last executing test programs: 6m13.249995018s ago: executing program 32 (id=1): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCXONC(r2, 0x540a, 0x2) sched_setscheduler(0x0, 0x1, 0x0) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x796c) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) preadv(r1, 0x0, 0x0, 0x4b, 0x0) pread64(r0, &(0x7f0000000080)=""/102355, 0x18fd3, 0xc2a) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, &(0x7f0000000340)) syz_clone(0x4102b100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m55.72516779s ago: executing program 3 (id=69): io_setup(0x7, &(0x7f0000000040)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000014302, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000a, 0x13, r0, 0xa322000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0x0, 0xa, 0x7f, 0x4, 0x7, 0x5, 0x0, 0x0, 0x7f, 0x9}, {0xd000, 0x80a0000, 0x10, 0x9, 0x2, 0x5, 0x7, 0xaa, 0x5, 0x8, 0x4, 0x9}, {0x77770000, 0xd000, 0x4, 0x8, 0x6, 0x7, 0x1, 0xfa, 0x5, 0x8, 0x8, 0x7f}, {0xd000, 0xeeee8000, 0x3, 0x8, 0x0, 0x8, 0x7e, 0x7, 0x7, 0x5, 0x61, 0x7}, {0x8080000, 0x19115000, 0x10, 0xd, 0x8, 0x6, 0x9, 0xff, 0x80, 0x7, 0x2, 0xb}, {0x2, 0x4, 0xb, 0x8, 0x5, 0x3, 0xc5, 0xd, 0xf4, 0x3b, 0x7, 0x44}, {0xffff1000, 0xdddd0000, 0x8, 0x9, 0x0, 0x3, 0xf9, 0xff, 0xd4, 0x9, 0x10, 0x2}, {0x5000, 0x4, 0xf, 0x7, 0xd, 0x9, 0x7f, 0x20, 0x7, 0x20, 0x3, 0x9}, {0x5000, 0x3ff}, {0x1000, 0xfffd}, 0x4, 0x0, 0x1, 0x42000, 0x6, 0x1500, 0x10000, [0x800, 0x0, 0x7fff, 0x7f]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000040)="15efa6bc", &(0x7f00000004c0)=""/255}, 0x20) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x301, 0x70bd06, 0x0, {0x1, 0x40, 0x0, 0x0, {0x4e21, 0x4e24, [], [0x0, 0x1], 0x0, [0x1]}, 0xf0ffff80}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40086}, 0x20000000) 5m55.403621384s ago: executing program 3 (id=70): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5m54.624731307s ago: executing program 3 (id=72): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = inotify_init() epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5m50.335418556s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='\'.a,&:[%/*{!*.\x00', 0xf, 0x1) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 5m48.83319959s ago: executing program 3 (id=82): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 5m48.482712675s ago: executing program 33 (id=55): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) acct(0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) 5m46.889905101s ago: executing program 3 (id=87): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0x0) 5m31.403539369s ago: executing program 34 (id=87): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0x0) 4m50.730140031s ago: executing program 6 (id=222): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 4m50.360285527s ago: executing program 6 (id=224): kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)=ANY=[]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x800000001, 0x180, 0x20ff, 0x5, 0x89, 0xd618, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 4m49.127561207s ago: executing program 6 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 4m48.990831539s ago: executing program 6 (id=229): socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f0000008bc0)=0x9) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) gettid() iopl(0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) writev(r3, &(0x7f0000001200), 0x0) 4m43.615358355s ago: executing program 6 (id=237): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 4m42.486498753s ago: executing program 6 (id=239): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x8, &(0x7f0000000040)={0x8, 0x0, 0x6}, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0xf9, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb2"}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4m39.775551147s ago: executing program 5 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m39.133398747s ago: executing program 5 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x401, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x78) recvmsg$inet_nvme(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=""/20, 0x14}, 0x40000000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080), 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 4m38.988536649s ago: executing program 5 (id=248): socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f0000008bc0)=0x9) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) gettid() iopl(0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) writev(r3, &(0x7f0000001200), 0x0) 4m34.067452688s ago: executing program 5 (id=254): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/74, 0x49) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r6, @ANYBLOB="140012800d0001006d6163766c616e0004000f80084000009fa94afdb44cd45ca0056374baf735b740f4e7c4bccfb214ed497f96104769793fd3331600eaf204a8a7966e2ec61b09c10e8bdf8da118300a0767d32e276abf86b280c85484a9867e255f062bdc86b4f5b3b02ed96bae21f2a9ae08f2bdeef1b2e96464513c3eb1e22399384de65d93c337ecbd831a0ebcb5f05ad62746eca0417ecbeec984331996e44d1ce4827632239205594b32e088dc91cf29d427b95e4f1a006285e66a"], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 4m30.681298432s ago: executing program 5 (id=263): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 4m29.355893003s ago: executing program 5 (id=269): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x0, 0x3, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x20000000) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e5c16b06c73f2e3b348a7fba46e286378a15ee516bac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca1051ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf0", @ANYRES32=r0, @ANYRESDEC, @ANYRES64=r1, @ANYRES8], 0x11, 0x2f5, &(0x7f0000000880)="$eJzs3ctu00ocx/HfOGmTcxr1pJejSmfZQyXYICgbxCYI5SEQC0QvQaoaFQFFAjakiBVCsGfPK/AQbEC8AKxYIB6gXRnN+JI4sWO3auNGfD8S4NvY/7E9nv9UoiMAf6xb7W8frv2wf4xUUUV6fUPyJNWlqqR/tVJ/sre/s9/tbI87UcWV0JEvo6CkGTlma6/j/j1IbrblXIlQ065V1RjchrPh+/7N70PbfnolBYPSuNafwpNqYet0++sTj2y8gxOW651yHNPGHOpQTzVfdhwAgHLZ/v8gSPxtP98I83fPk9bCbv9c9v+FjI5EdFhGHBPlj9070P+7UZZv7PP9x+3qj/fcjbP7vWiUWOTKM0PrswoSyUSCafJGlS4W76/7O93O5a0H3W1PL9UKDRy2HF8hZN/QnGhX096IbAXqblIzyiAsb8bWYT0j/qUTXvE4Eg/EfDJfzF3T1Httx/lf1Tc2Whdwc+hJBfFfyT79nCtlj1LY2FqtludOFFlwF/kv+aRyallPH5EourEL4asb1a6ZF6crtajkjxWC2l1NLVCLSy2lllqP1jKutZwoZWsTv83ZUZ6+lbXBNfPW3Dar+qWPag/k/56Nzx2Y3TL7rcasBQ3N3fGgPrPpF6+6czZHeo6e7jSSW+K7WMuqyNH4bxoKiJ7hG23quuYfP3u+W+l2O4/swkbKwsNGvGXmlZR6TMkL6vW31OQ7IwdHX4lJBnbpVE9ovx+5B9tWdrwz+77/QoVK+YNbzuWbMKmF9uezepH82rmo4O5Gt7xPFCan/9DLjgQlsXmXCcZ/LpMP832XKNi/mmPy9NyELDyjb3PseARUT5RfdEt/J9PonLHBXPYIbqAOY8dc/1+ULhS/YjOMczoEXfoYpq2vusfP/wEAAAAAAAAAAAAAAAAAAKbNJP47Qdl1BAAAAAAAAAAAAAAAAAAAAABg2sXz/yqa/1fF5v8d/s3f4fy/deXM/7s5GsPI/L/v9mR6EvP/AmfrdwAAAP//hbCFyg==") syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000002c0)='./file0\x00', 0x1600008, &(0x7f0000000000)={[{@nodecompose}, {}, {@part}, {@uid}, {@gid}, {@type={'type', 0x3d, "05f2875e"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@part={'part', 0x3d, 0xa}}]}, 0x1, 0x63a, &(0x7f0000000e40)="$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") r5 = creat(0x0, 0x28) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) membarrier(0x10, 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x70000, 0x1100}]) 4m27.847744928s ago: executing program 7 (id=270): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x401, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x78) recvmsg$inet_nvme(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=""/20, 0x14}, 0x40000000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080), 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 4m27.798103939s ago: executing program 7 (id=272): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80003, 0xff) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 4m26.858524934s ago: executing program 35 (id=239): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x8, &(0x7f0000000040)={0x8, 0x0, 0x6}, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0xf9, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb2"}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4m25.713566222s ago: executing program 7 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x56, 0x2, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x2, 0x10, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000100)}, 0x20) 4m24.523869761s ago: executing program 7 (id=277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r3, 0x0, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000873ef8b76805421c7ddba7000000491ebda22a038c1d37b3974914c54e1cfbaba098c217f4ca4d8e73e85529429199182f3705cbdf58cc6c611da0996612ea88db0135f707a4ec1c1a68fd34efef85c33b3e7bde5ee0aeaf86c0e2e896366c9e402f23b06a74128f2e1a84559cbf6fe581388a79f6c9f4e4a4c9bd047a8b6b42b0a97fb67dc06bfc589176a4a72b17ff4603f77fd493bd52683c09b8bc345708a31cbaefc8b3"], 0x20}, 0x1, 0x0, 0x0, 0x88000}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r4, 0x0, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_clone3(&(0x7f0000000140)={0x1c0004880, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m23.685443114s ago: executing program 7 (id=279): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 4m22.505527393s ago: executing program 7 (id=283): timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) 4m13.585975706s ago: executing program 36 (id=269): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x0, 0x3, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x20000000) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESDEC, @ANYRES64=r1, @ANYRES8], 0x11, 0x2f5, &(0x7f0000000880)="$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") syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000002c0)='./file0\x00', 0x1600008, &(0x7f0000000000)={[{@nodecompose}, {}, {@part}, {@uid}, {@gid}, {@type={'type', 0x3d, "05f2875e"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@part={'part', 0x3d, 0xa}}]}, 0x1, 0x63a, &(0x7f0000000e40)="$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") r5 = creat(0x0, 0x28) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) membarrier(0x10, 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x70000, 0x1100}]) 4m6.838096634s ago: executing program 37 (id=283): timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) 1m48.476589472s ago: executing program 2 (id=656): openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = epoll_create(0x10000e9) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sendmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="77544e4ddb7d496ec804", 0xa}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20044000}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r7, 0x0, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) 1m46.539329403s ago: executing program 2 (id=661): r0 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000100001000000060001001700a25bf10000000000000000001000008c0d30c5173de2928e996ae75c33d9d68af2d3bd071f6856ed9ac2de0168d6768e1b4cb0f917bcfbb1cd8249b072d4a444118f4124d701ce67975f529a6b1a7bc71120920a3c45cc2e03131165dc2d1a81533666c92e1dd5f1fae2c0461377cd9b39f47a43c592d0406879ffa4c66cef44"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r7}) 1m45.385208652s ago: executing program 2 (id=666): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) 1m44.313373358s ago: executing program 2 (id=669): socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b1a, &(0x7f0000000040)) 1m42.234721362s ago: executing program 2 (id=675): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 1m41.828294869s ago: executing program 2 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2) 1m26.063855501s ago: executing program 38 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2) 11.203050041s ago: executing program 9 (id=924): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c920"], 0x15) 8.086244751s ago: executing program 1 (id=928): r0 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r3}) 7.963526503s ago: executing program 0 (id=930): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 7.736447346s ago: executing program 4 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0xfffe, 0x80000000, 0x0, 0xd, 0xe1, 0x3}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102376, 0x18fe8) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000440)=""/193, 0x100}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 7.686129757s ago: executing program 1 (id=932): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x40) 7.48703584s ago: executing program 0 (id=933): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @loopback, 0x20000}, 0x1c) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000001c0)={r0, 0x9, 0x4b, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 7.451973601s ago: executing program 4 (id=935): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xdd, 0xbe}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.444467791s ago: executing program 1 (id=936): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) 7.363195842s ago: executing program 9 (id=937): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 6.27667814s ago: executing program 1 (id=938): r0 = socket(0x1e, 0x4, 0xfffffff7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x6) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 4.867472773s ago: executing program 1 (id=940): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4.587648837s ago: executing program 4 (id=942): r0 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r3}) 