IPVS: length: 4096 != 8 [ 284.372193][T11997] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 284.557683][T12006] lo: Caught tx_queue_len zero misconfig [ 285.379112][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 286.075236][T12032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.110127][T12032] team0: Mode changed to "activebackup" [ 286.187415][T12029] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 286.193404][T12029] Error validating options; rc = [-22] [ 286.627017][T12036] ip6gre2: left allmulticast mode [ 286.639046][T12036] bond17: left promiscuous mode [ 286.641021][T12036] bond17: left allmulticast mode [ 286.777068][T12038] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.808330][ T5102] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 287.398048][T11679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.401891][T11679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.407991][T11679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.418633][T11679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.881274][ T5102] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 287.924478][T12066] netlink: 'syz.5.2051': attribute type 1 has an invalid length. [ 287.947306][T12066] bond18: entered promiscuous mode [ 287.950649][T12066] 8021q: adding VLAN 0 to HW filter on device bond18 [ 287.970850][T12066] bond18: (slave bridge7): making interface the new active one [ 287.973410][T12066] bridge7: entered promiscuous mode [ 287.975929][T12066] bond18: (slave bridge7): Enslaving as an active interface with an up link [ 288.027979][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 288.062481][T12077] netlink: 'syz.5.2054': attribute type 1 has an invalid length. [ 288.089199][T12077] 8021q: adding VLAN 0 to HW filter on device bond19 [ 288.107233][T12077] bond19: entered allmulticast mode [ 288.686913][T12092] IPVS: length: 4096 != 8 [ 288.711331][ T42] kauditd_printk_skb: 1534 callbacks suppressed [ 288.711344][ T42] audit: type=1326 audit(1785973623.604:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.730256][ T42] audit: type=1326 audit(1785973623.604:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.753411][ T42] audit: type=1326 audit(1785973623.614:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.772334][ T42] audit: type=1326 audit(1785973623.614:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.782005][ T42] audit: type=1326 audit(1785973623.614:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.791425][ T42] audit: type=1326 audit(1785973623.614:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.800744][ T42] audit: type=1326 audit(1785973623.624:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.809937][ T42] audit: type=1326 audit(1785973623.624:8801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.819252][ T42] audit: type=1326 audit(1785973623.624:8802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 288.828508][ T42] audit: type=1326 audit(1785973623.624:8803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.1.2062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 289.574721][T12117] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2068'. [ 289.585666][T12117] unsupported nlmsg_type 40 [ 289.638934][T12122] netlink: 'syz.5.2070': attribute type 1 has an invalid length. [ 289.652498][T12122] 8021q: adding VLAN 0 to HW filter on device bond20 [ 289.693859][T12122] bond20: (slave gretap2): making interface the new active one [ 289.706732][T12122] bond20: (slave gretap2): Enslaving as an active interface with an up link [ 289.962708][T12134] capability: warning: `syz.1.2073' uses 32-bit capabilities (legacy support in use) [ 290.614010][T12162] tipc: Enabled bearer , priority 0 [ 290.838822][T12176] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 290.851076][T12175] IPVS: stopping backup sync thread 12176 ... [ 291.343518][T12195] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 291.361670][T12195] 8021q: adding VLAN 0 to HW filter on device bond12 [ 291.506555][T12204] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 291.620596][T12208] netlink: 'syz.1.2103': attribute type 13 has an invalid length. [ 291.949609][ T5746] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 291.956582][ T5746] Bluetooth: hci1: Injecting HCI hardware error event [ 291.961991][ T5746] Bluetooth: hci1: hardware error 0x00 [ 291.980227][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 292.067953][ T5102] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 292.072195][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2110'. [ 292.072338][ T5102] Bluetooth: hci3: unexpected event for opcode 0x203e [ 292.149305][T12232] ip6tnl1: entered allmulticast mode [ 292.636832][T12240] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 292.650829][T12240] 8021q: adding VLAN 0 to HW filter on device bond14 [ 292.674247][T12240] 8021q: adding VLAN 0 to HW filter on device bond14 [ 292.688532][T12240] bond14: (slave ipip1): The slave device specified does not support setting the MAC address [ 292.697538][T12240] bond14: (slave ipip1): Error -95 calling set_mac_address [ 294.033710][ T5746] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 295.112765][T12278] netlink: 'syz.1.2126': attribute type 62 has an invalid length. [ 295.189951][T12280] fuse: fd is not a fuse device [ 296.107970][ T5746] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 296.112503][ T5746] Bluetooth: hci3: Injecting HCI hardware error event [ 296.120877][ T5746] Bluetooth: hci3: hardware error 0x00 [ 297.258569][T12324] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2140'. [ 297.493620][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2142'. [ 297.728683][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 297.739225][ T42] kauditd_printk_skb: 3534 callbacks suppressed [ 297.739239][ T42] audit: type=1326 audit(1785973632.624:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.2145" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 298.066476][T12346] openvswitch: netlink: Message has 8 unknown bytes. [ 298.198069][ T5746] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 298.452516][T12353] fuse: fd is not a fuse device [ 298.583195][T12358] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2154'. [ 299.787162][T12373] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 299.808528][T12373] nfs4: Unknown parameter '\:' [ 301.107621][T12424] team0: left allmulticast mode [ 301.109927][T12424] team0: left promiscuous mode [ 301.112546][T12424] bridge0: port 1(team0) entered disabled state [ 301.123350][T12424] bond1: (slave veth5): Releasing active interface [ 301.126325][T12424] bond1: (slave veth5): the permanent HWaddr of slave - 16:5f:10:33:22:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 