last executing test programs: 4m42.975672613s ago: executing program 0 (id=286): syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() syz_open_dev$amidi(0x0, 0x2, 0x181) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@local}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0xfe, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x28}}], 0x1, 0x4040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0]) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x98f905, 0xffffbeff, '\x00', @string=&(0x7f0000000300)=0xa3}}) 4m41.191956256s ago: executing program 0 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747bcbfe915cef1698d0d2c909ab1ad34e193a81d3e2cb6314ddd679f6e3b23ea7f34661692a7b17326e768c94703de7a95b670d9bf26865f1834ccb02dc1b0a42f82949fd1fbe09cbe618ccb8175636a0180cb5d2a2f5e44f22940f7153ff54449fd8ac7a0c4236d01bbc54d9206433a1e0700fa161f4d265d87bcb3de74729c335ad9d3113e90e88ddbb60bff0de6822a027a718bb767f01749c461ae40bae713a9c4"], &(0x7f0000000000)='GPL\x00'}, 0x80) unshare(0x3c000280) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e0001006970366772657461700000001800028014000700fc0000000000000000000000000000000a000100c6"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 4m40.190524758s ago: executing program 0 (id=293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040400) 4m37.164667056s ago: executing program 0 (id=296): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = userfaultfd(0x801) openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x4200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 4m35.442213567s ago: executing program 0 (id=299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0xfffd, 0x0) 4m34.359605493s ago: executing program 0 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000600)={0x0, 0x3d6fe80, 0x180, 0x0}) 4m18.445037976s ago: executing program 32 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000600)={0x0, 0x3d6fe80, 0x180, 0x0}) 1m6.798802168s ago: executing program 4 (id=828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="2c8fefb14851c7f16fa7e6413708", 0xe}], 0x1}, 0x20008110) 58.585003788s ago: executing program 4 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0xf, 0x3, 0xfffffffb, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x7537e112, 0x2, 0x9, 0x6, 0x40000003, 0x89, 0x1002, 0xf28, 0x20001e57, 0xb, 0x6, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sched_getaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "1e3bed42d6e454f191479a3ddafea1315f9619f1f38b2c07c458e12bd5318048c6f0d4b362f215ca0f9662e6d4504b1c6d84b9f2ef437f94789630c113554513", 0x22}, 0x48, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x30, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}]}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(r4, 0x0, 0x2004c880) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240)={0x23, 0x0, 0x0, 0xf4}, 0x10) 57.527893803s ago: executing program 4 (id=841): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 57.503801775s ago: executing program 4 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 56.873621537s ago: executing program 4 (id=845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 56.543552064s ago: executing program 4 (id=846): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) personality(0x1000000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000180000003249000082000000010000008fa2f540d6829ea8b0c27def609e0a40db356a092826489b812ae4078309fe88aeaa988668dbfbc9591a6f2de692696919aa24e3eec86b9f075607287be7cea539971147225d6497df6e14f990fbf04e0bc3233a2cc6fb1dde66"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r3, 0x40104d14, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@any, 0x1}) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x2, 0xc, 0x6e}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101"], 0x1138}}, 0xc000) 40.116929674s ago: executing program 33 (id=846): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) personality(0x1000000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000180000003249000082000000010000008fa2f540d6829ea8b0c27def609e0a40db356a092826489b812ae4078309fe88aeaa988668dbfbc9591a6f2de692696919aa24e3eec86b9f075607287be7cea539971147225d6497df6e14f990fbf04e0bc3233a2cc6fb1dde66"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r3, 0x40104d14, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@any, 0x1}) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x2, 0xc, 0x6e}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101"], 0x1138}}, 0xc000) 20.961982257s ago: executing program 3 (id=924): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) 20.278878412s ago: executing program 3 (id=926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000040)={0xfffffffd, 0x2, 0x2001, 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000040000"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) r5 = epoll_create1(0x0) fcntl$dupfd(r5, 0x25, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000002c0)="c3", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) shutdown(r0, 0x1) 17.85005024s ago: executing program 3 (id=927): socket$vsock_stream(0x28, 0x1, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 17.601085283s ago: executing program 5 (id=928): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) io_uring_setup(0x30aa, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) 16.90330133s ago: executing program 3 (id=931): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = timerfd_create(0x0, 0x800) timerfd_gettime(r3, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r5, 0xfffffe4d}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000aaa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00009e2000/0x2000)=nil, &(0x7f0000e27000/0x2000)=nil, &(0x7f00004ba000/0x3000)=nil, 0x0}, 0x7a) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001080006040001000000000000a56c14bbbbbbbbbbbbbbac1414bb"], 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 13.155410657s ago: executing program 3 (id=933): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) munlockall() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) 13.150526968s ago: executing program 5 (id=935): socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/167, 0xa7}, 0x200}], 0x1, 0x10022, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x4800) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0) 10.890923136s ago: executing program 2 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074857b9e65ac4a001f0c0000e4"], 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) 10.125549617s ago: executing program 5 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$cgroup_int(r1, &(0x7f0000000300)=0x7f, 0xfdef) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 10.124330906s ago: executing program 3 (id=939): syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_open_dev$amidi(0x0, 0x2, 0x181) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@local}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0xfe, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x28}}], 0x1, 0x4040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000400)=[0x0, 0x0]) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x98f905, 0xffffbeff, '\x00', @string=&(0x7f0000000300)=0xa3}}) 10.124125146s ago: executing program 6 (id=876): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x7ffd]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = openat$ipvs(0xffffff9c, &(0x7f0000001600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$FE_SET_PROPERTY(r2, 0x40086f52, &(0x7f0000001680)={0x2, &(0x7f0000001640)}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x12, 0x1, {0x7, @usage=0x10001, 0x0, 0x32, 0x200, 0x0, 0xfff, 0x3e1b, 0x4, @usage=0x100000000, 0x800, 0x1, [0xf48f, 0x0, 0x2, 0x7ff, 0x5, 0x7]}, {0x6, @usage=0x6, 0x0, 0x9, 0x1ff, 0x60, 0x401, 0x4, 0x40, @usage=0x7ff, 0x5, 0x5, [0x400, 0x8000000000000000, 0x9, 0x6, 0x1]}, {0x0, @struct={0x40, 0x7}, 0x0, 0xfff, 0xd, 0x80, 0x6, 0x3, 0xa0, @struct={0x8, 0x1}, 0x8001, 0x80000000, [0x7, 0xfffffffffffffffd, 0xc1a, 0x9, 0x40]}, {0x6, 0xffffffffffffff7f, 0xeb}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000600)={r7, "11f416ef941902a5d21da32c37baaa75"}) 9.059211963s ago: executing program 5 (id=941): arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1cb) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r4, r4, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) 9.010034255s ago: executing program 2 (id=942): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x18, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r5, &(0x7f0000000080)=""/252, 0xfc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) lseek(0xffffffffffffffff, 0x9, 0x0) 8.871458643s ago: executing program 6 (id=943): r0 = socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r2}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40890) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32, @ANYRES8, @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x480b0) getuid() 8.417475946s ago: executing program 1 (id=944): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x8, @random="b691f59b7fa5", 'lo\x00'}}, 0x1e) close(r1) 7.359855492s ago: executing program 2 (id=945): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) io_uring_setup(0x30aa, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) 5.393963855s ago: executing program 1 (id=946): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000), 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) 4.015651908s ago: executing program 6 (id=947): socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/167, 0xa7}, 0x200}], 0x1, 0x10022, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x4800) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0) 3.779531251s ago: executing program 2 (id=948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) readv(r0, 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 1.958066046s ago: executing program 1 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 1.935114098s ago: executing program 2 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.833239933s ago: executing program 1 (id=951): syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x1, 0x20442) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) setfsgid(0xee01) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000480)='net/icmp\x00') 1.666969422s ago: executing program 6 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008408e00020000"], 0x54}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40090) 1.629333664s ago: executing program 5 (id=953): connect$netrom(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3c0, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c000280080001"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000006febac737c1a060a38032027f800"/41, @ANYRESHEX, @ANYRES16=r1], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) 1.458011923s ago: executing program 1 (id=954): socket$vsock_stream(0x28, 0x1, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 1.457634753s ago: executing program 5 (id=955): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x18, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r5, &(0x7f0000000080)=""/252, 0xfc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) lseek(0xffffffffffffffff, 0x9, 0x0) 1.31498862s ago: executing program 6 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 1.296665241s ago: executing program 2 (id=957): socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/222, 0xde}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f0000000a00)=""/236, 0xec}], 0x3, 0x6, 0x0, 0x26) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x30040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x8000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r4, 0x0, 0x0) 0s ago: executing program 1 (id=958): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) io_uring_setup(0x30aa, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) kernel console output (not intermixed with test programs): lave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.828540][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.860106][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.867742][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.894208][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.940899][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.948192][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.974355][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.989261][ T4190] team0: Port device team_slave_0 added [ 70.998108][ T4195] team0: Port device team_slave_0 added [ 71.010096][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.017956][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.030487][ T4190] team0: Port device team_slave_1 added [ 71.044709][ T4195] team0: Port device team_slave_1 added [ 71.059459][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.066623][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.093356][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.106445][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.113865][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.140323][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.190580][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.198082][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.205318][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.213452][ T4185] Cannot create hsr debugfs directory [ 71.233489][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.240511][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.266997][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.308543][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.315869][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.342104][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.379232][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.386281][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.393825][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.401933][ T4193] Cannot create hsr debugfs directory [ 71.466203][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.473472][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.480821][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.484590][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 71.488868][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 71.501464][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 71.501473][ T4190] Cannot create hsr debugfs directory [ 71.501649][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 71.524139][ T4195] device hsr_slave_0 entered promiscuous mode [ 71.525045][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 71.538377][ T4195] device hsr_slave_1 entered promiscuous mode [ 71.545215][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.553126][ T4195] Cannot create hsr debugfs directory [ 71.565383][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.572004][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.867418][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.879242][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.895077][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.908628][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.949925][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.981322][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.990401][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.008361][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.044501][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.057883][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.067463][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.080553][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.182993][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.197011][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.216712][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.235348][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.245864][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.261743][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.278626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.289210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.310405][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.348755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.359332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.369683][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.377179][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.387681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.398702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.409677][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.417119][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.426267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.434507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.444583][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.456336][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.465901][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.479184][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.489932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.505795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.535061][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.544596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.564839][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.594576][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.603116][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.612005][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.621002][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.630594][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.642453][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.651004][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.660924][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.670895][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.678012][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.688316][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.696808][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.714779][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.724687][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.735100][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.742621][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.755298][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.788211][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.803040][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.814996][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.824407][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.834456][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.844029][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.853798][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.864435][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.873663][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.880815][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.888846][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.897953][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.907441][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.916385][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.925427][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.932579][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.940359][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.948710][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.993946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.004546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.017542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.027085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.036614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.046005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.055314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.064768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.074550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.084492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.096215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.104741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.145211][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.155141][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.165309][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.176350][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.185804][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.195189][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.205808][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.214978][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.227862][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.237253][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.250131][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.276315][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.297965][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.307882][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.335488][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.349476][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.363331][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.403587][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.420777][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.448660][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.455870][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.473815][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.505728][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.532270][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.541861][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.560284][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.567485][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.576473][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 73.583685][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 73.590354][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 73.596926][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 73.603605][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.612251][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 73.619361][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.631720][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.639299][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.648349][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.658564][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.703134][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.716334][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.725673][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.735764][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.743226][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.752184][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.760880][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.770741][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.777899][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.786000][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.795361][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.805073][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.814412][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.824402][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.833134][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.844501][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.859420][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.872238][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.905812][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.916730][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.927030][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.936106][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.944952][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.954619][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.963968][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.971788][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.979322][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.987357][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.995741][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.006316][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.021812][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.036743][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.047769][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.059387][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.081045][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.098741][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.126662][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.139293][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.189984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.199538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.213956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.223468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.233502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.243014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.265528][ T4186] device veth0_vlan entered promiscuous mode [ 74.309701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.328140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.345237][ T4186] device veth1_vlan entered promiscuous mode [ 74.363550][ T4193] device veth0_vlan entered promiscuous mode [ 74.388535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.399980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.420698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.429981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.441003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.452680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.462202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.484165][ T4185] device veth0_vlan entered promiscuous mode [ 74.506410][ T4193] device veth1_vlan entered promiscuous mode [ 74.524641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.533606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.545240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.553534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.562506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.570542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.587264][ T4186] device veth0_macvtap entered promiscuous mode [ 74.605115][ T4186] device veth1_macvtap entered promiscuous mode [ 74.620767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.629593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.639140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.647764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.656571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.665143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.679697][ T4185] device veth1_vlan entered promiscuous mode [ 74.694155][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.713008][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.729575][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.743011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.753687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.765308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.774128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.781984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.789509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.798760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.807985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.817328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.829933][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.847083][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.875152][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.889420][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898571][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.940676][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.950250][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.989621][ T4193] device veth0_macvtap entered promiscuous mode [ 74.998676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.009647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.020104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.048404][ T4185] device veth0_macvtap entered promiscuous mode [ 75.061912][ T4193] device veth1_macvtap entered promiscuous mode [ 75.071115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.090677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.108844][ T4185] device veth1_macvtap entered promiscuous mode [ 75.125786][ T4195] device veth0_vlan entered promiscuous mode [ 75.136071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.146551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.155654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.165220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.174408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.183741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.233032][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.255665][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.270927][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.301705][ T4195] device veth1_vlan entered promiscuous mode [ 75.310468][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.332557][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.343113][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.353635][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.365227][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.374994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.384226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.395679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.408551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.418618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.430880][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.442244][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.454412][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.471826][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.479860][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.501500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.510010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.522169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.531100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.545944][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.554889][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.564299][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.576803][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.591834][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.602667][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.613026][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.623624][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.635449][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.643894][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 75.650354][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 75.656885][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 75.663542][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 75.669646][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 75.690408][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.700615][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.713462][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.723512][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.732961][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.741801][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.778086][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.787129][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.808955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.819110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.828417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.837750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.847236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.858348][ T4195] device veth0_macvtap entered promiscuous mode [ 75.870881][ T4195] device veth1_macvtap entered promiscuous mode [ 75.950506][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.968807][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.986984][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.998097][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.016962][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.029037][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.049561][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.083040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.097098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.106712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.115931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.125824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.136775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.151619][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.174220][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.189523][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.207741][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.217718][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.240001][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.244482][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.279200][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.328801][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.336986][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.341945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.437712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.458243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.469091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.486548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.510542][ T4190] device veth0_vlan entered promiscuous mode [ 76.806548][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.821679][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.830989][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.844047][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.054365][ T4190] device veth1_vlan entered promiscuous mode [ 77.122593][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.130489][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.154050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.275817][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.292931][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.295680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.310525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.327594][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.341896][ T4190] device veth0_macvtap entered promiscuous mode [ 77.353910][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.363683][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.382435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.394558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.405556][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.423889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.439246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.462923][ T4190] device veth1_macvtap entered promiscuous mode [ 77.509983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.599560][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.651727][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.684639][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.710088][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722238][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 77.729315][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 77.743177][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.743213][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 77.763226][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 77.769696][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 77.779599][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.796519][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.814527][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.833022][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.848752][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.869949][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.889261][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.900858][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.916589][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.926827][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.945035][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.959900][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.977324][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.989905][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.005446][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.018311][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.035530][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.049179][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.067905][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.974796][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.005605][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.045869][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.058637][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067570][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.203988][ T4295] process 'syz.1.11' launched './file2' with NULL argv: empty string added [ 79.302142][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.315257][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.387848][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.433434][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 79.440149][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 79.469172][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.481235][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.496603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.514858][ T4297] ceph: No mds server is up or the cluster is laggy [ 79.576167][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 79.609319][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 79.891453][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.472321][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.490558][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.683078][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.961605][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 82.970775][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 84.291148][ C0] sched: RT throttling activated [ 84.291316][ T13] usb 2-1: Product: syz [ 84.300535][ T13] usb 2-1: Manufacturer: syz [ 84.431637][ T13] usb 2-1: can't set config #1, error -71 [ 84.471299][ T13] usb 2-1: USB disconnect, device number 2 [ 84.678911][ T4358] sctp: [Deprecated]: syz.1.26 (pid 4358) Use of int in max_burst socket option. [ 84.678911][ T4358] Use struct sctp_assoc_value instead [ 84.700406][ T4358] sctp: [Deprecated]: syz.1.26 (pid 4358) Use of int in maxseg socket option. [ 84.700406][ T4358] Use struct sctp_assoc_value instead [ 85.596410][ T4365] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 87.163305][ T21] cfg80211: failed to load regulatory.db [ 88.515738][ T4394] mmap: syz.1.36 (4394) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 89.536892][ T4404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.303985][ T4422] netlink: 268 bytes leftover after parsing attributes in process `syz.0.47'. [ 91.321415][ T4422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.47'. [ 91.620135][ T4429] input: syz0 as /devices/virtual/input/input5 [ 92.284530][ T26] audit: type=1326 audit(1776527344.946:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 92.436600][ T26] audit: type=1326 audit(1776527345.406:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 92.558529][ T26] audit: type=1326 audit(1776527345.406:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 92.681188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.701162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.711164][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.721165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.731159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.611190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 93.631172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 93.701198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 93.721229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 93.741167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 94.290852][ T4472] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.370852][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 97.335925][ T4497] loop2: detected capacity change from 0 to 4 [ 97.359253][ T4497] Dev loop2: unable to read RDB block 4 [ 97.366667][ T4497] loop2: unable to read partition table [ 97.380640][ T4497] loop2: partition table beyond EOD, truncated [ 97.412526][ T4497] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 102.369237][ T4564] syz.0.95 uses obsolete (PF_INET,SOCK_PACKET) [ 103.563586][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.981529][ T7] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 105.138694][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.288314][ T7] usb 3-1: Product: syz [ 106.292905][ T7] usb 3-1: Manufacturer: syz [ 106.297557][ T7] usb 3-1: SerialNumber: syz [ 106.370555][ T7] usb 3-1: config 0 descriptor?? [ 106.411370][ T7] usb 3-1: can't set config #0, error -71 [ 106.437100][ T7] usb 3-1: USB disconnect, device number 2 [ 107.799329][ T4642] loop2: detected capacity change from 0 to 7 [ 107.817429][ T4644] capability: warning: `syz.0.123' uses 32-bit capabilities (legacy support in use) [ 107.845370][ T3561] Dev loop2: unable to read RDB block 7 [ 107.868369][ T3561] loop2: AHDI p1 p2 p3 [ 107.891078][ T3561] loop2: partition table partially beyond EOD, truncated [ 107.918504][ T3561] loop2: p1 start 1818582900 is beyond EOD, truncated [ 107.931811][ T4644] program syz.0.