last executing test programs: 8m32.207966805s ago: executing program 32 (id=213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) semget$private(0x0, 0x2, 0x6d3) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000001140), 0x0, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000010c0)=0x40049, 0x4) 8m28.725372781s ago: executing program 33 (id=219): r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) setuid(0xee01) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 7m54.281495778s ago: executing program 3 (id=315): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x200028, 0x8, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xfb, 0x4, 0xd83f}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 7m52.632464512s ago: executing program 3 (id=317): mkdirat(0xffffffffffffff9c, 0x0, 0x161) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open$dir(0x0, 0x80, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000500)=ANY=[], 0x1009, 0x0) llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket(0x28, 0x5, 0x0) listen(r6, 0x8b) 7m50.769472805s ago: executing program 3 (id=318): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4500330040000000080211000000080211000001505050505050"], 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 7m49.870778929s ago: executing program 3 (id=319): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 7m48.903535294s ago: executing program 3 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000006080)=""/4097, 0x1001}, {&(0x7f0000000000)=""/215, 0xd7}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002f00)=""/4107, 0x100b}, {&(0x7f0000001ac0)=""/4112, 0x1010}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000001180)=""/35, 0x23}], 0x4}, 0xf}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 7m47.238841247s ago: executing program 3 (id=322): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_route(r6, 0x0, 0x804) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff}, 0x38) syz_open_pts(0xffffffffffffffff, 0x121500) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 7m37.850070071s ago: executing program 34 (id=314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 7m31.831819323s ago: executing program 35 (id=322): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_route(r6, 0x0, 0x804) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff}, 0x38) syz_open_pts(0xffffffffffffffff, 0x121500) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 7m4.614275316s ago: executing program 6 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 7m3.183403889s ago: executing program 6 (id=378): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000005cc0)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @any, 0x0, 0x2, 0x7, 0x5, 0x0, 0x9}) 7m2.487182583s ago: executing program 6 (id=379): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmsg$inet(r0, 0x0, 0x30004081) recvmsg(r0, 0x0, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x200) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x11, 0xc9}}}, 0x6) 7m1.359503871s ago: executing program 6 (id=382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0200f80d20"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 6m53.943115979s ago: executing program 6 (id=390): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmsg$inet(r0, 0x0, 0x30004081) recvmsg(r0, 0x0, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x200) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x11, 0xc9}}}, 0x6) 6m53.243663388s ago: executing program 6 (id=392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4, 0x100}) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6m36.838152459s ago: executing program 36 (id=392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4, 0x100}) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5m41.248580319s ago: executing program 7 (id=329): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 5m40.281433243s ago: executing program 7 (id=464): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000380)=""/135, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10000004, 0x101}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x2000009}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 5m24.786696801s ago: executing program 37 (id=464): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000380)=""/135, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10000004, 0x101}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x2000009}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 4m14.231334693s ago: executing program 8 (id=672): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0xc, 0x193, 0x4, {0xbb3b21d371f9832c, @raw_data="e6a89b66b2fddd80b9f9b9376aa5e0c41f9f254a00f285c3e6fe75d0c126c1a1e5a74da41b08503e1a0dfd6250a96698a5a64d76c076e83d381615e187ac1460cb48270b82eedba5c0c0df84f19323bedb611295101cd8d106cb2b8f91e3913da2a19db70059ae1ee29d09f6b5c5ba69a764e05b0e678d7bde5b68f246ccdde162b2a3769ecc61279cfdf4b1912f713d4d07ef8358390926d645ee48aba5a9525cc0dc0708a04a224794318ef5040cbc5df2fc010cace670829aac6c6808eb8ed141435901854f3e"}, 0x1d0}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xbf2d) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 4m13.489398433s ago: executing program 8 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000480)="9c1b3b773a212f95026fcee2668e50c387c50e02c627e67ab8de8c71b2863794edddc98f32", 0x25}) getpid() syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c83075007100010002020400", @ANYRES16=r0, @ANYRESOCT=r0], 0x7a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340)=@req={0xa, 0x2ba, 0x9, 0x5}, 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000280), 0x4002, 0x0) 4m12.501720237s ago: executing program 8 (id=676): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x67ca, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268, 0x0, r1}, &(0x7f0000000140), 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) 4m11.41589923s ago: executing program 8 (id=680): recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x40000100, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m7.397332083s ago: executing program 8 (id=684): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0xc, 0x193, 0x4, {0xbb3b21d371f9832c, @raw_data="e6a89b66b2fddd80b9f9b9376aa5e0c41f9f254a00f285c3e6fe75d0c126c1a1e5a74da41b08503e1a0dfd6250a96698a5a64d76c076e83d381615e187ac1460cb48270b82eedba5c0c0df84f19323bedb611295101cd8d106cb2b8f91e3913da2a19db70059ae1ee29d09f6b5c5ba69a764e05b0e678d7bde5b68f246ccdde162b2a3769ecc61279cfdf4b1912f713d4d07ef8358390926d645ee48aba5a9525cc0dc0708a04a224794318ef5040cbc5df2fc010cace670829aac6c6808eb8ed141435901854f3e"}, 0x1d0}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xbf2d) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 4m5.776659897s ago: executing program 8 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(r0, 0x10, 0x0) capget(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000500)={0x29a, 0xb3f, 0x9, 0x1, 0x5, 0x5}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)={0x7f, 0x1e, 0x81, 0x0, 0x100}) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) 3m50.220101305s ago: executing program 38 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(r0, 0x10, 0x0) capget(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000500)={0x29a, 0xb3f, 0x9, 0x1, 0x5, 0x5}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)={0x7f, 0x1e, 0x81, 0x0, 0x100}) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) 2m59.907781643s ago: executing program 2 (id=882): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) 2m58.401480874s ago: executing program 2 (id=890): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 2m57.598876201s ago: executing program 2 (id=895): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {0x0}, {&(0x7f0000000000)=""/215, 0xd7}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002f00)=""/4107, 0x100b}, {&(0x7f0000001ac0)=""/4112, 0x1010}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000001180)=""/35, 0x23}], 0x4}, 0xf}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 2m56.643806425s ago: executing program 2 (id=900): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) write(r1, 0x0, 0x0) 2m55.251391657s ago: executing program 2 (id=907): clock_adjtime(0x0, &(0x7f00000002c0)={0x362, 0xf, 0x4, 0x8000000000000001, 0x48f, 0x5, 0xb, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x8, 0x3, 0x8001000000081, 0x5, 0x2, 0x3, 0x2, 0x9220000000000000, 0x3, 0x3, 0x80000001, 0x0, 0x7, 0x7}) 2m54.28462743s ago: executing program 2 (id=913): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x3, 0x2) 2m38.754018801s ago: executing program 39 (id=913): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x3, 0x2) 9.435755563s ago: executing program 0 (id=1599): socket$kcm(0x10, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3db}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.919504252s ago: executing program 0 (id=1603): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x60, r5, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 7.196993503s ago: executing program 0 (id=1610): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.115014s ago: executing program 9 (id=1611): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.654124562s ago: executing program 0 (id=1612): write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x10000004, 0x5, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x92, 0x7fffffff, 0xfffffffe, 0x8000, 0x800, 0x0, 0x0, 0x3ff, 0x7ff}}}}, 0xa0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="14002c"], 0x30}}, 0x0) 6.539262994s ago: executing program 9 (id=1614): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 6.152061476s ago: executing program 5 (id=1616): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)="0043ec95", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 6.049721118s ago: executing program 1 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 5.911289663s ago: executing program 0 (id=1618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.832896782s ago: executing program 4 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 5.401193073s ago: executing program 1 (id=1620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000002c0)={{0x3, 0x1, 0x3f2, 0x2, 0x6}, 0xac2f, 0x4}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fscontext']) 5.351690091s ago: executing program 5 (id=1621): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x60, r5, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 5.275418329s ago: executing program 4 (id=1622): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.951267046s ago: executing program 9 (id=1623): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 4.231212547s ago: executing program 4 (id=1624): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xf6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 3.558968121s ago: executing program 0 (id=1625): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0x1, 0x0, @void}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000380)) 2.607730067s ago: executing program 9 (id=1626): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 2.586789611s ago: executing program 5 (id=1627): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.362136642s ago: executing program 1 (id=1628): write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x10000004, 0x5, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x92, 0x7fffffff, 0xfffffffe, 0x8000, 0x800, 0x0, 0x0, 0x3ff, 0x7ff}}}}, 0xa0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="14002c"], 0x30}}, 0x0) 2.348916203s ago: executing program 4 (id=1629): mkdirat(0xffffffffffffff9c, 0x0, 0x161) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc8}}, 0x0) r1 = open$dir(0x0, 0x80, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000500)=ANY=[], 0x1009, 0x0) llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket(0x28, 0x5, 0x0) listen(r6, 0x8b) 1.867716383s ago: executing program 9 (id=1630): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x1, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x200000000, 0x9, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000001}, {0x0, 0x10000004}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6, 0x5}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20040050}, 0x2000c0c4) 1.649805512s ago: executing program 1 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 1.522844848s ago: executing program 5 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.222037699s ago: executing program 9 (id=1633): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 971.787621ms ago: executing program 1 (id=1634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 814.087536ms ago: executing program 5 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 743.293139ms ago: executing program 4 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)="91", &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000016c0)={r0, &(0x7f0000001880)="93", &(0x7f0000001940)=""/226}, 0x20) 367.841552ms ago: executing program 1 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@quota}]}, 0x3, 0x4d5, &(0x7f0000001180)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xbd, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) 80.445393ms ago: executing program 5 (id=1638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=1639): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000024000000070000004404a60007036f001c0000000000000000000000080000001c"], 0x38}, 0x0) kernel console output (not intermixed with test programs): 103789][ T3586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.184943][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.195438][ T11] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.204884][ T11] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.217718][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.337230][ T5820] Bluetooth: hci3: command tx timeout [ 379.369477][ T11] usb 7-1: config 0 descriptor?? [ 379.538737][ T3586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.760489][ T3586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.802932][ T11] usb 7-1: USB disconnect, device number 3 [ 379.850356][ T5874] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.852282][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.868980][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.880194][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.905809][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.918581][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.310341][ T5874] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 380.319674][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.328272][ T5874] usb 6-1: Product: syz [ 380.333505][ T5874] usb 6-1: Manufacturer: syz [ 380.338302][ T5874] usb 6-1: SerialNumber: syz [ 380.443290][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 380.446374][ T3586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.533715][ T5874] usb 6-1: config 0 descriptor?? [ 380.560875][ T5874] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 