last executing test programs: 17m3.352084033s ago: executing program 2 (id=10): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 17m1.8009187s ago: executing program 2 (id=12): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000400000000000000ff01000085200000354701008520000001000200"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6f8, 0x48a21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x203}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) fchown(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r5, 0x1, 0x5}, 0x50) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, &(0x7f00000000c0)) 17m0.150850371s ago: executing program 2 (id=14): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257, 0x0, r15}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) 16m55.48443924s ago: executing program 2 (id=21): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 16m52.263893764s ago: executing program 2 (id=24): openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x4880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x3) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fsmount(r3, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) 16m44.640816775s ago: executing program 2 (id=34): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 16m29.357309868s ago: executing program 32 (id=34): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 14m55.483499542s ago: executing program 4 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r6, &(0x7f0000000300)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000200)}, &(0x7f0000000380)=0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m53.699267691s ago: executing program 4 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xaa3a6000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 14m52.351236241s ago: executing program 4 (id=212): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="2e000000010000", 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r6, &(0x7f00000005c0)=""/147, 0x93) getdents(r6, &(0x7f0000000080)=""/194, 0xc2) r7 = fsopen(&(0x7f0000000080)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000b40)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>\xbcc\x84\xfe\xb3hOB\xdc4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8bZ\xec\x16\x9e[\xfe\x0f\x15\x81\x9cWC\xd2\x1f\xf0\xf2M24\xc3\x14B\xa7\x05\xd6(/&{\x9fl\x90\xbcM\xa4d\xa5\x8c\xcej\x1czTj\xa1G\xc1\xc4P\x88\"\xb5\xda6d\x04+\xd9\x0fw*FB\xa7\x8d\xfb\x15\rw\xf6c\x8a\xc2\xbeZ\xb2\xe8q\xde\xbe^\x91\x81\x16\x95b\xbad\x90.\x10\xc5e\xa7\xac\x9dQfTi\xdfB\x9b\xc7\x9c\xd7yN2\x83.F\x866\xc6/\xf8d<\x0eA\xf8s\x8b\xc5\x1b\xb9\f\x82', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0x0) setresuid(0x0, 0x0, 0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 14m31.122094006s ago: executing program 33 (id=226): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0x0) setresuid(0x0, 0x0, 0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 11m49.138958727s ago: executing program 1 (id=477): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 11m48.708055268s ago: executing program 1 (id=480): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff0700000038c8f867f0cd6c00000000000000850000002e00000095000000000000002e8515b51384dd8bc6c8b43ba0224a2503dac218836efdec37f8ba8eb0ffd424b2ed3ccf608e50fd42ed4b3da5c841e16fa40ee525f1a7bff8471c4dcd9f928050c63adc31cd0ffdd6a4ef7a3aefd382ba29"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[], 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) 11m39.915934952s ago: executing program 1 (id=490): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 11m39.314613405s ago: executing program 1 (id=492): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x165840, 0x2) mknod$loop(0x0, 0x0, 0x1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 11m37.282941742s ago: executing program 1 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d05, 0x0) 11m35.933261609s ago: executing program 1 (id=497): openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x4880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fsmount(r4, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) 11m20.635789158s ago: executing program 34 (id=497): openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x4880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fsmount(r4, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) 16.406522701s ago: executing program 3 (id=1627): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x0, 0x4}) r1 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x800000000000000, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r2}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x80000) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000680), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a1400000011000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4002) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x28b, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000340)={0x3, r6, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000001880)={0x3, r6, 0xfff, 0x3ff, 0x9, 0x944}) 13.096127385s ago: executing program 3 (id=1632): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) listen(r1, 0xfffffffd) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4000805, 0x0, 0x0) r2 = epoll_create(0x7f) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3e, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) 12.796513902s ago: executing program 3 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) process_vm_writev(r1, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/107, 0x6b}], 0x1, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000a00)=""/40, 0x28}, {0x0}], 0x3, 0x0) 9.680077792s ago: executing program 0 (id=1637): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f91100000003000000000372"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x2, 0x8}}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r2, 0x38, 0x0) 9.678619013s ago: executing program 3 (id=1639): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_procfs(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd285774fb2275964, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000300)={0x0, 0x0, "c48da758f1293e3c8bcc2cf345c0089765339f565a0ee1a4a6cce6d4277cd320", 0x800, 0x6, 0x4, 0x401, 0x80000000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000e9fffffeffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffefff0000000001000601000000004400050000001100000000000000000000000001000000003c0000000200000000000000000000000000000000000001060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) epoll_pwait(r1, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000001280)={[0x3]}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.659935194s ago: executing program 5 (id=1640): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000000000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf09000000000000550901"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.469347211s ago: executing program 8 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000d00), 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x22222', 0x24) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 8.445166957s ago: executing program 0 (id=1642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000200)) 8.389844443s ago: executing program 5 (id=1643): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x143302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000a40)=@md0, r3, &(0x7f0000000700)) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r4, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) syz_clone(0xa028000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x2, &(0x7f0000000040)) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) 8.200903457s ago: executing program 0 (id=1644): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r3 = dup3(r2, r1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) 8.199108875s ago: executing program 8 (id=1645): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf09"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.511989337s ago: executing program 8 (id=1646): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x92\x06\xd1\xb4p=\xd1\x14\x8d\xa4\xf1\x93\xd18\xd2,n!\xe4\x05\xffT\xd4\x1d.\b\xc4L\x11qU\xc1Ayw\xb4z\xedY9\x96\xa9\x9a\xfd\xd9\t\xe4{$||^\xc7\xbd\xa2\xd2Ot\x95\xd0Us\xb0o\xa4c\x1d\xb0\x14\x80\x87\xc1~\xfb\xcb\x0e\xf5.3\xb0\xb9A\xdc\x1cs\xb5j\x952\xce\xa3iUOW\xda', &(0x7f0000000200)='%\xff\xfbi\x03\x1cp\n\xd3\x1f\x84f\x97\x06\xc8\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xca\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92\x06nr\xa7%\xa9\xd2[\x13\xaf:C1Ch\xc5\x03\xcb\xe6\xf4\xa05\xa0\xf9\x96\xa64\x0e\xb7|\xf3\x9cc\x96\xdaS-\x18\x9d\xb8\x9a\x8a\xc7/{dQ\xceeY\x9a\x9f\xe0B\x1b[*\xd3\xa7\x8d*\x98\xc9\xa4\x16\xcc\xf8/%\x911[\x10\xcb\x84\xd7\x96\x8c\xea\x99g4\n\xa5x\x1c\x9dExzK\xdbh\xfd\xe5\xfa\xca\'\x1b+\xd9G\x9cO\xa6\x82\xca\x11w#Pa\xad\x83\x94\x95t\xd5&\xb2\xa3\xc6E\x1c4<\xea\x12\x12u\b\xe5\xcb\xc7\xa8\xd1\x8e>\x95B\x1b \xf8\vsg\xa9\x91r\x0f\xa1\x8c\xf2x\xc2p\\\x86c\xf3\x1f\x98e\x04\xcdhT\xc5\x83o:\x902F\xdc\x82\xb9&\xaa\\\x82\xb3M\xe5\xf1\x03_\x00>\xbc\xf9b\xf2\xdc1\xea\x19\xb1\x9b\v\t\xea\x1ez\xdd\xf1\xf0\x86j\xb1K\xb8&\xf9\xee3\xe7\xe3\xe3CRy`\x8b\x8cG\xf6\x0em^\xb0\xcb\xa2\xb3\b\xbd\x9cW<\x81\xd0\x8fT\x19L*}\xf3\xbb\xd6X\xec\xa7c\xf5\\\xf6\x82\xcaZ*j\x9dNF\xcc\x86\a=`\x86\x8bd\xc6\xc1\xd2\xcb\xda<\x85\x92Z\x8f\xe1O\xfe\x8b\xeb\xec^\xfb\f\xab\xbe\xd0\xec4\xf1^B?\x92\x85j\x91\xdaM\xdd\x81{}\xe5\xdb\xc0\x03\x919j\x13^(\x11J\xa2aYU:\xfc\"\x90)\x90B', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r2, &(0x7f0000001300), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x2, 0xffff8000, {0x57, 0x40, 0x6, {0x0, 0x9}, {0x8000, 0x5}, @rumble={0x6, 0x6}}, {0x51, 0x1, 0x0, {0xf, 0x9}, {0x6}, @cond=[{0x0, 0x6, 0xe, 0x80, 0xffff}, {0x1c00, 0x6, 0x7ff, 0x0, 0x3, 0x1ff}]}}) 6.364628042s ago: executing program 3 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 6.315350509s ago: executing program 5 (id=1648): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000002500)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done={0x40086310, 0xfcff}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) ioprio_set$pid(0x2, 0x0, 0x1000) sendfile(r4, r5, 0x0, 0x201f00) socket$unix(0x1, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r6 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.972462888s ago: executing program 0 (id=1649): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x0, 0x4}) r1 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x800000000000000, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r2}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0xf) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28b, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000001880)={0x3, r5, 0xfff, 0x3ff, 0x9, 0x944}) 5.86835401s ago: executing program 8 (id=1650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) process_vm_writev(r0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/107, 0x6b}], 0x1, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000a00)=""/40, 0x28}, {0x0}], 0x3, 0x0) 4.45367019s ago: executing program 5 (id=1651): openat$sysctl(0xffffffffffffff9c, &(0x7f0000009ac0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0x30, 0x4048080}}], 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x407, {0x0, 0x0, 0x0, 0x4}}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x5, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x3, 0x1, 0x40000, 0xff, 0x2, 0x5, 0x2, 0xfffffffb, 0x0, 0x10, 0x140, 0x5, 0xfffffff8, 0x4, 0xe, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x4, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x7], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x40009, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x14f8, 0x9, 0x9, 0x3, 0x35, 0x8001, 0x9, 0x4, 0x0, 0x0, 0x101, 0xa2fc, 0x3, 0x412, 0x1, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x3, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0xd, 0xa0c2, 0x1001, 0x8, 0x1, 0x8, 0x7fff, 0x4, 0x5, 0x3, 0x7f, 0x1, 0xd, 0x7, 0x8001, 0x3, 0x9, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x7, 0x7, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd5, 0x1, 0x7fff], [0x3, 0x9, 0x3, 0x3, 0x81, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0x0, 0x401, 0x3, 0xb, 0x4, 0x8, 0xf, 0x1, 0xffffdff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) 3.784918569s ago: executing program 8 (id=1652): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f91100000003000000000372"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x2, 0x8}}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r2, 0x38, 0x0) 2.898204934s ago: executing program 5 (id=1653): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x0, 0x4}) r1 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x800000000000000, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r2}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x28b, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000340)={0x3, r6, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000001880)={0x3, r6, 0xfff, 0x3ff, 0x9, 0x944}) 300.710128ms ago: executing program 0 (id=1654): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000200)) 292.283063ms ago: executing program 8 (id=1655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 290.926019ms ago: executing program 3 (id=1656): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 289.892078ms ago: executing program 5 (id=1657): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000100)="8ad0c5ffff000000000000a45111bc456083736a5d9cc6a41199656e6914da897d41b4d8fec549687f38d2fa4a", 0x2d}], 0x1}}], 0x2, 0x20000010) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/28, 0x1c}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001780)=""/171, 0xab}], 0x5}}], 0x3, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_ethernet(0x9f, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x69, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x0, "a200ffffff"}]}}}}}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffe, 0x0, 0xc, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)}, 0xd2c7}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pselect6(0x40, &(0x7f0000000080)={0xdb43, 0xe, 0x6, 0x3, 0x2040, 0xfffffffffffffff9, 0x2, 0x9}, &(0x7f00000000c0)={0x9, 0xffffffff, 0x2, 0x0, 0x42e, 0x9, 0x9, 0xda}, &(0x7f0000000140)={0x99, 0x1ff, 0x8, 0x58a, 0x9, 0x80, 0x7, 0x6}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x2]}, 0x8}) 0s ago: executing program 0 (id=1658): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000030900008100000001040400", @ANYRES32, @ANYBLOB="0000080000000000000000000000000000000000aa83bfba102ecba342a3902d06e45887bf7173807dc6412de727f0272a804a1ae56b0f747a7ce9813cd64c0290ab4f179a90c01daec45ee1eb44a8b3ca243eeafffc808b632ecfea", @ANYRES32=0x0, @ANYRES32], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040006}, 0x20040004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r6, &(0x7f0000006300)={0x2020}, 0x2020) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x8a00e0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) kernel console output (not intermixed with test programs): 806] bridge_slave_1: entered promiscuous mode [ 713.121181][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.143609][T11131] kAFS: unable to lookup cell '(,c¾Ì' [ 713.200348][ T5749] usb 1-1: USB disconnect, device number 7 [ 714.045883][T10806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.077872][T10806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.971324][T11145] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 715.174591][T11145] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 715.962893][T10806] team0: Port device team_slave_0 added [ 716.047912][T10806] team0: Port device team_slave_1 added [ 717.498959][T11171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.656022][T10806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.671477][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.759039][T10806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.330321][ T31] audit: type=1800 audit(1785997793.741:12): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.926" name="file0" dev="overlay" ino=1466 res=0 errno=0 [ 718.361879][T11186] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 718.369972][T11186] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 720.416038][T10806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.461829][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.527743][T10806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.999912][ T145] bridge_slave_1: left allmulticast mode [ 722.301512][ T145] bridge_slave_1: left promiscuous mode [ 723.198241][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.446661][ T145] bridge_slave_0: left allmulticast mode [ 723.479687][ T145] bridge_slave_0: left promiscuous mode [ 724.236359][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.616214][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.640343][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.759426][ T145] bond0 (unregistering): Released all slaves [ 725.391865][T10806] hsr_slave_0: entered promiscuous mode [ 725.430009][T10806] hsr_slave_1: entered promiscuous mode [ 725.515010][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 725.695012][ T145] hsr_slave_0: left promiscuous mode [ 725.715106][ T145] hsr_slave_1: left promiscuous mode [ 725.735321][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.759541][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.186984][ T145] team0 (unregistering): Port device team_slave_1 removed [ 726.221633][ T145] team0 (unregistering): Port device team_slave_0 removed [ 726.504362][T11245] syz_tun: entered allmulticast mode [ 726.629529][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.683432][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.749037][T10948] bridge_slave_0: entered allmulticast mode [ 726.953657][T10948] bridge_slave_0: entered promiscuous mode [ 727.323948][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.358042][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.389116][T10948] bridge_slave_1: entered allmulticast mode [ 727.424191][T10948] bridge_slave_1: entered promiscuous mode [ 727.561291][T11241] syz_tun: left allmulticast mode [ 727.661393][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.671781][T10934] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.683906][T10934] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.708737][T10934] bridge_slave_0: entered allmulticast mode [ 727.728937][T10934] bridge_slave_0: entered promiscuous mode [ 727.756460][T10934] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.773778][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.791688][T10934] bridge_slave_1: entered allmulticast mode [ 727.807118][T10934] bridge_slave_1: entered promiscuous mode [ 727.859363][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.005524][T11267] 9pnet_fd: Insufficient options for proto=fd [ 728.164205][T10934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.251602][T10948] team0: Port device team_slave_0 added [ 728.305098][T10948] team0: Port device team_slave_1 added [ 728.391397][T10934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.551907][T10948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.585467][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.624842][T10948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.668159][T10934] team0: Port device team_slave_0 added [ 729.677794][T10948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.715259][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.786588][T11286] kAFS: unable to lookup cell '(,c¾Ì' [ 729.811908][T10948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.861376][T10934] team0: Port device team_slave_1 added [ 729.908976][T11288] dlm: Unknown command passed to DLM device : 3 [ 729.908976][T11288] [ 730.686861][T10934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.693959][T10934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.795937][T10934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.482926][T10934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.490280][T10934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.652773][T10934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.669358][T11300] comedi comedi0: 8255: I/O base address not correctly aligned [ 731.764399][ T5280] 8021q: adding VLAN 0 to HW filter on device eth18 [ 732.794782][T10948] hsr_slave_0: entered promiscuous mode [ 732.807684][T10948] hsr_slave_1: entered promiscuous mode [ 732.818023][T10948] debugfs: 'hsr0' already exists in 'hsr' [ 734.572887][T10948] Cannot create hsr debugfs directory [ 734.611344][T11300] bridge1: entered promiscuous mode [ 734.622545][T11300] bridge1: entered allmulticast mode [ 734.872310][T10806] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 734.931129][T10806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.961753][T10806] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 734.995175][T10806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.181711][T10806] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 735.251351][T10806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.293074][T10806] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 735.334857][T10806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.525369][T10934] hsr_slave_0: entered promiscuous mode [ 735.583092][T10934] hsr_slave_1: entered promiscuous mode [ 735.612791][T10934] debugfs: 'hsr0' already exists in 'hsr' [ 735.636256][T10934] Cannot create hsr debugfs directory [ 737.338151][T11351] NILFS (nullb0): couldn't find nilfs on the device [ 739.513888][T11375] vivid-000: disconnect [ 740.047002][T10301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.058996][T10301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.074369][T10301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.086726][T10301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.101895][T10301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.136775][T11372] vivid-000: reconnect [ 740.191779][T11382] kAFS: unable to lookup cell '(,c¾Ì' [ 740.896195][T10948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 740.987159][T11396] program syz.0.968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.999709][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.008128][T11396] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 741.145078][T10948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 741.182767][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.265645][T11393] IPv6: sit1: Disabled Multicast RS [ 741.302167][ T8956] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 741.331772][T11393] sit1: entered allmulticast mode [ 741.416080][T10948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 741.436960][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.472144][ T8956] usb 4-1: Using ep0 maxpacket: 8 [ 741.491175][ T8956] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 741.517520][ T8956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.540630][ T8956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.591867][T10948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 741.630153][ T8956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.661300][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.676175][ T8956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.737812][ T8956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.779823][ T8956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.061581][T10301] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 742.081802][ T8956] usb 4-1: usb_control_msg returned -32 [ 742.108190][ T8956] usbtmc 4-1:16.0: can't read capabilities [ 742.153234][T10301] Bluetooth: hci1: command tx timeout [ 742.286792][T10934] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 742.323538][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.333626][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.350329][T10934] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 742.367007][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.387889][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.415353][ T6028] usb 4-1: USB disconnect, device number 10 [ 742.663144][T11429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.039624][T10934] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 744.061704][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.232080][T10301] Bluetooth: hci1: command tx timeout [ 745.339258][ T9341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.351555][ T9341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 745.360397][ T9341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 745.375428][ T9341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 745.385959][ T9341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.505163][ T145] bridge_slave_1: left allmulticast mode [ 745.531251][ T145] bridge_slave_1: left promiscuous mode [ 745.555148][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.620058][ T145] bridge_slave_0: left allmulticast mode [ 745.640182][ T145] bridge_slave_0: left promiscuous mode [ 745.667327][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.352057][ T9341] Bluetooth: hci1: command tx timeout [ 746.502658][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.510696][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.538025][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.594554][T11470] kAFS: unable to lookup cell '(,c¾Ì' [ 746.617802][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.713501][ T145] bond0 (unregistering): Released all slaves [ 747.432166][ T9341] Bluetooth: hci5: command tx timeout [ 748.145671][T10301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.157288][T10301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.166571][T10301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.175062][T10301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.183757][T10301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.288099][ T145] hsr_slave_0: left promiscuous mode [ 748.343192][ T145] hsr_slave_1: left promiscuous mode [ 748.414844][T11490] xt_hashlimit: size too large, truncated to 1048576 [ 748.992815][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.001515][ T9341] Bluetooth: hci1: command tx timeout [ 749.075380][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.512534][ T9341] Bluetooth: hci5: command tx timeout [ 749.693740][T11502] tmpfs: Unknown parameter 'smackfsdef' [ 750.127985][ T145] team0 (unregistering): Port device team_slave_1 removed [ 750.235915][ T9341] Bluetooth: hci6: command tx timeout [ 750.416521][ T145] team0 (unregistering): Port device team_slave_0 removed [ 751.612527][ T9341] Bluetooth: hci5: command tx timeout [ 752.450679][ T9341] Bluetooth: hci6: command tx timeout [ 752.568050][T11528] xt_hashlimit: size too large, truncated to 1048576 [ 753.288657][ T5913] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 753.626247][ T5913] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 753.668465][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.692051][ T9341] Bluetooth: hci5: command tx timeout [ 753.738312][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 753.747817][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.759016][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.774216][ T5913] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 753.873616][T11538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.426671][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 754.435061][ T5913] usb 6-1: Product: syz [ 754.439230][ T5913] usb 6-1: Manufacturer: syz [ 754.492160][ T9341] Bluetooth: hci6: command tx timeout [ 754.590606][ T5913] cdc_wdm 6-1:1.0: skipping garbage [ 754.613712][ T5913] cdc_wdm 6-1:1.0: skipping garbage [ 754.634120][ T5913] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 754.642290][ T5913] cdc_wdm 6-1:1.0: Unknown control protocol [ 755.657479][T11553] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 756.327985][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.420493][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.497281][T11378] bridge_slave_0: entered allmulticast mode [ 756.552459][ T9341] Bluetooth: hci6: command tx timeout [ 756.609021][T11378] bridge_slave_0: entered promiscuous mode [ 756.901507][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.941889][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.569485][T11378] bridge_slave_1: entered allmulticast mode [ 757.604505][T11378] bridge_slave_1: entered promiscuous mode [ 757.640069][ T10] usb 6-1: USB disconnect, device number 4 [ 758.285365][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.371846][T11582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.998'. [ 758.789510][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.610367][T11582] team0 (unregistering): Port device team_slave_0 removed [ 760.738020][T11582] team0 (unregistering): Port device team_slave_1 removed [ 761.439720][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 761.499243][T11378] team0: Port device team_slave_0 added [ 761.508618][T11378] team0: Port device team_slave_1 added [ 761.822100][T11637] /dev/nullb0: Can't open blockdev [ 764.479105][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.497202][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.526027][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.539372][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.547825][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.574842][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.609177][ T31] audit: type=1800 audit(1785997840.251:13): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1012" name="file0" dev="overlay" ino=1578 res=0 errno=0 [ 765.044538][T11378] hsr_slave_0: entered promiscuous mode [ 765.051235][T11378] hsr_slave_1: entered promiscuous mode [ 765.960981][T11679] NILFS (nullb0): couldn't find nilfs on the device [ 767.882530][T11735] input: syz0 as /devices/virtual/input/input44 [ 768.122167][ T31] audit: type=1800 audit(1785997843.761:14): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1023" name="file0" dev="overlay" ino=1676 res=0 errno=0 [ 769.314781][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1026'. [ 769.746458][T11754] team0 (unregistering): Port device team_slave_0 removed [ 769.824739][T11754] team0 (unregistering): Port device team_slave_1 removed [ 769.980883][T11447] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.009382][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.055911][T11447] bridge_slave_0: entered allmulticast mode [ 770.094220][T11447] bridge_slave_0: entered promiscuous mode [ 770.122823][T11447] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.148089][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.175238][T11447] bridge_slave_1: entered allmulticast mode [ 770.202818][T11447] bridge_slave_1: entered promiscuous mode [ 770.257913][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 773.698738][T11447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.753568][T11447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.052233][T11789] kAFS: unable to lookup cell '(,c¾Ì' [ 774.078149][ T31] audit: type=1800 audit(1785997849.611:15): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1036" name="file0" dev="overlay" ino=1706 res=0 errno=0 [ 774.116789][T11789] dlm: Unknown command passed to DLM device : 3 [ 774.116789][T11789] [ 775.423284][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.431022][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.438398][T11485] bridge_slave_0: entered allmulticast mode [ 775.450626][T11485] bridge_slave_0: entered promiscuous mode [ 775.464473][T11447] team0: Port device team_slave_0 added [ 775.474494][T11447] team0: Port device team_slave_1 added [ 775.482969][T11798] dlm: Unknown command passed to DLM device : 3 [ 775.482969][T11798] [ 