last executing test programs: 14.18306115s ago: executing program 3 (id=88): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=ANY=[@ANYBLOB="480000000206030000000000000000f5000000000500010006000000adc5b5d9050005000200000005000400000000000900020073797a310058a503a82601ce4580488100000068"], 0x48}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) 12.616662935s ago: executing program 3 (id=90): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000280)=0x6e) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 11.999667579s ago: executing program 2 (id=91): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) 11.260765511s ago: executing program 4 (id=93): set_mempolicy(0x4000, 0x0, 0x9) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 11.26033258s ago: executing program 1 (id=94): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r1, @ANYBLOB="14000200fe8000"/16], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) 8.35614879s ago: executing program 0 (id=95): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x58}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r8, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 7.882441491s ago: executing program 2 (id=96): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x34438d2078d8cb3e, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x40) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 7.849025077s ago: executing program 3 (id=97): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 7.804436902s ago: executing program 1 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x40000) 7.529599759s ago: executing program 4 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) 5.899884263s ago: executing program 2 (id=100): iopl(0x3) ioperm(0x0, 0x1, 0x1) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x40, 0x0) 5.694837042s ago: executing program 4 (id=101): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.786828258s ago: executing program 3 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xf655, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 4.786623976s ago: executing program 1 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 4.785357841s ago: executing program 0 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4.71332359s ago: executing program 0 (id=105): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4.689235853s ago: executing program 2 (id=106): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) 4.60797137s ago: executing program 1 (id=107): socket$kcm(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xcc, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e16d2f5ba45ae2ebc9ada87b3df9291090c892e0198c3f759d3e92e8decaae25b9b990f47f8df1c270029d925b2732eecacc9d666932d9b5c5dcd521b858fac948673349e947e9ca65237363d0b789ba205d750fa54becd4ca1de6bb40a938c9a4be3d9a9c4ac522d58ff52890c6aa4650d744fd35f3ca0c5dcb32eca250a7eaff99b7fde796d44afbc58204d321d638793c140451840b20c150be2e3e0eb9dcab21b4614b6a681ccaececef64934fef0872c2dc03"}}}}}, 0x0) 4.584234403s ago: executing program 3 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 4.43702466s ago: executing program 0 (id=109): set_mempolicy(0x4000, 0x0, 0x9) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.292153709s ago: executing program 0 (id=110): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x34438d2078d8cb3e, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x40) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 3.444410302s ago: executing program 4 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) 3.291955981s ago: executing program 4 (id=112): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) 3.287095023s ago: executing program 0 (id=113): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write$tun(r4, 0x0, 0x3db) accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x1, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 3.268609521s ago: executing program 1 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.044241916s ago: executing program 1 (id=115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x58}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, 0x0, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}}, 0x4) fsmount(r6, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1.589052265s ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 362.213032ms ago: executing program 4 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 341.925633ms ago: executing program 2 (id=118): ioperm(0x0, 0x40, 0x0) 0s ago: executing program 3 (id=119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 74.514799][ T5587] cgroup: Unknown subsys name 'net' [ 74.756976][ T5587] cgroup: Unknown subsys name 'cpuset' [ 74.831202][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.393066][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.705658][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.706792][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.710507][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.734844][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.742608][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.749226][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.752128][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.753863][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.754538][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.791913][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.808959][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.814125][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.846334][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.857761][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.858186][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.860186][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.860895][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.863855][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.866072][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.868571][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.869758][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.876341][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.890450][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.919252][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.940077][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.842608][ T59] Bluetooth: hci4: command tx timeout [ 80.920698][ T5611] Bluetooth: hci0: command tx timeout [ 80.920893][ T59] Bluetooth: hci3: command tx timeout [ 81.000759][ T5611] Bluetooth: hci2: command tx timeout [ 81.000931][ T59] Bluetooth: hci1: command tx timeout [ 81.006973][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.007981][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.008093][ T5603] bridge_slave_0: entered allmulticast mode [ 81.009595][ T5603] bridge_slave_0: entered promiscuous mode [ 81.075616][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.075682][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.075781][ T5603] bridge_slave_1: entered allmulticast mode [ 81.079534][ T5603] bridge_slave_1: entered promiscuous mode [ 81.235445][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.235666][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.235815][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.235963][ T5602] bridge_slave_0: entered allmulticast mode [ 81.237559][ T5602] bridge_slave_0: entered promiscuous mode [ 81.299674][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.299898][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.299995][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.300084][ T5602] bridge_slave_1: entered allmulticast mode [ 81.306493][ T5602] bridge_slave_1: entered promiscuous mode [ 81.336520][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.336584][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.336707][ T5600] bridge_slave_0: entered allmulticast mode [ 81.338131][ T5600] bridge_slave_0: entered promiscuous mode [ 81.397458][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.397595][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.397748][ T5600] bridge_slave_1: entered allmulticast mode [ 81.401592][ T5600] bridge_slave_1: entered promiscuous mode [ 81.455494][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.455638][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.455778][ T5601] bridge_slave_0: entered allmulticast mode [ 81.458599][ T5601] bridge_slave_0: entered promiscuous mode [ 81.532221][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.532310][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.532425][ T5599] bridge_slave_0: entered allmulticast mode [ 81.533768][ T5599] bridge_slave_0: entered promiscuous mode [ 81.538183][ T5603] team0: Port device team_slave_0 added [ 81.573253][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.573465][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.573587][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.574066][ T5601] bridge_slave_1: entered allmulticast mode [ 81.583179][ T5601] bridge_slave_1: entered promiscuous mode [ 81.619284][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.619401][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.619563][ T5599] bridge_slave_1: entered allmulticast mode [ 81.645693][ T5599] bridge_slave_1: entered promiscuous mode [ 81.664410][ T5603] team0: Port device team_slave_1 added [ 81.668633][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.704800][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.798015][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.879753][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.902683][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.904166][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.904175][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.904187][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.909264][ T5602] team0: Port device team_slave_0 added [ 81.913270][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.936796][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.937490][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.937500][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.937523][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.941283][ T5602] team0: Port device team_slave_1 added [ 81.965037][ T5600] team0: Port device team_slave_0 added [ 82.037833][ T5600] team0: Port device team_slave_1 added [ 82.074689][ T5601] team0: Port device team_slave_0 added [ 82.091013][ T5599] team0: Port device team_slave_0 added [ 82.091784][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.091797][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.091820][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.094904][ T5601] team0: Port device team_slave_1 added [ 82.151382][ T5599] team0: Port device team_slave_1 added [ 82.152282][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.152293][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.152316][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.176463][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.176478][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.176501][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.249016][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.249031][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.249054][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.258765][ T5603] hsr_slave_0: entered promiscuous mode [ 82.260243][ T5603] hsr_slave_1: entered promiscuous mode [ 