380.639759][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.657680][ T11] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.667210][ T11] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.676775][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.733033][ T7068] 9pnet_virtio: no channels available for device syz [ 381.103344][ T11] usb 7-1: config 0 descriptor?? [ 381.279177][ T7025] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.287407][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.299155][ T7025] bridge_slave_0: entered allmulticast mode [ 381.311917][ T7025] bridge_slave_0: entered promiscuous mode [ 381.430576][ T5825] Bluetooth: hci3: command tx timeout [ 381.481453][ T3586] bridge0: port 3(batadv0) entered disabled state [ 381.505710][ T3586] bridge_slave_1: left allmulticast mode [ 381.511940][ T3586] bridge_slave_1: left promiscuous mode [ 381.518546][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.633693][ T3586] bridge_slave_0: left allmulticast mode [ 381.641794][ T3586] bridge_slave_0: left promiscuous mode [ 381.648400][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.901668][ T9] usb 7-1: USB disconnect, device number 4 [ 382.009027][ T5874] gspca_sunplus: reg_r err -32 [ 382.014507][ T5874] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 382.061668][ T5825] Bluetooth: hci2: command tx timeout [ 382.726209][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.842997][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.953709][ T3586] bond0 (unregistering): Released all slaves [ 383.071858][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.079565][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.088461][ T7025] bridge_slave_1: entered allmulticast mode [ 383.107646][ T7025] bridge_slave_1: entered promiscuous mode [ 383.547772][ T11] usb 6-1: USB disconnect, device number 5 [ 384.110392][ T5820] Bluetooth: hci2: command tx timeout [ 384.242374][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.370169][ T5874] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 384.505169][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.650638][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 384.710306][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 384.723438][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.956313][ T5874] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 384.966191][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.974588][ T5874] usb 7-1: Product: syz [ 384.979102][ T5874] usb 7-1: Manufacturer: syz [ 384.984001][ T5874] usb 7-1: SerialNumber: syz [ 385.143230][ T5874] usb 7-1: config 0 descriptor?? [ 385.271742][ T5874] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.281367][ T5874] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 385.346986][ T3586] hsr_slave_0: left promiscuous mode [ 385.397731][ T3586] hsr_slave_1: left promiscuous mode [ 385.406383][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.414333][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.491785][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.499535][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.562927][ T3586] veth1_macvtap: left promiscuous mode [ 385.568754][ T3586] veth0_macvtap: left promiscuous mode [ 385.575382][ T3586] veth1_vlan: left promiscuous mode [ 385.582359][ T3586] veth0_vlan: left promiscuous mode [ 385.991499][ T5874] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 386.001744][ T5874] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 386.043424][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 386.190637][ T5825] Bluetooth: hci2: command tx timeout [ 386.464017][ T5874] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 386.471436][ T5874] em28xx 7-1:0.0: No AC97 audio processor [ 386.869308][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 387.003163][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 387.352843][ T5874] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 387.522989][ T7025] team0: Port device team_slave_0 added [ 387.599785][ T7025] team0: Port device team_slave_1 added [ 387.612796][ T5874] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 387.622780][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.631266][ T5874] usb 5-1: Product: syz [ 387.635632][ T5874] usb 5-1: Manufacturer: syz [ 387.640632][ T5874] usb 5-1: SerialNumber: syz [ 387.777485][ T5874] usb 5-1: config 0 descriptor?? [ 387.879200][ T5874] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 387.907773][ T11] usb 7-1: USB disconnect, device number 5 [ 387.919322][ T11] em28xx 7-1:0.0: Disconnecting em28xx [ 387.990239][ T11] em28xx 7-1:0.0: Freeing device [ 387.991914][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 388.270883][ T5825] Bluetooth: hci2: command tx timeout [ 388.952979][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.960349][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.986782][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.095159][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.102598][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.130510][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.520516][ T5874] gspca_sunplus: reg_r err -32 [ 389.525894][ T5874] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 389.774822][ T7025] hsr_slave_0: entered promiscuous mode [ 389.785584][ T7025] hsr_slave_1: entered promiscuous mode [ 389.794836][ T7025] debugfs: 'hsr0' already exists in 'hsr' [ 389.801841][ T7025] Cannot create hsr debugfs directory [ 390.056738][ T3586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.328522][ T3586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.827505][ T3586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.845521][ T7124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.979005][ T11] usb 5-1: USB disconnect, device number 16 [ 391.480831][ T3586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.643324][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.651149][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.658921][ T7062] bridge_slave_0: entered allmulticast mode [ 391.668885][ T7062] bridge_slave_0: entered promiscuous mode [ 391.853994][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.862155][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.870155][ T7062] bridge_slave_1: entered allmulticast mode [ 391.880060][ T7062] bridge_slave_1: entered promiscuous mode [ 392.291020][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 392.526166][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 392.543283][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 392.555655][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 392.559229][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.580828][ T3586] bridge_slave_1: left allmulticast mode [ 392.586961][ T3586] bridge_slave_1: left promiscuous mode [ 392.597119][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.648207][ T5904] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 392.657810][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.666299][ T5904] usb 6-1: Product: syz [ 392.670808][ T5904] usb 6-1: Manufacturer: syz [ 392.675614][ T5904] usb 6-1: SerialNumber: syz [ 392.685648][ T3586] bridge_slave_0: left allmulticast mode [ 392.693907][ T3586] bridge_slave_0: left promiscuous mode [ 392.700838][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.742255][ T5904] usb 6-1: config 0 descriptor?? [ 392.796893][ T5904] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 392.807008][ T5904] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 393.471694][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.484525][ T5904] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 393.503031][ T5904] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 393.551729][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.603322][ T3586] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 393.672466][ T3586] bond0 (unregistering): Released all slaves [ 393.803988][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.951711][ T5904] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 393.966878][ T5904] em28xx 6-1:0.0: No AC97 audio processor [ 394.485910][ T7062] team0: Port device team_slave_0 added [ 394.658198][ T7062] team0: Port device team_slave_1 added [ 395.054011][ T3586] hsr_slave_0: left promiscuous mode [ 395.090117][ T3586] hsr_slave_1: left promiscuous mode [ 395.098304][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.106502][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.213426][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.221326][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.351392][ T3586] veth1_macvtap: left promiscuous mode [ 395.357150][ T3586] veth0_macvtap: left promiscuous mode [ 395.363338][ T3586] veth1_vlan: left promiscuous mode [ 395.368912][ T3586] veth0_vlan: left promiscuous mode [ 395.377346][ T11] usb 6-1: USB disconnect, device number 6 [ 395.403451][ T11] em28xx 6-1:0.0: Disconnecting em28xx [ 395.468457][ T11] em28xx 6-1:0.0: Freeing device [ 395.881026][ T7158] trusted_key: encrypted_key: insufficient parameters specified [ 397.042179][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 397.220380][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 397.775836][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.783126][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.809732][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.853096][ T7025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.316571][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.323922][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.350055][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.363935][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.432415][ T7025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.624600][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 398.643686][ T7025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.956329][ T9] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 398.965976][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.976359][ T9] usb 7-1: Product: syz [ 398.981537][ T9] usb 7-1: Manufacturer: syz [ 398.986342][ T9] usb 7-1: SerialNumber: syz [ 399.843975][ T9] usb 7-1: config 0 descriptor?? [ 399.931948][ T7170] 9pnet_virtio: no channels available for device syz [ 399.931997][ T7025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.461886][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 402.159221][ T7062] hsr_slave_0: entered promiscuous mode [ 402.170278][ T7062] hsr_slave_1: entered promiscuous mode [ 402.179246][ T7062] debugfs: 'hsr0' already exists in 'hsr' [ 402.185246][ T7062] Cannot create hsr debugfs directory [ 404.030834][ T7161] Set syz1 is full, maxelem 65536 reached [ 404.039611][ T9] gspca_sunplus: reg_r err -71 [ 404.045364][ T9] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 404.075658][ T9] usb 7-1: USB disconnect, device number 6 [ 404.130283][ T5873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 404.283495][ T5873] usb 5-1: device descriptor read/64, error -71 [ 404.550411][ T5873] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 405.591920][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.639281][ T7062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.739112][ T7062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.885134][ T7062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.960930][ T7025] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.992779][ T7062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 406.096540][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.104185][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.221591][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.229220][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.257033][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 407.263528][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 407.580158][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 407.586575][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 407.601343][ T7198] ceph: No mds server is up or the cluster is laggy [ 407.743462][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.382'. [ 408.003734][ T7210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.012736][ T7210] batadv_slave_0: entered promiscuous mode [ 408.198451][ T7214] gretap0: entered allmulticast mode [ 408.389061][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.659300][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.730120][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.737768][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.754112][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.761709][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.077030][ T7025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.296384][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.221937][ T7025] veth0_vlan: entered promiscuous mode [ 415.481119][ T5820] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 415.481265][ T5820] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 415.488513][ T5820] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 415.496438][ T5820] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 415.503831][ T5820] Bluetooth: hci1: Malformed LE Event: 0x0d [ 415.817991][ T7025] veth1_vlan: entered promiscuous mode [ 418.551212][ T7025] veth0_macvtap: entered promiscuous mode [ 418.711481][ T7025] veth1_macvtap: entered promiscuous mode [ 419.139432][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.362955][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.369624][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.390267][ T7283] tipc: Failed to remove unknown binding: 66,1,1/0:2136254549/2136254551 [ 419.399020][ T7283] tipc: Failed to remove unknown binding: 66,1,1/0:2136254549/2136254551 [ 419.416134][ T7062] veth0_vlan: entered promiscuous mode [ 419.485859][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.495607][ T7062] veth1_vlan: entered promiscuous mode [ 419.747417][ T3621] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.948268][ T3621] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.983076][ T3605] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.075691][ T3605] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.208770][ T7062] veth0_macvtap: entered promiscuous mode [ 420.327992][ T7062] veth1_macvtap: entered promiscuous mode [ 420.719462][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.875317][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.080858][ T1094] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.202580][ T3646] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.278970][ T3646] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.370925][ T3646] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.887515][ T3605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.174242][ T3605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.458200][ T3605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.659717][ T3605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.679666][ T3605] bridge0: port 3(batadv0) entered disabled state [ 425.693882][ T3605] bridge_slave_1: left allmulticast mode [ 425.707187][ T3605] bridge_slave_1: left promiscuous mode [ 425.714010][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.741919][ T3605] bridge_slave_0: left allmulticast mode [ 425.747824][ T3605] bridge_slave_0: left promiscuous mode [ 425.754695][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.776090][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.872853][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.915392][ T3605] bond0 (unregistering): Released all slaves [ 427.599747][ T7348] tipc: Failed to remove unknown binding: 66,1,1/0:1054671997/1054671999 [ 427.610783][ T7348] tipc: Failed to remove unknown binding: 66,1,1/0:1054671997/1054671999 [ 427.960974][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 428.200802][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 428.261971][ T9] usb 5-1: config 0 has no interfaces? [ 428.318966][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 428.329452][ T9] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 428.338831][ T9] usb 5-1: Manufacturer: syz [ 428.385020][ T3605] hsr_slave_0: left promiscuous mode [ 428.470315][ T9] usb 5-1: config 0 descriptor?? [ 428.504927][ T3605] hsr_slave_1: left promiscuous mode [ 428.512477][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.520512][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.603991][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.612054][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.744853][ T9] usb 5-1: USB disconnect, device number 19 [ 428.824185][ T3605] veth1_macvtap: left promiscuous mode [ 428.830360][ T3605] veth0_macvtap: left promiscuous mode [ 428.836271][ T3605] veth1_vlan: left promiscuous mode [ 428.842230][ T3605] veth0_vlan: left promiscuous mode [ 430.326056][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 430.425240][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 433.115141][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.132446][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.151467][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.165195][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.222207][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.089485][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.114624][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.131257][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.151556][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.194420][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.206168][ T7401] tipc: Failed to remove unknown binding: 66,1,1/0:467019895/467019897 [ 435.215573][ T7401] tipc: Failed to remove unknown binding: 66,1,1/0:467019895/467019897 [ 435.310249][ T5109] Bluetooth: hci0: command tx timeout [ 435.854965][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.863104][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.056576][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 436.292077][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.303801][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.360956][ T5109] Bluetooth: hci4: command tx timeout [ 437.400891][ T5109] Bluetooth: hci0: command 0x041b tx timeout [ 438.027494][ T3605] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.221183][ T7396] chnl_net:caif_netlink_parms(): no params data found [ 438.402014][ T3605] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.442725][ T5825] Bluetooth: hci4: command tx timeout [ 439.265800][ T3605] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.290666][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.301412][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.346189][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.392179][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.423733][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.431576][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.439536][ T7386] bridge_slave_0: entered allmulticast mode [ 439.449608][ T7386] bridge_slave_0: entered promiscuous mode [ 439.470989][ T5109] Bluetooth: hci0: command 0x041b tx timeout [ 439.492610][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.637822][ T3605] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.847049][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.858899][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.867823][ T7386] bridge_slave_1: entered allmulticast mode [ 439.876646][ T7386] bridge_slave_1: entered promiscuous mode [ 440.511572][ T5109] Bluetooth: hci4: command tx timeout [ 440.879198][ T3605] bridge_slave_1: left allmulticast mode [ 440.885425][ T3605] bridge_slave_1: left promiscuous mode [ 440.892357][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.920307][ T7437] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 440.927199][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.936087][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 440.948435][ T3605] bridge_slave_0: left allmulticast mode [ 440.958781][ T3605] bridge_slave_0: left promiscuous mode [ 440.965493][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.492226][ T24] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 441.561319][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.579235][ T5109] Bluetooth: hci0: command 0x041b tx timeout [ 441.629394][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.685656][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.713576][ T3605] bond0 (unregistering): Released all slaves [ 441.750396][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 441.756501][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.837427][ T5904] usb 6-1: config 0 has no interfaces? [ 441.839790][ T5825] Bluetooth: hci3: command tx timeout [ 441.843533][ T5904] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 441.848992][ T5109] Bluetooth: hci5: command 0x0406 tx timeout [ 441.858031][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.043976][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.097916][ T5904] usb 6-1: config 0 descriptor?? [ 442.263615][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.273912][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.282138][ T7396] bridge_slave_0: entered allmulticast mode [ 442.299053][ T7396] bridge_slave_0: entered promiscuous mode [ 442.395332][ T7439] vhci_hcd: connection closed [ 442.397301][ T1094] vhci_hcd: stop threads [ 442.408134][ T1094] vhci_hcd: release socket [ 442.413315][ T1094] vhci_hcd: disconnect device [ 442.425537][ T5904] usb 6-1: USB disconnect, device number 7 [ 442.501734][ T24] vhci_hcd: vhci_device speed not set [ 442.600500][ T5109] Bluetooth: hci4: command tx timeout [ 442.628765][ T3605] hsr_slave_0: left promiscuous mode [ 442.650282][ T3605] hsr_slave_1: left promiscuous mode [ 442.658588][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.666440][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.743742][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.751629][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.853414][ T3605] veth1_macvtap: left promiscuous mode [ 442.859179][ T3605] veth0_macvtap: left promiscuous mode [ 442.865895][ T3605] veth1_vlan: left promiscuous mode [ 442.871600][ T3605] veth0_vlan: left promiscuous mode [ 443.640104][ T5109] Bluetooth: hci0: command 0x041b tx timeout [ 443.870336][ T5109] Bluetooth: hci3: command tx timeout [ 444.022512][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 444.055900][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 444.392967][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.403490][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.414045][ T7396] bridge_slave_1: entered allmulticast mode [ 444.423911][ T7396] bridge_slave_1: entered promiscuous mode [ 444.465102][ T7386] team0: Port device team_slave_0 added [ 444.608773][ T7456] tipc: Failed to remove unknown binding: 66,1,1/0:1154463328/1154463330 [ 444.617610][ T7456] tipc: Failed to remove unknown binding: 66,1,1/0:1154463328/1154463330 [ 444.723089][ T7386] team0: Port device team_slave_1 added [ 445.192351][ T7396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.370512][ T7396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.386964][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 445.577771][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.585220][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.611880][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.964143][ T5109] Bluetooth: hci3: command tx timeout [ 446.031302][ T7396] team0: Port device team_slave_0 added [ 446.051144][ T7396] team0: Port device team_slave_1 added [ 446.111796][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.118999][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.145551][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.426593][ T3605] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.723660][ T3605] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.813815][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.821145][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.848824][ T7396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.073252][ T7427] chnl_net:caif_netlink_parms(): no params data found [ 447.142570][ T3605] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.233672][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.241022][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.267707][ T7396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.457466][ T3605] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.565611][ T7386] hsr_slave_0: entered promiscuous mode [ 447.576276][ T7386] hsr_slave_1: entered promiscuous mode [ 447.585506][ T7386] debugfs: 'hsr0' already exists in 'hsr' [ 447.591657][ T7386] Cannot create hsr debugfs directory [ 448.044235][ T5109] Bluetooth: hci3: command tx timeout [ 448.554306][ T7396] hsr_slave_0: entered promiscuous mode [ 448.565262][ T7396] hsr_slave_1: entered promiscuous mode [ 448.574453][ T7396] debugfs: 'hsr0' already exists in 'hsr' [ 448.580506][ T7396] Cannot create hsr debugfs directory [ 448.771024][ T5875] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 449.030745][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 449.067574][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.078496][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 449.091955][ T5875] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.101396][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.116954][ T3605] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.204090][ T5875] usb 5-1: config 0 descriptor?? [ 449.253728][ T5875] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 449.474804][ T3605] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.690086][ T3605] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.904870][ T3605] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.990861][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.998791][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.007537][ T7427] bridge_slave_0: entered allmulticast mode [ 450.017529][ T7427] bridge_slave_0: entered promiscuous mode [ 450.199306][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.209688][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.218921][ T7427] bridge_slave_1: entered allmulticast mode [ 450.229033][ T7427] bridge_slave_1: entered promiscuous mode [ 450.696293][ T7427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.014468][ T7427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.149239][ T7509] 9pnet_virtio: no channels available for device syz [ 451.166318][ T3605] bridge_slave_1: left allmulticast mode [ 451.172435][ T3605] bridge_slave_1: left promiscuous mode [ 451.179028][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.260896][ T3605] bridge_slave_0: left allmulticast mode [ 451.266901][ T3605] bridge_slave_0: left promiscuous mode [ 451.273804][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.323177][ T3605] bridge_slave_1: left allmulticast mode [ 451.330039][ T3605] bridge_slave_1: left promiscuous mode [ 451.338658][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.379352][ T3605] bridge_slave_0: left allmulticast mode [ 451.387686][ T3605] bridge_slave_0: left promiscuous mode [ 451.397392][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.637934][ T42] usb 5-1: USB disconnect, device number 20 [ 452.358182][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.388519][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.405162][ T3605] bond0 (unregistering): Released all slaves [ 452.727343][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.757404][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.784874][ T3605] bond0 (unregistering): Released all slaves [ 453.224661][ T7427] team0: Port device team_slave_0 added [ 453.436665][ T7427] team0: Port device team_slave_1 added [ 454.001475][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.008965][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.035603][ T7427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.313632][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.320959][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.347617][ T7427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.575970][ T7386] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 454.874845][ T7386] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 455.015340][ T7386] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 455.134765][ T3605] hsr_slave_0: left promiscuous mode [ 455.177970][ T3605] hsr_slave_1: left promiscuous mode [ 455.186296][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.196575][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.250053][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.257795][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.411534][ T3605] hsr_slave_0: left promiscuous mode [ 455.464856][ T3605] hsr_slave_1: left promiscuous mode [ 455.473127][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.520786][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.528392][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.833812][ T3605] veth1_macvtap: left promiscuous mode [ 455.839783][ T3605] veth0_macvtap: left promiscuous mode [ 455.845986][ T3605] veth1_vlan: left promiscuous mode [ 455.851926][ T3605] veth0_vlan: left promiscuous mode [ 456.056700][ T3605] veth1_macvtap: left promiscuous mode [ 456.063374][ T3605] veth0_macvtap: left promiscuous mode [ 456.069381][ T3605] veth1_vlan: left promiscuous mode [ 456.075213][ T3605] veth0_vlan: left promiscuous mode [ 457.678450][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 457.768452][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 461.381969][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 461.496507][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 