775.813219][T11802] xt_hashlimit: size too large, truncated to 1048576 [ 776.646994][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.045156][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.053145][T11485] bridge_slave_1: entered allmulticast mode [ 777.061864][T11485] bridge_slave_1: entered promiscuous mode [ 777.112544][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.664569][T11807] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[11808] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[11807] [ 778.942385][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.082405][T11447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.147797][T11814] comedi comedi0: 8255: I/O base address not correctly aligned [ 779.444073][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.542748][T11447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.256987][T11814] bridge1: entered promiscuous mode [ 780.283059][T11814] bridge1: entered allmulticast mode [ 780.343264][T11447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.366722][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.463361][T11447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.756915][T11823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1046'. [ 780.795816][T11485] team0: Port device team_slave_0 added [ 781.943741][T11485] team0: Port device team_slave_1 added [ 782.020686][ T31] audit: type=1800 audit(1785997857.661:16): pid=11826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1047" name="file0" dev="overlay" ino=1649 res=0 errno=0 [ 782.231830][T11447] hsr_slave_0: entered promiscuous mode [ 782.248904][T11447] hsr_slave_1: entered promiscuous mode [ 782.258425][T11447] debugfs: 'hsr0' already exists in 'hsr' [ 782.264903][T11447] Cannot create hsr debugfs directory [ 783.157832][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.179382][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.231369][T11832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 783.240313][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.243300][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.266729][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.308041][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.312417][T11838] kAFS: unable to lookup cell '(,c¾Ì' [ 783.438151][T11838] dlm: Unknown command passed to DLM device : 3 [ 783.438151][T11838] [ 784.514462][T11858] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 784.550204][T11858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.251538][T11485] hsr_slave_0: entered promiscuous mode [ 785.275583][T11485] hsr_slave_1: entered promiscuous mode [ 785.295642][T11485] debugfs: 'hsr0' already exists in 'hsr' [ 785.319351][T11485] Cannot create hsr debugfs directory [ 785.402511][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1056'. [ 785.835041][T11876] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 785.874933][T11876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.574382][ T31] audit: type=1800 audit(1785997862.221:17): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1057" name="file0" dev="overlay" ino=1741 res=0 errno=0 [ 786.919584][T11884] kAFS: unable to lookup cell '(,c¾Ì' [ 786.958581][ T145] bridge_slave_1: left allmulticast mode [ 786.971280][ T145] bridge_slave_1: left promiscuous mode [ 786.993385][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.270007][T11890] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 787.946721][ T145] bridge_slave_0: left allmulticast mode [ 787.958737][ T145] bridge_slave_0: left promiscuous mode [ 788.435990][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.520399][ T145] bridge_slave_1: left allmulticast mode [ 788.526309][ T145] bridge_slave_1: left promiscuous mode [ 788.536798][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.568783][ T145] bridge_slave_0: left allmulticast mode [ 788.580859][ T145] bridge_slave_0: left promiscuous mode [ 788.598232][T11895] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 788.602208][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.613679][T11895] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1062'. [ 788.625002][T11895] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 789.175671][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1064'. [ 789.326359][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.369873][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.710206][T11907] xt_hashlimit: size too large, truncated to 1048576 [ 790.380622][ T145] bond0 (unregistering): Released all slaves [ 791.372923][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.425039][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.502504][ T145] bond0 (unregistering): Released all slaves [ 791.884921][T11921] xt_hashlimit: size too large, truncated to 1048576 [ 793.032108][T11928] NILFS (nullb0): couldn't find nilfs on the device [ 793.336657][T11378] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 793.374075][T11378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.387437][T11378] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 793.404578][T11378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.759772][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.447908][ T145] hsr_slave_0: left promiscuous mode [ 794.690688][ T145] hsr_slave_1: left promiscuous mode [ 795.556141][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.843649][T11937] program syz.0.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.893156][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.116528][ T145] hsr_slave_0: left promiscuous mode [ 796.123015][ T145] hsr_slave_1: left promiscuous mode [ 796.129025][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.137484][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.258133][ T145] team0 (unregistering): Port device team_slave_1 removed [ 798.308796][ T145] team0 (unregistering): Port device team_slave_0 removed [ 801.185175][T10301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 801.198341][T10301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 801.210052][T10301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 801.226425][T10301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 801.236573][T10301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 801.476820][T12017] Bluetooth: MGMT ver 1.23 [ 802.259834][ T145] team0 (unregistering): Port device team_slave_1 removed [ 802.486712][ T145] team0 (unregistering): Port device team_slave_0 removed [ 802.895201][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'. [ 802.938003][T11378] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 802.974134][T11378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.323057][T12035] xt_hashlimit: size too large, truncated to 1048576 [ 803.921294][ T9341] Bluetooth: hci0: command tx timeout [ 806.012111][ T9341] Bluetooth: hci0: command tx timeout [ 806.251904][T12059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.404324][T10301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 807.658077][T10301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 807.671263][T10301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 807.681739][T10301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 807.691539][T10301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 807.916010][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.924034][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.079346][ T9341] Bluetooth: hci0: command tx timeout [ 808.534039][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.541272][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.548679][T12009] bridge_slave_0: entered allmulticast mode [ 808.557571][T12009] bridge_slave_0: entered promiscuous mode [ 808.565850][ T145] bridge_slave_1: left allmulticast mode [ 808.571573][ T145] bridge_slave_1: left promiscuous mode [ 808.577692][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.587123][ T145] bridge_slave_0: left allmulticast mode [ 808.592811][ T145] bridge_slave_0: left promiscuous mode [ 808.598509][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.611219][ T145] bridge_slave_1: left allmulticast mode [ 808.616922][ T145] bridge_slave_1: left promiscuous mode [ 808.628294][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.666609][ T145] bridge_slave_0: left allmulticast mode [ 808.683448][ T145] bridge_slave_0: left promiscuous mode [ 808.689290][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.090342][T12090] xt_hashlimit: size too large, truncated to 1048576 [ 809.752060][ T9341] Bluetooth: hci1: command tx timeout [ 810.153377][ T9341] Bluetooth: hci0: command tx timeout [ 810.392373][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 810.419113][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.437352][T10301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 810.447154][T10301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.454753][T10301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.467562][T10301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.477684][T10301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.478064][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.534791][ T145] bond0 (unregistering): Released all slaves [ 810.578304][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 810.609849][ T10] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 810.632854][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 810.654852][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 810.685791][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 810.753837][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 810.783913][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 810.816023][ T10] usb 1-1: Product: syz [ 810.836174][ T10] usb 1-1: Manufacturer: syz [ 811.033597][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 811.062360][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 811.094931][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 811.318040][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.402379][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.454600][ T145] bond0 (unregistering): Released all slaves [ 811.695265][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.706205][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.713623][T12009] bridge_slave_1: entered allmulticast mode [ 811.721677][T12009] bridge_slave_1: entered promiscuous mode [ 811.785644][ T145] hsr_slave_0: left promiscuous mode [ 811.792860][ T145] hsr_slave_1: left promiscuous mode [ 811.799019][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.827848][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.842359][ T9341] Bluetooth: hci1: command tx timeout [ 812.067894][ T145] hsr_slave_0: left promiscuous mode [ 812.090893][T12106] program syz.5.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.124752][ T145] hsr_slave_1: left promiscuous mode [ 812.136638][T12106] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 812.155660][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.344408][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.416838][ T5913] usb 1-1: USB disconnect, device number 8 [ 812.468019][T12112] NILFS (nullb0): couldn't find nilfs on the device [ 812.552067][ T9341] Bluetooth: hci5: command tx timeout [ 812.729113][ T145] team0 (unregistering): Port device team_slave_1 removed [ 812.764339][ T145] team0 (unregistering): Port device team_slave_0 removed [ 813.912113][ T9341] Bluetooth: hci1: command tx timeout [ 814.359426][T12128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.041821][ T9341] Bluetooth: hci5: command tx timeout [ 815.699314][ T145] team0 (unregistering): Port device team_slave_1 removed [ 815.743526][ T145] team0 (unregistering): Port device team_slave_0 removed [ 815.993614][ T9341] Bluetooth: hci1: command tx timeout [ 817.417600][ T9341] Bluetooth: hci5: command tx timeout [ 818.624768][T10935] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 818.641429][T12009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.690307][T12009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.753521][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 818.795272][T10935] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 818.810917][T10935] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 818.839266][T10935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 818.883105][T10935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 818.911095][T10935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 818.925138][T10935] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 818.941836][T10935] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 818.962258][T10935] usb 4-1: Product: syz [ 818.966604][T10935] usb 4-1: Manufacturer: syz [ 818.985373][T10935] cdc_wdm 4-1:1.0: skipping garbage [ 819.000690][T10935] cdc_wdm 4-1:1.0: skipping garbage [ 819.006336][T10935] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 819.082445][T12009] team0: Port device team_slave_0 added [ 819.143411][T12009] team0: Port device team_slave_1 added [ 819.516926][ T9341] Bluetooth: hci5: command tx timeout [ 819.640900][T12170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.030932][T12009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.050476][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.103368][T12009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.169883][T12009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.204108][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.234889][T12009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.716171][T12009] hsr_slave_0: entered promiscuous mode [ 820.730599][T12009] hsr_slave_1: entered promiscuous mode [ 821.950355][T10935] usb 4-1: USB disconnect, device number 11 [ 822.512584][T12193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.541767][T12203] NILFS (nullb0): couldn't find nilfs on the device [ 824.489129][T12200] program syz.0.