82.285892][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.285906][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.285929][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.309515][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.309529][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.309553][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.314340][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.314354][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.314376][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.339873][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.339889][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.339913][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.458097][ T5602] hsr_slave_0: entered promiscuous mode [ 82.459249][ T5602] hsr_slave_1: entered promiscuous mode [ 82.460122][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 82.460236][ T5602] Cannot create hsr debugfs directory [ 82.508649][ T5600] hsr_slave_0: entered promiscuous mode [ 82.509435][ T5600] hsr_slave_1: entered promiscuous mode [ 82.509944][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 82.509961][ T5600] Cannot create hsr debugfs directory [ 82.923122][ T59] Bluetooth: hci4: command tx timeout [ 83.001954][ T59] Bluetooth: hci3: command tx timeout [ 83.001979][ T59] Bluetooth: hci0: command tx timeout [ 83.007224][ T5601] hsr_slave_0: entered promiscuous mode [ 83.008384][ T5601] hsr_slave_1: entered promiscuous mode [ 83.009037][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 83.009053][ T5601] Cannot create hsr debugfs directory [ 83.054087][ T5599] hsr_slave_0: entered promiscuous mode [ 83.057038][ T5599] hsr_slave_1: entered promiscuous mode [ 83.059469][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 83.059491][ T5599] Cannot create hsr debugfs directory [ 83.081756][ T59] Bluetooth: hci1: command tx timeout [ 83.081771][ T5611] Bluetooth: hci2: command tx timeout [ 83.787006][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.823049][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.829013][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.854886][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.861832][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.894036][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.912695][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.955080][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.059354][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.095108][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.098880][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.118109][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.121044][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.165955][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.189906][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.213660][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.338096][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.375011][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.389404][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.413192][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.420227][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.458219][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.482409][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.516266][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.637479][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.674070][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.678891][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.703543][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.706950][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.755202][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.786866][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.823406][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.948652][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.959063][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.984271][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.997831][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.000795][ T5611] Bluetooth: hci4: command tx timeout [ 85.044215][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.053811][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.081635][ T5611] Bluetooth: hci3: command tx timeout [ 85.090710][ T5611] Bluetooth: hci0: command tx timeout [ 85.106258][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.110139][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.125622][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.160706][ T5611] Bluetooth: hci1: command tx timeout [ 85.161105][ T5611] Bluetooth: hci2: command tx timeout [ 85.191674][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.220255][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.244202][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.244676][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.310090][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.310179][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.362357][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.393872][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.399304][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.399874][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.458191][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.458514][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.509872][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.548456][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.548528][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.572540][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.595268][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.595339][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.710881][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.776331][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.792774][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.792953][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.879946][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.880077][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.990099][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.052095][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.054241][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.123689][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.123865][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.837499][ T821] cfg80211: failed to load regulatory.db [ 87.046334][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.080720][ T5611] Bluetooth: hci4: command tx timeout [ 87.160760][ T5611] Bluetooth: hci0: command tx timeout [ 87.160790][ T5611] Bluetooth: hci3: command tx timeout [ 87.167431][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.240792][ T59] Bluetooth: hci2: command tx timeout [ 87.240821][ T59] Bluetooth: hci1: command tx timeout [ 87.529991][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.544984][ T5603] veth0_vlan: entered promiscuous mode [ 87.598782][ T5602] veth0_vlan: entered promiscuous mode [ 87.638938][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.640029][ T5603] veth1_vlan: entered promiscuous mode [ 87.696852][ T5602] veth1_vlan: entered promiscuous mode [ 87.710350][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.863712][ T5603] veth0_macvtap: entered promiscuous mode [ 87.914510][ T5603] veth1_macvtap: entered promiscuous mode [ 87.917923][ T5599] veth0_vlan: entered promiscuous mode [ 87.925157][ T5602] veth0_macvtap: entered promiscuous mode [ 87.958276][ T5602] veth1_macvtap: entered promiscuous mode [ 87.977633][ T5600] veth0_vlan: entered promiscuous mode [ 87.994880][ T5599] veth1_vlan: entered promiscuous mode [ 88.023914][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.025554][ T5600] veth1_vlan: entered promiscuous mode [ 88.049296][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.072268][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.087871][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.111236][ T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.130973][ T87] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.154543][ T87] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.157593][ T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.178274][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.254956][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.272620][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.276750][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.341574][ T5599] veth0_macvtap: entered promiscuous mode [ 88.348792][ T5601] veth0_vlan: entered promiscuous mode [ 88.514045][ T5599] veth1_macvtap: entered promiscuous mode [ 88.526520][ T5600] veth0_macvtap: entered promiscuous mode [ 88.722994][ T5601] veth1_vlan: entered promiscuous mode [ 88.729542][ T5600] veth1_macvtap: entered promiscuous mode [ 88.837901][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.901310][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.903529][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.941781][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.941804][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.976662][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.011704][ T3430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.018245][ T3430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.030732][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.030749][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.053310][ T3430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.079673][ T3430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.105955][ T3430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.109724][ T3430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.169094][ T5601] veth0_macvtap: entered promiscuous mode [ 89.180245][ T3430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.197350][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.197369][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.198116][ T3430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.299100][ T5601] veth1_macvtap: entered promiscuous mode [ 89.414953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.414972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.058679][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.114948][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.114966][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.167819][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.272234][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.272261][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.275400][ T3430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.278686][ T3430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.332238][ T3430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337507][ T3430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.366503][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.366522][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.589170][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.589203][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.234765][ T5804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.387597][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.387615][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.679780][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.679800][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.439634][ T5812] evm: overlay not supported [ 93.193844][ T821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.595135][ T821] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 93.595166][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.595184][ T821] usb 2-1: Product: syz [ 93.595197][ T821] usb 2-1: Manufacturer: syz [ 93.595209][ T821] usb 2-1: SerialNumber: syz [ 94.885320][ T5823] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 