461.996625][ T7396] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 462.174061][ T7396] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 462.232317][ T7386] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 462.273408][ T5875] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 462.310407][ T7427] hsr_slave_0: entered promiscuous mode [ 462.321075][ T7427] hsr_slave_1: entered promiscuous mode [ 462.330492][ T7427] debugfs: 'hsr0' already exists in 'hsr' [ 462.336415][ T7427] Cannot create hsr debugfs directory [ 462.384861][ T7396] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 462.520354][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 462.551638][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.564763][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 462.579104][ T5875] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 462.588651][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.608807][ T5875] usb 6-1: config 0 descriptor?? [ 462.692355][ T7396] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 462.694089][ T5875] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 464.151740][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.576499][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.766205][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.786926][ T4084] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.794716][ T4084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.877573][ T4084] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.887113][ T4084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.098358][ T5109] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 465.218532][ T7396] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.337742][ T7427] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 465.399621][ T1886] usb 6-1: USB disconnect, device number 8 [ 465.544885][ T4084] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.552591][ T4084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.568486][ T7427] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 465.671155][ T7427] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 465.766639][ T4084] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.774323][ T4084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.811673][ T7427] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 467.694539][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.095981][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.258262][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.265912][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.452030][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.459660][ T7544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.815001][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.211299][ T7396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.511037][ T7550] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 470.772498][ T7550] usb 6-1: Using ep0 maxpacket: 32 [ 470.865797][ T7550] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 470.874577][ T7550] usb 6-1: config 0 has no interface number 0 [ 470.881373][ T7550] usb 6-1: config 0 interface 12 has no altsetting 0 [ 471.965698][ T7550] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 471.975240][ T7550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.985797][ T7550] usb 6-1: Product: syz [ 471.991326][ T7550] usb 6-1: Manufacturer: syz [ 471.996156][ T7550] usb 6-1: SerialNumber: syz [ 472.862574][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.964039][ T7550] usb 6-1: config 0 descriptor?? [ 473.616892][ T7550] usb 6-1: can't set config #0, error -71 [ 473.646321][ T7550] usb 6-1: USB disconnect, device number 9 [ 474.099107][ T5109] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 474.462437][ T7386] veth0_vlan: entered promiscuous mode [ 474.794966][ T7386] veth1_vlan: entered promiscuous mode [ 474.842172][ T7396] veth0_vlan: entered promiscuous mode [ 475.079637][ T7396] veth1_vlan: entered promiscuous mode [ 475.284815][ T7386] veth0_macvtap: entered promiscuous mode [ 475.357828][ T7386] veth1_macvtap: entered promiscuous mode [ 475.670828][ T7396] veth0_macvtap: entered promiscuous mode [ 475.761231][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.818397][ T7396] veth1_macvtap: entered promiscuous mode [ 475.942869][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.075400][ T1327] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.105377][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.162639][ T1327] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.217043][ T1327] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.266755][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.291800][ T1327] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.502991][ T1146] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.663730][ T4509] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.806704][ T4509] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.956788][ T4509] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.827527][ T7427] veth0_vlan: entered promiscuous mode [ 477.978296][ T7427] veth1_vlan: entered promiscuous mode [ 478.197997][ T7427] veth0_macvtap: entered promiscuous mode [ 478.232580][ T7427] veth1_macvtap: entered promiscuous mode [ 478.621357][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.725966][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.939652][ T1327] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.002704][ T1327] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.100167][ T1327] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.109227][ T1327] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.663122][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 479.856638][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 479.878446][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 479.887214][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.900061][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.910667][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.920929][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.934435][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.944125][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.436179][ T42] usb 6-1: usb_control_msg returned -32 [ 480.442724][ T42] usbtmc 6-1:16.0: can't read capabilities [ 480.479490][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.492580][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.725543][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.732515][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.164459][ T7696] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned a0 [ 481.465820][ T24] usb 6-1: USB disconnect, device number 10 [ 482.832995][ T5109] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 482.839706][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 484.280153][ T5442] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 484.613450][ T5442] usb 6-1: Using ep0 maxpacket: 16 [ 484.657305][ T5442] usb 6-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 484.666921][ T5442] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 484.677346][ T5442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.170747][ T5442] usb 6-1: USB disconnect, device number 11 [ 486.092312][ T7544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.100688][ T7544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.450476][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.458525][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.986682][ T4084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.994981][ T4084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.252131][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.261054][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.611590][ T7751] fuse: Unknown parameter 'group_id00000000000000000000' [ 489.893710][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.907401][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.397135][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.405393][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.021740][ T7802] fuse: Unknown parameter 'group_id00000000000000000000' [ 494.038546][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 494.590212][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 494.831168][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 494.846426][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 494.859367][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.283036][ T24] usb 9-1: config 0 descriptor?? [ 495.350660][ T24] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 497.303212][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 500.392283][ T7842] fuse: Bad value for 'user_id' [ 500.397365][ T7842] fuse: Bad value for 'user_id' [ 500.434145][ T5109] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 500.459523][ T5442] usb 9-1: USB disconnect, device number 2 [ 503.783913][ T7872] input: syz0 as /devices/virtual/input/input11 [ 503.889552][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.5.495'. [ 504.022801][ T5109] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 504.101196][ T7886] fuse: Bad value for 'user_id' [ 504.114146][ T7886] fuse: Bad value for 'user_id' [ 504.191760][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.495'. [ 504.201820][ T7872] netlink: 60 bytes leftover after parsing attributes in process `syz.5.495'. [ 504.373059][ T7549] udevd[7549]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 505.301393][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.311448][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.321090][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.334867][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.349588][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.844582][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz.9.505'. [ 506.115176][ T5109] Bluetooth: hci4: command 0x0406 tx timeout [ 506.610059][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.8.509'. [ 507.470793][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.511'. [ 507.480500][ T7918] ip_vti0: entered promiscuous mode [ 507.485916][ T7918] ip_vti0: entered allmulticast mode [ 507.496736][ T7922] fuse: Bad value for 'user_id' [ 507.503532][ T7922] fuse: Bad value for 'user_id' [ 507.511339][ T5109] Bluetooth: hci2: command tx timeout [ 507.773920][ T7921] tipc: Failed to remove unknown binding: 66,1,1/0:2508251245/2508251247 [ 507.783066][ T7921] tipc: Failed to remove unknown binding: 66,1,1/0:2508251245/2508251247 [ 507.927860][ T7896] chnl_net:caif_netlink_parms(): no params data found [ 508.710342][ T7930] netlink: 14 bytes leftover after parsing attributes in process `syz.9.514'. [ 508.956978][ T7930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.133209][ T7930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.192866][ T7930] bond0 (unregistering): Released all slaves [ 509.581285][ T5109] Bluetooth: hci2: command tx timeout [ 509.626152][ T1154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.739312][ T1154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.045733][ T1154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.303416][ T1154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.331376][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.9.519'. [ 511.223237][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.231166][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.239049][ T7896] bridge_slave_0: entered allmulticast mode [ 511.249092][ T7896] bridge_slave_0: entered promiscuous mode [ 511.276210][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.290874][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.299508][ T7896] bridge_slave_1: entered allmulticast mode [ 511.318002][ T7896] bridge_slave_1: entered promiscuous mode [ 511.648177][ T5109] Bluetooth: hci2: command tx timeout [ 511.794620][ T7896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.942848][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.9.522'. [ 511.972074][ T7896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.988874][ T1154] bridge_slave_1: left allmulticast mode [ 511.995402][ T1154] bridge_slave_1: left promiscuous mode [ 512.002278][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.117303][ T1154] bridge_slave_0: left allmulticast mode [ 512.130256][ T1154] bridge_slave_0: left promiscuous mode [ 512.136981][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.711735][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.761706][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.805675][ T7968] fuse: Bad value for 'fd' [ 512.829016][ T1154] bond0 (unregistering): Released all slaves [ 512.874173][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.9.525'. [ 512.933715][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.525'. [ 513.106855][ T7969] xfrm0: entered promiscuous mode [ 513.112488][ T7969] xfrm0: entered allmulticast mode [ 513.270165][ T7896] team0: Port device team_slave_0 added [ 513.462513][ T7896] team0: Port device team_slave_1 added [ 513.710844][ T5109] Bluetooth: hci2: command tx timeout [ 514.110944][ T1154] hsr_slave_0: left promiscuous mode [ 514.136869][ T1154] hsr_slave_1: left promiscuous mode [ 514.145283][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.153097][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.242475][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.250850][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.335235][ T5109] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 514.335380][ T5109] Bluetooth: hci4: Unknown advertising packet type: 0x5d [ 514.342979][ T5109] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 514.350769][ T5109] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 514.358009][ T5109] Bluetooth: hci4: Malformed LE Event: 0x0d [ 515.322780][ T1154] veth1_macvtap: left promiscuous mode [ 515.328548][ T1154] veth0_macvtap: left promiscuous mode [ 515.334861][ T1154] veth1_vlan: left promiscuous mode [ 515.342107][ T1154] veth0_vlan: left promiscuous mode [ 516.249668][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.531'. [ 516.641988][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 516.699058][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 517.237742][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.251496][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.277665][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.286643][ T7896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.523577][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.531303][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.557657][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.568518][ T7896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.237534][ T7896] hsr_slave_0: entered promiscuous mode [ 518.248299][ T7896] hsr_slave_1: entered promiscuous mode [ 518.257755][ T7896] debugfs: 'hsr0' already exists in 