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 824.539320][T12200] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 824.613760][ T145] bridge_slave_1: left allmulticast mode [ 824.633678][ T145] bridge_slave_1: left promiscuous mode [ 824.656860][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.683549][ T145] bridge_slave_0: left allmulticast mode [ 824.701641][ T145] bridge_slave_0: left promiscuous mode [ 824.729334][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.304350][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.310457][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.344410][ T145] bond0 (unregistering): Released all slaves [ 827.628544][ T145] hsr_slave_0: left promiscuous mode [ 827.640098][T12228] kAFS: unable to lookup cell '(,c¾Ì' [ 827.649877][ T145] hsr_slave_1: left promiscuous mode [ 827.665580][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.722851][T12228] dlm: Unknown command passed to DLM device : 3 [ 827.722851][T12228] [ 827.736061][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.404059][ T145] team0 (unregistering): Port device team_slave_1 removed [ 829.424925][ T145] team0 (unregistering): Port device team_slave_0 removed [ 829.498457][ T6028] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 829.672638][ T6028] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 829.710730][ T6028] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 829.764771][ T6028] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.781399][ T6028] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 829.800389][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.813520][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.821090][ T6028] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 829.836794][T12058] bridge_slave_0: entered allmulticast mode [ 829.862714][ T6028] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.913163][T12058] bridge_slave_0: entered promiscuous mode [ 829.946320][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 830.041744][ T6028] usb 1-1: Product: syz [ 830.051886][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.060668][ T6028] usb 1-1: Manufacturer: syz [ 830.069069][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.107004][T12058] bridge_slave_1: entered allmulticast mode [ 830.117253][ T6028] cdc_wdm 1-1:1.0: skipping garbage [ 830.235897][T12058] bridge_slave_1: entered promiscuous mode [ 830.242109][ T6028] cdc_wdm 1-1:1.0: skipping garbage [ 830.253475][ T6028] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 830.423797][ T5777] usb 1-1: USB disconnect, device number 9 [ 830.965283][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.998793][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.117779][T12058] team0: Port device team_slave_0 added [ 831.158876][T12058] team0: Port device team_slave_1 added [ 831.331860][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.359104][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.401787][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.100687][T12265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.121276][T12267] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 832.176173][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.190161][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.218236][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.240766][T12278] kAFS: unable to lookup cell '(,c¾Ì' [ 833.282330][ T9341] Bluetooth: hci5: command 0x0405 tx timeout [ 833.294431][T12278] dlm: Unknown command passed to DLM device : 3 [ 833.294431][T12278] [ 835.414373][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 836.129445][T12058] hsr_slave_0: entered promiscuous mode [ 836.140730][T12058] hsr_slave_1: entered promiscuous mode [ 836.153044][T12058] debugfs: 'hsr0' already exists in 'hsr' [ 836.168290][T12058] Cannot create hsr debugfs directory [ 836.288214][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.299619][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.324112][T12097] bridge_slave_0: entered allmulticast mode [ 836.341881][T12097] bridge_slave_0: entered promiscuous mode [ 836.348285][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 836.372147][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.381006][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.390222][T12097] bridge_slave_1: entered allmulticast mode [ 836.400352][T12097] bridge_slave_1: entered promiscuous mode [ 836.490296][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.510147][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.523812][ T5913] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 836.558135][ T5913] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 836.595032][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 836.618327][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 836.670027][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 836.807340][ T5913] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 836.856495][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 836.907517][ T5913] usb 6-1: Product: syz [ 836.935681][ T5913] usb 6-1: Manufacturer: syz [ 837.294175][ T5913] cdc_wdm 6-1:1.0: skipping garbage [ 837.320226][ T5913] cdc_wdm 6-1:1.0: skipping garbage [ 837.326359][ T5913] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 837.387606][ T5913] usb 6-1: USB disconnect, device number 5 [ 837.585920][T12097] team0: Port device team_slave_0 added [ 837.606936][T12097] team0: Port device team_slave_1 added [ 838.858565][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.878778][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.909763][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.950590][T12337] kAFS: unable to lookup cell '(,c¾Ì' [ 838.960456][T12335] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1151'. [ 838.983806][T12337] dlm: Unknown command passed to DLM device : 3 [ 838.983806][T12337] [ 839.624430][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.638055][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.688680][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.062872][T12097] hsr_slave_0: entered promiscuous mode [ 842.070396][T12097] hsr_slave_1: entered promiscuous mode [ 842.106300][T12097] debugfs: 'hsr0' already exists in 'hsr' [ 842.312263][T12097] Cannot create hsr debugfs directory [ 842.667127][T12009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 843.578431][T12009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.742751][T12009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 843.916217][T12009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.010160][T12009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 844.266668][T12009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.762243][T12009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 845.775865][T12009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.652501][T12389] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12390] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[12389] [ 848.304863][T12009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.446730][T12009] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.257681][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.264933][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.426252][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.433468][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.627995][T12422] input: syz0 as /devices/virtual/input/input48 [ 849.641288][T12058] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 849.664868][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.693106][T12058] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 849.725363][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.773104][T12058] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 849.807038][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.895901][T12058] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 849.922727][ T5913] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 849.950937][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.075070][T12439] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1163'. [ 850.094596][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 850.119667][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.146596][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.172280][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.193133][ T5913] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 850.223631][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.272235][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 850.294007][ T5913] usb 4-1: SerialNumber: syz [ 850.311551][ T5913] hub 4-1:1.0: bad descriptor, ignoring hub [ 850.332242][ T5913] hub 4-1:1.0: probe with driver hub failed with error -5 [ 850.366251][T12097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 850.370540][ T5913] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 850.414952][T12097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.452014][T12097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 850.492863][T12097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.574864][T12097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 850.722292][ T5631] usb 4-1: USB disconnect, device number 12 [ 850.993827][T12453] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 851.091460][T12455] program syz.0.1172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.129777][T12455] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 852.187228][T12097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.678163][T12097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 852.730063][T12097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.991841][T12489] zram0: detected capacity change from 0 to 8 [ 853.201277][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.320415][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.442854][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.450088][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.487639][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.494877][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.707850][T12504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.562080][T12505] tmpfs: Unknown parameter 'smackfsdef' [ 855.013422][T12097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.125776][T12097] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.176731][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.183878][T10883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.243651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.250820][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.318299][T12516] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1181'. [ 855.521327][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.773842][T12532] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 855.816065][T12532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.789984][T12543] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 857.827239][T12543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.962165][ T31] audit: type=1800 audit(1785997935.731:18): pid=12570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1188" name="file0" dev="overlay" ino=1978 res=0 errno=0 [ 861.390000][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.486539][T12097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.114047][T12058] veth0_vlan: entered promiscuous mode [ 862.213758][T12617] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1194'. [ 862.294356][T12058] veth1_vlan: entered promiscuous mode [ 862.497155][T12097] veth0_vlan: entered promiscuous mode [ 862.607905][T12097] veth1_vlan: entered promiscuous mode [ 862.833149][T12629] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 862.847672][T12629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.619860][T10301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 863.631663][T10301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 863.640117][T10301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 863.661052][T10301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 863.670596][T10301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 865.763713][ T9341] Bluetooth: hci0: command tx timeout [ 866.170883][T12097] veth0_macvtap: entered promiscuous mode [ 866.267975][T12097] veth1_macvtap: entered promiscuous mode [ 866.272741][T12662] Bluetooth: MGMT ver 1.23 [ 867.534653][T10301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 867.549442][T10301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 867.563728][T10301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 867.574872][T10301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 867.589639][T10301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 867.678038][T12097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.832164][T10301] Bluetooth: hci0: command tx timeout [ 867.840686][T12097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.899455][T12680] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1205'. [ 867.965608][ T6144] bridge_slave_1: left allmulticast mode [ 867.986370][ T6144] bridge_slave_1: left promiscuous mode [ 868.016208][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.308631][ T6144] bridge_slave_0: left allmulticast mode [ 868.414402][ T6144] bridge_slave_0: left promiscuous mode [ 868.524691][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.373119][T12690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.407830][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.684884][T10301] Bluetooth: hci6: command tx timeout [ 869.989681][T10301] Bluetooth: hci0: command tx timeout [ 870.089180][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.359023][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.370633][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.381226][ T6144] bond0 (unregistering): Released all slaves [ 870.599212][ T6144] hsr_slave_0: left promiscuous mode [ 870.617596][ T6144] hsr_slave_1: left promiscuous mode [ 870.637589][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.666332][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.906722][ T6144] team0 (unregistering): Port device team_slave_1 removed [ 870.924071][ T6144] team0 (unregistering): Port device team_slave_0 removed [ 871.762405][T10301] Bluetooth: hci6: command tx timeout [ 872.152517][T10301] Bluetooth: hci0: command tx timeout [ 872.304277][ T9341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 872.316399][ T9341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 872.324926][ T9341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 872.332966][ T9341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 872.340586][ T9341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.736841][T12732] NILFS (nullb0): couldn't find nilfs on the device [ 873.832277][ T9341] Bluetooth: hci6: command tx timeout [ 874.367519][T12772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 874.477188][ T9341] Bluetooth: hci1: command tx timeout [ 875.116129][T12633] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.147970][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.178978][T12633] bridge_slave_0: entered allmulticast mode [ 875.209903][T12633] bridge_slave_0: entered promiscuous mode [ 875.260554][T12633] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.302898][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.315016][T12633] bridge_slave_1: entered allmulticast mode [ 875.340137][T12633] bridge_slave_1: entered promiscuous mode [ 875.509700][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.695377][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.912675][ T9341] Bluetooth: hci6: command tx timeout [ 876.041052][T12633] team0: Port device team_slave_0 added [ 876.088268][T12633] team0: Port device team_slave_1 added [ 876.552517][ T9341] Bluetooth: hci1: command tx timeout [ 877.001240][T12817] tmpfs: Unknown parameter 'smackfsdef' [ 877.362669][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 877.388782][T12672] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.397352][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.405870][T12672] bridge_slave_0: entered allmulticast mode [ 877.427564][T12672] bridge_slave_0: entered promiscuous mode [ 877.471412][T12825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.113279][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.158291][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.198962][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.213310][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.220387][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.246913][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.316681][T12633] hsr_slave_0: entered promiscuous mode [ 878.323965][T12633] hsr_slave_1: entered promiscuous mode [ 878.414227][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.430547][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.442528][T12672] bridge_slave_1: entered allmulticast mode [ 878.452488][T12672] bridge_slave_1: entered promiscuous mode [ 878.632907][ T9341] Bluetooth: hci1: command tx timeout [ 879.274573][T12836] program syz.3.1233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 879.310796][T12836] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 880.712262][ T9341] Bluetooth: hci1: command tx timeout [ 882.080346][T12672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.129035][T12672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.285926][T12672] team0: Port device team_slave_0 added [ 883.488190][T12672] team0: Port device team_slave_1 added [ 885.067413][T12865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.260162][T12672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.284186][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.383660][T12672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.436581][T12872] netlink: 'syz.5.1243': attribute type 1 has an invalid length. [ 