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.946153][ T3561] loop2: p3 start 335544320 is beyond EOD, truncated [ 107.970377][ T4642] Dev loop2: unable to read RDB block 7 [ 107.986859][ T4642] loop2: AHDI p1 p2 p3 [ 107.991404][ T4642] loop2: partition table partially beyond EOD, truncated [ 108.001689][ T4642] loop2: p1 start 1818582900 is beyond EOD, truncated [ 108.021223][ T4642] loop2: p3 start 335544320 is beyond EOD, truncated [ 108.069865][ T4193] Dev loop2: unable to read RDB block 7 [ 108.080742][ T4193] loop2: AHDI p1 p2 p3 [ 108.107027][ T4193] loop2: partition table partially beyond EOD, truncated [ 108.282604][ T4193] loop2: p1 start 1818582900 is beyond EOD, truncated [ 108.299459][ T4193] loop2: p3 start 335544320 is beyond EOD, truncated [ 113.355233][ T4681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.555903][ T4688] loop2: detected capacity change from 0 to 32768 [ 114.676124][ T4688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.136 (4688) [ 114.769212][ T4688] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 114.789485][ T4698] tipc: Started in network mode [ 114.798511][ T4698] tipc: Node identity f622a759f7f6, cluster identity 4711 [ 114.812563][ T4688] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.834100][ T4698] tipc: Enabled bearer , priority 0 [ 114.851003][ T4688] BTRFS info (device loop2): trying to use backup root at mount time [ 114.885769][ T4688] BTRFS info (device loop2): setting nodatasum [ 114.911021][ T4688] BTRFS info (device loop2): enabling ssd optimizations [ 114.945669][ T4688] BTRFS info (device loop2): using spread ssd allocation scheme [ 114.974508][ T4699] device syzkaller0 entered promiscuous mode [ 114.984683][ T4688] BTRFS info (device loop2): turning on flush-on-commit [ 115.031294][ T4688] BTRFS info (device loop2): force zlib compression, level 3 [ 115.049006][ T4697] tipc: Resetting bearer [ 115.066948][ T4688] BTRFS info (device loop2): using free space tree [ 115.100322][ T4688] BTRFS info (device loop2): has skinny extents [ 115.250139][ T4697] tipc: Disabling bearer [ 115.496205][ T26] audit: type=1800 audit(1776527368.586:5): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 116.123983][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.548290][ T4733] ODEBUG: Out of memory. ODEBUG disabled [ 117.565548][ T4733] syz.3.143 (4733): drop_caches: 2 [ 119.865434][ T4770] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 120.283796][ T4772] tipc: Started in network mode [ 120.288792][ T4772] tipc: Node identity 2e5867b70f73, cluster identity 4711 [ 120.447796][ T4772] tipc: Enabled bearer , priority 0 [ 120.573084][ T4772] device syzkaller0 entered promiscuous mode [ 120.626035][ T4771] tipc: Resetting bearer [ 121.185353][ T4345] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 121.503999][ T4771] tipc: Disabling bearer [ 122.483210][ T4796] netlink: 104 bytes leftover after parsing attributes in process `syz.0.161'. [ 123.082440][ T4228] Bluetooth: hci5: command 0x1003 tx timeout [ 123.098142][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 123.370267][ T4786] syz.1.155 (4786) used greatest stack depth: 17168 bytes left [ 123.914050][ T4818] tipc: Enabled bearer , priority 0 [ 124.570517][ T4818] device syzkaller0 entered promiscuous mode [ 124.631854][ T4815] tipc: Resetting bearer [ 124.762025][ T4815] tipc: Disabling bearer [ 125.704083][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 125.710663][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 125.936125][ T4843] netlink: 312 bytes leftover after parsing attributes in process `syz.3.177'. [ 126.078588][ T4843] netlink: 1 bytes leftover after parsing attributes in process `syz.3.177'. [ 127.127197][ T4849] loop0: detected capacity change from 0 to 32768 [ 127.425698][ T4849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.179 (4849) [ 127.785498][ T4849] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 127.816594][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 127.831341][ T4849] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 127.861497][ T4849] BTRFS info (device loop0): trying to use backup root at mount time [ 127.869848][ T4849] BTRFS info (device loop0): setting nodatasum [ 127.927456][ T4849] BTRFS info (device loop0): enabling ssd optimizations [ 127.947743][ T4849] BTRFS info (device loop0): using spread ssd allocation scheme [ 127.981330][ T4849] BTRFS info (device loop0): turning on flush-on-commit [ 128.066727][ T4849] BTRFS info (device loop0): force zlib compression, level 3 [ 128.112266][ T4849] BTRFS info (device loop0): using free space tree [ 128.139376][ T4849] BTRFS info (device loop0): has skinny extents [ 128.277282][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 128.321763][ T4870] netlink: 'syz.3.186': attribute type 14 has an invalid length. [ 128.329606][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 128.354212][ T4870] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.363907][ T4870] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.372737][ T4870] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.381539][ T4870] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.661218][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 128.709310][ T4870] netlink: 'syz.3.186': attribute type 14 has an invalid length. [ 128.764296][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 128.860795][ T4870] Zero length message leads to an empty skb [ 133.026825][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048631][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.975653][ T4943] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 139.070563][ T4943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.310419][ T4947] bond1: (slave dummy0): making interface the new active one [ 139.320840][ T4947] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 139.331345][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 144.391402][ T4996] loop3: detected capacity change from 0 to 32768 [ 144.450282][ T4996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.219 (4996) [ 145.329895][ T4996] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 145.351301][ T4996] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.395987][ T4996] BTRFS info (device loop3): trying to use backup root at mount time [ 145.414128][ T4996] BTRFS info (device loop3): setting nodatasum [ 145.441266][ T4996] BTRFS info (device loop3): enabling ssd optimizations [ 145.450640][ T4996] BTRFS info (device loop3): using spread ssd allocation scheme [ 145.508328][ T4996] BTRFS info (device loop3): turning on flush-on-commit [ 145.541572][ T4996] BTRFS info (device loop3): force zlib compression, level 3 [ 145.549133][ T4996] BTRFS info (device loop3): using free space tree [ 145.620403][ T4996] BTRFS info (device loop3): has skinny extents [ 148.351847][ T4996] BTRFS error (device loop3): open_ctree failed: -12 [ 150.910051][ T5076] overlayfs: missing 'lowerdir' [ 155.797786][ T5050] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 155.830888][ T5050] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.041244][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.317595][ T5105] loop3: detected capacity change from 0 to 32768 [ 156.352696][ T5105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.236 (5105) [ 156.411385][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.437063][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.452265][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.505625][ T5105] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 156.525008][ T5105] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 156.561843][ T5105] BTRFS info (device loop3): trying to use backup root at mount time [ 156.598952][ T5105] BTRFS info (device loop3): setting nodatasum [ 156.622267][ T5105] BTRFS info (device loop3): enabling ssd optimizations [ 156.641398][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 156.656179][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 156.674792][ T5105] BTRFS info (device loop3): using spread ssd allocation scheme [ 156.691248][ T7] usb 5-1: Product: syz [ 156.696820][ T5105] BTRFS info (device loop3): turning on flush-on-commit [ 156.704343][ T7] usb 5-1: Manufacturer: syz [ 156.714965][ T7] usb 5-1: SerialNumber: syz [ 156.722109][ T5105] BTRFS info (device loop3): force zlib compression, level 3 [ 156.751784][ T5105] BTRFS info (device loop3): using free space tree [ 156.791394][ T5105] BTRFS info (device loop3): has skinny extents [ 157.020774][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 157.225024][ T7] usb 5-1: USB disconnect, device number 2 [ 157.252846][ T26] audit: type=1800 audit(1776527410.346:6): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.236" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 157.275366][ T7] usblp0: removed [ 157.627592][ T5149] BTRFS info (device loop3): balance: start -d -m [ 157.706536][ T5149] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 157.771257][ T5050] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.821260][ T5050] usb 4-1: Using ep0 maxpacket: 8 [ 159.273773][ T5149] BTRFS info (device loop3): balance: canceled [ 160.252887][ T5050] usb 4-1: device descriptor read/all, error -71 [ 162.091856][ T5190] block nbd4: NBD_DISCONNECT [ 166.020447][ T5209] comedi comedi0: Minor 2 could not be opened [ 166.201270][ T4909] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 167.209033][ T5202] loop2: detected capacity change from 0 to 32768 [ 167.502047][ T5202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.264 (5202) [ 169.200745][ T4909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.288609][ T4909] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 170.990566][ T4909] usb 4-1: can't read configurations, error -71 [ 171.256251][ T5202] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 171.379520][ T5202] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 171.508843][ T5202] BTRFS info (device loop2): trying to use backup root at mount time [ 171.519115][ T5202] BTRFS info (device loop2): setting nodatasum [ 171.525504][ T5202] BTRFS info (device loop2): enabling ssd optimizations [ 171.541136][ T5202] BTRFS info (device loop2): using spread ssd allocation scheme [ 171.559257][ T5202] BTRFS info (device loop2): turning on flush-on-commit [ 171.601235][ T5202] BTRFS info (device loop2): force zlib compression, level 3 [ 171.638670][ T5202] BTRFS info (device loop2): using free space tree [ 171.861309][ T5202] BTRFS info (device loop2): has skinny extents [ 173.983790][ T4944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4944) [ 174.009164][ T5202] BTRFS error (device loop2): open_ctree failed: -12 [ 178.247442][ T5338] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 178.755771][ T5351] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 178.763928][ T5351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.297'. [ 178.774750][ T5351] device dummy0 entered promiscuous mode [ 178.792947][ T5351] bridge0: port 3(dummy0) entered blocking state [ 178.799806][ T5351] bridge0: port 3(dummy0) entered disabled state [ 178.824401][ T5351] bridge0: port 3(dummy0) entered blocking state [ 178.831039][ T5351] bridge0: port 3(dummy0) entered forwarding state [ 182.071535][ T5371] loop3: detected capacity change from 0 to 32768 [ 182.088834][ T26] audit: type=1800 audit(1776527435.176:7): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.305" name="/" dev="fuse" ino=4 res=0 errno=0 [ 182.148449][ T5371] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 182.182675][ T5371] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 182.194528][ T5371] BTRFS info (device loop3): trying to use backup root at mount time [ 182.218848][ T5371] BTRFS info (device loop3): setting nodatasum [ 182.274258][ T5371] BTRFS info (device loop3): enabling ssd optimizations [ 182.301253][ T5371] BTRFS info (device loop3): using spread ssd allocation scheme [ 182.332498][ T5371] BTRFS info (device loop3): turning on flush-on-commit [ 182.340262][ T5371] BTRFS info (device loop3): force zlib compression, level 3 [ 182.451441][ T5371] BTRFS info (device loop3): using free space tree [ 182.458095][ T5371] BTRFS info (device loop3): has skinny extents [ 185.003392][ T5371] BTRFS error (device loop3): open_ctree failed: -12 [ 185.215163][ T5386] loop4: detected capacity change from 0 to 32768 [ 185.270177][ T5386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.308 (5386) [ 186.121345][ T5386] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 186.130144][ T5386] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 186.348255][ T5386] BTRFS info (device loop4): trying to use backup root at mount time [ 186.375544][ T5386] BTRFS info (device loop4): setting nodatasum [ 186.383144][ T5386] BTRFS info (device loop4): enabling ssd optimizations [ 186.390246][ T5386] BTRFS info (device loop4): using spread ssd allocation scheme [ 186.538121][ T5386] BTRFS info (device loop4): turning on flush-on-commit [ 186.844945][ T5386] BTRFS info (device loop4): force zlib compression, level 3 [ 187.001305][ T5386] BTRFS info (device loop4): using free space tree [ 187.007900][ T5386] BTRFS info (device loop4): has skinny extents [ 187.575217][ T5386] BTRFS error (device loop4): open_ctree failed: -12 [ 194.944821][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.703362][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 197.754323][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 197.791940][ T4229] Bluetooth: hci3: command 0x0406 tx timeout [ 197.831216][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 197.881143][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 198.245768][ T5535] chnl_net:caif_netlink_parms(): no params data found [ 199.393341][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.445912][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.454503][ T5535] device bridge_slave_0 entered promiscuous mode [ 199.474732][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.501279][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.525141][ T5535] device bridge_slave_1 entered promiscuous mode [ 199.619398][ T5535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.665828][ T5535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.794368][ T5535] team0: Port device team_slave_0 added [ 199.826263][ T5535] team0: Port device team_slave_1 added [ 199.879346][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.917419][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.961189][ T5050] Bluetooth: hci5: command 0x0409 tx timeout [ 199.995141][ T5535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.028457][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.057414][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.134563][ T5535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.279152][ T5535] device hsr_slave_0 entered promiscuous mode [ 200.306977][ T5535] device hsr_slave_1 entered promiscuous mode [ 200.334351][ T5535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.358374][ T5535] Cannot create hsr debugfs directory [ 200.854180][ T5535] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.893243][ T5535] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.922934][ T5557] loop2: detected capacity change from 0 to 32768 [ 200.952435][ T5535] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.974172][ T5557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.347 (5557) [ 200.999079][ T5535] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.027216][ T5557] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 201.060220][ T5557] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 201.128390][ T5557] BTRFS info (device loop2): trying to use backup root at mount time [ 201.171256][ T5557] BTRFS info (device loop2): setting nodatasum [ 201.177507][ T5557] BTRFS info (device loop2): enabling ssd optimizations [ 201.231777][ T5557] BTRFS info (device loop2): using spread ssd allocation scheme [ 201.239512][ T5557] BTRFS info (device loop2): turning on flush-on-commit [ 201.301222][ T5557] BTRFS info (device loop2): force zlib compression, level 3 [ 201.308804][ T5557] BTRFS info (device loop2): using free space tree [ 201.365172][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.371373][ T5557] BTRFS info (device