4.487407449s ago: executing program 4 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 3.885913638s ago: executing program 8 (id=944): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x3, 0x37c}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 3.811393439s ago: executing program 1 (id=945): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/74, 0x49) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5247424f81422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r6, @ANYBLOB="140012800d0001006d6163766c616e0004000f80084000009fa94afdb44cd45ca0056374baf735b740f4e7c4bccfb214ed497f96104769793fd3331600eaf204a8a7966e2ec61b09c10e8bdf8da118300a0767d32e276abf86b280c85484a9867e255f062bdc86b4f5b3b02ed96bae21f2a9ae08f2bdeef1b2e96464513c3eb1e22399384de65d93c337ecbd831a0ebcb5f05ad62746eca0417ecbeec984331996e44d1ce4827632239205594b32e088dc91cf29d427b95e4f1a006285e66a"], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 3.658619952s ago: executing program 8 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0xfffe, 0x80000000, 0x0, 0xd, 0xe1, 0x3}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102376, 0x18fe8) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000440)=""/193, 0x100}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 3.657543282s ago: executing program 4 (id=947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x40) 3.531342824s ago: executing program 8 (id=948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) statfs(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 3.457186605s ago: executing program 9 (id=949): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x6) 3.456817665s ago: executing program 0 (id=950): r0 = socket(0x1e, 0x4, 0xfffffff7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x6) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 3.1680683s ago: executing program 9 (id=951): ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000400)=""/201) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.329124863s ago: executing program 0 (id=952): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xdd, 0xbe}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.306677423s ago: executing program 8 (id=953): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) 2.154955776s ago: executing program 9 (id=954): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x8008000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) 324.501885ms ago: executing program 0 (id=955): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x2, r2, 0x3, 0x0, 0xfffffffd, 0x80001ff, 0x1}) 323.985395ms ago: executing program 4 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a010200000000000000000200000008000340000000000900010073797a30000000000c0006400000000000800002140000000100010000000000000000000000000a"], 0x5c}}, 0x0) 239.113627ms ago: executing program 0 (id=957): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x6, "5cdd750423be12974f35d6742a4c5ef1f07513c2ec2deebb6274fd44ec868361"}) 237.112867ms ago: executing program 8 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0xfffe, 0x80000000, 0x0, 0xd, 0xe1, 0x3}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102376, 0x18fe8) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000440)=""/193, 0x100}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 74.16776ms ago: executing program 8 (id=959): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 9 (id=960): socket$inet(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043ef50d3cae"], 0xf8) kernel console output (not intermixed with test programs): 1 - 0 [ 92.798717][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 92.810918][ T4395] netlink: 56 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.234210][ T4246] Bluetooth: hci5: command 0x0409 tx timeout [ 93.249591][ T4265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.736554][ T4378] chnl_net:caif_netlink_parms(): no params data found [ 95.078482][ C0] sched: RT throttling activated [ 95.496054][ T4265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.589044][ T1107] Bluetooth: hci5: command 0x041b tx timeout [ 96.114958][ T4265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.526761][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.824434][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.036183][ T4378] device bridge_slave_0 entered promiscuous mode [ 97.361703][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.370204][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.396649][ T4378] device bridge_slave_1 entered promiscuous mode [ 97.668599][ T4212] Bluetooth: hci5: command 0x040f tx timeout [ 97.801965][ T4378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.275808][ T4453] loop4: detected capacity change from 0 to 512 [ 98.900427][ T4453] ======================================================= [ 98.900427][ T4453] WARNING: The mand mount option has been deprecated and [ 98.900427][ T4453] and is ignored by this kernel. Remove the mand [ 98.900427][ T4453] option from the mount to silence this warning. [ 98.900427][ T4453] ======================================================= [ 99.595888][ T4466] ODEBUG: Out of memory. ODEBUG disabled [ 99.696321][ T4453] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.749146][ T4246] Bluetooth: hci5: command 0x0419 tx timeout [ 99.812216][ T4453] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.819669][ T4453] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.49: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 99.849474][ T4453] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.49: Bad quota inode: 3, type: 0 [ 99.930426][ T4378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.108963][ T4453] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 100.123947][ T4453] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 100.130730][ T4453] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 100.467198][ T4378] team0: Port device team_slave_0 added [ 100.576031][ T4475] syz.3.56 sent an empty control message without MSG_MORE. [ 100.911535][ T4378] team0: Port device team_slave_1 added [ 101.817184][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.855379][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.914763][ T4378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.970380][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.977380][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.014421][ T4378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.121313][ T4378] device hsr_slave_0 entered promiscuous mode [ 102.143568][ T4378] device hsr_slave_1 entered promiscuous mode [ 102.165152][ T4378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.186266][ T4378] Cannot create hsr debugfs directory [ 102.586987][ T4378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.929334][ T4378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.042175][ T4378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.282609][ T4502] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 103.345829][ T4378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.546139][ T4265] device hsr_slave_0 left promiscuous mode [ 103.641933][ T4265] device hsr_slave_1 left promiscuous mode [ 103.669850][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.688184][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.707809][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.716991][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.734159][ T4265] device bridge_slave_1 left promiscuous mode [ 103.754868][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.789922][ T4265] device bridge_slave_0 left promiscuous mode [ 103.808846][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.871193][ T4265] device veth1_macvtap left promiscuous mode [ 103.884504][ T4265] device veth0_macvtap left promiscuous mode [ 103.899091][ T4265] device veth1_vlan left promiscuous mode [ 103.911900][ T4265] device veth0_vlan left promiscuous mode [ 105.507205][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 105.558413][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 105.616033][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.655609][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.017690][ T4265] bond0 (unregistering): Released all slaves [ 107.372480][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.887457][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.895794][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.914932][ T4378] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.271401][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.295318][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.331344][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.338763][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.396695][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.432766][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.459379][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.560282][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.571083][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.682911][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.715307][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.770118][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.809329][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.880347][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.904376][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.939824][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.006019][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.059490][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.108324][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.133770][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.193209][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.968525][ T4215] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.989707][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.997261][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.044883][ T4378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.229300][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.249811][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.506374][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.525931][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.729743][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.775896][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.789296][ T4378] device veth0_vlan entered promiscuous mode [ 113.434797][ T4378] device veth1_vlan entered promiscuous mode [ 113.585652][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.678245][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.722999][ T4378] device veth0_macvtap entered promiscuous mode [ 113.786188][ T4378] device veth1_macvtap entered promiscuous mode [ 115.780649][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.828507][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.923978][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.988627][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.075396][ T4653] loop3: detected capacity change from 0 to 512 [ 116.380523][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.449492][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.557612][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.668932][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.856499][ T4653] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.900365][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.908322][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.922319][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.931597][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.942158][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.953496][ T4653] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.959966][ T4653] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.82: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 116.991125][ T4653] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.82: Bad quota inode: 3, type: 0 [ 117.002496][ T4653] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.017219][ T4653] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 117.024057][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 117.037377][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.132364][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.278417][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.600615][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.684815][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.736574][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.768501][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.798512][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.819644][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.857924][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.924865][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.002952][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.048152][ T4378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.070224][ T4378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.080401][ T4378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.089970][ T4378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.138940][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 118.258740][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.284453][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.320789][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.363505][ T7] usb 2-1: config 0 descriptor?? [ 119.117603][ T7] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.199893][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.208411][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.338713][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 119.747888][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 119.786453][ T4697] device bond_slave_0 entered promiscuous mode [ 119.793085][ T4697] device bond_slave_1 entered promiscuous mode [ 119.799850][ T4697] device macvlan2 entered promiscuous mode [ 119.806508][ T4697] device bond0 entered promiscuous mode [ 119.819355][ T4697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.851546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.004474][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.043937][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.084710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.156824][ T4659] chnl_net:caif_netlink_parms(): no params data found [ 120.369262][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.377001][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.386536][ T4659] device bridge_slave_0 entered promiscuous mode [ 120.401062][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.416906][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.436768][ T4659] device bridge_slave_1 entered promiscuous mode [ 120.535429][ T4659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.583423][ T4659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.835580][ T4659] team0: Port device team_slave_0 added [ 120.853383][ T4659] team0: Port device team_slave_1 added [ 121.788917][ T21] usb 2-1: USB disconnect, device number 2 [ 121.834791][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 122.102180][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.119050][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.848515][ T4659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.899467][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.952334][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.979738][ T4659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.998209][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.126986][ T4659] device hsr_slave_0 entered promiscuous mode [ 123.235677][ T4659] device hsr_slave_1 entered promiscuous mode [ 123.254142][ T4659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.282673][ T4659] Cannot create hsr debugfs directory [ 123.312812][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.266866][ T4758] tmpfs: Unknown parameter 'usrquota' [ 124.508549][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 124.523059][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.210837][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.865273][ T26] audit: type=1326 audit(1743790196.239:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.058698][ T26] audit: type=1326 audit(1743790196.239:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.215340][ T26] audit: type=1326 audit(1743790196.249:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.230074][ T4659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.238393][ T26] audit: type=1326 audit(1743790196.249:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.269270][ T26] audit: type=1326 audit(1743790196.249:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.291699][ T26] audit: type=1326 audit(1743790196.249:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.314470][ T26] audit: type=1326 audit(1743790196.249:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.346635][ T26] audit: type=1326 audit(1743790196.249:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.372773][ T26] audit: type=1326 audit(1743790196.249:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.396653][ T26] audit: type=1326 audit(1743790196.259:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.5.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f97166169 code=0x7ffc0000 [ 126.438344][ T4659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.556878][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 126.557723][ T4659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.637845][ T4809] loop5: detected capacity change from 0 to 64 [ 126.894729][ T4659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.660269][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.719846][ T4826] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.736225][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.768189][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.883719][ T4659] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.027354][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.055366][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.841453][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.848738][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.884097][ T4844] loop2: detected capacity change from 0 to 1024 [ 128.896502][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.931950][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.945136][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.952509][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.968377][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.034705][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.328929][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.350249][ T4246] Bluetooth: hci1: command 0x0405 tx timeout [ 129.370458][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.460255][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.604414][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.613640][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.064410][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.065350][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.068299][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.071925][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.072845][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.077112][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.112'. [ 130.081059][ T4852] device bond_slave_0 entered promiscuous mode [ 130.081111][ T4852] device bond_slave_1 entered promiscuous mode [ 130.081182][ T4852] device macvlan2 entered promiscuous mode [ 130.081195][ T4852] device bond0 entered promiscuous mode [ 130.088821][ T4852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.538157][ T155] device hsr_slave_0 left promiscuous mode [ 130.682541][ T155] device hsr_slave_1 left promiscuous mode [ 130.742723][ T4876] loop5: detected capacity change from 0 to 64 [ 130.881042][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.310698][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.413378][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.422667][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.729754][ T155] device bridge_slave_1 left promiscuous mode [ 132.736249][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.269210][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.275555][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.329865][ T155] device bridge_slave_0 left promiscuous mode [ 133.350015][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.586120][ T4899] capability: warning: `syz.1.122' uses 32-bit capabilities (legacy support in use) [ 133.697685][ T155] device veth1_macvtap left promiscuous mode [ 133.769292][ T155] device veth0_macvtap left promiscuous mode [ 133.775734][ T155] device veth1_vlan left promiscuous mode [ 133.783086][ T155] device veth0_vlan left promiscuous mode [ 134.324532][ T4904] loop1: detected capacity change from 0 to 1024 [ 135.300495][ T155] team0 (unregistering): Port device team_slave_1 removed [ 135.326691][ T155] team0 (unregistering): Port device team_slave_0 removed [ 135.341520][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.361948][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.488059][ T2278] Bluetooth: hci0: command 0x0409 tx timeout [ 135.522372][ T155] bond0 (unregistering): Released all slaves [ 136.391305][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.125'. [ 136.446382][ T4907] device macvlan3 entered promiscuous mode [ 136.476837][ T4907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 136.626529][ T4659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.658299][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.738025][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.168878][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.481526][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 137.508978][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 137.631183][ T4892] chnl_net:caif_netlink_parms(): no params data found [ 137.638540][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 137.758825][ T21] usb 6-1: config index 0 descriptor too short (expected 28771, got 75) [ 137.787869][ T21] usb 6-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 137.802129][ T4953] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 137.818022][ T21] usb 6-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 137.863955][ T21] usb 6-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 137.899790][ T4958] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.935978][ T4958] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.969676][ T4958] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.009543][ T4958] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.039339][ T4958] bond1: (slave geneve2): making interface the new active one [ 138.051880][ T21] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 138.079605][ T4958] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.099411][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.107446][ T21] usb 6-1: Product: syz [ 138.138544][ T21] usb 6-1: Manufacturer: syz [ 138.139164][ T4958] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.151826][ T21] usb 6-1: SerialNumber: syz [ 138.264906][ T4958] syz.2.132 (4958) used greatest stack depth: 18336 bytes left [ 138.272921][ T4968] mmap: syz.1.131 (4968) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 138.328337][ T4892] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.339907][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.384730][ T4892] device bridge_slave_0 entered promiscuous mode [ 138.394421][ T4892] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.404103][ T4892] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.412717][ T4892] device bridge_slave_1 entered promiscuous mode [ 138.449990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.465852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.487576][ T21] usb 6-1: USB disconnect, device number 2 [ 138.570078][ T4892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.602171][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.803936][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.853341][ T4659] device veth0_vlan entered promiscuous mode [ 138.893677][ T4892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.975991][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.984814][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.069270][ T4659] device veth1_vlan entered promiscuous mode [ 139.425737][ T4892] team0: Port device team_slave_0 added [ 139.490101][ T4892] team0: Port device team_slave_1 added [ 139.567147][ T4659] device veth0_macvtap entered promiscuous mode [ 139.691667][ T4892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.707601][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 139.740797][ T4892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.766898][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.446021][ T4892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.578631][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.589208][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.689401][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.781931][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.854387][ T4659] device veth1_macvtap entered promiscuous mode [ 140.916451][ T4892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.924005][ T4892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.950843][ T4892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.963568][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.224926][ T4892] device hsr_slave_0 entered promiscuous mode [ 141.246033][ T4892] device hsr_slave_1 entered promiscuous mode [ 141.257875][ T4892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.279779][ T4892] Cannot create hsr debugfs directory [ 141.286348][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.470095][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.623145][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.877634][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.923997][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.955329][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.986144][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.006357][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 