885.462753][T12672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.468465][T12872] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1243'. [ 885.493441][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.521110][T12872] netlink: 'syz.5.1243': attribute type 1 has an invalid length. [ 885.602961][T12672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.954846][T12880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1244'. [ 887.309639][T12901] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1250'. [ 887.896912][T12672] hsr_slave_0: entered promiscuous mode [ 887.926733][T12672] hsr_slave_1: entered promiscuous mode [ 887.933782][T12904] tmpfs: Unknown parameter 'smackfsdef' [ 887.952828][T12672] debugfs: 'hsr0' already exists in 'hsr' [ 887.965446][T12672] Cannot create hsr debugfs directory [ 889.615764][T12936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.202180][ T5749] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 890.362577][ T5749] usb 6-1: Using ep0 maxpacket: 8 [ 890.463755][ T5749] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 890.547365][ T5749] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 890.557963][ T5749] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 890.570505][ T5749] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 890.584771][ T5749] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.598375][ T5749] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 890.614768][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.637763][T10883] bridge_slave_1: left allmulticast mode [ 890.648433][T10883] bridge_slave_1: left promiscuous mode [ 890.672578][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.689800][T10883] bridge_slave_0: left allmulticast mode [ 890.702070][T10883] bridge_slave_0: left promiscuous mode [ 890.710352][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.734044][T10883] bridge_slave_1: left allmulticast mode [ 890.739726][T10883] bridge_slave_1: left promiscuous mode [ 890.746436][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.758914][T10883] bridge_slave_0: left allmulticast mode [ 890.773262][T10883] bridge_slave_0: left promiscuous mode [ 890.779571][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.895245][ T5749] usb 6-1: usb_control_msg returned -32 [ 890.901172][ T9341] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 890.927544][ T5749] usbtmc 6-1:16.0: can't read capabilities [ 891.070513][T10883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.087717][T10883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.106351][T10883] bond0 (unregistering): Released all slaves [ 891.155944][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.170469][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.190371][ T5749] usb 6-1: USB disconnect, device number 6 [ 891.380833][T10883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.415812][T10883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.435746][T10883] bond0 (unregistering): Released all slaves [ 891.657228][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.676517][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.684387][T12724] bridge_slave_0: entered allmulticast mode [ 891.695635][T12724] bridge_slave_0: entered promiscuous mode [ 891.720076][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.748064][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.778636][T12724] bridge_slave_1: entered allmulticast mode [ 891.811623][T12724] bridge_slave_1: entered promiscuous mode [ 892.216866][T10883] hsr_slave_0: left promiscuous mode [ 892.966702][T10883] hsr_slave_1: left promiscuous mode [ 892.990560][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.008077][T10883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.039430][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.059073][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.105534][T10883] hsr_slave_0: left promiscuous mode [ 893.126575][T10883] hsr_slave_1: left promiscuous mode [ 893.137750][T10883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.163999][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.385310][T10883] veth1_macvtap: left promiscuous mode [ 893.409911][T10883] veth0_macvtap: left promiscuous mode [ 893.424263][T10883] veth1_vlan: left promiscuous mode [ 893.435923][T10883] veth0_vlan: left promiscuous mode [ 893.459195][T10883] veth1_vlan: left promiscuous mode [ 893.478377][T10883] veth0_vlan: left promiscuous mode [ 893.642146][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 893.782057][ T5913] usb 6-1: device descriptor read/64, error -71 [ 894.072575][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 894.117596][T10883] team0 (unregistering): Port device team_slave_1 removed [ 894.138031][T10883] team0 (unregistering): Port device team_slave_0 removed [ 894.212831][ T5913] usb 6-1: device descriptor read/64, error -71 [ 894.332784][ T5913] usb usb6-port1: attempt power cycle [ 894.409337][T10883] team0 (unregistering): Port device team_slave_1 removed [ 894.427440][T10883] team0 (unregistering): Port device team_slave_0 removed [ 894.702554][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 894.739557][T12724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.763792][ T5913] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 894.783228][T12724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.813855][ T5913] usb 6-1: device descriptor read/8, error -71 [ 895.026225][T12988] input: syz0 as /devices/virtual/input/input51 [ 895.233190][ T5913] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 895.317848][ T5913] usb 6-1: device descriptor read/8, error -71 [ 895.469488][ T5913] usb usb6-port1: unable to enumerate USB device [ 895.516667][T12724] team0: Port device team_slave_0 added [ 895.542129][T12633] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 895.700964][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.721404][T12633] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 895.737780][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.817533][T12997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.530225][T12724] team0: Port device team_slave_1 added [ 896.595118][T12633] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 896.645753][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 897.810011][T12633] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 897.831934][T13008] kAFS: unable to lookup cell '(,c¾Ì' [ 897.902642][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.176130][T12724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.223656][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.262662][T12724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.474512][T12724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.560202][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.125856][T12724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.548559][T12724] hsr_slave_0: entered promiscuous mode [ 900.556395][T12724] hsr_slave_1: entered promiscuous mode [ 900.562870][T12724] debugfs: 'hsr0' already exists in 'hsr' [ 900.580557][T12724] Cannot create hsr debugfs directory [ 901.978597][T13050] kAFS: unable to lookup cell '(,c¾Ì' [ 901.998885][T13050] dlm: Unknown command passed to DLM device : 3 [ 901.998885][T13050] [ 903.809979][T12672] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 903.840508][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.854187][T12672] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 903.963877][T13059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.644624][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.731926][T12672] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 905.100058][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.129554][T12672] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 906.547485][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.564781][T13072] syz_tun: entered allmulticast mode [ 906.570855][T13072] syz_tun: left allmulticast mode [ 906.804485][T13085] No such timeout policy "syz1" [ 906.820324][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 906.843491][T13091] kAFS: unable to lookup cell '(,c¾Ì' [ 906.898802][T12633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.475292][T12672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.500217][T12633] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.530094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.537252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.589572][T12672] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.635712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.642857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.671517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.678658][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.712027][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.719175][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.927754][T13104] kAFS: unable to lookup cell '(,c¾Ì' [ 908.006289][T13105] dlm: Unknown command passed to DLM device : 3 [ 908.006289][T13105] [ 909.479320][T13128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.600164][T13139] NILFS (nullb0): couldn't find nilfs on the device [ 910.682261][T12724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 910.721138][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.765384][T12724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 910.811610][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.863019][T12724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 910.900699][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 911.629998][T12724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 911.714175][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.237712][T13166] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 915.390541][T12724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.471825][T12724] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.484967][T13196] vivid-000: disconnect [ 915.501101][T13194] vivid-000: reconnect [ 915.530097][T12672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.571867][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.579073][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.640441][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.647664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.007016][T13211] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1301'. [ 916.246008][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 916.447400][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.455940][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 916.489570][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.539936][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.599499][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 916.654710][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 916.742515][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.780719][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.821577][ T24] usb 6-1: SerialNumber: syz [ 916.874320][ T24] hub 6-1:1.0: bad descriptor, ignoring hub [ 916.923307][ T24] hub 6-1:1.0: probe with driver hub failed with error -5 [ 916.957178][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 917.343406][ T5749] usb 6-1: USB disconnect, device number 11 [ 917.922556][T12672] veth0_vlan: entered promiscuous mode [ 917.977801][T12672] veth1_vlan: entered promiscuous mode [ 918.238884][T12672] veth0_macvtap: entered promiscuous mode [ 918.331560][T12672] veth1_macvtap: entered promiscuous mode [ 919.174770][T12672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.245703][T12672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.505502][ T7317] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.000168][ T7317] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.517316][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.764637][ T6144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.796475][T12633] veth0_vlan: entered promiscuous mode [ 920.833032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.998129][T13283] NILFS (nullb0): couldn't find nilfs on the device [ 921.054595][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.134676][T13282] xt_hashlimit: size too large, truncated to 1048576 [ 921.789267][T12724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.574679][T12633] veth1_vlan: entered promiscuous mode [ 922.837101][ T6260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.963335][ T6260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.235045][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 923.392174][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 923.410749][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.442077][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.464798][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 923.481671][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.507627][ T24] usb 4-1: config 0 descriptor?? [ 923.790645][T12724] veth0_vlan: entered promiscuous mode [ 923.809475][T12724] veth1_vlan: entered promiscuous mode [ 923.858976][T12724] veth0_macvtap: entered promiscuous mode [ 923.870878][T12724] veth1_macvtap: entered promiscuous mode [ 923.900192][T12724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.924148][T12724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.157318][T10301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 924.168463][T10301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 924.176166][T10301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 924.186497][T10301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 924.196276][T10301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.742718][T10301] Bluetooth: hci0: command tx timeout [ 927.343681][ T5890] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.505799][ T5749] usb 4-1: USB disconnect, device number 13 [ 927.678726][T10892] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.742642][T10892] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.942221][T10301] Bluetooth: hci0: command tx timeout [ 929.162076][ T8956] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 929.412555][ T8956] usb 1-1: Using ep0 maxpacket: 16 [ 929.461800][ T8956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.485839][ T8956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.526623][ T8956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 929.573744][ T8956] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 929.616260][ T8956] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.647221][ T8956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.666102][ T8956] usb 1-1: SerialNumber: syz [ 929.698478][ T8956] hub 1-1:1.0: bad descriptor, ignoring hub [ 929.720796][ T8956] hub 1-1:1.0: probe with driver hub failed with error -5 [ 929.777450][ T8956] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 930.341792][ T5749] usb 1-1: USB disconnect, device number 10 [ 930.858940][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.868813][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.001462][ T9341] Bluetooth: hci0: command tx timeout [ 931.220922][T10906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.262908][ T341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.280136][T10906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.818577][T10906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.921873][T10906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.032138][ T9341] Bluetooth: hci0: command tx timeout [ 933.711118][T10911] bridge_slave_1: left allmulticast mode [ 933.722174][T10911] bridge_slave_1: left promiscuous mode [ 933.734336][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.756002][T10911] bridge_slave_0: left allmulticast mode [ 933.788205][T10911] bridge_slave_0: left promiscuous mode [ 933.823122][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.331317][T10911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.382600][T10911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.447324][T10911] bond0 (unregistering): Released