loop2): has skinny extents [ 201.417041][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.450251][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.474467][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.521681][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.571964][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.625317][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.632503][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.640568][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.239264][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 202.261767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.407304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.833431][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.840617][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.984210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.377154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.386370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.397794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.685814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.889780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.898826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.902429][ T5557] BTRFS error (device loop2): open_ctree failed: -22 [ 203.920907][ T5535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.993192][ T5535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.063242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.077250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.131055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.184373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.236755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.259328][ T4944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4944) [ 204.340255][ T4231] Bluetooth: hci5: command 0x040f tx timeout [ 204.548763][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.960164][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.088102][ T5535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.361953][ T5319] Bluetooth: hci5: command 0x0419 tx timeout [ 209.622958][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.676344][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.755071][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.772189][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.818567][ T5535] device veth0_vlan entered promiscuous mode [ 209.882450][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.913049][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.987305][ T5535] device veth1_vlan entered promiscuous mode [ 210.161582][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.169893][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.216437][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.258433][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.098857][ T5535] device veth0_macvtap entered promiscuous mode [ 211.182847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.238530][ T5535] device veth1_macvtap entered promiscuous mode [ 211.292041][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.323071][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.391202][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.467207][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.719535][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.019213][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.253633][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.341299][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.409984][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.458229][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.504957][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.549359][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.562512][ T5640] loop3: detected capacity change from 0 to 32768 [ 212.572572][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.606017][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.642502][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.702467][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.751276][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.792639][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.706899][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.751144][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.815255][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.825222][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.835841][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.847767][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.856000][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.889475][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.048407][ T5535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.247713][ T5535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.590381][ T5535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.631276][ T5535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.142131][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.171207][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.221018][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.263568][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.289141][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.438177][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.452030][ T5677] loop1: detected capacity change from 0 to 32768 [ 215.518173][ T5677] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 215.560321][ T5677] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 215.619773][ T5677] BTRFS info (device loop1): trying to use backup root at mount time [ 215.650032][ T5677] BTRFS info (device loop1): setting nodatasum [ 215.741167][ T5677] BTRFS info (device loop1): enabling ssd optimizations [ 215.748199][ T5677] BTRFS info (device loop1): using spread ssd allocation scheme [ 215.816395][ T5677] BTRFS info (device loop1): turning on flush-on-commit [ 215.871360][ T5677] BTRFS info (device loop1): force zlib compression, level 3 [ 215.909537][ T5677] BTRFS info (device loop1): using free space tree [ 215.960079][ T5677] BTRFS info (device loop1): has skinny extents [ 215.984283][ T4345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.121572][ T4756] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.492541][ T4756] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.587942][ T4756] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.744549][ T4756] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.792390][ T4756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.891865][ T5686] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.939569][ T5697] device syzkaller0 entered promiscuous mode [ 217.476734][ T5677] BTRFS error (device loop1): open_ctree failed: -12 [ 217.562092][ T4944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4944) [ 217.698682][ T4345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.922884][ T4345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.801692][ T4345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.133524][ T4232] usb 6-1: USB disconnect, device number 2 [ 222.833258][ T4345] tipc: Left network mode [ 224.382870][ T5769] loop1: detected capacity change from 0 to 32768 [ 224.464654][ T5769] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 224.521656][ T5769] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 224.579437][ T5769] BTRFS info (device loop1): trying to use backup root at mount time [ 224.595753][ T5769] BTRFS info (device loop1): setting nodatasum [ 224.608189][ T5769] BTRFS info (device loop1): enabling ssd optimizations [ 224.631219][ T5769] BTRFS info (device loop1): using spread ssd allocation scheme [ 224.771371][ T5769] BTRFS info (device loop1): turning on flush-on-commit [ 224.778410][ T5769] BTRFS info (device loop1): force zlib compression, level 3 [ 226.105264][ T5769] BTRFS info (device loop1): using free space tree [ 226.136795][ T5769] BTRFS info (device loop1): has skinny extents [ 227.671526][ T5769] BTRFS error (device loop1): open_ctree failed: -12 [ 229.911220][ T5836] loop3: detected capacity change from 0 to 32768 [ 230.154169][ T5836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.398 (5836) [ 230.877549][ T5836] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 230.951241][ T5836] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 231.039633][ T5836] BTRFS info (device loop3): trying to use backup root at mount time [ 231.075453][ T5836] BTRFS info (device loop3): setting nodatasum [ 231.111263][ T5836] BTRFS info (device loop3): enabling ssd optimizations [ 231.155323][ T5836] BTRFS info (device loop3): using spread ssd allocation scheme [ 231.178512][ T5836] BTRFS info (device loop3): turning on flush-on-commit [ 231.221235][ T5836] BTRFS info (device loop3): force zlib compression, level 3 [ 231.432257][ T5836] BTRFS info (device loop3): using free space tree [ 231.439287][ T5836] BTRFS info (device loop3): has skinny extents [ 233.781960][ T5836] BTRFS error (device loop3): open_ctree failed: -12 [ 233.828327][ T4345] device hsr_slave_0 left promiscuous mode [ 233.848653][ T4345] device hsr_slave_1 left promiscuous mode [ 233.891564][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.911299][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.934610][ T5721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5721) [ 234.130565][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.159980][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.172057][ T4345] device bridge_slave_1 left promiscuous mode [ 234.180389][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.359685][ T4345] device bridge_slave_0 left promiscuous mode [ 234.406699][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.571286][ T4345] device veth1_macvtap left promiscuous mode [ 234.604080][ T4345] device veth0_macvtap left promiscuous mode [ 234.641981][ T4345] device veth1_vlan left promiscuous mode [ 234.648081][ T4345] device veth0_vlan left promiscuous mode [ 234.673255][ T5912] loop2: detected capacity change from 0 to 32768 [ 234.751545][ T5912] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 234.861210][ T5912] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 234.911527][ T5912] BTRFS info (device loop2): trying to use backup root at mount time [ 234.919703][ T5912] BTRFS info (device loop2): setting nodatasum [ 235.111245][ T5912] BTRFS info (device loop2): enabling ssd optimizations [ 235.132190][ T5912] BTRFS info (device loop2): using spread ssd allocation scheme [ 235.178505][ T5912] BTRFS info (device loop2): turning on flush-on-commit [ 236.258865][ T5912] BTRFS info (device loop2): force zlib compression, level 3 [ 236.293943][ T5912] BTRFS info (device loop2): using free space tree [ 236.391242][ T5912] BTRFS info (device loop2): has skinny extents [ 238.442938][ T5912] BTRFS error (device loop2): open_ctree failed: -12 [ 238.753719][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 238.819437][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 238.838465][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.859424][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.964429][ T4345] bond0 (unregistering): Released all slaves [ 240.829340][ T5962] device syzkaller0 entered promiscuous mode [ 248.158663][ T6049] device syzkaller0 entered promiscuous mode [ 249.075831][ T6067] loop3: detected capacity change from 0 to 32768 [ 249.155990][ T6067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.442 (6067) [ 249.259933][ T6067] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 249.312666][ T6067] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 249.417907][ T6067] BTRFS info (device loop3): trying to use backup root at mount time [ 249.446807][ T6067] BTRFS info (device loop3): setting nodatasum [ 249.522492][ T6067] BTRFS info (device loop3): enabling ssd optimizations [ 249.536219][ T6067] BTRFS info (device loop3): using spread ssd allocation scheme [ 249.655537][ T6067] BTRFS info (device loop3): turning on flush-on-commit [ 249.775670][ T6067] BTRFS info (device loop3): force zlib compression, level 3 [ 249.906862][ T6067] BTRFS info (device loop3): using free space tree [ 250.029242][ T6067] BTRFS info (device loop3): has skinny extents [ 250.772081][ T26] audit: type=1800 audit(1776527503.866:8): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.442" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 251.624650][ T6127] BTRFS info (device loop3): balance: start -d -m [ 251.670825][ T6127] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 251.952712][ T26] audit: type=1800 audit(1776527505.036:9): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.442" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 252.137092][ T6127] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 253.211519][ T6127] BTRFS info (device loop3): balance: canceled [ 255.884497][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.483067][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 259.409876][ T6210] loop5: detected capacity change from 0 to 32768 [ 259.462949][ T6210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.466 (6210) [ 259.544466][ T6210] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 259.621164][ T6210] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 259.652457][ T6210] BTRFS info (device loop5): trying to use backup root at mount time [ 259.690652][ T6210] BTRFS info (device loop5): setting nodatasum [ 259.724635][ T6210] BTRFS info (device loop5): enabling ssd optimizations [ 259.763135][ T6210] BTRFS info (device loop5): using spread ssd allocation scheme [ 259.770869][ T6210] BTRFS info (device loop5): turning on flush-on-commit [ 259.839292][ T6210] BTRFS info (device loop5): force zlib compression, level 3 [ 259.867433][ T6210] BTRFS info (device loop5): using free space tree [ 259.904597][ T6210] BTRFS info (device loop5): has skinny extents [ 260.225400][ T26] audit: type=1800 audit(1776527513.316:10): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.466" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 260.647697][ T6260] BTRFS info (device loop5): balance: start -d -m [ 260.827364][ T6260] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 261.066537][ T6260] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 261.164462][ T6260] BTRFS info (device loop5): balance: canceled [ 261.819426][ T6269] loop2: detected capacity change from 0 to 32768 [ 261.866872][ T6269] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.470 (6269) [ 261.978218][ T6269] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 262.033275][ T6269] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 262.065522][ T6269] BTRFS info (device loop2): trying to use backup root at mount time [ 262.105849][ T6269] BTRFS info (device loop2): setting nodatasum [ 262.146343][ T6269] BTRFS info (device loop2): enabling ssd optimizations [ 262.165283][ T6269] BTRFS info (device loop2): using spread ssd allocation scheme [ 262.187387][ T6269] BTRFS info (device loop2): turning on flush-on-commit [ 262.371509][ T6269] BTRFS info (device loop2): force zlib compression, level 3 [ 262.515040][ T6269] BTRFS info (device loop2): using free space tree [ 262.697413][ T6269] BTRFS info (device loop2): has skinny extents [ 266.456016][ T6335] loop3: detected capacity change from 0 to 32768 [ 266.552477][ T6335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.481 (6335) [ 266.677810][ T6335] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 266.709192][ T6335] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 266.769975][ T6335] BTRFS info (device loop3): trying to use backup root at mount time [ 266.778685][ T6335] BTRFS info (device loop3): setting nodatasum [ 266.790711][ T6335] BTRFS info (device loop3): enabling ssd optimizations [ 266.801265][ T6335] BTRFS info (device loop3): using spread ssd allocation scheme [ 266.809514][ T6335] BTRFS info (device loop3): turning on flush-on-commit [ 266.859130][ T6335] BTRFS info (device loop3): force zlib compression, level 3 [ 266.885696][ T6335] BTRFS info (device loop3): using free space tree [ 266.925554][ T6335] BTRFS info (device loop3): has skinny extents [ 267.294672][ T26] audit: type=1800 audit(1776527520.386:11): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 267.457782][ T6340] BTRFS info (device loop3): balance: start -d -m [ 267.657680][ T6340] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 267.771625][ T4234] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 268.021750][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 268.402408][ T4234] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 268.446626][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.491138][ T4234] usb 4-1: Product: syz [ 268.495385][ T4234] usb 4-1: Manufacturer: syz [ 268.550291][ T6340] BTRFS info (device loop3): balance: canceled [ 268.579110][ T6391] loop4: detected capacity change from 0 to 32768 [ 268.599618][ T4234] usb 4-1: SerialNumber: syz [ 268.644171][ T6391] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.486 (6391) [ 268.684204][ T4234] usb 4-1: can't set config #1, error -71 [ 268.785613][ T4234] usb 4-1: USB disconnect, device number 6 [ 268.937959][ T5721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (5721) [ 269.361299][ T5048] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 269.601160][ T5048] usb 5-1: Using ep0 maxpacket: 8 [ 271.761207][ T5048] usb 5-1: unable to read config index 0 descriptor/all [ 271.769103][ T5048] usb 5-1: can't read configurations, error -71 [ 273.522192][ T6441] usb usb8: usbfs: process 6441 (syz.5.498) did not claim interface 0 before use [ 274.862913][ T6447] loop3: detected capacity change from 0 to 32768 [ 274.967866][ T6447] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 274.994582][ T6447] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 275.054970][ T6447] BTRFS info (device loop3): trying to use backup root at mount time [ 275.093464][ T6447] BTRFS info (device loop3): setting nodatasum [ 275.118337][ T6447] BTRFS info (device loop3): enabling ssd optimizations [ 275.148928][ T6447] BTRFS info (device loop3): using spread ssd allocation scheme [ 275.179461][ T6447] BTRFS info (device loop3): turning on flush-on-commit [ 275.210170][ T6447] BTRFS info (device loop3): force zlib compression, level 3 [ 275.259591][ T6447] BTRFS info (device loop3): using free space tree [ 275.299007][ T6447] BTRFS info (device loop3): has skinny extents [ 276.459163][ T26] audit: type=1800 audit(1776527529.546:12): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.499" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 276.702621][ T6500] BTRFS info (device loop3): balance: start -d -m [ 276.776199][ T6500] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 276.951229][ T4234] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 277.371235][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 277.977273][ T6500] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 278.145383][ T6500] BTRFS info (device loop3): balance: canceled [ 278.326735][ T4234] usb 4-1: unable to read config index 0 descriptor/all [ 278.337495][ T4234] usb 4-1: can't read configurations, error -71 [ 279.336065][ T6541] device vlan2 entered promiscuous mode [ 279.415733][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 283.402031][ T6578] loop1: detected capacity change from 0 to 32768 [ 283.475125][ T6578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.516 (6578) [ 283.749001][ T6578] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 283.826814][ T6578] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 283.891307][ T6578] BTRFS info (device loop1): trying to use backup root at mount time [ 283.899544][ T6578] BTRFS info (device loop1): setting nodatasum [ 284.752768][ T6578] BTRFS info (device loop1): enabling ssd optimizations [ 285.282245][ T6578] BTRFS info (device loop1): using spread ssd allocation scheme [ 285.293689][ T6578] BTRFS info (device loop1): turning on flush-on-commit [ 285.300921][ T6578] BTRFS info (device loop1): force zlib compression, level 3 [ 285.308992][ T6578] BTRFS info (device loop1): using free space tree [ 285.316077][ T6578] BTRFS info (device loop1): has skinny extents [ 285.797962][ T6578] BTRFS error (device loop1): open_ctree failed: -12 [ 294.041343][ T4757] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 295.191234][ T4757] usb 2-1: Using ep0 maxpacket: 16 [ 295.326980][ T4757] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 295.344402][ T4757] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 296.071982][ T4757] usb 2-1: config 0 interface 0 has no altsetting 0 [ 296.348971][ T4757] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 296.378557][ T4757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.398821][ T4757] usb 2-1: Product: syz [ 296.409271][ T4757] usb 2-1: Manufacturer: syz [ 296.419121][ T4757] usb 2-1: SerialNumber: syz [ 296.457047][ T4757] usb 2-1: config 0 descriptor?? [ 296.766542][ T4757] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 297.006722][ T4757] usb 2-1: USB disconnect, device number 3 [ 297.025460][ T3546] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 298.187791][ T6774] comedi comedi0: Minor 2 could not be opened [ 302.167622][ T6813] comedi comedi0: Minor 2 could not be opened [ 307.507438][ T6865] comedi comedi0: Minor 2 could not be opened [ 310.013564][ T4198] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 310.014934][ T4198] Bluetooth: hci1: Malicious advertising data. [ 312.746389][ T6944] device syzkaller0 entered promiscuous mode [ 315.114244][ T6987] tipc: Enabling of bearer rejected, failed to enable media [ 315.265037][ T6987] device syzkaller0 entered promiscuous mode [ 317.516779][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.560331][ T7027] tipc: Enabling of bearer rejected, failed to enable media [ 319.914230][ T7030] device syzkaller0 entered promiscuous mode [ 321.136713][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.154086][ T7055] bond1: (slave dummy0): Releasing active interface [ 321.198563][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.220132][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.252653][ T7055] device bridge_slave_0 left promiscuous mode [ 321.303059][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.374985][ T7055] device bridge_slave_1 left promiscuous mode [ 321.395806][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.439643][ T7055] bond0: (slave bond_slave_0): Releasing backup interface [ 321.489074][ T7055] bond0: (slave bond_slave_1): Releasing backup interface [ 321.658833][ T7055] team0: Port device team_slave_0 removed [ 321.809278][ T7055] team0: Port device team_slave_1 removed [ 321.855839][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.897870][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.018556][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.108430][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.533419][ T7080] tipc: Enabling of bearer rejected, failed to enable media [ 323.624106][ T7080] device syzkaller0 entered promiscuous mode [ 325.288143][ T4287] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 325.523147][ T4234] Bluetooth: hci5: command 0x0406 tx timeout [ 333.147859][ T7172] tipc: Enabling of bearer rejected, failed to enable media [ 333.323646][ T7172] device syzkaller0 entered promiscuous mode [ 333.422008][ T7177] usb usb8: usbfs: process 7177 (syz.5.672) did not claim interface 0 before use [ 336.008757][ T7199] raw_sendmsg: syz.2.678 forgot to set AF_INET. Fix it! [ 337.059983][ T7218] tipc: Enabling of bearer rejected, failed to enable media [ 337.179671][ T7218] device syzkaller0 entered promiscuous mode [ 338.342769][ T7227] block nbd5: NBD_DISCONNECT [ 341.494758][ T7280] tipc: Enabling of bearer rejected, failed to enable media [ 341.664767][ T7281] device syzkaller0 entered promiscuous mode [ 344.297220][ T7287] binder: 7286:7287 ioctl c004500a 200000000040 returned -22 [ 348.814034][ T263] block nbd4: Attempted send on invalid socket [ 348.822220][ T263] blk_update_request: I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.835555][ T7323] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 349.810651][ T7325] tipc: Enabling of bearer rejected, failed to enable media [ 349.900746][ T7325] device syzkaller0 entered promiscuous mode [ 349.939480][ T7337] comedi comedi0: Minor 2 could not be opened [ 350.491954][ T7350] 9pnet_virtio: no channels available for device syz [ 351.884532][ T4751] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 352.867879][ T4751] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.901284][ T4751] usb 2-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 352.921206][ T4751] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.951553][ T4751] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 229, changing to 11 [ 352.997659][ T4751] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33203, setting to 1024 [ 353.151281][ T4751] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.160408][ T4751] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.220621][ T4751] usb 2-1: Product: syz [ 353.228493][ T4751] usb 2-1: Manufacturer: syz [ 353.292276][ T4751] cdc_wdm 2-1:1.0: skipping garbage [ 353.297571][ T4751] cdc_wdm 2-1:1.0: skipping garbage [ 353.358555][ T4751] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 353.360277][ T7379] tipc: Enabling of bearer rejected, failed to enable media [ 353.378073][ T4751] cdc_wdm 2-1:1.0: Unknown control protocol [ 353.484156][ T7379] device syzkaller0 entered promiscuous mode [ 355.874085][ T13] usb 2-1: USB disconnect, device number 4 [ 355.901486][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 358.298006][ T7430] device syzkaller0 entered promiscuous mode [ 361.682767][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 361.692108][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 361.719349][ T7463] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.728434][ T7463] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.737293][ T7463] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.746234][ T7463] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.041832][ T7469] netlink: 80 bytes leftover after parsing attributes in process `syz.5.761'. [ 363.310625][ T7475] device syzkaller0 entered promiscuous mode [ 363.512155][ T7494] block nbd4: NBD_DISCONNECT [ 364.307388][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.770'. [ 364.688738][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 364.704219][ T7503] device dummy0 entered promiscuous mode [ 364.711721][ T7503] device netdevsim0 entered promiscuous mode [ 364.733301][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 368.151130][ T26] audit: type=1326 audit(1776527621.036:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 368.180456][ T26] audit: type=1326 audit(1776527621.046:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 368.411095][ T26] audit: type=1326 audit(1776527621.046:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 368.433923][ T26] audit: type=1326 audit(1776527621.046:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 368.491746][ T7539] block nbd4: NBD_DISCONNECT [ 368.596718][ T26] audit: type=1326 audit(1776527621.046:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 369.983179][ T26] audit: type=1326 audit(1776527621.056:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f99b633b819 code=0x7ffc0000 [ 370.270383][ T7544] device syzkaller0 entered promiscuous mode [ 370.923025][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.789'. [ 373.181981][ T7595] block nbd1: NBD_DISCONNECT [ 378.781596][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.134744][ T7610] device syzkaller0 entered promiscuous mode [ 379.561244][ T4231] Bluetooth: hci4: command 0x1003 tx timeout [ 379.568785][ T4198] Bluetooth: hci4: sending frame failed (-49) [ 379.710732][ T4326] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.021661][ T4326] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.366255][ T4326] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.569701][ T4326] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.529311][ T4228] Bluetooth: hci4: command 0x1001 tx timeout [ 382.535694][ T4198] Bluetooth: hci4: sending frame failed (-49) [ 383.021491][ T7642] block nbd2: NBD_DISCONNECT [ 384.727949][ T4233] Bluetooth: hci4: command 0x1009 tx timeout [ 385.743041][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 386.070900][ T7678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.291141][ T4174] Bluetooth: hci5: command 0x0409 tx timeout [ 386.337451][ T7680] device bond_slave_0 entered promiscuous mode [ 386.344919][ T7680] device bond_slave_1 entered promiscuous mode [ 386.354858][ T7680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.369049][ T7680] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 386.399473][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 386.649685][ T7693] device syzkaller0 entered promiscuous mode [ 388.050373][ T7716] block nbd3: NBD_DISCONNECT [ 388.117190][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.154676][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.192718][ T7652] device bridge_slave_0 entered promiscuous mode [ 