94.885341][ T5823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8'. [ 94.887067][ T821] rtl8150 2-1:1.0: couldn't reset the device [ 94.888407][ T821] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 96.228499][ T5843] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 96.327155][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 96.327187][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 97.916148][ T821] usb 2-1: USB disconnect, device number 2 [ 99.925008][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 100.315565][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27'. [ 104.794105][ T5924] overlayfs: upper fs does not support file handles, falling back to index=off. [ 105.488242][ T5944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.39'. [ 105.690437][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 106.219651][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.250592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.320581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.370591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.245913][ T5953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.43'. [ 107.436501][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 107.436542][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.436565][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.436584][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 107.443348][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 107.443375][ T43] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 107.443393][ T43] usb 4-1: Manufacturer: syz [ 110.194320][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.377061][ T43] usb 4-1: config 0 descriptor?? [ 111.378179][ T43] usb 4-1: can't set config #0, error -71 [ 111.411510][ T43] usb 4-1: USB disconnect, device number 2 [ 111.969109][ T5982] netlink: 48 bytes leftover after parsing attributes in process `syz.3.51'. [ 112.565738][ T5991] netlink: 44 bytes leftover after parsing attributes in process `syz.3.55'. [ 112.808702][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 114.851918][ T6011] block nbd0: server does not support multiple connections per device. [ 115.043518][ T6011] block nbd0: shutting down sockets [ 117.919528][ T6031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.65'. [ 118.147375][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 118.504785][ T6040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'. [ 120.847979][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 120.923693][ T6075] Zero length message leads to an empty skb [ 121.233083][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 122.770595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.790588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.800588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.810627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.820617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.830598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.840592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.860132][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.88'. [ 127.181619][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.94'. [ 130.517561][ T6123] block nbd0: shutting down sockets [ 130.699055][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 130.779451][ T6139] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.101'. [ 130.779474][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'. [ 132.411983][ T6166] netlink: 'syz.0.113': attribute type 2 has an invalid length. [ 134.054740][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.054834][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.098829][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 135.656197][ C1] [ 135.656213][ C1] ====================================================== [ 135.656222][ C1] WARNING: possible circular locking dependency detected [ 135.656239][ C1] syzkaller #0 Not tainted [ 135.656249][ C1] ------------------------------------------------------ [ 135.656257][ C1] syz.0.113/6165 is trying to acquire lock: [ 135.656268][ C1] ffff888063c648a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 135.656339][ C1] [ 135.656339][ C1] but task is already holding lock: [ 135.656345][ C1] ffff88806361d160 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 135.656388][ C1] [ 135.656388][ C1] which lock already depends on the new lock. [ 135.656388][ C1] [ 135.656396][ C1] [ 135.656396][ C1] the existing dependency chain (in reverse order) is: [ 135.656402][ C1] [ 135.656402][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 135.656428][ C1] rt_spin_lock+0x83/0x400 [ 135.656461][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 135.656478][ C1] phonet_rcv+0x781/0xc40 [ 135.656505][ C1] process_backlog+0x5e1/0xc60 [ 135.656523][ C1] __napi_poll+0xab/0x550 [ 135.656550][ C1] net_rx_action+0x696/0xe00 [ 135.656566][ C1] handle_softirqs+0x1de/0x6d0 [ 135.656585][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 135.656604][ C1] netif_rx+0xb9/0xf0 [ 135.656626][ C1] pn_send+0x62a/0x8e0 [ 135.656650][ C1] pn_skb_send+0x218/0x510 [ 135.656676][ C1] pipe_snd_status+0x1f1/0x320 [ 135.656705][ C1] pipe_do_rcv+0xf15/0x16a0 [ 135.656721][ C1] __sk_receive_skb+0x962/0x9e0 [ 135.656738][ C1] pep_do_rcv+0x685/0xaa0 [ 135.656754][ C1] __release_sock+0x2a9/0x3d0 [ 135.656779][ C1] release_sock+0x1be/0x290 [ 135.656797][ C1] pep_sock_accept+0xd47/0x11e0 [ 135.656813][ C1] pn_socket_accept+0xc1/0x310 [ 135.656837][ C1] do_accept+0x52b/0x760 [ 135.656861][ C1] __sys_accept4+0x139/0x230 [ 135.656879][ C1] __x64_sys_accept4+0x9a/0xb0 [ 135.656897][ C1] do_syscall_64+0x15f/0xf80 [ 135.656916][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.656935][ C1] [ 135.656935][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 135.656966][ C1] __lock_acquire+0x15a5/0x2cf0 [ 135.656992][ C1] lock_acquire+0x106/0x350 [ 135.657016][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 135.657043][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 135.657061][ C1] pep_do_rcv+0x685/0xaa0 [ 135.657076][ C1] __sk_receive_skb+0x962/0x9e0 [ 135.657093][ C1] phonet_rcv+0x781/0xc40 [ 135.657117][ C1] process_backlog+0x5e1/0xc60 [ 135.657133][ C1] __napi_poll+0xab/0x550 [ 135.657157][ C1] net_rx_action+0x696/0xe00 [ 135.657172][ C1] handle_softirqs+0x1de/0x6d0 [ 135.657187][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 135.657205][ C1] netif_rx+0xb9/0xf0 [ 135.657224][ C1] pn_send+0x62a/0x8e0 [ 135.657245][ C1] pn_skb_send+0x218/0x510 [ 135.657270][ C1] pep_sock_close+0x2c1/0x5b0 [ 135.657284][ C1] pn_socket_release+0x9b/0xc0 [ 135.657304][ C1] sock_close+0xc3/0x240 [ 135.657330][ C1] __fput+0x461/0xa70 [ 135.657357][ C1] task_work_run+0x1d9/0x270 [ 135.657383][ C1] exit_to_user_mode_loop+0xed/0x480 [ 135.657408][ C1] do_syscall_64+0x33e/0xf80 [ 135.657426][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.657444][ C1] [ 135.657444][ C1] other info that might help us debug this: [ 135.657444][ C1] [ 135.657451][ C1] Possible unsafe locking scenario: [ 135.657451][ C1] [ 135.657457][ C1] CPU0 CPU1 [ 135.657462][ C1] ---- ---- [ 135.657468][ C1] lock(slock-AF_PHONET); [ 135.657482][ C1] lock(slock-AF_PHONET/1); [ 135.657500][ C1] lock(slock-AF_PHONET); [ 135.657514][ C1] lock(slock-AF_PHONET/1); [ 135.657531][ C1] [ 135.657531][ C1] *** DEADLOCK *** [ 135.657531][ C1] [ 135.657542][ C1] 7 locks held by syz.0.113/6165: [ 135.657553][ C1] #0: ffff8880406cab38 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 135.657609][ C1] #1: ffff88806361c958 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 135.657651][ C1] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 135.657699][ C1] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 135.657744][ C1] #4: ffff88806361d160 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 135.657791][ C1] #5: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 135.657845][ C1] #6: ffff88806361d218 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 135.657907][ C1] [ 135.657907][ C1] stack backtrace: [ 135.657929][ C1] CPU: 1 UID: 0 PID: 6165 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.657952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.657967][ C1] Call Trace: [ 135.657975][ C1] [ 135.657983][ C1] dump_stack_lvl+0xe8/0x150 [ 135.658007][ C1] print_circular_bug+0x2e1/0x300 [ 135.658028][ C1] check_noncircular+0x12e/0x150 [ 135.658063][ C1] __lock_acquire+0x15a5/0x2cf0 [ 135.658092][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 135.658130][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 135.658149][ C1] lock_acquire+0x106/0x350 [ 135.658174][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 135.658194][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 135.658225][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 135.658253][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 135.658272][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 135.658299][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 135.658325][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 135.658356][ C1] ? rt_spin_lock+0x1e0/0x400 [ 135.658387][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 135.658410][ C1] pep_do_rcv+0x685/0xaa0 [ 135.658430][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 135.658452][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 135.658470][ C1] ? phonet_rcv+0x781/0xc40 [ 135.658498][ C1] __sk_receive_skb+0x962/0x9e0 [ 135.658521][ C1] phonet_rcv+0x781/0xc40 [ 135.658548][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.658573][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 135.658603][ C1] ? process_backlog+0x271/0xc60 [ 135.658622][ C1] ? process_backlog+0x271/0xc60 [ 135.658640][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 135.658670][ C1] process_backlog+0x5e1/0xc60 [ 135.658697][ C1] __napi_poll+0xab/0x550 [ 135.658726][ C1] net_rx_action+0x696/0xe00 [ 135.658751][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 135.658770][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 135.658795][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 135.658825][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 135.658865][ C1] handle_softirqs+0x1de/0x6d0 [ 135.658890][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 135.658913][ C1] netif_rx+0xb9/0xf0 [ 135.658938][ C1] pn_send+0x62a/0x8e0 [ 135.658969][ C1] pn_skb_send+0x218/0x510 [ 135.658999][ C1] pep_sock_close+0x2c1/0x5b0 [ 135.659019][ C1] pn_socket_release+0x9b/0xc0 [ 135.659045][ C1] sock_close+0xc3/0x240 [ 135.659074][ C1] ? __pfx_sock_close+0x10/0x10 [ 135.659102][ C1] __fput+0x461/0xa70 [ 135.659137][ C1] task_work_run+0x1d9/0x270 [ 135.659168][ C1] ? __pfx_task_work_run+0x10/0x10 [ 135.659199][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.659220][ C1] exit_to_user_mode_loop+0xed/0x480 [ 135.659245][ C1] ? rcu_is_watching+0x15/0xb0 [ 135.659276][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.659296][ C1] do_syscall_64+0x33e/0xf80 [ 135.659317][ C1] ? trace_irq_disable+0x3b/0x140 [ 135.659340][ C1] ? clear_bhb_loop+0x40/0x90 [ 135.659363][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.659382][ C1] RIP: 0033:0x7f560addcdd9 [ 135.659406][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.659424][ C1] RSP: 002b:00007fffdb138dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 135.659444][ C1] RAX: 0000000000000000 RBX: 00007f560b057da0 RCX: 00007f560addcdd9 [ 135.659459][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 135.659471][ C1] RBP: 00007f560b057da0 R08: 0000000000000006 R09: 0000000000000000 [ 135.659484][ C1] R10: 00007f560b057cb0 R11: 0000000000000246 R12: 0000000000020f03 [ 135.659498][ C1] R13: 00007f560b05618c R14: 0000000000020ed1 R15: 00007f560b056180 [ 135.659518][ C1]