all slaves [ 935.981542][T13426] NILFS (nullb0): couldn't find nilfs on the device [ 936.924074][T10911] hsr_slave_0: left promiscuous mode [ 936.955208][T10911] hsr_slave_1: left promiscuous mode [ 936.985180][T10911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.020381][T10911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.083856][T10301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 937.097025][T10301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 937.105531][T10301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 937.115434][T10301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 937.125343][T10301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 937.166958][T10911] veth1_vlan: left promiscuous mode [ 937.172625][T10911] veth0_vlan: left promiscuous mode [ 938.495873][T10911] team0 (unregistering): Port device team_slave_1 removed [ 938.582060][T10911] team0 (unregistering): Port device team_slave_0 removed [ 939.053802][ T5631] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 939.193329][T10301] Bluetooth: hci1: command tx timeout [ 939.266079][ T5631] usb 9-1: Using ep0 maxpacket: 16 [ 939.275092][T13445] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 939.624336][ T5631] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.685884][ T5631] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.768040][ T5631] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.824054][ T5631] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 939.866048][ T5631] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 939.878145][ T5631] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.888087][ T5631] usb 9-1: SerialNumber: syz [ 939.911667][ T5631] hub 9-1:1.0: bad descriptor, ignoring hub [ 939.944939][ T5631] hub 9-1:1.0: probe with driver hub failed with error -5 [ 939.961793][ T5631] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 940.282185][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 940.299948][T13457] xt_hashlimit: size too large, truncated to 1048576 [ 940.929687][ T5913] usb 9-1: USB disconnect, device number 2 [ 941.254196][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 941.275688][T10301] Bluetooth: hci1: command tx timeout [ 941.302422][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.578055][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 941.610610][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 941.804509][T13472] NILFS (nullb0): couldn't find nilfs on the device [ 942.616336][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 942.630109][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 942.638260][ T10] usb 1-1: Product: syz [ 942.642547][ T10] usb 1-1: Manufacturer: syz [ 942.710174][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 943.001020][T13483] vivid-001: disconnect [ 944.308816][T10301] Bluetooth: hci1: command tx timeout [ 944.438378][T13476] vivid-001: reconnect [ 944.490357][T13488] program syz.8.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 944.551410][ T5913] usb 1-1: USB disconnect, device number 11 [ 944.579614][T13488] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 946.392545][T10301] Bluetooth: hci1: command tx timeout [ 947.346091][ T5749] libceph: connect (1)[c::]:6789 error -101 [ 947.424737][ T5749] libceph: mon0 (1)[c::]:6789 connect error [ 947.505065][T13510] ceph: No mds server is up or the cluster is laggy [ 948.425524][ T5749] libceph: connect (1)[c::]:6789 error -101 [ 948.463240][ T5749] libceph: mon0 (1)[c::]:6789 connect error [ 948.700408][T10911] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.927673][T13522] kAFS: unable to lookup cell '(,c¾Ì' [ 949.117488][T13522] dlm: Unknown command passed to DLM device : 3 [ 949.117488][T13522] [ 949.146353][T13351] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.185501][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.221937][T13525] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 949.971001][T13351] bridge_slave_0: entered allmulticast mode [ 950.433188][T13351] bridge_slave_0: entered promiscuous mode [ 950.480662][T13351] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.530084][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.565697][T13351] bridge_slave_1: entered allmulticast mode [ 950.596817][T13351] bridge_slave_1: entered promiscuous mode [ 951.825640][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 953.157467][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 953.304456][T10911] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.436793][T13351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.457950][ T5913] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 953.481336][T13351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.503771][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.537025][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 953.575802][ T5913] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 953.615399][ T5913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 953.638340][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 953.656102][ T5913] usb 4-1: Product: syz [ 953.671120][ T5913] usb 4-1: Manufacturer: syz [ 954.819968][ T5913] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 955.150206][ T5913] usb 4-1: USB disconnect, device number 14 [ 955.484875][T10911] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.540282][T13351] team0: Port device team_slave_0 added [ 955.569880][T13351] team0: Port device team_slave_1 added [ 955.865559][T10911] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.936150][T13351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.957824][T13351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.045852][T13351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.121141][T13351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.152352][T13570] No such timeout policy "syz1" [ 956.160107][T13351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.426042][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 956.975429][T13351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.270768][T13351] hsr_slave_0: entered promiscuous mode [ 958.299540][T13351] hsr_slave_1: entered promiscuous mode [ 959.974646][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 960.495813][T10911] bridge_slave_1: left allmulticast mode [ 960.512776][T10911] bridge_slave_1: left promiscuous mode [ 960.519529][ T8956] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 960.531386][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.565187][T10911] bridge_slave_0: left allmulticast mode [ 960.581886][T10911] bridge_slave_0: left promiscuous mode [ 960.593669][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.317558][ T8956] usb 6-1: Using ep0 maxpacket: 16 [ 962.345102][ T8956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.396719][ T8956] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 962.415409][ T8956] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 962.428885][ T8956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.441320][ T8956] usb 6-1: config 0 descriptor?? [ 962.464495][ T8956] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 962.750099][T10911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.776309][T10911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.830129][T10911] bond0 (unregistering): Released all slaves [ 962.837303][T13629] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 963.847683][T13637] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 963.872080][T12219] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 964.065910][T12219] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 964.165183][T12219] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 964.265484][T12219] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 964.362387][T12219] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 964.601997][T12219] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 964.768738][T12219] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 964.886603][T12219] usb 4-1: Product: syz [ 964.909503][T12219] usb 4-1: Manufacturer: syz [ 964.923929][ T5777] usb 6-1: USB disconnect, device number 12 [ 965.010415][T10911] hsr_slave_0: left promiscuous mode [ 965.024447][T12219] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 965.117129][T10911] hsr_slave_1: left promiscuous mode [ 965.148456][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.180792][T10911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.213005][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.237677][T10911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.295994][T10911] veth1_macvtap: left promiscuous mode [ 965.335431][T10911] veth0_macvtap: left promiscuous mode [ 965.410785][T10911] veth1_vlan: left promiscuous mode [ 965.490963][T10911] veth0_vlan: left promiscuous mode [ 965.972113][T12219] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 966.228393][T12219] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 966.257371][T12219] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.298384][T12219] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 966.321464][T12219] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 966.388583][T12219] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 966.441291][T12219] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 966.484563][T12219] usb 1-1: Product: syz [ 966.493287][T12219] usb 1-1: Manufacturer: syz [ 966.528272][T12219] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 966.533725][T13672] kAFS: unable to lookup cell '(,c¾Ì' [ 966.628627][T13674] dlm: Unknown command passed to DLM device : 3 [ 966.628627][T13674] [ 967.044032][T12519] usb 1-1: USB disconnect, device number 12 [ 967.230614][ T5749] usb 4-1: USB disconnect, device number 15 [ 971.087787][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 971.522039][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 971.586360][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.648164][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.695458][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 971.777690][T10911] team0 (unregistering): Port device team_slave_1 removed [ 971.822073][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 971.836925][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1391'. [ 971.901793][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 972.403522][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 972.443037][T10911] team0 (unregistering): Port device team_slave_0 removed [ 972.450688][ T10] usb 4-1: SerialNumber: syz [ 972.560719][ T10] usb 4-1: can't set config #1, error -71 [ 972.627819][ T10] usb 4-1: USB disconnect, device number 16 [ 973.701018][T13743] kAFS: unable to lookup cell '(,c¾Ì' [ 973.750796][T13743] dlm: Unknown command passed to DLM device : 3 [ 973.750796][T13743] [ 976.126255][T13433] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.155538][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.187543][T13433] bridge_slave_0: entered allmulticast mode [ 976.365463][T13433] bridge_slave_0: entered promiscuous mode [ 976.383713][T13433] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.409053][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.423728][T13433] bridge_slave_1: entered allmulticast mode [ 976.440512][T13433] bridge_slave_1: entered promiscuous mode [ 976.500731][T13752] xt_hashlimit: size too large, truncated to 1048576 [ 977.194880][T13756] kAFS: unable to lookup cell '(,c¾Ì' [ 977.355643][T13757] dlm: Unknown command passed to DLM device : 3 [ 977.355643][T13757] [ 978.017703][T13433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.077457][T13433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.321454][T13433] team0: Port device team_slave_0 added [ 978.456059][T13433] team0: Port device team_slave_1 added [ 978.497504][T13769] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 981.589867][T13433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.629047][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.686752][T13433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.855406][T13433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.872155][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.029447][T13433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.147056][T13809] kAFS: unable to lookup cell '(,c¾Ì' [ 985.185519][T13809] dlm: Unknown command passed to DLM device : 3 [ 985.185519][T13809] [ 985.870362][T13433] hsr_slave_0: entered promiscuous mode [ 985.887306][T13433] hsr_slave_1: entered promiscuous mode [ 985.913466][T13433] debugfs: 'hsr0' already exists in 'hsr' [ 985.944906][T13433] Cannot create hsr debugfs directory [ 986.144355][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 987.811136][T13840] program syz.0.1415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.836601][T13840] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 988.609561][ T9341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 988.639572][ T9341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 988.667042][ T9341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 988.699988][ T9341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 988.727200][ T9341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 990.795551][ T9341] Bluetooth: hci0: command tx timeout [ 993.490017][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.490082][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.094197][T10301] Bluetooth: hci0: command tx timeout [ 994.284303][T13873] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 995.468216][T10913] bridge_slave_1: left allmulticast mode [ 995.489177][T10913] bridge_slave_1: left promiscuous mode [ 995.522469][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.571906][T10913] bridge_slave_0: left allmulticast mode [ 995.583547][T10913] bridge_slave_0: left promiscuous mode [ 995.599837][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.787656][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.817821][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.839041][T10913] bond0 (unregistering): Released all slaves [ 996.017591][T10913] hsr_slave_0: left promiscuous mode [ 996.028628][T10913] hsr_slave_1: left promiscuous mode [ 996.036260][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.045292][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.152574][T10301] Bluetooth: hci6: command 0x0406 tx timeout [ 996.158947][T10301] Bluetooth: hci0: command tx timeout [ 996.207416][T10913] team0 (unregistering): Port device team_slave_1 removed [ 996.224054][T10913] team0 (unregistering): Port device team_slave_0 removed [ 996.425645][T13894] kAFS: unable to lookup cell '(,c¾Ì' [ 996.491490][T13894] dlm: Unknown command passed to DLM device : 3 [ 996.491490][T13894] [ 996.601002][T13899] program syz.8.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.870451][T13899] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 998.238082][ T9341] Bluetooth: hci0: command tx timeout [ 999.683128][T13908] program syz.5.