388.216225][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.299961][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.317896][ T7652] device bridge_slave_1 entered promiscuous mode [ 388.371177][ T4174] Bluetooth: hci5: command 0x041b tx timeout [ 388.607321][ T4326] device hsr_slave_0 left promiscuous mode [ 388.620331][ T4326] device hsr_slave_1 left promiscuous mode [ 388.641945][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.412756][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.456769][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.465061][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.478573][ T4326] device bridge_slave_1 left promiscuous mode [ 389.485618][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.516041][ T4326] device bridge_slave_0 left promiscuous mode [ 389.528620][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.744452][ T4326] device veth1_macvtap left promiscuous mode [ 389.750558][ T4326] device veth0_macvtap left promiscuous mode [ 389.761226][ T4326] device veth1_vlan left promiscuous mode [ 389.773639][ T4326] device veth0_vlan left promiscuous mode [ 390.796302][ T4751] Bluetooth: hci5: command 0x040f tx timeout [ 393.709138][ T4751] Bluetooth: hci5: command 0x0419 tx timeout [ 395.185825][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 395.307853][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 395.411595][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.510214][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.800886][ T4326] bond0 (unregistering): Released all slaves [ 395.889743][ T7723] device syzkaller0 entered promiscuous mode [ 396.046508][ T7765] device syzkaller0 entered promiscuous mode [ 396.127752][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.163776][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.161592][ T4231] Bluetooth: hci4: command 0x1003 tx timeout [ 397.270696][ T4196] Bluetooth: hci4: sending frame failed (-49) [ 397.401753][ T7652] team0: Port device team_slave_0 added [ 397.434520][ T7652] team0: Port device team_slave_1 added [ 397.472815][ T7786] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 397.584906][ T7786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.788313][ T7796] block nbd3: NBD_DISCONNECT [ 397.937093][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.992496][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.019283][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.312811][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.334048][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.405154][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.574900][ T7652] device hsr_slave_0 entered promiscuous mode [ 398.597186][ T7652] device hsr_slave_1 entered promiscuous mode [ 398.671105][ T7652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.721304][ T7652] Cannot create hsr debugfs directory [ 400.379661][ T4231] Bluetooth: hci4: command 0x1001 tx timeout [ 400.386735][ T4196] Bluetooth: hci4: sending frame failed (-49) [ 400.478239][ T7822] tmpfs: Unknown parameter 'usrquota' [ 401.961144][ T7652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.012251][ T7652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.063245][ T7652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.095935][ T7652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.375861][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.430177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.441486][ T4174] Bluetooth: hci4: command 0x1009 tx timeout [ 402.461813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.488441][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.523707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.559515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.595681][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.602874][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.648618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.680227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.736664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.752509][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.759644][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.813559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.893013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.932656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.975529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.018233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.051492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.099868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.117695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.147450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.184071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.207786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.246124][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.507668][ T7861] device syzkaller0 entered promiscuous mode [ 403.759300][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.787588][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.812193][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.858282][ T7872] Illegal XDP return value 4294967294, expect packet loss! [ 404.360456][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.375609][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.450481][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.482431][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.510420][ T7652] device veth0_vlan entered promiscuous mode [ 404.518960][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.535872][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.576146][ T7652] device veth1_vlan entered promiscuous mode [ 404.593599][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 404.653953][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.669749][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.693267][ T7652] device veth0_macvtap entered promiscuous mode [ 404.720089][ T7652] device veth1_macvtap entered promiscuous mode [ 404.776461][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.795130][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.831114][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.881038][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.933861][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.944505][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.962075][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.980287][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.000972][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 405.009716][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 405.122176][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 405.762588][ T7907] block nbd1: NBD_DISCONNECT [ 406.686873][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.996777][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.997162][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.997718][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.998116][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.998607][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.121357][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.210328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.219564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.243558][ T7652] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.314562][ T7652] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.387649][ T7652] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.414262][ T7652] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.701110][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.922675][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.930655][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 408.977881][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.031623][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.055005][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.283070][ T7941] comedi comedi0: Minor 2 could not be opened [ 409.578984][ T7951] device syzkaller0 entered promiscuous mode [ 411.524227][ T7974] ubi16: attaching mtd0 [ 411.795319][ T7974] ubi16: scanning is finished [ 411.812022][ T7975] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 411.819179][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.878762][ T7974] ubi16: empty MTD device detected [ 411.901423][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 412.471725][ T7974] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 412.581263][ T13] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 415.603772][ T7976] vhci_hcd: connection reset by peer [ 415.708937][ T9] vhci_hcd: stop threads [ 415.773357][ T9] vhci_hcd: release socket [ 415.809852][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 415.856780][ T9] vhci_hcd: disconnect device [ 416.806169][ T8006] device syzkaller0 entered promiscuous mode [ 418.373834][ T4329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.451760][ T4751] Bluetooth: hci4: command 0x0409 tx timeout [ 418.493599][ T4329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.569692][ T8020] device bond1 entered promiscuous mode [ 418.780486][ T4329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.098742][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 419.484112][ T13] vhci_hcd: vhci_device speed not set [ 419.521257][ T4329] device netdevsim0 left promiscuous mode [ 419.531335][ T4329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.650261][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 419.785510][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.889'. [ 420.230325][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.240027][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.257362][ T8007] device bridge_slave_0 entered promiscuous mode [ 420.280099][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.692979][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 420.707362][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.723471][ T8007] device bridge_slave_1 entered promiscuous mode [ 421.020224][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.190768][ T26] audit: type=1326 audit(1776527674.276:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 421.216446][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.286094][ T26] audit: type=1326 audit(1776527674.376:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fba00038c6c code=0x7ffc0000 [ 421.325255][ T26] audit: type=1326 audit(1776527674.376:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fba00038cce code=0x7ffc0000 [ 421.511473][ T8007] team0: Port device team_slave_0 added [ 421.767477][ T8007] team0: Port device team_slave_1 added [ 421.992820][ T26] audit: type=1326 audit(1776527674.376:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba0007c4ab code=0x7ffc0000 [ 422.091832][ T26] audit: type=1326 audit(1776527674.376:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 422.114248][ T26] audit: type=1326 audit(1776527674.376:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 422.138661][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.186688][ T26] audit: type=1326 audit(1776527674.376:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 422.221149][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.266711][ T8071] block nbd3: NBD_DISCONNECT [ 422.277971][ T26] audit: type=1326 audit(1776527674.376:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 422.307517][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 422.330710][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.766058][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 422.798780][ T26] audit: type=1326 audit(1776527674.406:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 423.102613][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.138511][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.172564][ T26] audit: type=1326 audit(1776527674.406:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0007c819 code=0x7ffc0000 [ 423.285836][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.508777][ T8007] device hsr_slave_0 entered promiscuous mode [ 423.601635][ T8007] device hsr_slave_1 entered promiscuous mode [ 423.628733][ T8007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.669011][ T8007] Cannot create hsr debugfs directory [ 424.193098][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 424.227263][ T4329] device dummy0 left promiscuous mode [ 424.249469][ T4329] device hsr_slave_0 left promiscuous mode [ 424.281893][ T4329] device hsr_slave_1 left promiscuous mode [ 424.293657][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.328227][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.350758][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.358612][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.508418][ T4329] device bridge_slave_1 left promiscuous mode [ 424.520824][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.538091][ T4329] device bridge_slave_0 left promiscuous mode [ 424.551109][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.588760][ T4329] device veth1_macvtap left promiscuous mode [ 424.614189][ T4329] device veth0_macvtap left promiscuous mode [ 425.674564][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 425.692107][ T4329] device veth1_vlan left promiscuous mode [ 425.698084][ T4329] device veth0_vlan left promiscuous mode [ 425.944833][ T8118] autofs4:pid:8118:autofs_fill_super: could not open pipe file descriptor [ 426.297421][ T4329] bond1 (unregistering): Released all slaves [ 426.631688][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 426.712575][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 426.801750][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.827692][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.102426][ T4329] bond0 (unregistering): Released all slaves [ 427.264893][ T8130] device syzkaller0 entered promiscuous mode [ 427.301391][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 427.399844][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 427.469706][ T8007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.488372][ T8007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.510818][ T8007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.530749][ T8007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 427.611188][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 427.763037][ T13] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 427.786804][ T13] usb 2-1: config 0 has no interface number 0 [ 427.797099][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.808591][ T13] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 