301.133743][T12424] batadv1: entered promiscuous mode [ 301.138961][T12424] bond1: (slave batadv1): Releasing active interface [ 301.141529][T12424] batadv1: left promiscuous mode [ 301.145920][T12424] veth7: left allmulticast mode [ 301.148826][T12424] veth7: left promiscuous mode [ 301.151214][T12424] bridge2: port 1(veth7) entered disabled state [ 301.177176][T12424] veth9: left allmulticast mode [ 301.181020][T12424] veth9: left promiscuous mode [ 301.183498][T12424] bridge2: port 2(veth9) entered disabled state [ 301.198754][T12424] bond3: (slave bond4): Releasing backup interface [ 301.202307][T12424] bond3: (slave bond4): the permanent HWaddr of slave - d2:73:49:21:70:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 301.209940][T12424] bond3: (slave gretap1): making interface the new active one [ 301.221706][T12424] bond3: (slave gretap1): Releasing backup interface [ 301.231320][T12424] bond5: (slave bridge3): Releasing backup interface [ 301.243949][T12424] bond8: (slave bridge4): Releasing backup interface [ 301.258933][T12424] bond10: (slave bridge5): Releasing backup interface [ 301.271854][T12424] bond11: (slave ip6gretap1): Releasing active interface [ 301.300619][T12424] team0: Port device bridge6 removed [ 301.840283][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2174'. [ 302.101786][ T42] audit: type=1326 audit(1785973636.994:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.111526][ T42] audit: type=1326 audit(1785973636.994:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.122614][ T42] audit: type=1326 audit(1785973636.994:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.138670][ T42] audit: type=1326 audit(1785973636.994:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.150417][ T42] audit: type=1326 audit(1785973636.994:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.160025][ T42] audit: type=1326 audit(1785973636.994:12344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.169554][ T42] audit: type=1326 audit(1785973636.994:12345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.179387][ T42] audit: type=1326 audit(1785973636.994:12346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 302.186412][ T42] audit: type=1326 audit(1785973636.994:12347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.5.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 303.186273][T12505] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 303.205657][T12505] 8021q: adding VLAN 0 to HW filter on device bond15 [ 303.224034][T12505] bond15: (slave gretap2): making interface the new active one [ 303.227156][T12505] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 303.543814][T12519] netlink: 'syz.5.2195': attribute type 1 has an invalid length. [ 303.561351][T12519] 8021q: adding VLAN 0 to HW filter on device bond21 [ 304.335091][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2202'. [ 305.250801][T12575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.259111][T12575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.264796][T12575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.120763][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2216'. [ 306.990385][T12622] IPVS: Error connecting to the multicast addr [ 306.995142][T12621] netlink: 420 bytes leftover after parsing attributes in process `syz.5.2226'. [ 307.071265][T12625] tipc: Enabling of bearer rejected, already enabled [ 307.080609][T12626] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 307.085078][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 307.131067][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 307.131078][ T42] audit: type=1326 audit(1785973642.024:12349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.151963][ T42] audit: type=1326 audit(1785973642.024:12350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.168123][ T42] audit: type=1326 audit(1785973642.024:12351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.174899][ T42] audit: type=1326 audit(1785973642.024:12352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.182485][ T42] audit: type=1326 audit(1785973642.024:12353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.191460][ T42] audit: type=1326 audit(1785973642.034:12355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.198459][ T42] audit: type=1326 audit(1785973642.034:12356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.205312][ T42] audit: type=1326 audit(1785973642.034:12354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.212844][ T42] audit: type=1326 audit(1785973642.034:12357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 307.221554][ T42] audit: type=1326 audit(1785973642.034:12358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.5.2229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 309.423695][T12684] tipc: Enabling of bearer rejected, already enabled [ 310.263494][T12704] tipc: Enabling of bearer rejected, already enabled [ 310.839390][T12717] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2259'. [ 310.851949][T12717] bond0 (unregistering): Released all slaves [ 311.129295][T12728] gretap3: entered allmulticast mode [ 311.133626][T12728] team0: Port device gretap3 added [ 311.376046][T12746] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 312.466828][T12773] jffs2: notice: (12773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 312.573403][T12778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2280'. [ 312.939805][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2284'. [ 313.232486][T12792] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.256652][ T55] IPVS: starting estimator thread 0... [ 313.271172][T12796] libceph: resolve ' [ 313.271172][T12796] -&fYǝa2i [ 313.271172][T12796] .?&*&' (ret=-3): failed [ 313.347933][T12799] IPVS: using max 43 ests per chain, 103200 per kthread [ 313.806984][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 313.826222][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 313.835142][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 313.846240][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 313.955543][T12811] tipc: Enabling of bearer rejected, already enabled [ 314.526880][T12784] Set syz1 is full, maxelem 65536 reached [ 314.811192][T12836] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2298'. [ 314.872019][T12838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.875238][T12838] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.878104][T12838] tipc: Resetting bearer [ 314.884191][T12838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.917350][T12838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.921788][T12838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.931273][T12838] veth1_macvtap: left promiscuous mode [ 314.935045][T12838] veth0_macvtap: left promiscuous mode [ 