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.759557][T13907] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1000.893584][T10301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1000.940266][T10301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1000.958146][T10301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1001.002793][T10301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1001.017456][T10301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.658717][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1431'. [ 1002.676422][T13915] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1003.642412][T10301] Bluetooth: hci1: command tx timeout [ 1004.195874][T13923] team0 (unregistering): Port device team_slave_0 removed [ 1004.301601][T13923] team0 (unregistering): Port device team_slave_1 removed [ 1004.326658][T13936] ceph: No mds server is up or the cluster is laggy [ 1004.339913][ T5777] libceph: connect (1)[c::]:6789 error -101 [ 1004.440722][ T5777] libceph: mon0 (1)[c::]:6789 connect error [ 1005.707023][T10301] Bluetooth: hci1: command tx timeout [ 1005.817165][T13953] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1007.752056][T10301] Bluetooth: hci1: command tx timeout [ 1009.613025][T13997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1009.902151][T10301] Bluetooth: hci1: command tx timeout [ 1010.013491][T13841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.062519][T13841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.085365][T13841] bridge_slave_0: entered allmulticast mode [ 1010.115762][T13841] bridge_slave_0: entered promiscuous mode [ 1010.201283][T13841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.231353][T13841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.270232][T13841] bridge_slave_1: entered allmulticast mode [ 1010.293903][T13841] bridge_slave_1: entered promiscuous mode [ 1011.407715][T13841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.615813][T13841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.342875][T14021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1013.421308][T13841] team0: Port device team_slave_0 added [ 1013.465265][T13841] team0: Port device team_slave_1 added [ 1013.776501][T14036] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[14037] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14036] [ 1016.010891][T13841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.064121][T13841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.252656][T13841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.314453][T13841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.362450][T13841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.398529][T14050] Bluetooth: MGMT ver 1.23 [ 1016.406263][T14050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1455'. [ 1016.424403][T13841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.947021][T10913] bridge_slave_1: left allmulticast mode [ 1017.884737][T10913] bridge_slave_1: left promiscuous mode [ 1017.915189][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.059442][T10913] bridge_slave_0: left allmulticast mode [ 1018.142778][T10913] bridge_slave_0: left promiscuous mode [ 1018.180567][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.051047][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.369021][T14084] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1020.228356][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.287350][T10913] bond0 (unregistering): Released all slaves [ 1020.413053][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1467'. [ 1021.598932][T10913] hsr_slave_0: left promiscuous mode [ 1021.617693][T10913] hsr_slave_1: left promiscuous mode [ 1021.703713][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.770144][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.433319][T14112] overlayfs: failed to resolve './file2': -2 [ 1024.335129][T10913] team0 (unregistering): Port device team_slave_1 removed [ 1024.388573][T10913] team0 (unregistering): Port device team_slave_0 removed [ 1027.642680][T14092] IPv6: sit1: Disabled Multicast RS [ 1027.682636][T14092] sit1: entered allmulticast mode [ 1028.065494][T13841] hsr_slave_0: entered promiscuous mode [ 1028.097150][T13841] hsr_slave_1: entered promiscuous mode [ 1028.195662][T14164] kAFS: unable to lookup cell '(,c¾Ì' [ 1030.643932][ T31] audit: type=1800 audit(1785998105.661:19): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1486" name="file0" dev="overlay" ino=2369 res=0 errno=0 [ 1031.523063][T14198] NILFS (nullb0): couldn't find nilfs on the device [ 1033.417975][T14213] xt_hashlimit: size too large, truncated to 1048576 [ 1036.041360][T13909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.071262][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.973957][T13909] bridge_slave_0: entered allmulticast mode [ 1037.072569][T13909] bridge_slave_0: entered promiscuous mode [ 1037.081663][T13909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.089033][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.096648][T13909] bridge_slave_1: entered allmulticast mode [ 1037.452455][T13909] bridge_slave_1: entered promiscuous mode [ 1037.896119][T14268] NILFS (nullb0): couldn't find nilfs on the device [ 1037.908947][T14261] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[14266] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14261] [ 1039.074289][T13909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.110158][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1506'. [ 1039.130840][T13909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.497687][T13909] team0: Port device team_slave_0 added [ 1040.678724][T13909] team0: Port device team_slave_1 added [ 1040.710085][ T31] audit: type=1800 audit(1785998116.351:20): pid=14289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1510" name="file0" dev="overlay" ino=2409 res=0 errno=0 [ 1040.880905][T13909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.917362][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.980999][T13909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.060492][T13909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.076570][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.104719][T13909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.147898][T13909] hsr_slave_0: entered promiscuous mode [ 1043.199745][T13909] hsr_slave_1: entered promiscuous mode [ 1043.240364][T13909] debugfs: 'hsr0' already exists in 'hsr' [ 1043.274108][T13909] Cannot create hsr debugfs directory [ 1043.468820][T14304] ceph: No mds server is up or the cluster is laggy [ 1043.479733][ T5631] libceph: connect (1)[c::]:6789 error -101 [ 1043.613769][ T5631] libceph: mon0 (1)[c::]:6789 connect error [ 1044.202445][T13841] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1044.307597][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.316469][T13841] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1044.328464][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.381067][T13841] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1044.398748][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.410315][T13841] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1044.438690][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.152075][ T8956] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1045.662175][ T8956] usb 1-1: device descriptor read/64, error -71 [ 1045.902753][ T8956] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1047.792469][ T8956] usb 1-1: device descriptor read/64, error -71 [ 1047.925677][ T8956] usb usb1-port1: attempt power cycle [ 1048.292522][ T8956] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1048.332749][ T8956] usb 1-1: device descriptor read/8, error -71 [ 1048.377161][T13909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1048.434483][T13909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.465311][T13909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1048.502426][T13909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.528797][T13909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1048.592250][ T8956] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1048.601681][T13909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1048.635202][T13909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1048.662741][ T8956] usb 1-1: device descriptor read/8, error -71 [ 1048.677750][T13909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1048.793028][ T8956] usb usb1-port1: unable to enumerate USB device [ 1049.001704][T14355] No such timeout policy "syz1" [ 1049.088667][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 1050.277179][T14363] No such timeout policy "syz1" [ 1051.150927][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 1051.490209][T13909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.698754][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.708963][ T9341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1051.720346][ T9341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1051.731470][ T9341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1051.742042][ T9341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1051.744514][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.756224][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.767564][ T9341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.865283][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.872536][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.568501][T14391] NILFS (nullb0): couldn't find nilfs on the device [ 1052.589310][T14391] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1052.599569][T14391] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1054.198490][ T9341] Bluetooth: hci0: command tx timeout [ 1054.205389][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.212159][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.232063][ T9341] Bluetooth: hci0: command tx timeout [ 1056.532774][ T5631] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1057.794124][ T5631] usb 6-1: device descriptor read/64, error -71 [ 1058.113730][ T5631] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1058.283048][ T5631] usb 6-1: device descriptor read/64, error -71 [ 1058.312255][ T9341] Bluetooth: hci0: command tx timeout [ 1060.311741][ T5631] usb usb6-port1: attempt power cycle [ 1060.440695][ T9341] Bluetooth: hci0: command tx timeout [ 1060.748729][T10913] bridge_slave_1: left allmulticast mode [ 1060.768375][T10913] bridge_slave_1: left promiscuous mode [ 1060.788211][T14484] No such timeout policy "syz1" [ 1060.819003][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.057054][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 1061.150883][T14489] NILFS (nullb0): couldn't find nilfs on the device [ 1061.171646][T14489] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1061.180867][T14489] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1061.801828][T10301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1061.819256][T10301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1061.827526][T10301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1061.836204][T10301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1061.846430][T10301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.865752][T10913] bridge_slave_0: left allmulticast mode [ 1061.912761][T10913] bridge_slave_0: left promiscuous mode [ 1061.958794][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.570069][T14502] NILFS (nullb0): couldn't find nilfs on the device [ 1063.491583][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.528499][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.573363][T10913] bond0 (unregistering): Released all slaves [ 1063.609230][T14373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.622900][T14508] kAFS: unable to lookup cell '(,c¾Ì' [ 1063.629041][T14373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.647594][T14373] bridge_slave_0: entered allmulticast mode [ 1063.681641][T14373] bridge_slave_0: entered promiscuous mode [ 1063.925889][T10301] Bluetooth: hci5: command tx timeout [ 1064.744638][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.771385][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.796071][T14373] bridge_slave_1: entered allmulticast mode [ 1065.041706][T14373] bridge_slave_1: entered promiscuous mode [ 1066.037486][T10301] Bluetooth: hci5: command tx timeout [ 1066.168028][T14373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.685306][T14373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.016609][T10913] hsr_slave_0: left promiscuous mode [ 1067.031960][T10913] hsr_slave_1: left promiscuous mode [ 1067.049331][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.072423][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.072630][T10301] Bluetooth: hci5: command tx timeout [ 1068.982773][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1069.152186][ T24] usb 6-1: device descriptor read/64, error -71 [ 1069.404373][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1069.543700][T14574] kAFS: unable to lookup cell '(,c¾Ì' [ 1069.572595][ T24] usb 6-1: device descriptor read/64, error -71 [ 1069.756396][ T24] usb usb6-port1: attempt power cycle [ 1070.152088][T10301] Bluetooth: hci5: command tx timeout [ 1071.979528][T14584] ceph: No mds server is up or the cluster is laggy [ 1071.995672][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 1072.067626][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 1072.263173][T10913] team0 (unregistering): Port device team_slave_1 removed [ 1072.376081][T10913] team0 (unregistering): Port device team_slave_0 removed [ 1072.846507][T14602] xt_hashlimit: size too large, truncated to 1048576 [ 1074.435516][T14373] team0: Port device team_slave_0 added [ 1074.469601][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1074.525984][T14373] team0: Port device team_slave_1 added [ 1075.081727][T14373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.091496][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.218920][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1569'. [ 1075.667335][T14373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.802190][T14373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.884425][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.121880][T14373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.795024][T14373] hsr_slave_0: entered promiscuous mode [ 1077.803207][T14373] hsr_slave_1: entered promiscuous mode [ 1078.372278][ T5749] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1078.612278][ T5749] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1078.689747][T14651] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1078.746032][ T5749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.856339][ T5749] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1078.934234][ T5749] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1079.098827][ T5749] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1079.201405][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1079.216866][ T5749] usb 4-1: Product: syz [ 1079.222163][ T5749] usb 4-1: Manufacturer: syz [ 1079.244847][ T5749] cdc_wdm 4-1:1.0: skipping garbage [ 1079.251002][ T5749] cdc_wdm 4-1:1.0: skipping garbage [ 1079.277721][ T5749] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1079.483222][ T5749] usb 4-1: USB disconnect, device number 17 [ 1080.143872][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1082.002760][T14689] program syz.3.1586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.027668][T14689] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1086.933830][T14485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.961545][T14485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.971301][T14485] bridge_slave_0: entered allmulticast mode [ 1086.989877][T14485] bridge_slave_0: entered promiscuous mode [ 1087.022876][ T5777] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1087.077870][T14485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.095448][T14485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.114471][T14485] bridge_slave_1: entered allmulticast mode [ 1087.131322][T14485] bridge_slave_1: entered promiscuous mode [ 1087.206847][ T5777] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1087.274635][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.376277][ T5777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1087.432426][ T5777] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1087.504728][ T5777] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1087.784251][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1087.915874][T14751] program syz.0.