'hsr' [ 518.263868][ T7896] Cannot create hsr debugfs directory [ 518.329332][ T7997] fuse: Bad value for 'fd' [ 519.669689][ T5109] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 519.670035][ T5109] Bluetooth: hci3: Unknown advertising packet type: 0x5d [ 519.677381][ T5109] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 519.684968][ T5109] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 519.692476][ T5109] Bluetooth: hci3: Malformed LE Event: 0x0d [ 521.967827][ T7896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.034825][ T7896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.084305][ T8036] fuse: Bad value for 'fd' [ 522.143983][ T7896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 522.268459][ T7896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.698885][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.551'. [ 522.922106][ T8045] binder: 8044:8045 ioctl c0306201 0 returned -14 [ 523.262511][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.9.553'. [ 523.317739][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.9.553'. [ 523.828965][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.045164][ T7896] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.182692][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.190362][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.329730][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.337391][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.789182][ T7896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.913440][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 525.913529][ T30] audit: type=1326 audit(1755763554.253:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.942482][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.952151][ T30] audit: type=1326 audit(1755763554.253:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.974209][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.322293][ T7550] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 526.542173][ T8072] fuse: Bad value for 'fd' [ 526.700593][ T7550] usb 6-1: Using ep0 maxpacket: 16 [ 526.932990][ T7550] usb 6-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 526.942560][ T7550] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 526.951983][ T7550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.031888][ T30] audit: type=1326 audit(1755763554.333:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.054549][ T30] audit: type=1326 audit(1755763554.343:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.076598][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.086124][ T30] audit: type=1326 audit(1755763554.353:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.108172][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.116094][ T30] audit: type=1326 audit(1755763554.353:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.138828][ T30] audit: type=1326 audit(1755763554.353:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.160871][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.167959][ T30] audit: type=1326 audit(1755763554.363:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.190102][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.199609][ T30] audit: type=1326 audit(1755763554.373:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 527.223272][ T30] audit: type=1326 audit(1755763554.373:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.8.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 528.073624][ T7896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.268646][ T7896] veth0_vlan: entered promiscuous mode [ 529.408486][ T7896] veth1_vlan: entered promiscuous mode [ 529.500232][ T24] usb 6-1: USB disconnect, device number 12 [ 529.733359][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.565'. [ 529.990111][ T7896] veth0_macvtap: entered promiscuous mode [ 530.031693][ T7896] veth1_macvtap: entered promiscuous mode [ 530.393623][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.506736][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.685992][ T4084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.749679][ T4084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.891711][ T4084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.940555][ T4046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.802506][ T8097] fuse: Bad value for 'fd' [ 532.647026][ T8106] binder: 8105:8106 ioctl c0306201 0 returned -14 [ 534.334423][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.8.581'. [ 534.946811][ T8141] fuse: Bad value for 'fd' [ 538.736637][ T8179] fuse: Invalid rootmode [ 540.030764][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.9.597'. [ 540.704088][ T8174] lo speed is unknown, defaulting to 1000 [ 540.714539][ T8174] lo speed is unknown, defaulting to 1000 [ 540.722411][ T8174] lo speed is unknown, defaulting to 1000 [ 541.232663][ T8174] infiniband sz1: set active [ 541.237597][ T8174] infiniband sz1: added lo [ 541.244192][ T24] lo speed is unknown, defaulting to 1000 [ 541.302758][ T8174] RDS/IB: sz1: added [ 541.310716][ T8174] smc: adding ib device sz1 with port count 1 [ 541.317092][ T8174] smc: ib device sz1 port 1 has pnetid [ 541.326925][ T8174] lo speed is unknown, defaulting to 1000 [ 541.381349][ T24] lo speed is unknown, defaulting to 1000 [ 541.873699][ T8174] lo speed is unknown, defaulting to 1000 [ 542.287032][ T8174] lo speed is unknown, defaulting to 1000 [ 542.718467][ T8174] lo speed is unknown, defaulting to 1000 [ 543.168011][ T8174] lo speed is unknown, defaulting to 1000 [ 543.634146][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.641634][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.125891][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.134165][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.465777][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.474854][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.356993][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 545.887519][ T8225] fuse: Invalid rootmode [ 547.147161][ T8231] netlink: 'syz.4.606': attribute type 11 has an invalid length. [ 547.184269][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 547.196963][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.207300][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 547.221687][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 547.233057][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.211374][ T24] usb 2-1: config 0 descriptor?? [ 549.000300][ T8233] 9pnet_virtio: no channels available for device syz [ 549.256619][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 550.498465][ T24] usb 2-1: USB disconnect, device number 12 [ 551.772090][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 551.772171][ T30] audit: type=1326 audit(1755763580.083:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.801176][ T30] audit: type=1326 audit(1755763580.083:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.823652][ T30] audit: type=1326 audit(1755763580.093:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.846230][ T30] audit: type=1326 audit(1755763580.093:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.872865][ T30] audit: type=1326 audit(1755763580.093:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.896678][ T30] audit: type=1326 audit(1755763580.103:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.919087][ T30] audit: type=1326 audit(1755763580.103:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.941511][ T30] audit: type=1326 audit(1755763580.113:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.967858][ T30] audit: type=1326 audit(1755763580.113:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 552.972780][ T8251] delete_channel: no stack [ 553.140669][ T30] audit: type=1326 audit(1755763580.353:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 553.637535][ T8268] fuse: Invalid rootmode [ 553.674852][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.619'. [ 553.805451][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 554.096122][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 554.406415][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.420359][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.434664][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.444610][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.493527][ T24] usb 2-1: config 0 descriptor?? [ 554.520529][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 557.009302][ T8293] input: syz0 as /devices/virtual/input/input12 [ 557.223964][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.9.627'. [ 557.320459][ T5442] usb 2-1: USB disconnect, device number 13 [ 557.396652][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.9.627'. [ 557.396770][ T8289] netlink: 60 bytes leftover after parsing attributes in process `syz.9.627'. [ 559.559654][ T8314] fuse: Bad value for 'rootmode' [ 560.624517][ T8323] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.838515][ T8323] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.538753][ T8323] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.292723][ T8357] fuse: Bad value for 'rootmode' [ 563.404539][ T8323] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.552501][ T8358] input: syz0 as /devices/virtual/input/input13 [ 563.577779][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.8.648'. [ 563.603706][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.8.648'. [ 563.603783][ T8358] netlink: 60 bytes leftover after parsing attributes in process `syz.8.648'. [ 564.670406][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 564.725002][ T1870] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.725229][ T1870] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.804332][ T4084] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.824055][ T3646] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.625407][ T8378] netlink: 'syz.5.654': attribute type 4 has an invalid length. [ 565.633445][ T8378] netlink: 17 bytes leftover after parsing attributes in process `syz.5.654'. [ 565.746594][ T8379] bridge0: port 4(erspan0) entered blocking state [ 565.753987][ T8379] bridge0: port 4(erspan0) entered disabled state [ 565.761410][ T8379] erspan0: entered allmulticast mode [ 565.771119][ T8379] erspan0: entered promiscuous mode [ 565.779129][ T8379] bridge0: port 4(erspan0) entered blocking state [ 565.786123][ T8379] bridge0: port 4(erspan0) entered forwarding state [ 566.420458][ T5442] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 566.670611][ T5442] usb 10-1: Using ep0 maxpacket: 16 [ 566.988154][ T5442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.999650][ T5442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.014208][ T5442] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.028414][ T5442] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 567.037874][ T5442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.293280][ T5442] usb 10-1: config 0 descriptor?? [ 567.845123][ T5442] usbhid 10-1:0.0: can't add hid device: -71 [ 567.852742][ T5442] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 567.928320][ T5442] usb 10-1: USB disconnect, device number 2 [ 571.673662][ T8410] input: syz0 as /devices/virtual/input/input14 [ 573.263957][ T8420] input: syz0 as /devices/virtual/input/input15 [ 573.322211][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.665'. [ 573.343685][ T8423] overlayfs: failed to clone upperpath [ 573.691029][ T8427] netlink: 84 bytes leftover after parsing attributes in process `syz.9.668'. [ 575.352008][ T5109] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 576.807332][ T8461] input: syz0 as /devices/virtual/input/input16 [ 578.441167][ T8472] 9pnet_virtio: no channels available for device syz [ 578.485331][ T8472] bridge1: entered promiscuous mode [ 581.616567][ T5109] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 581.812126][ T8489] input: syz0 as /devices/virtual/input/input17 [ 581.941754][ T8489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 581.970657][ T7550] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 582.039187][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.685'. [ 582.039297][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.685'. [ 582.121225][ T7550] usb 6-1: Using ep0 maxpacket: 16 [ 582.128723][ T7550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.128899][ T7550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.129043][ T7550] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 582.129272][ T7550] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 582.129434][ T7550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.148890][ T7550] usb 6-1: config 0 descriptor?? [ 582.693816][ T7550] usbhid 6-1:0.0: can't add hid device: -71 [ 582.694406][ T7550] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 582.740796][ T7550] usb 6-1: USB disconnect, device number 13 [ 583.052519][ T8511] capability: warning: `syz.8.691' uses deprecated v2 capabilities in a way that may be insecure [ 583.392698][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 585.997445][ T5109] Bluetooth: hci4: link tx timeout [ 586.003019][ T5109] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 587.660541][ T8549] 9pnet_virtio: no channels available for device syz [ 588.141907][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 590.521170][ T8565] input: syz0 as /devices/virtual/input/input18 [ 590.551869][ T8563] overlayfs: failed to clone upperpath [ 590.917287][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.9.707'. [ 593.590740][ T7550] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 593.600731][ T42] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 593.800262][ T42] usb 10-1: Using ep0 maxpacket: 16 [ 593.836320][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.850367][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.861536][ T42] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.874858][ T42] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 593.884344][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.969410][ T7550] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 593.972565][ T42] usb 10-1: config 0 descriptor?? [ 593.979124][ T7550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.266109][ T7550] usb 2-1: config 0 descriptor?? [ 594.363591][ T7550] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 594.494681][ T42] usbhid 10-1:0.0: can't add hid device: -71 [ 594.501699][ T42] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 594.621866][ T42] usb 10-1: USB disconnect, device number 3 [ 594.782049][ T7550] gspca_cpia1: usb_control_msg 03, error -32 [ 594.821553][ T7550] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 594.843390][ T8602] overlayfs: failed to clone upperpath [ 595.915550][ T7550] gspca_cpia1: usb_control_msg 01, error -110 [ 595.921980][ T7550] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 596.123029][ T7550] usb 2-1: USB disconnect, device number 14 [ 597.098838][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 