314.938965][T12838] veth0_macvtap: entered promiscuous mode [ 314.942782][T12838] veth1_macvtap: entered promiscuous mode [ 314.949487][T12838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.953486][T12838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.960978][T12838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.964934][T12838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.985728][T12838] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 315.029650][ T8442] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.035462][ T8442] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.041144][ T8442] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.044947][ T8442] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.655417][T12849] tipc: Enabling of bearer rejected, already enabled [ 315.664547][T12849] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 315.797103][T12862] bond12: entered promiscuous mode [ 315.799204][T12862] 8021q: adding VLAN 0 to HW filter on device bond12 [ 315.896539][T12858] 8021q: adding VLAN 0 to HW filter on device bond12 [ 315.901241][T12858] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 315.906472][T12858] bond12: (slave ip6gre1): Error -95 calling set_mac_address [ 316.062352][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 316.316094][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2311'. [ 316.669379][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.253971][T12897] bond2: entered allmulticast mode [ 317.281200][T12899] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 317.438809][T12897] bond2: left allmulticast mode [ 317.504356][ T5746] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 318.655917][T12927] bond18: left promiscuous mode [ 318.658283][T12927] bridge7: left promiscuous mode [ 318.676339][T12927] bond19: left allmulticast mode [ 318.714120][T12927] gretap3: left allmulticast mode [ 318.911137][T12942] fuse: fd is not a fuse device [ 318.940410][T12945] CIFS: Attempting to mount //127.0.0.1/share [ 319.802002][T12945] CIFS: VFS: Error connecting to socket. Aborting operation. [ 319.804638][T12945] CIFS: VFS: cifs_mount failed w/return code = -4 [ 320.356020][T12991] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2351'. [ 320.772109][T13005] tipc: Enabling of bearer rejected, already enabled [ 321.488646][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2363'. [ 321.744302][T13038] team0: Mode changed to "loadbalance" [ 322.771193][T11689] syz_tun (unregistering): left allmulticast mode [ 323.127558][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.130937][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.141782][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.147704][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.156795][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.446798][T13075] overlayfs: failed to clone upperpath [ 323.887284][T13093] tipc: Enabling of bearer rejected, already enabled [ 324.112384][T13062] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.115494][T13062] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.120768][T13062] bridge_slave_0: entered allmulticast mode [ 324.124807][T13062] bridge_slave_0: entered promiscuous mode [ 324.130569][T13062] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.133676][T13062] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.136780][T13062] bridge_slave_1: entered allmulticast mode [ 324.141381][T13062] bridge_slave_1: entered promiscuous mode [ 324.169046][T13062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.175794][T13062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.203381][T13062] team0: Port device team_slave_0 added [ 324.208517][T13062] team0: Port device team_slave_1 added [ 324.232378][T13062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.235292][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.245827][T13062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.251996][T13062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.254883][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.265023][T13062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.302987][T13062] hsr_slave_0: entered promiscuous mode [ 324.305319][T13062] hsr_slave_1: entered promiscuous mode [ 324.417450][T13062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 324.422286][T13062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.425293][T13062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 324.429771][T13062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.432725][T13062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 324.437271][T13062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.440253][T13062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.444905][T13062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.468703][T13062] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.471085][T13062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.473533][T13062] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.475835][T13062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.514900][T13062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.526576][ T223] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.530185][ T223] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.541898][T13062] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.552056][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.555047][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.562077][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.564936][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.834214][T13062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.055308][T13143] CIFS mount error: No usable UNC path provided in device string! [ 325.055308][T13143] [ 325.059968][T13143] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 325.106887][T13062] veth0_vlan: entered promiscuous mode [ 325.128309][T13062] veth1_vlan: entered promiscuous mode [ 325.157404][T13062] veth0_macvtap: entered promiscuous mode [ 325.168624][T13062] veth1_macvtap: entered promiscuous mode [ 325.202687][T13062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.213820][T13062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.228031][ T5102] Bluetooth: hci3: command tx timeout [ 325.259855][ T8442] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.300367][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.327948][ T8442] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.352044][ T8627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.357576][ T8627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.410434][ T8626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.417563][ T8626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.448401][ T8442] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.602282][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2395'. [ 326.159215][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.172430][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.182108][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.194818][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.922775][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2412'. [ 326.937508][T13200] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 326.993657][T13200] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.071424][T13200] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.202238][T13200] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.328106][T11679] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 327.332074][T11679] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 327.339146][T11679] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 327.344212][T11679] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 327.431672][T13211] netlink: 'syz.7.2416': attribute type 1 has an invalid length. [ 327.446451][T13211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.450291][T13211] team0: Port device bond1 added [ 327.456097][T13216] 9p: Bad value for 'wfdno' [ 327.461018][T13216] fuse: fd is not a fuse device [ 327.504885][T13211] team0: Port device gretap1 added [ 327.582616][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 327.582627][ T42] audit: type=1326 audit(1785973662.474:12378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.597146][ T42] audit: type=1326 audit(1785973662.484:12379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.621128][ T42] audit: type=1326 audit(1785973662.484:12380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.647971][ T42] audit: type=1326 audit(1785973662.484:12381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.660131][ T42] audit: type=1326 audit(1785973662.484:12382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.674146][ T42] audit: type=1326 audit(1785973662.484:12383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.684847][ T42] audit: type=1326 audit(1785973662.484:12384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.695097][ T42] audit: type=1326 audit(1785973662.484:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.715794][ T42] audit: type=1326 audit(1785973662.484:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 327.725259][ T42] audit: type=1326 audit(1785973662.484:12387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.5.2420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 328.256502][T13247] lo speed is unknown, defaulting to 1000 [ 328.260210][T13247] lo speed is unknown, defaulting to 1000 [ 328.263861][T13247] lo speed is unknown, defaulting to 1000 [ 328.267122][T13247] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 328.276086][T13247] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 328.283155][T13247] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 328.293529][T13247] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 328.360174][T13247] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 328.434269][T13254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.467355][T13247] lo speed is unknown, defaulting to 1000 [ 328.481472][T13247] lo speed is unknown, defaulting to 1000 [ 328.486930][T13247] lo speed is unknown, defaulting to 1000 [ 328.497436][T13247] lo speed is unknown, defaulting to 1000 [ 328.501710][T13247] lo speed is unknown, defaulting to 1000 [ 328.521710][T13247] lo speed is unknown, defaulting to 1000 [ 328.582438][T13262] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 328.728030][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 328.731713][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 328.750533][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 328.761652][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 329.307914][ T5102] Bluetooth: hci3: command tx timeout [ 330.479884][T13303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.048289][T13315] Cannot find add_set index 0 as target [ 331.104331][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2450'. [ 331.116205][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2450'. [ 331.398077][ T5102] Bluetooth: hci3: command tx timeout [ 331.448453][T13321] fuse: fd is not a fuse device [ 331.612872][T13323] overlayfs: failed to clone lowerpath [ 331.719170][T13328] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 331.758065][ T5831] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.761107][ T5831] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.764836][ T5831] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.767897][ T5831] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.710230][T13364] netlink: 'syz.5.2468': attribute type 8 has an invalid length. [ 333.885466][T13370] bridge0: left promiscuous mode [ 333.900368][T13373] team0: No ports can be present during mode change [ 334.099255][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2473'. [ 335.321553][T13408] team0: No ports can be present during mode change [ 335.352318][T13411] tipc: Enabling of bearer rejected, already enabled [ 335.444451][T13419] overlayfs: failed to clone lowerpath [ 335.494844][T13418] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2487'. [ 335.845363][T13434] ffs_data_put(): freeing [ 336.271406][T13443] sctp: [Deprecated]: syz.7.2495 (pid 13443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.271406][T13443] Use struct sctp_sack_info instead [ 336.280642][T13443] sctp: [Deprecated]: syz.7.2495 (pid 13443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.280642][T13443] Use struct sctp_sack_info instead [ 336.806397][T13463] fuse: fd is not a fuse device [ 337.039828][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2504'. [ 337.728090][T13495] netlink: 'syz.2.2514': attribute type 1 has an invalid length. [ 337.740070][T13495] 8021q: adding VLAN 0 to HW filter on device bond15 [ 337.769160][T13495] bond15: (slave gretap2): making interface the new active one [ 337.773904][T13495] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 337.971291][T13499] VFS: file-max limit 0 reached [ 338.006968][T13501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.010775][T13501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 338.469424][T13518] syzkaller0: entered promiscuous mode [ 338.474928][T13518] syzkaller0: entered allmulticast mode [ 338.642005][T13523] tipc: Enabling of bearer rejected, already enabled [ 339.229883][ T5102] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 339.233661][ T5102] Bluetooth: hci2: Injecting HCI hardware error event [ 339.237316][ T5102] Bluetooth: hci2: hardware error 0x00 [ 339.721618][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 339.721630][ T42] audit: type=1326 audit(1785973673.615:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 339.731745][ T42] audit: type=1326 audit(1785973673.625:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 339.739037][ T42] audit: type=1326 audit(1785973673.625:12393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 339.746658][ T42] audit: type=1326 audit(1785973673.625:12394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 339.755171][ T42] audit: type=1326 audit(1785973673.635:12395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71774eb code=0x7ffc0000 [ 339.759207][T13547] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 339.768909][ T42] audit: type=1326 audit(1785973673.665:12396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 339.802786][ T42] audit: type=1326 audit(1785973673.675:12397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 339.812797][ T42] audit: type=1326 audit(1785973673.695:12398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.7.