427.827277][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.839622][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.860372][ T13] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 427.893001][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.901366][ T13] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 427.917922][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.936634][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.946001][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.953172][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.974141][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.981683][ T13] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 427.982190][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.016046][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.048113][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.068813][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.076027][ T5606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.095521][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.123490][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.133654][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.146110][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.162046][ T13] usb 2-1: config 0 descriptor?? [ 428.167926][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.177280][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.187042][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.196872][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.210097][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.237279][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.256796][ T13] ldusb 2-1:0.55: Interrupt in endpoint not found [ 428.281657][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.302357][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.615557][ T4174] usb 2-1: USB disconnect, device number 5 [ 429.037309][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.055715][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.207949][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.298589][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.349235][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.726969][ T8007] device veth0_vlan entered promiscuous mode [ 432.851905][ T8007] device veth1_vlan entered promiscuous mode [ 433.123656][ T8007] device veth0_macvtap entered promiscuous mode [ 433.206298][ T8007] device veth1_macvtap entered promiscuous mode [ 433.370577][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.491027][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.554302][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.647885][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.713759][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.908426][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.002760][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.392868][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.416348][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.435928][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.457923][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.480910][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.559724][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.625910][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.636871][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.646566][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.665464][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.683947][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.709600][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.826759][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.888303][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.951176][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.012327][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.057116][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.098833][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.150945][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.180240][ T8007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.209962][ T8007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.236457][ T8007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.260693][ T8007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.200809][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.234801][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.683219][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.455552][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.561275][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.671101][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 441.750295][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.961853][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.019296][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.708815][ T8288] 9pnet_virtio: no channels available for device syz [ 445.147152][ T8296] ======================================================= [ 445.147152][ T8296] WARNING: The mand mount option has been deprecated and [ 445.147152][ T8296] and is ignored by this kernel. Remove the mand [ 445.147152][ T8296] option from the mount to silence this warning. [ 445.147152][ T8296] ======================================================= [ 445.373005][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 445.373021][ T26] audit: type=1326 audit(1776527698.236:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 445.405634][ T8295] comedi comedi0: Minor 2 could not be opened [ 445.622980][ T26] audit: type=1326 audit(1776527698.236:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 445.672155][ T26] audit: type=1326 audit(1776527698.236:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 447.593713][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.6.943'. [ 448.911792][ T26] audit: type=1326 audit(1776527698.276:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 449.105163][ T26] audit: type=1326 audit(1776527698.276:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 449.128178][ T26] audit: type=1326 audit(1776527698.286:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f56bbc3404e code=0x7ffc0000 [ 449.150763][ T26] audit: type=1326 audit(1776527698.286:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 449.178354][ T26] audit: type=1326 audit(1776527698.286:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 449.210258][ T26] audit: type=1326 audit(1776527698.286:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56bbc73819 code=0x7ffc0000 [ 453.030056][ T8345] tipc: Started in network mode [ 453.046674][ T8345] tipc: Node identity dadfa4810287, cluster identity 4711 [ 453.087094][ T8345] tipc: Enabled bearer , priority 0 [ 453.107238][ T8349] device syzkaller0 entered promiscuous mode [ 453.230620][ T8345] tipc: Resetting bearer [ 453.266982][ T8344] tipc: Resetting bearer [ 453.272275][ T8357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.952'. [ 453.311495][ T8344] tipc: Disabling bearer [ 561.030981][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 561.038163][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4231/1:b..l [ 561.046788][ C0] (detected by 0, t=10502 jiffies, g=32321, q=406) [ 561.053425][ C0] task:kworker/1:6 state:R running task stack:24240 pid: 4231 ppid: 2 flags:0x00004000 [ 561.065937][ C0] Workqueue: events_power_efficient gc_worker [ 561.072090][ C0] Call Trace: [ 561.075410][ C0] [ 561.078378][ C0] __schedule+0x11ef/0x43c0 [ 561.082963][ C0] ? release_firmware_map_entry+0x190/0x190 [ 561.088899][ C0] ? verify_lock_unused+0x140/0x140 [ 561.094142][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 561.100778][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 561.106122][ C0] preempt_schedule_irq+0xbb/0x160 [ 561.111281][ C0] ? __cond_resched+0xd0/0xd0 [ 561.116007][ C0] ? rcu_is_watching+0x11/0xa0 [ 561.120825][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 561.126675][ C0] irqentry_exit+0x63/0x70 [ 561.131182][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 561.137220][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x196/0x1d0 [ 561.144125][ C0] Code: f9 4d 85 e4 75 16 e8 99 bf 54 f9 eb 15 e8 92 bf 54 f9 e8 ad 64 98 01 4d 85 e4 74 ea e8 83 bf 54 f9 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 561.163784][ C0] RSP: 0018:ffffc900031efa20 EFLAGS: 00000293 [ 561.170012][ C0] RAX: ffffffff8824750d RBX: 0000000000000000 RCX: ffff888078cb3b80 [ 561.178026][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.186035][ C0] RBP: ffffc900031efad0 R08: ffffffff901d515f R09: 1ffffffff203aa2b [ 561.194059][ C0] R10: dffffc0000000000 R11: fffffbfff203aa2c R12: 0000000000000200 [ 561.202081][ C0] R13: ffff8880248aa118 R14: 1ffff9200063df44 R15: dffffc0000000000 [ 561.210110][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 561.216497][ C0] ? nf_conntrack_hash_check_insert+0x6f0/0x6f0 [ 561.222795][ C0] gc_worker+0x2e2/0x1390 [ 561.227195][ C0] ? init_conntrack+0x14d0/0x14d0 [ 561.232388][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 561.237661][ C0] process_one_work+0x85f/0x1010 [ 561.242696][ C0] ? worker_detach_from_pool+0x240/0x240 [ 561.248390][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 561.253730][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 561.258795][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 561.264391][ C0] ? wq_worker_running+0x97/0x170 [ 561.269464][ C0] worker_thread+0xaa6/0x1290 [ 561.274202][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 561.279890][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 561.285844][ C0] kthread+0x436/0x520 [ 561.289963][ C0] ? rcu_lock_release+0x20/0x20 [ 561.294858][ C0] ? kthread_blkcg+0xd0/0xd0 [ 561.299697][ C0] ret_from_fork+0x1f/0x30 [ 561.304175][ C0] [ 561.307235][ C0] rcu: rcu_preempt kthread starved for 9261 jiffies! g32321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 561.318381][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 561.328384][ C0] rcu: RCU grace-period kthread stack dump: [ 561.334301][ C0] task:rcu_preempt state:R running task stack:27384 pid: 15 ppid: 2 flags:0x00004000 [ 561.345132][ C0] Call Trace: [ 561.348476][ C0] [ 561.351444][ C0] __schedule+0x11ef/0x43c0 [ 561.356015][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 561.361957][ C0] ? release_firmware_map_entry+0x190/0x190 [ 561.367905][ C0] ? __mod_timer+0x91e/0xd00 [ 561.372549][ C0] schedule+0x11b/0x1e0 [ 561.376754][ C0] schedule_timeout+0x184/0x2d0 [ 561.381654][ C0] ? console_conditional_schedule+0x40/0x40 [ 561.387586][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 561.393533][ C0] ? update_process_times+0x200/0x200 [ 561.398964][ C0] ? prepare_to_swait_event+0x331/0x350 [ 561.404562][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 561.409477][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 561.414749][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 561.420946][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 561.425769][ C0] ? finish_swait+0xc0/0x1d0 [ 561.430470][ C0] rcu_gp_kthread+0x9b/0x370 [ 561.435130][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 561.441156][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 561.446312][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 561.452278][ C0] ? __kthread_parkme+0x157/0x1b0 [ 561.457354][ C0] kthread+0x436/0x520 [ 561.461470][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 561.466617][ C0] ? kthread_blkcg+0xd0/0xd0 [ 561.471252][ C0] ret_from_fork+0x1f/0x30 [ 561.475719][ C0] [ 561.478782][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 561.485149][ C0] NMI backtrace for cpu 0 [ 561.489535][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 561.496596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 561.506699][ C0] Call Trace: [ 561.510016][ C0] [ 561.512892][ C0] dump_stack_lvl+0x188/0x250 [ 561.517617][ C0] ? show_regs_print_info+0x20/0x20 [ 561.522860][ C0] ? load_image+0x400/0x400 [ 561.527408][ C0] ? irq_work_queue+0xbf/0x140 [ 561.532228][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 561.537304][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 561.543497][ C0] ? _printk+0xda/0x130 [ 561.547714][ C0] ? cpu_online+0x1d/0x30 [ 561.552084][ C0] ? load_image+0x400/0x400 [ 561.556645][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 561.562766][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 561.568795][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 561.575014][ C0] print_other_cpu_stall+0x1110/0x1270 [ 561.580535][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 561.585520][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 561.590868][ C0] rcu_sched_clock_irq+0x843/0x1120 [ 561.596120][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 561.601017][ C0] ? hrtimer_run_queues+0x162/0x440 [ 561.606269][ C0] ? account_process_tick+0x22a/0x3a0 [ 561.611700][ C0] update_process_times+0x193/0x200 [ 561.616952][ C0] tick_sched_timer+0x37d/0x560 [ 561.621861][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 561.627450][ C0] __hrtimer_run_queues+0x4b4/0xb70 [ 561.632826][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 561.637984][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 561.644106][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 561.649117][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 561.655151][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 561.660835][ C0] [ 561.663812][ C0] [ 561.666777][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 561.672833][ C0] RIP: 0010:default_idle+0xb/0x10 [ 561.678025][ C0] Code: b7 48 89 df e8 76 29 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 a5 5f 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 561.697685][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 561.703798][ C0] RAX: 6eafc2d0e7953600 RBX: ffffffff8c0bc480 RCX: 6eafc2d0e7953600 [ 561.711813][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe40 [ 561.719827][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 561.727845][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 561.735855][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 561.743889][ C0] default_idle_call+0x81/0xc0 [ 561.748785][ C0] do_idle+0x251/0x650 [ 561.752902][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 561.758149][ C0] ? schedule_idle+0x57/0x90 [ 561.762786][ C0] ? do_idle+0x63a/0x650 [ 561.767075][ C0] cpu_startup_entry+0x14/0x20 [ 561.771882][ C0] ? time_init+0x40/0x40 [ 561.776168][ C0] start_kernel+0x489/0x540 [ 561.780720][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 561.786702][ C0]