597.098901][ T30] audit: type=1326 audit(1755763625.443:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.130069][ T30] audit: type=1326 audit(1755763625.443:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.461728][ T30] audit: type=1326 audit(1755763625.503:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.484150][ T30] audit: type=1326 audit(1755763625.503:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.506661][ T30] audit: type=1326 audit(1755763625.503:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.531959][ T30] audit: type=1326 audit(1755763625.503:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.555135][ T30] audit: type=1326 audit(1755763625.503:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.577310][ T30] audit: type=1326 audit(1755763625.503:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.599673][ T30] audit: type=1326 audit(1755763625.503:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 597.622028][ T30] audit: type=1326 audit(1755763625.513:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 598.672035][ T8637] overlayfs: failed to clone upperpath [ 598.862318][ T7550] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 599.086442][ T7550] usb 10-1: Using ep0 maxpacket: 16 [ 599.248017][ T7550] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.259556][ T7550] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.273474][ T7550] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 599.287862][ T7550] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 599.297287][ T7550] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.613640][ T7550] usb 10-1: config 0 descriptor?? [ 600.114923][ T7550] usbhid 10-1:0.0: can't add hid device: -71 [ 600.121693][ T7550] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 600.173231][ T7550] usb 10-1: USB disconnect, device number 4 [ 600.214590][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.244243][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 600.253347][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 600.301744][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.332465][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.550311][ T5442] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 600.696985][ T8651] lo speed is unknown, defaulting to 1000 [ 601.277802][ T5442] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 601.287279][ T5442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.386129][ T5442] usb 2-1: config 0 descriptor?? [ 601.437065][ T5442] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 601.844631][ T5442] gspca_cpia1: usb_control_msg 03, error -32 [ 602.086445][ T5442] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 602.430464][ T5109] Bluetooth: hci0: command tx timeout [ 602.532348][ T5109] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 603.175333][ T5442] gspca_cpia1: usb_control_msg 01, error -110 [ 603.181874][ T5442] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 603.316673][ T42] usb 2-1: USB disconnect, device number 15 [ 603.603232][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.610363][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.640881][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 604.496362][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.744'. [ 604.511436][ T5109] Bluetooth: hci0: command tx timeout [ 605.962277][ T4084] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.422507][ T4084] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.593023][ T5109] Bluetooth: hci0: command tx timeout [ 606.888812][ T4084] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.959192][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.966950][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.974706][ T8651] bridge_slave_0: entered allmulticast mode [ 606.983414][ T8651] bridge_slave_0: entered promiscuous mode [ 607.105849][ T4084] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.213123][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.221014][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.228701][ T8651] bridge_slave_1: entered allmulticast mode [ 607.237640][ T8651] bridge_slave_1: entered promiscuous mode [ 608.291075][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.314041][ T4084] bridge_slave_1: left allmulticast mode [ 608.320365][ T4084] bridge_slave_1: left promiscuous mode [ 608.327289][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.471722][ T4084] bridge_slave_0: left allmulticast mode [ 608.477683][ T4084] bridge_slave_0: left promiscuous mode [ 608.490435][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.736509][ T5109] Bluetooth: hci0: command tx timeout [ 609.014598][ T8733] overlayfs: overlapping lowerdir path [ 609.194210][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.9.758'. [ 609.512107][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.532527][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.565439][ T4084] bond0 (unregistering): Released all slaves [ 609.741770][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.757955][ T8732] ip_vti0: entered promiscuous mode [ 609.763638][ T8732] ip_vti0: entered allmulticast mode [ 610.392106][ T8651] team0: Port device team_slave_0 added [ 610.536441][ T8651] team0: Port device team_slave_1 added [ 611.230482][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.237818][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.269004][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.394468][ T4084] hsr_slave_0: left promiscuous mode [ 611.404013][ T4084] hsr_slave_1: left promiscuous mode [ 611.412238][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.419983][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.499088][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.507194][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.550618][ T4084] veth1_macvtap: left promiscuous mode [ 611.560910][ T4084] veth0_macvtap: left promiscuous mode [ 611.566916][ T4084] veth1_vlan: left promiscuous mode [ 611.572745][ T4084] veth0_vlan: left promiscuous mode [ 612.766700][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 612.967383][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 613.495725][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.507346][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.536593][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.298470][ T8651] hsr_slave_0: entered promiscuous mode [ 614.309208][ T8651] hsr_slave_1: entered promiscuous mode [ 614.323268][ T8651] debugfs: 'hsr0' already exists in 'hsr' [ 614.329133][ T8651] Cannot create hsr debugfs directory [ 614.485671][ T5109] Bluetooth: hci2: link tx timeout [ 614.491111][ T5109] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 616.547927][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 616.601848][ T8651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 616.641753][ T8651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.668538][ T8651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.705914][ T8651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 618.364685][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.474668][ T8815] overlayfs: failed to clone upperpath [ 618.653218][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.771116][ T4084] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.778735][ T4084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.922342][ T4084] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.930265][ T4084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.437640][ T5109] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 623.193920][ T8837] input: syz0 as /devices/virtual/input/input19 [ 623.262849][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.9.791'. [ 624.648478][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.363452][ T8651] veth0_vlan: entered promiscuous mode [ 625.484208][ T8651] veth1_vlan: entered promiscuous mode [ 625.524092][ T8861] overlayfs: failed to clone upperpath [ 626.276191][ T8867] fuse: Bad value for 'fd' [ 628.257787][ T8651] veth0_macvtap: entered promiscuous mode [ 628.367862][ T8651] veth1_macvtap: entered promiscuous mode [ 628.413853][ T5109] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 628.662825][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.829637][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.045461][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.117183][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.237810][ T3773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.380967][ T3621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.391945][ T8892] netlink: 40 bytes leftover after parsing attributes in process `syz.9.806'. [ 632.079191][ T5109] Bluetooth: hci4: unexpected event for opcode 0x2007 [ 632.579055][ T8921] overlayfs: failed to clone upperpath [ 633.030009][ T8930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'. [ 633.046930][ T8928] fuse: Unknown parameter '0x0000000000000004' [ 634.334631][ T5109] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 635.030144][ T8961] overlayfs: failed to clone upperpath [ 635.158373][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.5.830'. [ 635.763721][ T8974] fuse: Unknown parameter '0x0000000000000004' [ 637.200765][ T8990] overlayfs: failed to resolve './file1': -2 [ 638.358914][ T5109] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 638.367660][ T5109] Bluetooth: hci1: Injecting HCI hardware error event [ 638.377231][ T5109] Bluetooth: hci1: hardware error 0x00 [ 639.424150][ T9005] overlayfs: failed to clone upperpath [ 639.830975][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.839119][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.199638][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.208179][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.450676][ T5109] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 641.015569][ T9023] fuse: Unknown parameter '0x0000000000000004' [ 642.517983][ T9040] overlayfs: failed to clone upperpath [ 644.051519][ T9060] fuse: Unknown parameter '0x0000000000000004' [ 645.089632][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 645.292024][ T9076] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.865'. [ 647.232456][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 647.232541][ T30] audit: type=1326 audit(1755763675.513:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.261361][ T30] audit: type=1326 audit(1755763675.513:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.283422][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.294161][ T30] audit: type=1326 audit(1755763675.513:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.316221][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.324424][ T30] audit: type=1326 audit(1755763675.513:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.346471][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.353705][ T30] audit: type=1326 audit(1755763675.513:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.376220][ T30] audit: type=1326 audit(1755763675.513:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.398444][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.409110][ T30] audit: type=1326 audit(1755763675.513:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.431276][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.438976][ T30] audit: type=1326 audit(1755763675.513:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.461528][ T30] audit: type=1326 audit(1755763675.513:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.483563][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.490505][ T30] audit: type=1326 audit(1755763675.513:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 647.512573][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.793270][ T9106] fuse: Unknown parameter '0x0000000000000004' [ 648.560928][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 650.414348][ T9145] fuse: Unknown parameter 'fd0x0000000000000004' [ 650.704400][ T5109] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 653.052885][ T9186] fuse: Unknown parameter 'fd0x0000000000000004' [ 653.760538][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 653.760621][ T30] audit: type=1326 audit(1755763682.022:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.789454][ T30] audit: type=1326 audit(1755763682.022:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.812160][ T30] audit: type=1326 audit(1755763682.022:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.834451][ T30] audit: type=1326 audit(1755763682.032:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.860959][ T30] audit: type=1326 audit(1755763682.032:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.885051][ T30] audit: type=1326 audit(1755763682.032:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.907600][ T30] audit: type=1326 audit(1755763682.032:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.930210][ T30] audit: type=1326 audit(1755763682.032:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.956481][ T30] audit: type=1326 audit(1755763682.032:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 653.980367][ T30] audit: type=1326 audit(1755763682.032:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 655.013220][ T9216] process 'syz.2.913' launched './file1' with NULL argv: empty string added [ 655.880875][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.9.919'. [ 656.123355][ T9231] fuse: Unknown parameter 'fd0x0000000000000004' [ 658.175123][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 664.311691][ T9237] kexec: Could not allocate control_code_buffer [ 665.057737][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.064583][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.184913][ T9251] bridge2: entered promiscuous mode [ 665.195768][ T9237] Process accounting resumed [ 667.049976][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 667.050064][ T30] audit: type=1326 audit(1755763695.312:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.085570][ T30] audit: type=1326 audit(1755763695.312:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.107852][ T30] audit: type=1326 audit(1755763695.322:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.130373][ T30] audit: type=1326 audit(1755763695.322:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.154626][ T30] audit: type=1326 audit(1755763695.322:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.180897][ T30] audit: type=1326 audit(1755763695.322:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.205384][ T30] audit: type=1326 audit(1755763695.322:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.233477][ T30] audit: type=1326 audit(1755763695.322:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.255972][ T30] audit: type=1326 audit(1755763695.322:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 667.282631][ T30] audit: type=1326 audit(1755763695.322:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 668.782781][ T9285] bridge1: entered promiscuous mode [ 671.321646][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 671.332149][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 671.342926][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 671.364974][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 671.421705][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 671.581764][ T9310] lo speed is unknown, defaulting to 1000 [ 673.570373][ T5109] Bluetooth: hci3: command tx timeout [ 674.471193][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 674.582070][ T9336] bridge2: entered promiscuous mode [ 675.631546][ T5109] Bluetooth: hci3: command tx timeout [ 676.813908][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.822287][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.830433][ T9310] bridge_slave_0: entered allmulticast mode [ 676.840472][ T9310] bridge_slave_0: entered promiscuous mode [ 676.913012][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.920653][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.928341][ T9310] bridge_slave_1: entered allmulticast mode [ 676.937098][ T9310] bridge_slave_1: entered promiscuous mode [ 677.642350][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.710712][ T5109] Bluetooth: hci3: command tx timeout [ 677.883748][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.781141][ T9310] team0: Port device team_slave_0 added [ 678.811148][ T9310] team0: Port device team_slave_1 added [ 679.196271][ T3586] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.790020][ T5109] Bluetooth: hci3: command tx timeout [ 679.906509][ T3586] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.001531][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.008701][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.035520][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.168844][ T3586] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.250512][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.257819][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.290276][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.445580][ T3586] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.640054][ T9375] bridge3: entered promiscuous mode [ 681.233379][ T9310] hsr_slave_0: entered promiscuous mode [ 681.244842][ T9310] hsr_slave_1: entered promiscuous mode [ 681.255468][ T9310] debugfs: 'hsr0' already exists in 'hsr' [ 681.261639][ T9310] Cannot create hsr debugfs directory [ 681.907799][ T3586] bridge_slave_1: left allmulticast mode [ 681.914845][ T3586] bridge_slave_1: left promiscuous mode [ 681.921733][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.978174][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 682.021116][ T3586] bridge_slave_0: left allmulticast mode [ 682.026994][ T3586] bridge_slave_0: left promiscuous mode [ 682.033909][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.922319][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.181507][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.225836][ T3586] bond0 (unregistering): Released all slaves [ 685.326718][ T3586] hsr_slave_0: left promiscuous mode [ 685.359399][ T3586] hsr_slave_1: left promiscuous mode [ 685.367963][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.375849][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.491303][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.498866][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.608172][ T3586] veth1_macvtap: left promiscuous mode [ 685.615736][ T3586] veth0_macvtap: left promiscuous mode [ 685.622122][ T3586] veth1_vlan: left promiscuous mode [ 685.627614][ T3586] veth0_vlan: left promiscuous mode [ 685.652425][ T9411] rdma_rxe: rxe_newlink: failed to add lo [ 687.603859][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 687.736418][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 689.514830][ T9310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 689.611885][ T9310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 689.657315][ T9439] bridge0: port 3(syz_tun) entered blocking state [ 689.664563][ T9439] bridge0: port 3(syz_tun) entered disabled state [ 689.671940][ T9439] syz_tun: entered allmulticast mode [ 689.680746][ T9439] syz_tun: entered promiscuous mode [ 689.694554][ T9439] bridge0: port 3(syz_tun) entered blocking state [ 689.701628][ T9439] bridge0: port 3(syz_tun) entered forwarding state [ 689.744754][ T9310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 689.796500][ T9310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 690.160578][ T9439] lo speed is unknown, defaulting to 1000 [ 692.117569][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.382728][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 692.540583][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.794788][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.802484][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.818489][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.826258][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.662364][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.407204][ T9310] veth0_vlan: entered promiscuous mode [ 696.577905][ T9310] veth1_vlan: entered promiscuous mode [ 697.211907][ T9310] veth0_macvtap: entered promiscuous mode [ 697.237186][ T9515] bridge0: port 5(syz_tun) entered blocking state [ 697.247127][ T9515] bridge0: port 5(syz_tun) entered disabled state [ 697.254428][ T9515] syz_tun: entered allmulticast mode [ 697.268619][ T9515] syz_tun: entered promiscuous mode [ 697.276323][ T9515] bridge0: port 5(syz_tun) entered blocking state [ 697.283345][ T9515] bridge0: port 5(syz_tun) entered forwarding state [ 697.347788][ T9310] veth1_macvtap: entered promiscuous mode [ 697.665369][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.967780][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.100138][ T3773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.145198][ T3773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.230071][ T3773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.280232][ T3773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.186712][ T9539] vlan2: entered promiscuous mode [ 699.192206][ T9539] veth0_virt_wifi: entered promiscuous mode [ 699.199338][ T9539] vlan2: entered allmulticast mode [ 699.204912][ T9539] veth0_virt_wifi: entered allmulticast mode [ 700.501769][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1012'. [ 700.809549][ T9562] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 701.233189][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 701.342648][ T9564] bridge0: port 4(erspan0) entered disabled state [ 701.508626][ T9564] bridge0: port 5(syz_tun) entered disabled state [ 701.641394][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.649855][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.966980][ T9564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.000603][ T9564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.805631][ T1146] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.891826][ T1146] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.954734][ T1146] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.037274][ T1146] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.784891][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 703.784975][ T30] audit: type=1326 audit(1755763732.092:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.816928][ T30] audit: type=1326 audit(1755763732.092:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.840080][ T30] audit: type=1326 audit(1755763732.092:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.862565][ T30] audit: type=1326 audit(1755763732.102:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.885411][ T30] audit: type=1326 audit(1755763732.102:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.908221][ T30] audit: type=1326 audit(1755763732.102:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.931513][ T30] audit: type=1326 audit(1755763732.102:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.955001][ T30] audit: type=1326 audit(1755763732.102:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 703.977543][ T30] audit: type=1326 audit(1755763732.102:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 704.000031][ T30] audit: type=1326 audit(1755763732.102:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 704.763875][ T9597] netlink: 'syz.9.1019': attribute type 4 has an invalid length. [ 705.971003][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 705.983594][ T9609] ip_vti0: entered promiscuous mode [ 705.990156][ T9609] ip_vti0: entered allmulticast mode [ 709.231528][ T1870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.239672][ T1870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.663429][ T1870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.671873][ T1870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.905543][ T9661] lo speed is unknown, defaulting to 1000 [ 710.105899][ T9667] netlink: 'syz.1.1036': attribute type 8 has an invalid length. [ 710.512269][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1039'. [ 710.521709][ T9665] ip_vti0: entered promiscuous mode [ 710.527055][ T9665] ip_vti0: entered allmulticast mode [ 714.539460][ T5109] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 714.858386][ T9691] loop0: detected capacity change from 0 to 16384 [ 715.087825][ T9691] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_write_sumit": -EINTR [ 715.088130][ T9691] bcachefs (loop0): shutdown complete [ 715.786273][ T9691] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 715.983527][ T42] lo speed is unknown, defaulting to 1000 [ 717.031141][ T5109] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 717.031316][ T5109] Bluetooth: hci4: Malformed LE Event: 0x0d [ 721.808280][ T5109] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 723.831980][ T9858] vlan2: entered promiscuous mode [ 723.837266][ T9858] veth0_virt_wifi: entered promiscuous mode [ 723.844659][ T9858] vlan2: entered allmulticast mode [ 723.850370][ T9858] veth0_virt_wifi: entered allmulticast mode [ 724.072160][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 724.282606][ T9858] hsr_slave_1 (unregistering): left promiscuous mode [ 726.463385][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.470739][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.915269][ T9908] bridge0: port 3(syz_tun) entered blocking state [ 726.922526][ T9908] bridge0: port 3(syz_tun) entered disabled state [ 726.929585][ T9908] syz_tun: entered allmulticast mode [ 726.938512][ T9908] syz_tun: entered promiscuous mode [ 726.946256][ T9908] bridge0: port 3(syz_tun) entered blocking state [ 726.953301][ T9908] bridge0: port 3(syz_tun) entered forwarding state [ 727.411598][ T9908] lo speed is unknown, defaulting to 1000 [ 732.420522][ T9978] bridge0: port 3(syz_tun) entered blocking state [ 732.427457][ T9978] bridge0: port 3(syz_tun) entered disabled state [ 732.435214][ T9978] syz_tun: entered allmulticast mode [ 732.444142][ T9978] syz_tun: entered promiscuous mode [ 732.451894][ T9978] bridge0: port 3(syz_tun) entered blocking state [ 732.458876][ T9978] bridge0: port 3(syz_tun) entered forwarding state [ 732.784836][ T9978] lo speed is unknown, defaulting to 1000 [ 733.471855][ T9993] fuse: Bad value for 'fd' [ 734.122244][ T9998] loop0: detected capacity change from 0 to 1024 [ 734.236630][ T9998] EXT4-fs: Ignoring removed orlov option [ 734.242944][ T9998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 734.489303][ T9998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.751038][T10010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.959389][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.085110][T10001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.184910][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.448084][ T9310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.852066][T10039] netlink: 'syz.5.1157': attribute type 10 has an invalid length. [ 736.860516][ T3586] bond0: (slave bond_slave_0): interface is now down [ 736.860643][ T3586] bond0: (slave bond_slave_1): interface is now down [ 736.863116][ T3586] bond0: now running without any active interface! [ 736.912981][T10039] bridge0: port 3(syz_tun) entered disabled state [ 736.922692][T10039] syz_tun: left allmulticast mode [ 736.928941][T10039] bridge0: port 3(syz_tun) entered disabled state [ 736.998385][T10039] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 737.031249][ T3586] bond0: (slave syz_tun): interface is now down [ 737.038936][ T3586] bond0: now running without any active interface! [ 738.101564][T10055] lo speed is unknown, defaulting to 1000 [ 740.163265][T10069] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1166'. [ 741.262042][T10079] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 742.549145][ T5109] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 742.559410][ T5109] CPU: 1 UID: 0 PID: 5109 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(none) [ 742.559564][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.559711][ T5109] Workqueue: hci3 hci_rx_work [ 742.559908][ T5109] Call Trace: [ 742.559978][ T5109] [ 742.560041][ T5109] __dump_stack+0x26/0x30 [ 742.560234][ T5109] dump_stack_lvl+0x1df/0x270 [ 742.560433][ T5109] dump_stack+0x1e/0x25 [ 742.560600][ T5109] sysfs_create_dir_ns+0x46c/0x540 [ 742.560852][ T5109] kobject_add_internal+0xeed/0x1840 [ 742.561104][ T5109] kobject_add+0x2c1/0x410 [ 742.561340][ T5109] ? kmsan_get_metadata+0xfb/0x160 [ 742.561512][ T5109] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 742.561704][ T5109] device_add+0xa70/0x1c10 [ 742.561894][ T5109] hci_conn_add_sysfs+0x15f/0x2f0 [ 742.562103][ T5109] le_conn_complete_evt+0x1b35/0x21b0 [ 742.562321][ T5109] hci_le_conn_complete_evt+0x157/0x260 [ 742.562510][ T5109] hci_le_meta_evt+0x6e8/0x960 [ 742.562667][ T5109] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 742.562873][ T5109] hci_event_packet+0xce2/0x1e40 [ 742.563081][ T5109] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 742.563293][ T5109] hci_rx_work+0x9a8/0x12b0 [ 742.563462][ T5109] ? __pfx_hci_rx_work+0x10/0x10 [ 742.563611][ T5109] process_scheduled_works+0xb8e/0x1d80 [ 742.563832][ T5109] worker_thread+0xedf/0x1590 [ 742.563997][ T5109] kthread+0xd59/0xf00 [ 742.564090][ T5109] ? __pfx_worker_thread+0x10/0x10 [ 742.564238][ T5109] ? __pfx_kthread+0x10/0x10 [ 742.564336][ T5109] ret_from_fork+0x1e3/0x310 [ 742.564431][ T5109] ? __pfx_kthread+0x10/0x10 [ 742.564532][ T5109] ret_from_fork_asm+0x1a/0x30 [ 742.564681][ T5109] [ 742.732993][ T5109] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 742.749509][ T5109] Bluetooth: hci3: failed to register connection device [ 744.060611][T10101] lo speed is unknown, defaulting to 1000 [ 744.928163][T10108] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1179'. [ 747.166123][T10130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.338746][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.454466][T10130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.088038][T10146] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1192'. [ 