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 339.819900][ T42] audit: type=1326 audit(1785973673.695:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.7.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 339.826969][ T42] audit: type=1326 audit(1785973673.695:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.7.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 341.044540][ T5746] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 341.047962][ T5746] Bluetooth: hci2: unexpected event for opcode 0x203e [ 341.113317][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2541'. [ 341.235232][T13582] netlink: 'syz.2.2546': attribute type 10 has an invalid length. [ 341.249217][T13582] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.254401][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 341.278220][T13582] bond0: (slave bridge0): Releasing backup interface [ 341.387927][ T5102] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 341.715607][T13596] bond3: (slave veth5): Releasing active interface [ 341.721939][T13596] bond4: (slave bridge1): Releasing backup interface [ 341.733639][T13596] bond7: (slave bridge3): Releasing backup interface [ 341.752717][T13596] bond10: (slave bond11): Releasing backup interface [ 341.755652][T13596] bond10: (slave bond11): the permanent HWaddr of slave - d6:16:6c:95:4e:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 341.762759][T13596] bond10: (slave gretap1): making interface the new active one [ 341.777150][T13596] bond10: (slave gretap1): Releasing backup interface [ 341.791419][T13596] bond12: (slave bond13): Releasing backup interface [ 341.798565][T13596] bond14: (slave bridge5): Releasing active interface [ 341.804364][T13596] bond15: (slave ip6gretap1): Releasing active interface [ 341.812201][T13596] bond16: (slave veth9): Releasing active interface [ 341.821886][T13596] bond18: (slave bridge7): Releasing backup interface [ 341.825988][T13596] bond20: (slave gretap2): Releasing active interface [ 341.832645][T13596] team0: Port device gretap3 removed [ 342.010733][T13609] overlay: Unknown parameter '/' [ 342.013852][T13609] overlayfs: failed to clone lowerpath [ 343.130571][T13629] lo speed is unknown, defaulting to 1000 [ 343.195840][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2561'. [ 343.261385][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'. [ 343.456781][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2567'. [ 343.462411][T13643] netlink: 'syz.2.2569': attribute type 13 has an invalid length. [ 343.482321][T13643] tipc: Resetting bearer [ 343.484697][T13643] tipc: Resetting bearer [ 343.697798][T13656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.928439][T13666] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2575'. [ 343.997729][T13672] pim6reg: entered allmulticast mode [ 344.005629][T13672] pim6reg: left allmulticast mode [ 344.198093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 344.490014][T13683] fuse: fd is not a fuse device [ 344.592172][T13687] tipc: Resetting bearer [ 344.602035][T13687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.722388][T13694] ip6tnl1: entered allmulticast mode [ 345.268086][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 345.268103][ T42] audit: type=1804 audit(1785973679.155:12414): pid=13704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2587" name="/newroot/37/file1/file0" dev="9p" ino=76573375 res=1 errno=0 [ 345.318243][T13705] overlayfs: failed to clone lowerpath [ 345.321062][T13705] overlayfs: failed to clone lowerpath [ 346.826888][T13726] dvmrp0: entered allmulticast mode [ 347.227946][ T6684] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 347.389592][ T6684] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.397889][ T6684] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 347.405425][ T6684] usb 12-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 347.408861][ T6684] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.418142][ T6684] spcp8x5 12-1:1.0: SPCP8x5 converter detected [ 347.438892][ T6684] usb 12-1: SPCP8x5 converter now attached to ttyUSB0 [ 347.792951][T13754] ptrace attach of "/syz-executor exec"[5742] was attempted by " [ 347.798834][T13736] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 347.848480][T13736] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 347.852453][T13736] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 347.895314][T13736] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 348.010195][T10242] usb 12-1: USB disconnect, device number 2 [ 348.169611][T10242] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 348.182228][T10242] spcp8x5 12-1:1.0: device disconnected [ 348.195379][T13771] Cannot find add_set index 2 as target [ 348.272976][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2617'. [ 348.507482][T13781] netlink: 'syz.6.2619': attribute type 1 has an invalid length. [ 348.756843][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2622'. [ 348.765318][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2622'. [ 349.102583][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2624'. [ 349.549767][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2627'. [ 349.641212][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.363271][T13816] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 350.373230][T13816] nfs4: Unknown parameter '\:' [ 352.814973][T13833] syz.2.2635 (13833) used greatest stack depth: 18176 bytes left [ 352.879136][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 353.031480][T13861] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 353.084731][T13863] xt_connbytes: Forcing CT accounting to be enabled [ 353.087267][T13863] xt_SECMARK: invalid mode: 0 [ 353.159330][T13869] lo speed is unknown, defaulting