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.586594][T14485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.667831][ T5777] usb 4-1: Product: syz [ 1090.436704][ T5777] usb 4-1: Manufacturer: syz [ 1090.469044][ T5777] usb 4-1: can't set config #1, error -71 [ 1090.488284][T14485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.490463][ T5777] usb 4-1: USB disconnect, device number 18 [ 1090.778028][T14485] team0: Port device team_slave_0 added [ 1090.809999][T14485] team0: Port device team_slave_1 added [ 1091.026425][T14485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.043754][T14771] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1091.062022][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.255573][T14485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.446626][T14485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.496983][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.748746][T14485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.989648][T10913] bridge_slave_1: left allmulticast mode [ 1092.010964][T10913] bridge_slave_1: left promiscuous mode [ 1092.516880][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.892522][T10913] bridge_slave_0: left allmulticast mode [ 1092.936191][T10913] bridge_slave_0: left promiscuous mode [ 1093.005911][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.069642][T14782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1610'. [ 1093.726603][T14790] No such timeout policy "syz1" [ 1094.021161][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 1098.793949][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.842633][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.872902][T10913] bond0 (unregistering): Released all slaves [ 1099.195306][T14485] hsr_slave_0: entered promiscuous mode [ 1099.227831][T14485] hsr_slave_1: entered promiscuous mode [ 1099.254335][T14485] debugfs: 'hsr0' already exists in 'hsr' [ 1099.265549][T14485] Cannot create hsr debugfs directory [ 1099.375213][T10913] hsr_slave_0: left promiscuous mode [ 1099.395386][T10913] hsr_slave_1: left promiscuous mode [ 1099.415667][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.434537][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.898324][T10913] team0 (unregistering): Port device team_slave_1 removed [ 1099.948543][T10913] team0 (unregistering): Port device team_slave_0 removed [ 1100.474823][T14833] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1101.740283][T14838] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[14845] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14838] [ 1104.181440][T14852] syz_tun: entered allmulticast mode [ 1104.187446][T14852] syz_tun: left allmulticast mode [ 1104.418502][T14857] Bluetooth: MGMT ver 1.23 [ 1104.461486][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 1104.693085][T14373] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1104.728903][T14373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.566949][T14373] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1105.654910][T14373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.694761][T14373] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1105.974031][T14373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.745750][T14373] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1106.880292][T14373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1106.978860][T14879] kAFS: unable to lookup cell '(,c¾Ì' [ 1108.338248][T14373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.358855][T14373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.775190][T14902] overlayfs: missing 'lowerdir' [ 1108.814710][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.821876][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.840296][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.847530][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.377958][T14485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1110.400811][T14485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1110.423256][T14485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1110.445525][T14485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1110.463242][T14485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1110.490655][T14485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1110.524657][T14485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1110.548390][T14485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1110.854892][T14485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.899016][T14485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.950837][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.958018][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.103069][T10913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.110230][T10913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.533696][ T9341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.544342][ T9341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.552245][ T9341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.560519][ T9341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.570352][ T9341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.826093][T14962] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1113.448587][T14975] kAFS: unable to lookup cell '(,c¾Ì' [ 1114.632157][T10301] Bluetooth: hci0: command tx timeout [ 1115.223977][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.324921][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.431474][T14999] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[15003] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14999] [ 1116.712224][T10301] Bluetooth: hci0: command tx timeout [ 1116.788042][T15009] ceph: No mds server is up or the cluster is laggy [ 1116.801140][T12219] libceph: connect (1)[c::]:6789 error -101 [ 1116.991517][T12219] libceph: mon0 (1)[c::]:6789 connect error [ 1117.462708][T12519] libceph: connect (1)[c::]:6789 error -101 [ 1117.585094][T12519] libceph: mon0 (1)[c::]:6789 connect error [ 1117.609840][ T5906] bridge_slave_1: left allmulticast mode [ 1117.687786][ T5906] bridge_slave_1: left promiscuous mode [ 1117.737490][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.838969][ T5906] bridge_slave_0: left allmulticast mode [ 1117.876886][ T5906] bridge_slave_0: left promiscuous mode [ 1117.902439][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.792111][T10301] Bluetooth: hci0: command tx timeout [ 1119.564606][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.586435][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.601493][ T5906] bond0 (unregistering): Released all slaves [ 1119.876869][ T5906] hsr_slave_0: left promiscuous mode [ 1119.912179][ T5906] hsr_slave_1: left promiscuous mode [ 1119.943604][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.968094][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.795405][ T5906] team0 (unregistering): Port device team_slave_1 removed [ 1120.872164][ C0] ------------[ cut here ]------------ [ 1120.877814][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 1120.884509][ C0] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#0: swapper/0/0 [ 1120.893901][ C0] Modules linked in: [ 1120.897895][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.908397][ C0] Tainted: [L]=SOFTLOCKUP [ 1120.912710][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1120.922759][ C0] RIP: 0010:__queue_work+0xd66/0x10a0 [ 1120.928146][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 d6 df cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 54 c1 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1120.947753][ C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00010046 [ 1120.953828][ C0] RAX: 1ffff1100744b94e RBX: dffffc0000000000 RCX: ffffffff8e88ef40 [ 1120.961797][ C0] RDX: ffff888077da8170 RSI: ffffffff8ac2c560 RDI: ffffffff905aca30 [ 1120.969768][ C0] RBP: 0000000000000100 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 1120.977739][ C0] R10: dffffc0000000000 R11: ffffffff818df180 R12: 0000000000000008 [ 1120.985707][ C0] R13: ffff88803a25ca58 R14: ffffffff905aca30 R15: ffff888077da8170 [ 1120.993679][ C0] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 1121.002604][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.009182][ C0] CR2: 00007fa0688bd068 CR3: 000000007730e000 CR4: 0000000000350ef0 [ 1121.017151][ C0] Call Trace: [ 1121.020425][ C0] [ 1121.023267][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1121.028736][ C0] call_timer_fn+0x192/0x5e0 [ 1121.033319][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.039124][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1121.043792][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1121.048906][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.054536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.060189][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1121.065297][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.071103][ C0] __run_timer_base+0x67e/0x8b0 [ 1121.075955][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.081596][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1121.086974][ C0] ? ktime_get+0x1f5/0x220 [ 1121.091390][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.097016][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.102650][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.108283][ C0] run_timer_softirq+0xb7/0x170 [ 1121.113137][ C0] handle_softirqs+0x225/0x840 [ 1121.117902][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1121.122699][ C0] __irq_exit_rcu+0xca/0x220 [ 1121.127286][ C0] irq_exit_rcu+0x9/0x30 [ 1121.131523][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1121.137161][ C0] [ 1121.140078][ C0] [ 1121.142995][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1121.148968][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1121.154598][ C0] Code: 9c 7e 02 e9 fe ff 3e f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 2e 18 00 fb f4 d7 ff 3e f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1121.174197][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 1121.180256][ C0] RAX: 00000000027611b1 RBX: ffffffff819b5450 RCX: 0000000080000001 [ 1121.188219][ C0] RDX: 0000000000000001 RSI: ffffffff8e22f141 RDI: ffffffff8c4bdd80 [ 1121.196182][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1121.204144][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1121.212105][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1121.220070][ C0] ? do_idle+0x2e0/0x540 [ 1121.224327][ C0] default_idle+0x9/0x20 [ 1121.228572][ C0] default_idle_call+0x72/0xb0 [ 1121.233339][ C0] do_idle+0x2e0/0x540 [ 1121.237415][ C0] ? __pfx_do_idle+0x10/0x10 [ 1121.242016][ C0] cpu_startup_entry+0x43/0x60 [ 1121.246778][ C0] rest_init+0x2de/0x300 [ 1121.251018][ C0] start_kernel+0x392/0x3e0 [ 1121.255516][ C0] x86_64_start_reservations+0x24/0x30 [ 1121.260973][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1121.266081][ C0] common_startup_64+0x13e/0x157 [ 1121.271030][ C0] [ 1121.274036][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1121.281307][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.291798][ C0] Tainted: [L]=SOFTLOCKUP [ 1121.296110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1121.306237][ C0] Call Trace: [ 1121.309502][ C0] [ 1121.312334][ C0] vpanic+0x56c/0xa60 [ 1121.316334][ C0] ? __pfx__printk+0x10/0x10 [ 1121.320920][ C0] ? __pfx_vpanic+0x10/0x10 [ 1121.325425][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1121.330712][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1121.335919][ C0] panic+0xc5/0xd0 [ 1121.339651][ C0] ? __pfx_panic+0x10/0x10 [ 1121.344078][ C0] ? common_startup_64+0x13e/0x157 [ 1121.349188][ C0] __warn+0x315/0x4c0 [ 1121.353156][ C0] ? __queue_work+0xd4a/0x10a0 [ 1121.357922][ C0] ? __queue_work+0xd4a/0x10a0 [ 1121.362681][ C0] __report_bug+0x276/0x570 [ 1121.367183][ C0] ? insert_work+0x3d/0x330 [ 1121.371675][ C0] ? __queue_work+0xba0/0x10a0 [ 1121.376439][ C0] ? call_timer_fn+0x192/0x5e0 [ 1121.381195][ C0] ? __queue_work+0xd4a/0x10a0 [ 1121.385956][ C0] ? __pfx___report_bug+0x10/0x10 [ 1121.390978][ C0] ? rest_init+0x2de/0x300 [ 1121.395384][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1121.400674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.406302][ C0] ? look_up_lock_class+0x57/0x110 [ 1121.411413][ C0] ? register_lock_class+0x31/0x2e0 [ 1121.416620][ C0] report_bug_entry+0x19a/0x290 [ 1121.421475][ C0] ? __queue_work+0xd66/0x10a0 [ 1121.426236][ C0] ? __queue_work+0xd6b/0x10a0 [ 1121.430995][ C0] handle_bug+0xce/0x200 [ 1121.435242][ C0] exc_invalid_op+0x1a/0x50 [ 1121.439746][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1121.444584][ C0] RIP: 0010:__queue_work+0xd66/0x10a0 [ 1121.449954][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 d6 df cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 54 c1 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1121.469550][ C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00010046 [ 1121.475613][ C0] RAX: 1ffff1100744b94e RBX: dffffc0000000000 RCX: ffffffff8e88ef40 [ 1121.483573][ C0] RDX: ffff888077da8170 RSI: ffffffff8ac2c560 RDI: ffffffff905aca30 [ 1121.491535][ C0] RBP: 0000000000000100 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 1121.499500][ C0] R10: dffffc0000000000 R11: ffffffff818df180 R12: 0000000000000008 [ 1121.507462][ C0] R13: ffff88803a25ca58 R14: ffffffff905aca30 R15: ffff888077da8170 [ 1121.515436][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.521335][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1121.526626][ C0] ? __queue_work+0xd25/0x10a0 [ 1121.531393][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1121.536767][ C0] call_timer_fn+0x192/0x5e0 [ 1121.541350][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.547154][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1121.551827][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1121.556931][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.562564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.568189][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1121.573294][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.579100][ C0] __run_timer_base+0x67e/0x8b0 [ 1121.583951][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.589592][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1121.594995][ C0] ? ktime_get+0x1f5/0x220 [ 1121.599410][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.605038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.610666][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1121.616386][ C0] run_timer_softirq+0xb7/0x170 [ 1121.621243][ C0] handle_softirqs+0x225/0x840 [ 1121.626007][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1121.630776][ C0] __irq_exit_rcu+0xca/0x220 [ 1121.635370][ C0] irq_exit_rcu+0x9/0x30 [ 1121.639608][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1121.645271][ C0] [ 1121.648187][ C0] [ 1121.651103][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1121.657074][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1121.662703][ C0] Code: 9c 7e 02 e9 fe ff 3e f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 2e 18 00 fb f4 d7 ff 3e f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1121.682299][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 1121.688360][ C0] RAX: 00000000027611b1 RBX: ffffffff819b5450 RCX: 0000000080000001 [ 1121.696319][ C0] RDX: 0000000000000001 RSI: ffffffff8e22f141 RDI: ffffffff8c4bdd80 [ 1121.704280][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1121.712243][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1121.720212][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1121.728181][ C0] ? do_idle+0x2e0/0x540 [ 1121.732439][ C0] default_idle+0x9/0x20 [ 1121.736684][ C0] default_idle_call+0x72/0xb0 [ 1121.741448][ C0] do_idle+0x2e0/0x540 [ 1121.745520][ C0] ? __pfx_do_idle+0x10/0x10 [ 1121.750121][ C0] cpu_startup_entry+0x43/0x60 [ 1121.754888][ C0] rest_init+0x2de/0x300 [ 1121.759122][ C0] start_kernel+0x392/0x3e0 [ 1121.763623][ C0] x86_64_start_reservations+0x24/0x30 [ 1121.769082][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1121.774195][ C0] common_startup_64+0x13e/0x157 [ 1121.779150][ C0] [ 1121.782382][ C0] Kernel Offset: disabled [ 1121.786689][ C0] Rebooting in 86400 seconds..