749.468121][T10167] bridge0: port 3(syz_tun) entered blocking state [ 749.475312][T10167] bridge0: port 3(syz_tun) entered disabled state [ 749.482875][T10167] syz_tun: entered allmulticast mode [ 749.496387][T10167] syz_tun: entered promiscuous mode [ 749.504105][T10167] bridge0: port 3(syz_tun) entered blocking state [ 749.511098][T10167] bridge0: port 3(syz_tun) entered forwarding state [ 749.616565][T10161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.843929][T10167] lo speed is unknown, defaulting to 1000 [ 751.405029][T10187] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.1204'. [ 755.605307][T10232] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1220'. [ 755.741096][T10235] rdma_rxe: rxe_newlink: failed to add lo [ 756.090458][T10234] infiniband syz1: set active [ 756.095421][T10234] infiniband syz1: added syz_tun [ 756.165652][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1222'. [ 756.231679][T10234] RDS/IB: syz1: added [ 756.235941][T10234] smc: adding ib device syz1 with port count 1 [ 756.242523][T10234] smc: ib device syz1 port 1 has pnetid [ 761.726788][T10301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'. [ 761.821412][ T5109] Bluetooth: hci2: Malformed LE Event: 0x1d [ 764.826761][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1269'. [ 766.965507][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1285'. [ 767.008914][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1286'. [ 769.420419][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1300'. [ 769.969637][T10453] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 770.106474][ T5109] Bluetooth: hci3: Unable to find connection for big 0x00 [ 771.734238][T10482] netlink: 'syz.4.1315': attribute type 6 has an invalid length. [ 772.212827][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1317'. [ 772.505074][ T5109] Bluetooth: hci5: Unable to find connection for big 0x00 [ 773.830251][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 774.395231][ T5109] Bluetooth: hci5: Unable to find connection for big 0x00 [ 774.971211][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'. [ 775.461904][T10543] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 776.230726][T10554] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 776.832264][ T5109] Bluetooth: hci3: Malformed LE Event: 0x1d [ 778.154724][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1355'. [ 778.631559][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1359'. [ 779.323990][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 779.333795][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 780.837709][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 781.192479][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1373'. [ 782.342758][ T5109] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 783.832473][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1386'. [ 784.426202][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1388'. [ 784.474989][ T5109] Bluetooth: hci2: Unable to find connection for big 0x00 [ 784.743452][T10675] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 787.763171][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 787.926027][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.933598][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.450742][ T5109] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 790.762981][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1420'. [ 793.613630][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1439'. [ 795.070311][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 795.782300][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1452'. [ 796.094456][T10844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1453'. [ 798.920028][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 798.941038][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'. [ 799.355971][T10898] netlink: 'syz.5.1475': attribute type 1 has an invalid length. [ 801.939533][T10937] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 802.103712][T10938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1490'. [ 805.172377][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1511'. [ 806.737749][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1522'. [ 806.799071][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1522'. [ 806.886111][T11024] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1522'. [ 807.371108][T11029] netlink: 'syz.0.1526': attribute type 5 has an invalid length. [ 807.379181][T11029] netlink: 'syz.0.1526': attribute type 5 has an invalid length. [ 808.987742][T11055] netlink: 'syz.9.1538': attribute type 1 has an invalid length. [ 809.042172][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1537'. [ 810.998913][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 811.164462][ T5169] udevd[5169]: worker [10739] terminated by signal 33 (Unknown signal 33) [ 811.202606][ T5169] udevd[5169]: worker [10739] failed while handling '/devices/virtual/block/loop0' [ 812.538620][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1562'. [ 813.151755][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1566'. [ 814.886138][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 814.901684][T11152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 815.026900][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 815.101148][T11157] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1577'. [ 815.794737][T11171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1582'. [ 819.155845][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1597'. [ 822.153619][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 823.232739][T11272] loop0: detected capacity change from 0 to 2048 [ 823.507436][T11272] loop0: p1 < > p3 [ 823.532078][T11287] tmpfs: Unknown parameter 'fscontext' [ 823.563671][T11272] loop0: p3 size 134217728 extends beyond EOD, truncated [ 823.740972][T11276] bridge0: port 3(syz_tun) entered disabled state [ 823.980325][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.990376][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.521095][T11276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.556125][T11276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.231988][T11315] loop0: detected capacity change from 0 to 256 [ 825.256039][T11315] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 825.270827][T11315] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 825.483239][ T1146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.547840][ T1146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.585452][ T1146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.649213][T11315] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 825.697801][ T1146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.357058][T11328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1628'. [ 826.372793][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 826.766966][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1630'. [ 828.637295][T11357] ===================================================== [ 828.644741][T11357] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 828.652450][T11357] batadv_get_vid+0x2d0/0x3b0 [ 828.657509][T11357] batadv_interface_tx+0x2e9/0x1e60 [ 828.663054][T11357] dev_hard_start_xmit+0x22c/0xa30 [ 828.668365][T11357] __dev_queue_xmit+0x3c51/0x5e60 [ 828.673845][T11357] __bpf_redirect+0x162d/0x1760 [ 828.678940][T11357] bpf_clone_redirect+0x366/0x530 [ 828.684306][T11357] ___bpf_prog_run+0x1294/0xeba0 [ 828.689450][T11357] __bpf_prog_run512+0xc5/0x100 [ 828.694616][T11357] bpf_test_run+0x353/0xab0 [ 828.699304][T11357] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 828.705369][T11357] bpf_prog_test_run+0x5c2/0xa40 [ 828.710630][T11357] __sys_bpf+0x89a/0xed0 [ 828.715031][T11357] __ia32_sys_bpf+0xa4/0xf0 [ 828.719888][T11357] ia32_sys_call+0xadf/0x4310 [ 828.724745][T11357] __do_fast_syscall_32+0xb0/0x150 [ 828.730223][T11357] do_fast_syscall_32+0x38/0x80 [ 828.735273][T11357] do_SYSENTER_32+0x1f/0x30 [ 828.740110][T11357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.746761][T11357] [ 828.749178][T11357] Uninit was created at: [ 828.753887][T11357] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 828.760113][T11357] kmalloc_reserve+0x13c/0x4b0 [ 828.765047][T11357] pskb_expand_head+0x1fc/0x1610 [ 828.770305][T11357] skb_ensure_writable+0x44e/0x510 [ 828.775593][T11357] bpf_clone_redirect+0x1c1/0x530 [ 828.781039][T11357] ___bpf_prog_run+0x1294/0xeba0 [ 828.786140][T11357] __bpf_prog_run512+0xc5/0x100 [ 828.791289][T11357] bpf_test_run+0x353/0xab0 [ 828.795962][T11357] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 828.801804][T11357] bpf_prog_test_run+0x5c2/0xa40 [ 828.806940][T11357] __sys_bpf+0x89a/0xed0 [ 828.811623][T11357] __ia32_sys_bpf+0xa4/0xf0 [ 828.816344][T11357] ia32_sys_call+0xadf/0x4310 [ 828.821299][T11357] __do_fast_syscall_32+0xb0/0x150 [ 828.826630][T11357] do_fast_syscall_32+0x38/0x80 [ 828.831907][T11357] do_SYSENTER_32+0x1f/0x30 [ 828.836626][T11357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.843324][T11357] [ 828.845763][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.5.1638 Not tainted syzkaller #0 PREEMPT(none) [ 828.855447][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 828.865850][T11357] ===================================================== [ 828.873009][T11357] Disabling lock debugging due to kernel taint [ 828.879280][T11357] Kernel panic - not syncing: kmsan.panic set ... [ 828.885861][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.5.1638 Tainted: G B syzkaller #0 PREEMPT(none) [ 828.897106][T11357] Tainted: [B]=BAD_PAGE [ 828.901356][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 828.911556][T11357] Call Trace: [ 828.914936][T11357] [ 828.917976][T11357] __dump_stack+0x26/0x30 [ 828.922522][T11357] dump_stack_lvl+0x53/0x270 [ 828.927383][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 828.933391][T11357] dump_stack+0x1e/0x25 [ 828.937741][T11357] vpanic+0x361/0xc50 [ 828.942001][T11357] panic+0x15d/0x160 [ 828.946124][T11357] kmsan_report+0x31c/0x320 [ 828.950825][T11357] ? __msan_warning+0x1b/0x30 [ 828.955683][T11357] ? batadv_get_vid+0x2d0/0x3b0 [ 828.960699][T11357] ? batadv_interface_tx+0x2e9/0x1e60 [ 828.966334][T11357] ? dev_hard_start_xmit+0x22c/0xa30 [ 828.971833][T11357] ? __dev_queue_xmit+0x3c51/0x5e60 [ 828.977226][T11357] ? __bpf_redirect+0x162d/0x1760 [ 828.982417][T11357] ? bpf_clone_redirect+0x366/0x530 [ 828.987789][T11357] ? ___bpf_prog_run+0x1294/0xeba0 [ 828.993051][T11357] ? __bpf_prog_run512+0xc5/0x100 [ 828.998236][T11357] ? bpf_test_run+0x353/0xab0 [ 829.003066][T11357] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 829.008878][T11357] ? bpf_prog_test_run+0x5c2/0xa40 [ 829.014145][T11357] ? __sys_bpf+0x89a/0xed0 [ 829.018703][T11357] ? __ia32_sys_bpf+0xa4/0xf0 [ 829.023722][T11357] ? ia32_sys_call+0xadf/0x4310 [ 829.028746][T11357] ? __do_fast_syscall_32+0xb0/0x150 [ 829.034245][T11357] ? do_fast_syscall_32+0x38/0x80 [ 829.039462][T11357] ? do_SYSENTER_32+0x1f/0x30 [ 829.044337][T11357] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.051053][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.056367][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.062359][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.067656][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.073646][T11357] ? batadv_interface_tx+0x41/0x1e60 [ 829.079123][T11357] ? filter_irq_stacks+0x49/0x190 [ 829.084559][T11357] ? stack_depot_save_flags+0x35/0x7b0 [ 829.090287][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.095591][T11357] __msan_warning+0x1b/0x30 [ 829.100263][T11357] batadv_get_vid+0x2d0/0x3b0 [ 829.105115][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.111115][T11357] batadv_interface_tx+0x2e9/0x1e60 [ 829.116509][T11357] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 829.123010][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.128302][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.134290][T11357] ? __pfx_batadv_interface_tx+0x10/0x10 [ 829.140146][T11357] dev_hard_start_xmit+0x22c/0xa30 [ 829.145479][T11357] __dev_queue_xmit+0x3c51/0x5e60 [ 829.150688][T11357] ? skb_release_data+0xa12/0xac0 [ 829.155970][T11357] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 829.162386][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.167683][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.173673][T11357] ? __dev_queue_xmit+0x30c/0x5e60 [ 829.179032][T11357] __bpf_redirect+0x162d/0x1760 [ 829.184081][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.189384][T11357] bpf_clone_redirect+0x366/0x530 [ 829.194699][T11357] ___bpf_prog_run+0x1294/0xeba0 [ 829.200012][T11357] __bpf_prog_run512+0xc5/0x100 [ 829.205075][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.210359][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.216377][T11357] ? ktime_get+0x530/0x590 [ 829.220973][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.226276][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.231562][T11357] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 829.238237][T11357] ? kmsan_get_metadata+0x150/0x160 [ 829.243617][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.249630][T11357] ? __pfx___bpf_prog_run512+0x10/0x10 [ 829.255275][T11357] ? __pfx___bpf_prog_run512+0x10/0x10 [ 829.260915][T11357] bpf_test_run+0x353/0xab0 [ 829.265580][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.270880][T11357] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 829.277393][T11357] ? kmsan_get_metadata+0xfb/0x160 [ 829.282684][T11357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.288786][T11357] ? bpf_test_run+0x1b0/0xab0 [ 829.293663][T11357] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 829.299342][T11357] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 829.305318][T11357] bpf_prog_test_run+0x5c2/0xa40 [ 829.310445][T11357] __sys_bpf+0x89a/0xed0 [ 829.314908][T11357] __ia32_sys_bpf+0xa4/0xf0 [ 829.319640][T11357] ia32_sys_call+0xadf/0x4310 [ 829.324613][T11357] __do_fast_syscall_32+0xb0/0x150 [ 829.330035][T11357] do_fast_syscall_32+0x38/0x80 [ 829.335087][T11357] do_SYSENTER_32+0x1f/0x30 [ 829.339812][T11357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.346350][T11357] RIP: 0023:0xf7fa1539 [ 829.350544][T11357] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 829.370682][T11357] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 829.379275][T11357] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 829.387467][T11357] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.395566][T11357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 829.403697][T11357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 829.411806][T11357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 829.419952][T11357] [ 829.423378][T11357] Kernel Offset: disabled [ 829.427772][T11357] Rebooting in 86400 seconds..