to 1000 [ 354.829318][T13895] lo speed is unknown, defaulting to 1000 [ 355.185220][T13900] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 355.190738][T13900] veth1_macvtap: Caught tx_queue_len zero misconfig [ 355.221028][T13869] Set syz1 is full, maxelem 65536 reached [ 355.388321][ T5102] Bluetooth: hci3: unexpected subevent 0x10 length: 30 > 2 [ 356.317487][T13924] VFS: file-max limit 0 reached [ 356.420086][T13933] netlink: 'syz.6.2667': attribute type 10 has an invalid length. [ 356.427239][T13933] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2667'. [ 356.432836][T13933] fuse: fd is not a fuse device [ 357.348070][T13946] tipc: Enabling of bearer rejected, already enabled [ 357.399960][T13950] netlink: 'syz.2.2672': attribute type 11 has an invalid length. [ 357.421311][T13950] lo speed is unknown, defaulting to 1000 [ 357.888475][T13960] pim6reg99999999: entered allmulticast mode [ 358.596829][T13987] tipc: Enabling of bearer rejected, already enabled [ 358.786840][T13999] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.2687'. [ 358.790325][T13999] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 359.277029][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2691'. [ 359.304361][T14014] 8021q: adding VLAN 0 to HW filter on device bond23 [ 359.407263][T14014] bond23: (slave ip6gretap0): Enslaving as an active interface with an up link [ 359.416749][T14018] bond23: entered promiscuous mode [ 359.418556][T14018] ip6gretap0: entered promiscuous mode [ 359.425793][T14018] bond23: entered allmulticast mode [ 359.427542][T14018] ip6gretap0: entered allmulticast mode [ 359.704801][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2694'. [ 359.707986][T14029] bridge_slave_1: left allmulticast mode [ 359.709798][T14029] bridge_slave_1: left promiscuous mode [ 359.711731][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.715791][T14029] bridge_slave_0: left allmulticast mode [ 359.720746][T14029] bridge_slave_0: left promiscuous mode [ 359.724114][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.998842][ T5837] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 360.147921][ T5837] usb 12-1: Using ep0 maxpacket: 16 [ 360.152791][ T5837] usb 12-1: unable to get BOS descriptor or descriptor too short [ 360.158370][ T5837] usb 12-1: config 4 has an invalid interface number: 55 but max is 0 [ 360.161643][ T5837] usb 12-1: config 4 has no interface number 0 [ 360.164071][ T5837] usb 12-1: config 4 interface 55 has no altsetting 0 [ 360.172191][ T5837] usb 12-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 360.176003][ T5837] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.180020][ T5837] usb 12-1: Product: syz [ 360.183011][ T5837] usb 12-1: Manufacturer: syz [ 360.185042][ T5837] usb 12-1: SerialNumber: syz [ 360.364759][T14044] gretap4: entered promiscuous mode [ 360.367093][T14044] batman_adv: batadv0: Adding interface: gretap4 [ 360.369347][T14044] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.377123][T14044] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 360.417760][T14045] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 360.440180][T14033] lo speed is unknown, defaulting to 1000 [ 360.553785][ T5837] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 360.556052][ T5837] gspca_mr97310a: reg write [21] error -22 [ 360.560931][ T5837] mr97310a 12-1:4.55: probe with driver mr97310a failed with error -22 [ 360.570710][ T5837] usb 12-1: USB disconnect, device number 3 [ 361.193249][ T42] audit: type=1326 audit(1785973695.085:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.203135][ T42] audit: type=1326 audit(1785973695.085:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.223973][ T42] audit: type=1326 audit(1785973695.085:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.233579][ T42] audit: type=1326 audit(1785973695.085:12418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.242858][ T42] audit: type=1326 audit(1785973695.085:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.252442][ T42] audit: type=1326 audit(1785973695.085:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.261521][ T42] audit: type=1326 audit(1785973695.085:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.270957][ T42] audit: type=1326 audit(1785973695.085:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 361.279639][ T42] audit: type=1326 audit(1785973695.085:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e74eb code=0x7ffc0000 [ 361.288704][ T42] audit: type=1326 audit(1785973695.085:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.5.2708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 362.228030][T14087] smpboot: CPU 1 is now offline [ 362.288224][T14090] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 362.303849][T14084] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.307393][ T19] ------------[ cut here ]------------ [ 362.309035][T14084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.309489][ T19] [ 362.309494][ T19] ====================================================== [ 362.309509][ T19] WARNING: possible circular locking dependency detected [ 362.309516][ T19] syzkaller #0 Tainted: G L [ 362.309522][ T19] ------------------------------------------------------ [ 362.309526][ T19] migration/0/19 is trying to acquire lock: [ 362.309531][ T19] ffffffff8eaf3f60 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 362.309642][ T19] [ 362.309642][ T19] but task is already holding lock: [ 362.309645][ T19] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 362.309668][ T19] [ 362.309668][ T19] which lock already depends on the new lock. [ 362.309668][ T19] [ 362.309672][ T19] [ 362.309672][ T19] the existing dependency chain (in reverse order) is: [ 362.309675][ T19] [ 362.309675][ T19] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 362.309688][ T19] lock_acquire+0x1b9/0x370 [ 362.309704][ T19] _raw_spin_lock_nested+0x31/0x40 [ 362.309765][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 362.309775][ T19] _task_rq_lock+0xcf/0x500 [ 362.309786][ T19] cgroup_move_task+0x81/0x320 [ 362.309800][ T19] css_set_move_task+0x285/0x600 [ 362.309811][ T19] cgroup_post_fork+0x1f9/0x9a0 [ 362.309826][ T19] copy_process+0x6b7a/0x8030 [ 362.309841][ T19] kernel_clone+0x176/0x9d0 [ 362.309853][ T19] user_mode_thread+0xcc/0x110 [ 362.309866][ T19] rest_init+0x21/0x260 [ 362.309874][ T19] start_kernel+0x48e/0x490 [ 362.309938][ T19] x86_64_start_reservations+0x24/0x30 [ 362.309954][ T19] x86_64_start_kernel+0x12b/0x130 [ 362.309970][ T19] common_startup_64+0x13e/0x158 [ 362.309998][ T19] [ 362.309998][ T19] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 362.310011][ T19] lock_acquire+0x1b9/0x370 [ 362.310026][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.310037][ T19] try_to_wake_up+0xbd/0x1c90 [ 362.310047][ T19] __wake_up_common+0x135/0x1f0 [ 362.310062][ T19] __wake_up+0x31/0x60 [ 362.310075][ T19] tty_port_default_wakeup+0x47/0x60 [ 362.310132][ T19] serial8250_tx_chars+0x68f/0x860 [ 362.310155][ T19] serial8250_handle_irq_locked+0x770/0x9a0 [ 362.310170][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 362.310186][ T19] serial8250_default_handle_irq+0xc2/0x280 [ 362.310203][ T19] serial8250_interrupt+0xf8/0x1b0 [ 362.310213][ T19] __handle_irq_event_percpu+0x232/0x880 [ 362.310226][ T19] handle_irq_event+0xab/0x1e0 [ 362.310237][ T19] handle_edge_irq+0x34c/0x950 [ 362.310249][ T19] __common_interrupt+0xd8/0x2f0 [ 362.310260][ T19] common_interrupt+0xb9/0xe0 [ 362.310269][ T19] asm_common_interrupt+0x26/0x40 [ 362.310286][ T19] pv_native_safe_halt+0xf/0x20 [ 362.310298][ T19] default_idle+0x9/0x10 [ 362.310312][ T19] default_idle_call+0x6c/0xb0 [ 362.310327][ T19] do_idle+0x3a7/0x5b0 [ 362.310337][ T19] cpu_startup_entry+0x4f/0x60 [ 362.310348][ T19] start_secondary+0x21d/0x2d0 [ 362.310364][ T19] common_startup_64+0x13e/0x158 [ 362.310378][ T19] [ 362.310378][ T19] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 362.310392][ T19] lock_acquire+0x1b9/0x370 [ 362.310407][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.310418][ T19] __wake_up+0x1c/0x60 [ 362.310430][ T19] tty_port_default_wakeup+0x47/0x60 [ 362.310446][ T19] serial8250_tx_chars+0x68f/0x860 [ 362.310461][ T19] __start_tx+0x3e4/0x490 [ 362.310475][ T19] serial8250_start_tx+0x368/0x540 [ 362.310490][ T19] __uart_start+0x295/0x510 [ 362.310502][ T19] uart_write+0x211/0xb20 [ 362.310515][ T19] n_tty_write+0x431/0x1160 [ 362.310526][ T19] file_tty_write.isra.0+0x4d2/0x890 [ 362.310547][ T19] redirected_tty_write+0xd4/0x120 [ 362.310567][ T19] vfs_write+0x6ac/0x1050 [ 362.310595][ T19] ksys_write+0x12a/0x250 [ 362.310608][ T19] do_syscall_64+0x115/0x840 [ 362.310627][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.310642][ T19] [ 362.310642][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 362.310663][ T19] lock_acquire+0x1b9/0x370 [ 362.310686][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.310702][ T19] serial8250_console_write+0x177/0x1a50 [ 362.310717][ T19] console_flush_one_record+0x790/0xe50 [ 362.310736][ T19] console_unlock+0x103/0x260 [ 362.310753][ T19] vprintk_emit+0x407/0x6b0 [ 362.310770][ T19] _printk+0xcf/0x110 [ 362.310782][ T19] register_console.cold+0xc0/0x248 [ 362.310797][ T19] univ8250_console_init+0x6f/0x80 [ 362.310833][ T19] console_init+0x3d5/0x5b0 [ 362.310849][ T19] start_kernel+0x314/0x490 [ 362.310868][ T19] x86_64_start_reservations+0x24/0x30 [ 362.310889][ T19] x86_64_start_kernel+0x12b/0x130 [ 362.310909][ T19] common_startup_64+0x13e/0x158 [ 362.310929][ T19] [ 362.310929][ T19] -> #0 (console_owner){..-.}-{0:0}: [ 362.310948][ T19] check_prev_add+0xeb/0xe60 [ 362.310969][ T19] __lock_acquire+0x136c/0x1a40 [ 362.310991][ T19] lock_acquire+0x1b9/0x370 [ 362.311011][ T19] console_lock_spinning_enable+0x72/0x80 [ 362.311027][ T19] console_flush_one_record+0x739/0xe50 [ 362.311044][ T19] console_unlock+0x103/0x260 [ 362.311061][ T19] vprintk_emit+0x407/0x6b0 [ 362.311077][ T19] _printk+0xcf/0x110 [ 362.311089][ T19] __report_bug.cold+0x34/0x141 [ 362.311120][ T19] report_bug+0xb2/0x220 [ 362.311139][ T19] handle_bug+0x16a/0x2a0 [ 362.311159][ T19] exc_invalid_op+0x17/0x50 [ 362.311180][ T19] asm_exc_invalid_op+0x1a/0x20 [ 362.311194][ T19] update_rq_clock+0x40a/0xd20 [ 362.311209][ T19] __schedule+0x1e2d/0x6730 [ 362.311224][ T19] schedule+0xdd/0x2c0 [ 362.311239][ T19] smpboot_thread_fn+0x893/0xaa0 [ 362.311257][ T19] kthread+0x370/0x450 [ 362.311275][ T19] ret_from_fork+0x72b/0xd50 [ 362.311292][ T19] ret_from_fork_asm+0x1a/0x30 [ 362.311311][ T19] [ 362.311311][ T19] other info that might help us debug this: [ 362.311311][ T19] [ 362.311315][ T19] Chain exists of: [ 362.311315][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 362.311315][ T19] [ 362.311337][ T19] Possible unsafe locking scenario: [ 362.311337][ T19] [ 362.311341][ T19] CPU0 CPU1 [ 362.311345][ T19] ---- ---- [ 362.311348][ T19] lock(&rq->__lock); [ 362.311363][ T19] lock(&p->pi_lock); [ 362.311373][ T19] lock(&rq->__lock); [ 362.311383][ T19] lock(console_owner); [ 362.311392][ T19] [ 362.311392][ T19] *** DEADLOCK *** [ 362.311392][ T19] [ 362.311395][ T19] 3 locks held by migration/0/19: [ 362.311404][ T19] #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 362.311439][ T19] #1: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 362.311472][ T19] #2: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 362.311509][ T19] [ 362.311509][ T19] stack backtrace: [ 362.311519][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.311541][ T19] Tainted: [L]=SOFTLOCKUP [ 362.311546][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.311555][ T19] Stopper: 0x0 <- 0x0 [ 362.311569][ T19] Call Trace: [ 362.311591][ T19] [ 362.311596][ T19] dump_stack_lvl+0x100/0x190 [ 362.311613][ T19] print_circular_bug.cold+0x178/0x1c7 [ 362.311638][ T19] check_noncircular+0x146/0x160 [ 362.311663][ T19] check_prev_add+0xeb/0xe60 [ 362.311687][ T19] __lock_acquire+0x136c/0x1a40 [ 362.311713][ T19] lock_acquire+0x1b9/0x370 [ 362.311736][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 362.311754][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 362.311774][ T19] console_lock_spinning_enable+0x72/0x80 [ 362.311792][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 362.311809][ T19] console_flush_one_record+0x739/0xe50 [ 362.311829][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 362.311851][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 362.311872][ T19] console_unlock+0x103/0x260 [ 362.311889][ T19] ? __pfx_console_unlock+0x10/0x10 [ 362.311908][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 362.311926][ T19] ? _printk+0xcf/0x110 [ 362.311939][ T19] vprintk_emit+0x407/0x6b0 [ 362.311958][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 362.311978][ T19] ? __lock_acquire+0x49f/0x1a40 [ 362.312002][ T19] _printk+0xcf/0x110 [ 362.312016][ T19] ? __pfx__printk+0x10/0x10 [ 362.312033][ T19] ? __report_bug.cold+0x24/0x141 [ 362.312048][ T19] ? __report_bug+0x2ab/0x440 [ 362.312067][ T19] __report_bug.cold+0x34/0x141 [ 362.312082][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.312099][ T19] ? __pfx___report_bug+0x10/0x10 [ 362.312118][ T19] ? clockevents_program_event+0x1bf/0x820 [ 362.312138][ T19] ? pick_eevdf+0x229/0x860 [ 362.312158][ T19] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 362.312173][ T19] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 362.312191][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.312207][ T19] report_bug+0xb2/0x220 [ 362.312226][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.312242][ T19] handle_bug+0x16a/0x2a0 [ 362.312264][ T19] exc_invalid_op+0x17/0x50 [ 362.312286][ T19] asm_exc_invalid_op+0x1a/0x20 [ 362.312302][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 362.312321][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 ff e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 362.312337][ T19] RSP: 0000:ffffc9000045fc28 EFLAGS: 00010046 [ 362.312349][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 362.312365][ T19] RDX: 0000000000000046 RSI: ffffffff8e183c7e RDI: ffffffff8c400a80 [ 362.312375][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 362.312385][ T19] R10: ffff888025629007 R11: 000000545b325c00 R12: ffffffff9122e384 [ 362.312396][ T19] R13: ffff88802b33c4e0 R14: ffff888014350000 R15: ffff88802b23c198 [ 362.312412][ T19] ? update_rq_clock+0x9c/0xd20 [ 362.312431][ T19] __schedule+0x1e2d/0x6730 [ 362.312454][ T19] ? __pfx___schedule+0x10/0x10 [ 362.312471][ T19] ? find_held_lock+0x2b/0x80 [ 362.312489][ T19] ? schedule+0x225/0x2c0 [ 362.312508][ T19] schedule+0xdd/0x2c0 [ 362.312524][ T19] smpboot_thread_fn+0x893/0xaa0 [ 362.312544][ T19] ? kthread+0x13a/0x450 [ 362.312562][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 362.312580][ T19] kthread+0x370/0x450 [ 362.312599][ T19] ? __pfx_kthread+0x10/0x10 [ 362.312619][ T19] ret_from_fork+0x72b/0xd50 [ 362.312637][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 362.312683][ T19] ? __switch_to+0x800/0x10f0 [ 362.312707][ T19] ? __pfx_kthread+0x10/0x10 [ 362.312726][ T19] ret_from_fork_asm+0x1a/0x30 [ 362.312751][ T19] [ 362.314987][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 362.314999][ T19] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 362.315029][ T19] Modules linked in: [ 362.740918][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.745094][ T19] Tainted: [L]=SOFTLOCKUP [ 362.746797][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.750673][ T19] Stopper: 0x0 <- 0x0 [ 362.752290][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 362.754542][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 ff e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 362.761658][ T19] RSP: 0000:ffffc9000045fc28 EFLAGS: 00010046 [ 362.764095][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 362.767215][ T19] RDX: 0000000000000046 RSI: ffffffff8e183c7e RDI: ffffffff8c400a80 [ 362.770326][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 362.773451][ T19] R10: ffff888025629007 R11: 000000545b325c00 R12: ffffffff9122e384 [ 362.776610][ T19] R13: ffff88802b33c4e0 R14: ffff888014350000 R15: ffff88802b23c198 [ 362.779732][ T19] FS: 0000000000000000(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 362.783224][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.785864][ T19] CR2: 000000002d716ff8 CR3: 00000000720f5000 CR4: 0000000000352ef0 [ 362.789031][ T19] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.792171][ T19] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 362.795311][ T19] Call Trace: [ 362.796659][ T19] [ 362.797864][ T19] __schedule+0x1e2d/0x6730 [ 362.799681][ T19] ? __pfx___schedule+0x10/0x10 [ 362.801624][ T19] ? find_held_lock+0x2b/0x80 [ 362.803503][ T19] ? schedule+0x225/0x2c0 [ 362.805258][ T19] schedule+0xdd/0x2c0 [ 362.806888][ T19] smpboot_thread_fn+0x893/0xaa0 [ 362.808875][ T19] ? kthread+0x13a/0x450 [ 362.810562][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 362.812728][ T19] kthread+0x370/0x450 [ 362.814371][ T19] ? __pfx_kthread+0x10/0x10 [ 362.816230][ T19] ret_from_fork+0x72b/0xd50 [ 362.818082][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 362.820107][ T19] ? __switch_to+0x800/0x10f0 [ 362.821990][ T19] ? __pfx_kthread+0x10/0x10 [ 362.823847][ T19] ret_from_fork_asm+0x1a/0x30 [ 362.825756][ T19] [ 362.827001][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 362.829852][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.834076][ T19] Tainted: [L]=SOFTLOCKUP [ 362.835789][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.839725][ T19] Stopper: 0x0 <- 0x0 [ 362.841331][ T19] Call Trace: [ 362.842671][ T19] [ 362.843883][ T19] dump_stack_lvl+0x100/0x190 [ 362.845759][ T19] vpanic+0x552/0x970 [ 362.847350][ T19] ? __pfx_vpanic+0x10/0x10 [ 362.849187][ T19] ? lock_release+0x24d/0x310 [ 362.851073][ T19] panic+0xd1/0xe0 [ 362.852588][ T19] ? __pfx_panic+0x10/0x10 [ 362.854411][ T19] ? check_panic_on_warn+0x1f/0x90 [ 362.856475][ T19] check_panic_on_warn.cold+0x19/0x34 [ 362.858625][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.860610][ T19] __warn.cold+0x191/0x318 [ 362.862414][ T19] __report_bug+0x30f/0x440 [ 362.864260][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.866251][ T19] ? __pfx___report_bug+0x10/0x10 [ 362.868265][ T19] ? clockevents_program_event+0x1bf/0x820 [ 362.870597][ T19] ? pick_eevdf+0x229/0x860 [ 362.872426][ T19] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 362.874618][ T19] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 362.876789][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.878543][ T19] report_bug+0xb2/0x220 [ 362.880071][ T19] ? update_rq_clock+0x40a/0xd20 [ 362.882117][ T19] handle_bug+0x16a/0x2a0 [ 362.883903][ T19] exc_invalid_op+0x17/0x50 [ 362.885736][ T19] asm_exc_invalid_op+0x1a/0x20 [ 362.887687][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 362.889897][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 ff e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 362.897443][ T19] RSP: 0000:ffffc9000045fc28 EFLAGS: 00010046 [ 362.899721][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 362.902568][ T19] RDX: 0000000000000046 RSI: ffffffff8e183c7e RDI: ffffffff8c400a80 [ 362.905699][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 362.908836][ T19] R10: ffff888025629007 R11: 000000545b325c00 R12: ffffffff9122e384 [ 362.911958][ T19] R13: ffff88802b33c4e0 R14: ffff888014350000 R15: ffff88802b23c198 [ 362.915111][ T19] ? update_rq_clock+0x9c/0xd20 [ 362.916669][ T19] __schedule+0x1e2d/0x6730 [ 362.918464][ T19] ? __pfx___schedule+0x10/0x10 [ 362.920414][ T19] ? find_held_lock+0x2b/0x80 [ 362.922322][ T19] ? schedule+0x225/0x2c0 [ 362.924053][ T19] schedule+0xdd/0x2c0 [ 362.925704][ T19] smpboot_thread_fn+0x893/0xaa0 [ 362.927692][ T19] ? kthread+0x13a/0x450 [ 362.929423][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 362.931200][ T19] kthread+0x370/0x450 [ 362.932833][ T19] ? __pfx_kthread+0x10/0x10 [ 362.934739][ T19] ret_from_fork+0x72b/0xd50 [ 362.936612][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 362.938671][ T19] ? __switch_to+0x800/0x10f0 [ 362.940555][ T19] ? __pfx_kthread+0x10/0x10 [ 362.942417][ T19] ret_from_fork_asm+0x1a/0x30 [ 362.944381][ T19] [ 364.036077][ T19] Shutting down cpus with NMI [ 364.038833][ T19] Kernel Offset: disabled [ 364.040661][ T19] Rebooting in 86400 seconds..