142.013531][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.094691][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.126078][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.148487][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.168491][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.183278][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.194253][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.215351][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.239305][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.270381][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.297592][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.391731][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.409558][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.426344][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.438077][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.529818][ T4659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.930806][ T4659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.093456][ T4659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.104254][ T4659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.905791][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.207269][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.605128][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.650003][ T1407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.713510][ T1407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.724133][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.805023][ T4892] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 147.730255][ T4892] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 147.801891][ T4892] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 147.857553][ T4892] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.459765][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.137945][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.135384][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.261048][ T4892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.361926][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.576531][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.781564][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.787207][ T4892] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.809622][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.810270][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.629805][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.636971][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.816949][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.845431][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.901740][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.907733][ T5129] Zero length message leads to an empty skb [ 152.912059][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.923053][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.049341][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.210514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.620828][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.652915][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.679735][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.703138][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.749753][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.782919][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.852217][ T4892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.899546][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.941411][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.959846][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.979064][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.629405][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.657581][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.803255][ T4892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.369639][ T5185] fuse: Bad value for 'rootmode' [ 156.646346][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.647139][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.774589][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.806970][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.864556][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.940129][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.090346][ T4892] device veth0_vlan entered promiscuous mode [ 158.485040][ T4892] device veth1_vlan entered promiscuous mode [ 158.532533][ T155] device hsr_slave_0 left promiscuous mode [ 158.626496][ T155] device hsr_slave_1 left promiscuous mode [ 158.637541][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.698810][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.719428][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.932070][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.950910][ T155] device bridge_slave_1 left promiscuous mode [ 158.972570][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.397884][ T155] device bridge_slave_0 left promiscuous mode [ 160.419287][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.449112][ T155] device veth1_macvtap left promiscuous mode [ 160.455230][ T155] device veth0_macvtap left promiscuous mode [ 160.464067][ T155] device veth1_vlan left promiscuous mode [ 160.480977][ T155] device veth0_vlan left promiscuous mode [ 160.781926][ T155] team0 (unregistering): Port device geneve0 removed [ 161.419358][ T155] team0 (unregistering): Port device team_slave_1 removed [ 161.490335][ T155] team0 (unregistering): Port device team_slave_0 removed [ 161.559242][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.649858][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.036470][ T155] bond0 (unregistering): Released all slaves [ 162.221247][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.245715][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.285136][ T4892] device veth0_macvtap entered promiscuous mode [ 162.313410][ T4892] device veth1_macvtap entered promiscuous mode [ 162.353417][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.383213][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.414376][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.484007][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.514340][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.559044][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.602392][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.662156][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.675027][ T4892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.685368][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.696007][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.705968][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.717224][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.997214][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.081861][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.318646][ T4892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.034888][ T4892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.174214][ T4892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.188012][ T4892] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.196804][ T4892] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.205578][ T4892] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.214824][ T4892] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.919713][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.928022][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.936990][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.959798][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.983696][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.993379][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.570325][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.677643][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.880331][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.892505][ T5291] sctp: failed to load transform for md5: -2 [ 166.038550][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.074520][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.147051][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.686857][ T5350] Malformed UNC in devname [ 168.686857][ T5350] [ 168.694009][ T5350] CIFS: VFS: Malformed UNC in devname [ 170.788954][ T5369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 178.230365][ T5479] SET target dimension over the limit! [ 180.548800][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.987022][ T5503] loop6: detected capacity change from 0 to 512 [ 180.994252][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 181.160317][ T5503] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.176173][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.287097][ T5503] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.294870][ T5503] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #3: comm syz.6.237: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 181.324379][ T5503] EXT4-fs error (device loop6): ext4_quota_enable:6391: comm syz.6.237: Bad quota inode: 3, type: 0 [ 181.338832][ T5503] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 181.357109][ T5503] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 181.365661][ T5503] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 181.589783][ T7] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.649594][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.737778][ T7] usb 6-1: config 0 descriptor?? [ 182.139885][ T7] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.733700][ T4213] usb 6-1: USB disconnect, device number 3 [ 184.015594][ T5531] loop7: detected capacity change from 0 to 64 [ 190.378596][ T4279] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.483177][ T5593] loop1: detected capacity change from 0 to 64 [ 191.578581][ T4246] Bluetooth: hci3: command 0x0406 tx timeout [ 191.649347][ T4279] usb 6-1: Using ep0 maxpacket: 8 [ 191.721851][ T5607] NILFS (nullb0): couldn't find nilfs on the device [ 191.788718][ T4279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.808658][ T4279] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.817751][ T4279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.849072][ T4279] usb 6-1: config 0 descriptor?? [ 192.028279][ T5614] loop7: detected capacity change from 0 to 1024 [ 192.121041][ T4279] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.401758][ T7] usb 6-1: USB disconnect, device number 4 [ 193.947901][ T5638] loop5: detected capacity change from 0 to 512 [ 194.354756][ T5638] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.396234][ T5638] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.402876][ T5638] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.263: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 194.423031][ T5638] EXT4-fs error (device loop5): ext4_quota_enable:6391: comm syz.5.263: Bad quota inode: 3, type: 0 [ 194.434521][ T5638] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 194.449384][ T5638] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 194.456880][ T5638] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 194.624778][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.631700][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.835261][ T5677] fuse: Unknown parameter 'user_i00000000000000000000' [ 197.014871][ T5677] o2cb: This node has not been configured. [ 197.021113][ T5677] o2cb: Cluster check failed. Fix errors before retrying. [ 197.028859][ T5677] (syz.2.271,5677,1):user_dlm_register:675 ERROR: status = -22 [ 197.036493][ T5677] (syz.2.271,5677,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 197.124537][ T4214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 197.648635][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 197.731877][ T5688] loop2: detected capacity change from 0 to 1024 [ 197.803320][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.848639][ T4214] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.864411][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.884348][ T4214] usb 2-1: config 0 descriptor?? [ 198.156695][ T4368] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.170602][ T4214] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 198.218762][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 198.254254][ T4368] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.280755][ T5685] chnl_net:caif_netlink_parms(): no params data found [ 198.311231][ T4368] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.107941][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 199.140093][ T5701] device macvlan3 entered promiscuous mode [ 199.155843][ T5701] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 199.387947][ T4368] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.497366][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.521887][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.547215][ T5685] device bridge_slave_0 entered promiscuous mode [ 199.581020][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.600322][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.659269][ T5685] device bridge_slave_1 entered promiscuous mode [ 199.695810][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.710472][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.739967][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 199.835021][ T5685] team0: Port device team_slave_0 added [ 199.912702][ T5685] team0: Port device team_slave_1 added [ 200.343606][ T21] usb 2-1: USB disconnect, device number 3 [ 200.493923][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.515979][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.624207][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.838515][ T5728] loop7: detected capacity change from 0 to 512 [ 201.162668][ T5728] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.176665][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.186417][ T5728] EXT4-fs (loop7): orphan cleanup on readonly fs [ 201.192479][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.192981][ T5728] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #3: comm syz.7.279: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 201.239684][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.250397][ T5728] EXT4-fs error (device loop7): ext4_quota_enable:6391: comm syz.7.279: Bad quota inode: 3, type: 0 [ 201.261904][ T5728] EXT4-fs warning (device loop7): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 201.276650][ T5728] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 201.284907][ T5728] EXT4-fs (loop7): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 201.557405][ T5685] device hsr_slave_0 entered promiscuous mode [ 201.633381][ T5685] device hsr_slave_1 entered promiscuous mode [ 201.663265][ T5685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.678614][ T5685] Cannot create hsr debugfs directory [ 201.818633][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 202.346924][ T5685] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 202.410703][ T5685] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 202.494202][ T5685] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 202.538903][ T5685] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 203.167921][ T4368] device hsr_slave_0 left promiscuous mode [ 203.393438][ T4368] device hsr_slave_1 left promiscuous mode [ 203.428788][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.438582][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.464389][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.499935][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.530182][ T4368] device bridge_slave_1 left promiscuous mode [ 203.536487][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.565687][ T4368] device bridge_slave_0 left promiscuous mode [ 203.573059][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.592734][ T4368] device veth1_macvtap left promiscuous mode [ 203.608535][ T4368] device veth0_macvtap left promiscuous mode [ 203.614887][ T4368] device veth1_vlan left promiscuous mode [ 203.621653][ T4368] device veth0_vlan left promiscuous mode [ 204.082908][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 204.300523][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 204.316422][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 204.333092][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.365588][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.697563][ T5775] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.880726][ T4368] bond0 (unregistering): Released all slaves [ 206.138952][ T4246] Bluetooth: hci2: command 0x0419 tx timeout [ 206.146743][ T5782] loop2: detected capacity change from 0 to 1024 [ 206.169100][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.280274][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.313015][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.333016][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.345822][ T5685] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.410646][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.427495][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.428531][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 206.447050][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.454210][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.475007][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.492753][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.502070][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.509210][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.527425][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.545087][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.563537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.568810][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.608697][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.609245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.619350][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.651544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.666837][ T23] usb 2-1: config 0 descriptor?? [ 206.677964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.694243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.703581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.716337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.736263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.756210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.767659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.783778][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.939928][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 207.064915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.079501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.122690][ T5685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.711762][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 207.739521][ T5812] device macvlan4 entered promiscuous mode [ 207.748852][ T5812] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 208.359460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.372192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.441506][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.456739][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.481213][ T5685] device veth0_vlan entered promiscuous mode [ 208.489580][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.511850][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.534913][ T5685] device veth1_vlan entered promiscuous mode [ 208.577010][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.599649][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.607987][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.629900][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.653015][ T5685] device veth0_macvtap entered promiscuous mode [ 208.679051][ T5685] device veth1_macvtap entered promiscuous mode [ 208.739040][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.774395][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.795306][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.815415][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.839478][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.862702][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.883268][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.904714][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.927212][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.946786][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.972921][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.000274][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.024981][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.060774][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.077942][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.088236][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.107745][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.118166][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.136602][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.147299][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.164404][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.184051][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.238359][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.248391][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.307750][ T13] usb 2-1: USB disconnect, device number 4 [ 209.345002][ T5685] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.357781][ T5685] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.368497][ T5685] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.377698][ T5685] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.590899][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.657873][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.797945][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.832039][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.893272][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.904506][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.743042][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 212.020805][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 213.028651][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.041705][ T1110] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.067063][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.083498][ T1110] usb 3-1: config 0 descriptor?? [ 213.359174][ T1110] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.935150][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 214.944375][ T4213] usb 3-1: USB disconnect, device number 2 [ 215.392855][ T5888] SET target dimension over the limit! [ 217.193124][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 217.238503][ T5893] lo speed is unknown, defaulting to 1000 [ 217.244674][ T5893] lo speed is unknown, defaulting to 1000 [ 217.253626][ T5893] lo speed is unknown, defaulting to 1000 [ 217.264299][ T5893] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.277834][ T5893] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 217.372029][ T5893] lo speed is unknown, defaulting to 1000 [ 217.380711][ T5893] lo speed is unknown, defaulting to 1000 [ 217.387535][ T5893] lo speed is unknown, defaulting to 1000 [ 217.395281][ T5893] lo speed is unknown, defaulting to 1000 [ 217.442358][ T5893] lo speed is unknown, defaulting to 1000 [ 217.522525][ T5893] lo speed is unknown, defaulting to 1000 [ 217.595034][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 218.918200][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.309'. [ 218.994219][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.309'. [ 219.268786][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 220.805952][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.814569][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.831886][ T5854] device bridge_slave_0 entered promiscuous mode [ 220.895858][ T4368] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.923088][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.931387][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.940611][ T5854] device bridge_slave_1 entered promiscuous mode [ 220.949662][ T5943] lo speed is unknown, defaulting to 1000 [ 220.969343][ T4368] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.049785][ T4368] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.083132][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.113301][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.142516][ T4368] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.285317][ T5854] team0: Port device team_slave_0 added [ 222.095757][ T4552] Bluetooth: hci1: command 0x0419 tx timeout [ 224.184447][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 225.602478][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 225.602495][ T26] audit: type=1326 audit(1743790296.179:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 225.778810][ T26] audit: type=1326 audit(1743790296.239:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 225.876103][ T26] audit: type=1326 audit(1743790296.239:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 225.905165][ T26] audit: type=1326 audit(1743790296.239:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 225.930540][ T26] audit: type=1326 audit(1743790296.239:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 225.966957][ T26] audit: type=1326 audit(1743790296.249:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 226.229472][ T26] audit: type=1326 audit(1743790296.249:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 226.251555][ T5854] team0: Port device team_slave_1 added [ 226.560413][ T26] audit: type=1326 audit(1743790296.249:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 226.592780][ T26] audit: type=1326 audit(1743790296.249:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 226.745424][ T26] audit: type=1326 audit(1743790296.249:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77d4e169 code=0x7ffc0000 [ 226.859424][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 226.925098][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.963848][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.991756][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.053886][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.064053][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.105907][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.267468][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 227.455631][ T5854] device hsr_slave_0 entered promiscuous mode [ 227.619720][ T5854] device hsr_slave_1 entered promiscuous mode [ 227.722624][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.842689][ T5854] Cannot create hsr debugfs directory [ 228.023124][ T4368] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.055523][ T4368] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.120114][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.137655][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.179478][ T5943] device bridge_slave_0 entered promiscuous mode [ 229.285231][ T4368] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.348748][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 229.359307][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.366426][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.474346][ T5943] device bridge_slave_1 entered promiscuous mode [ 230.050604][ T4368] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.103144][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.148870][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.290743][ T5943] team0: Port device team_slave_0 added [ 230.330025][ T5943] team0: Port device team_slave_1 added [ 231.413185][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.428519][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.454450][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.469357][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.521283][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.536522][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.563159][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.585531][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.248491][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 232.369028][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.400862][ T21] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.481077][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.645739][ T21] usb 2-1: config 0 descriptor?? [ 232.679167][ T5943] device hsr_slave_0 entered promiscuous mode [ 232.849208][ T5943] device hsr_slave_1 entered promiscuous mode [ 232.874179][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.907117][ T5943] Cannot create hsr debugfs directory [ 233.230397][ T21] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 234.534058][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 234.678817][ T4246] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 234.777411][ T5854] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 235.040309][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.053777][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.072252][ T4246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.089264][ T4246] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.103412][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.234700][ T4246] usb 3-1: config 0 descriptor?? [ 235.257539][ T5854] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 235.442088][ T23] usb 2-1: USB disconnect, device number 5 [ 235.482409][ T5854] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 235.779801][ T5854] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 235.901895][ T4246] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 235.945879][ T4246] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 236.272274][ T23] usb 3-1: USB disconnect, device number 3 [ 236.664492][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.452601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.469574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.505035][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.844111][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.853756][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.876302][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.883472][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.918984][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.939296][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.964553][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.971752][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.002427][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.023224][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 238.041191][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.071917][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.091592][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.111556][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.244831][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.259930][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.269351][ T6086] No such timeout policy "syz0" [ 239.209381][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.478850][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.503090][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.537612][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.738850][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.784694][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.809374][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.878714][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.917314][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.984330][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.231848][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.278751][ T4215] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 241.352750][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.629668][ T4215] usb 2-1: Using ep0 maxpacket: 8 [ 241.692780][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.769401][ T4215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.862085][ T4215] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.989864][ T4215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.140647][ T5943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.169763][ T4215] usb 2-1: config 0 descriptor?? [ 242.188817][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.381027][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.411162][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.444416][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.459333][ T4215] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 242.500055][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.529348][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.536462][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.553577][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.617083][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.643637][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.650817][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.673979][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.224722][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.533914][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.544483][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.553902][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.563696][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.572543][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.580251][ T6047] usb 2-1: USB disconnect, device number 6 [ 243.590252][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.601532][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.610694][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.621277][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.629965][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.638060][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.408434][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.418285][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.854260][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.766829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.807736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.985581][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.020606][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.033172][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.338629][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 247.483147][ T5943] device veth0_vlan entered promiscuous mode [ 247.520029][ T5943] device veth1_vlan entered promiscuous mode [ 247.598521][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 247.622695][ T5943] device veth0_macvtap entered promiscuous mode [ 247.650599][ T5943] device veth1_macvtap entered promiscuous mode [ 247.669694][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.680092][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.689556][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.697894][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.706816][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.717069][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.728240][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.747922][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.761342][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.788797][ T4279] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 247.840864][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.077760][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.128734][ T4279] usb 2-1: Using ep0 maxpacket: 8 [ 248.203656][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.498864][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.510241][ T1107] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.527100][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.531133][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.552983][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.556826][ T1107] usb 3-1: config 0 descriptor?? [ 248.563856][ T4279] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.578692][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.589407][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.598732][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.610907][ T4279] usb 2-1: config 0 descriptor?? [ 248.620397][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.632554][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.644610][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.654760][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.665545][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.677414][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.696181][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.724823][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.744315][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.757662][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.777616][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.809511][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.825932][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.836948][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.841782][ T1107] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 248.847682][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.871470][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.886207][ T4279] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 248.898187][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.914008][ T4368] device hsr_slave_0 left promiscuous mode [ 248.925418][ T4368] device hsr_slave_1 left promiscuous mode [ 248.936194][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.943991][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.952136][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.959916][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.967639][ T4368] device bridge_slave_1 left promiscuous mode [ 248.974301][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.983126][ T4368] device bridge_slave_0 left promiscuous mode [ 248.989801][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.008709][ T4368] device hsr_slave_0 left promiscuous mode [ 249.015522][ T4368] device hsr_slave_1 left promiscuous mode [ 249.024238][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.032129][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.041193][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.049087][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.057138][ T4368] device bridge_slave_1 left promiscuous mode [ 249.063845][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.073046][ T4368] device bridge_slave_0 left promiscuous mode [ 249.079683][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.296571][ T4552] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 249.308017][ T4368] device veth1_macvtap left promiscuous mode [ 249.315533][ T4368] device veth0_macvtap left promiscuous mode [ 249.322012][ T4368] device veth1_vlan left promiscuous mode [ 249.328119][ T4368] device veth0_vlan left promiscuous mode [ 249.346323][ T4368] device bond0 left promiscuous mode [ 249.842087][ T4368] device bond_slave_0 left promiscuous mode [ 249.848556][ T4368] device bond_slave_1 left promiscuous mode [ 249.879944][ T1110] usb 2-1: USB disconnect, device number 7 [ 249.939029][ T23] usb 3-1: USB disconnect, device number 4 [ 249.978016][ T4368] device veth1_macvtap left promiscuous mode [ 249.994998][ T4368] device veth0_macvtap left promiscuous mode [ 250.008880][ T4368] device veth1_vlan left promiscuous mode [ 250.056088][ T4368] device veth0_vlan left promiscuous mode [ 251.707580][ T4552] usb 9-1: Using ep0 maxpacket: 32 [ 252.248595][ T4552] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 252.256221][ T4552] usb 9-1: can't read configurations, error -71 [ 254.319848][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 254.364259][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 254.381206][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.413799][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.524500][ T4368] bond0 (unregistering): Released all slaves [ 254.768263][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 254.804740][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 254.822798][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.836969][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.905784][ T4368] bond0 (unregistering): Released all slaves [ 255.017323][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.026764][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.045059][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.057954][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.289562][ T5854] device veth0_vlan entered promiscuous mode [ 255.313188][ T5854] device veth1_vlan entered promiscuous mode [ 255.371480][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.387281][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.396113][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.405303][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.441858][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.454253][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.463020][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.482486][ T6198] device bridge_slave_0 left promiscuous mode [ 255.497520][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.522688][ T6198] device bridge_slave_1 left promiscuous mode [ 255.531127][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.551410][ T6198] bond0: (slave bond_slave_0): Releasing backup interface [ 255.559541][ T6198] device bond_slave_0 left promiscuous mode [ 255.577149][ T6198] bond0: (slave bond_slave_1): Releasing backup interface [ 255.588140][ T6198] device bond_slave_1 left promiscuous mode [ 256.698181][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.704774][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.446624][ T6198] team0: Port device team_slave_0 removed [ 257.470011][ T6198] team0: Port device team_slave_1 removed [ 257.479548][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.487066][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.496739][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.504641][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.522335][ T6199] device vlan0 entered promiscuous mode [ 257.566122][ T6199] team0: Port device vlan0 added [ 257.590783][ T6208] netlink: 'syz.2.375': attribute type 39 has an invalid length. [ 257.607985][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.669867][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.694279][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.733851][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.856023][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.933022][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.029583][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.559621][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.613679][ T5854] device veth0_macvtap entered promiscuous mode [ 259.143831][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.169449][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.177724][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.421639][ T5854] device veth1_macvtap entered promiscuous mode [ 259.991386][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.062774][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.116003][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.146086][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.180157][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.219167][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.264200][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.385508][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.414397][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.448362][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.464846][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.515853][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.558723][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.934521][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.078657][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.653115][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.999644][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.204214][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.369596][ T5854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.442942][ T5854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.473644][ T5854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.482854][ T5854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.510717][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.529104][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.537516][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 263.102224][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 263.123881][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.287536][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.405962][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.520880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.590696][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.639802][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.746375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.807577][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.880592][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.923936][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.587476][ T6296] SET target dimension over the limit! [ 266.508628][ T4216] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 267.091357][ T4216] usb 9-1: Using ep0 maxpacket: 16 [ 267.939371][ T4216] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 268.038611][ T4216] usb 9-1: config 0 has no interface number 0 [ 268.053196][ T4216] usb 9-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 268.130400][ T4216] usb 9-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 268.227642][ T4216] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.364951][ T4216] usb 9-1: config 0 descriptor?? [ 268.440079][ T6314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 270.306288][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.416365][ T7] usb 9-1: USB disconnect, device number 4 [ 273.927593][ T6398] input: syz0 as /devices/virtual/input/input5 [ 281.368612][ T4214] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 281.628700][ T4214] usb 3-1: Using ep0 maxpacket: 8 [ 281.830221][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.835692][ T4214] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.836029][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.936066][ T4214] usb 3-1: config 0 descriptor?? [ 282.303756][ T4214] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 283.002867][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 283.021522][ T6508] device bond_slave_0 entered promiscuous mode [ 283.021556][ T6508] device bond_slave_1 entered promiscuous mode [ 283.021733][ T6508] device macvlan2 entered promiscuous mode [ 283.021770][ T6508] device bond0 entered promiscuous mode [ 283.026146][ T6508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.663338][ T4226] usb 3-1: USB disconnect, device number 5 [ 286.180326][ T6559] capability: warning: `syz.9.456' uses deprecated v2 capabilities in a way that may be insecure [ 292.100272][ T4226] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 292.458641][ T4226] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 292.458681][ T4226] usb 10-1: config 0 interface 0 has no altsetting 0 [ 292.618811][ T4226] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.618922][ T4226] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.618988][ T4226] usb 10-1: Product: syz [ 292.619051][ T4226] usb 10-1: Manufacturer: syz [ 292.619114][ T4226] usb 10-1: SerialNumber: syz [ 293.329059][ T4226] usb 10-1: config 0 descriptor?? [ 293.371345][ T4226] usb 10-1: selecting invalid altsetting 0 [ 293.575860][ T4215] usb 10-1: USB disconnect, device number 2 [ 306.388729][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 307.228661][ T4552] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 307.271045][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.509958][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 307.519670][ T4552] usb 10-1: Using ep0 maxpacket: 8 [ 307.591822][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.659228][ T4552] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.885524][ T7] usb 3-1: Product: syz [ 307.907717][ T4552] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.998472][ T7] usb 3-1: Manufacturer: syz [ 308.007162][ T7] usb 3-1: SerialNumber: syz [ 308.012345][ T4552] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.039631][ T4552] usb 10-1: config 0 descriptor?? [ 308.418768][ T4552] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 309.239642][ T7] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 309.429694][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.521'. [ 310.051148][ T7] usb 3-1: USB disconnect, device number 6 [ 310.095207][ T7] usblp1: removed [ 310.198778][ T4552] usb 10-1: USB disconnect, device number 3 [ 310.802160][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 311.048575][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 311.132150][ T6919] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.164682][ T6919] kvm: pic: non byte read [ 311.168840][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.186607][ T1107] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.207256][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.262668][ T6919] kvm: pic: level sensitive irq not supported [ 311.262852][ T6919] kvm: pic: non byte read [ 311.276665][ T1107] usb 2-1: config 0 descriptor?? [ 311.293840][ T6919] kvm: pic: level sensitive irq not supported [ 311.294073][ T6919] kvm: pic: non byte read [ 311.581827][ T1107] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 312.865760][ T4552] usb 2-1: USB disconnect, device number 8 [ 315.448608][ T4552] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 315.808730][ T4552] usb 2-1: Using ep0 maxpacket: 8 [ 315.959103][ T4552] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.989390][ T4552] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.127659][ T4552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.386797][ T4552] usb 2-1: config 0 descriptor?? [ 316.780475][ T4552] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 317.502562][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.509876][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.524128][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 320.088612][ T4215] usb 2-1: USB disconnect, device number 9 [ 321.064211][ T7071] input: syz1 as /devices/virtual/input/input6 [ 325.205929][ T4214] Bluetooth: hci2: command 0x0406 tx timeout [ 325.228562][ T1110] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 327.168619][ T1110] usb 10-1: Using ep0 maxpacket: 8 [ 327.462540][ T1110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.475706][ T1110] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 327.485696][ T1110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.501602][ T1110] usb 10-1: config 0 descriptor?? [ 328.333048][ T1110] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 328.353675][ T1110] usb 10-1: USB disconnect, device number 4 [ 328.562951][ T7159] usb usb8: usbfs: process 7159 (syz.1.587) did not claim interface 0 before use [ 331.858961][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.866506][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.928566][ T4279] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 331.993689][ T4226] kernel read not supported for file /vbi8 (pid: 4226 comm: kworker/1:7) [ 332.208481][ T4279] usb 9-1: Using ep0 maxpacket: 8 [ 332.328750][ T4279] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.370693][ T4279] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.439852][ T4279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.613428][ T4279] usb 9-1: config 0 descriptor?? [ 332.941414][ T4279] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.840123][ T7205] usb usb8: usbfs: process 7205 (syz.1.599) did not claim interface 0 before use [ 334.949144][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 334.979340][ T7209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 334.986971][ T7209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.009480][ T7209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.016042][ T7209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.027213][ T7209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.033720][ T7209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.047353][ T7209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.048109][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.053860][ T7209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.054705][ T7209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.074903][ T7209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.304216][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.244615][ T7148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.298699][ T7148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.375279][ T7148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.510983][ T7148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.251179][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.593'. [ 340.506175][ T7252] usb usb8: usbfs: process 7252 (syz.0.611) did not claim interface 0 before use [ 340.815683][ T7221] usb 9-1: USB disconnect, device number 5 [ 341.037543][ T7266] fuse: Unknown parameter '0x000000000000000700000000000000000000' [ 341.401820][ T7268] lo speed is unknown, defaulting to 1000 [ 343.908536][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 343.908557][ T26] audit: type=1326 audit(1743790414.459:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.9.621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda5f76d169 code=0x0 [ 345.168542][ T1325] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 345.438500][ T1325] usb 3-1: Using ep0 maxpacket: 8 [ 345.598641][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.633052][ T1325] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.663245][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.689900][ T1325] usb 3-1: config 0 descriptor?? [ 346.010874][ T1325] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 347.520091][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 347.533210][ T7308] device macvlan3 entered promiscuous mode [ 347.541441][ T7308] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 347.565899][ T4552] usb 3-1: USB disconnect, device number 7 [ 349.808580][ T4552] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.028731][ T4552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.040116][ T4552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.050984][ T4552] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.079108][ T4552] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.089298][ T4552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.107376][ T4552] usb 3-1: config 0 descriptor?? [ 352.180719][ T4552] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 352.189281][ T4552] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 352.240391][ T4552] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 352.408444][ T7410] device lo entered promiscuous mode [ 352.454205][ T4552] lo speed is unknown, defaulting to 1000 [ 353.401946][ T7410] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 354.119435][ T4552] usb 3-1: USB disconnect, device number 8 [ 354.427138][ T7443] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 354.427138][ T7443] The task syz.1.653 (7443) triggered the difference, watch for misbehavior. [ 363.967427][ T7567] net_ratelimit: 1052 callbacks suppressed [ 363.967717][ T7567] netlink: get zone limit has 8 unknown bytes [ 364.886398][ T7578] syz.1.684 (7578): /proc/7566/oom_adj is deprecated, please use /proc/7566/oom_score_adj instead. [ 366.309051][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 368.354979][ T7630] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 368.493872][ T7613] sctp: failed to load transform for md5: -2 [ 377.214997][ T7229] Bluetooth: hci5: command 0x1003 tx timeout [ 377.228500][ T4182] Bluetooth: hci5: sending frame failed (-49) [ 379.240605][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.247022][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.258524][ T4216] Bluetooth: hci5: command 0x1001 tx timeout [ 379.268539][ T4182] Bluetooth: hci5: sending frame failed (-49) [ 380.189546][ T7754] lo speed is unknown, defaulting to 1000 [ 380.277472][ T6056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.290210][ T6056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.493445][ T6056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.528811][ T6056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.060881][ T6056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.085630][ T6056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 382.071674][ T7221] Bluetooth: hci5: command 0x1009 tx timeout [ 382.231445][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 382.633394][ T6056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.674830][ T6056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 382.830628][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 384.250020][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.270067][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.279256][ T7754] device bridge_slave_0 entered promiscuous mode [ 384.295493][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.304582][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.312990][ T7754] device bridge_slave_1 entered promiscuous mode [ 384.378539][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.407116][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.534116][ T7754] team0: Port device team_slave_0 added [ 384.647485][ T7754] team0: Port device team_slave_1 added [ 384.705478][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 385.075336][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.153990][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.452260][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.593289][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.661876][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.130303][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.861389][ T4552] Bluetooth: hci3: command 0x040f tx timeout [ 386.929077][ T7866] tipc: Started in network mode [ 386.934539][ T7866] tipc: Node identity ac1414bb, cluster identity 4711 [ 387.003763][ T7866] tipc: Enabling of bearer rejected, failed to enable media [ 387.213823][ T7754] device hsr_slave_0 entered promiscuous mode [ 387.297041][ T7754] device hsr_slave_1 entered promiscuous mode [ 387.327319][ T7754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.345321][ T7754] Cannot create hsr debugfs directory [ 387.549511][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.750'. [ 389.029462][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 389.388445][ T7219] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 389.748739][ T7935] CUSE: unknown device info "ÿ" [ 389.753877][ T7935] CUSE: zero length info key specified [ 390.367668][ T7219] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.459894][ T7219] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.473954][ T7219] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.487074][ T7219] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.496203][ T7219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.524512][ T7219] usb 9-1: config 0 descriptor?? [ 391.399119][ T7219] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 391.407104][ T7219] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 391.439647][ T7219] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 392.602758][ T6056] device hsr_slave_0 left promiscuous mode [ 392.612644][ T6056] device hsr_slave_1 left promiscuous mode [ 392.627601][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.612446][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.671060][ T7221] usb 9-1: USB disconnect, device number 6 [ 393.727171][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.739200][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.958115][ T6056] device bridge_slave_1 left promiscuous mode [ 393.971238][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.986386][ T6056] device bridge_slave_0 left promiscuous mode [ 394.165189][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.237321][ T6056] device bond0 left promiscuous mode [ 394.469619][ T6056] device bond_slave_0 left promiscuous mode [ 394.475690][ T6056] device bond_slave_1 left promiscuous mode [ 394.564253][ T7988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.816425][ T6056] device veth1_macvtap left promiscuous mode [ 394.943689][ T6056] device veth0_macvtap left promiscuous mode [ 395.168099][ T6056] device veth1_vlan left promiscuous mode [ 395.184340][ T6056] device veth0_vlan left promiscuous mode [ 395.679424][ T7999] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 395.687927][ T7999] overlayfs: failed to set xattr on upper [ 395.693781][ T7999] overlayfs: ...falling back to index=off,metacopy=off. [ 395.701291][ T7999] overlayfs: maximum fs stacking depth exceeded [ 398.159046][ T6056] bond1 (unregistering): (slave geneve2): Releasing active interface [ 398.217137][ T6056] bond1 (unregistering): Released all slaves [ 399.075270][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 399.213946][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 399.230233][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.246714][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.268516][ T7179] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 399.396040][ T6056] bond0 (unregistering): Released all slaves [ 399.485079][ T8007] netlink: 96 bytes leftover after parsing attributes in process `syz.0.775'. [ 400.350423][ T7754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.398737][ T7179] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.418439][ T7179] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.420748][ T7754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.458792][ T7179] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.481251][ T7754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.494483][ T7179] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.519694][ T7179] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.556183][ T7754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.568966][ T7179] usb 10-1: config 0 descriptor?? [ 400.850916][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.867032][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.898311][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.944842][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.978630][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.996259][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.038967][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.046117][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.078085][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.100945][ T7179] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 401.126823][ T7179] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 401.136236][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.155516][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.193261][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.201016][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.209524][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.212388][ T7179] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 401.222933][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.264497][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 401.277501][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.280863][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 401.281790][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.297339][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 401.298175][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 401.300538][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.303482][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 401.306456][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.309477][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.642637][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.661448][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.716933][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.459584][ T6047] usb 10-1: USB disconnect, device number 5 [ 405.853375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.909294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.995172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.010048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.039203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.077352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.222499][ T7754] device veth0_vlan entered promiscuous mode [ 406.570845][ T7754] device veth1_vlan entered promiscuous mode [ 406.803601][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.835893][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.891057][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.904324][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.914113][ T7754] device veth0_macvtap entered promiscuous mode [ 406.946337][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.993075][ T7754] device veth1_macvtap entered promiscuous mode [ 407.036570][ T8122] syz.9.797 uses obsolete (PF_INET,SOCK_PACKET) [ 407.077006][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.164806][ T26] audit: type=1326 audit(1743790930.738:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.9.797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda5f76d169 code=0x0 [ 407.215518][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.492027][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.555198][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.636141][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.760453][ T8128] netlink: 3 bytes leftover after parsing attributes in process `syz.8.796'. [ 407.777382][ T8128] device batadv1 entered promiscuous mode [ 407.807114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.838227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.881221][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.973586][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.130612][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.340854][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.525559][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.806507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.818087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.899574][ T7754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.928441][ T7754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.967962][ T7754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.007267][ T7754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.526030][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.588428][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.672796][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.770859][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.826671][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.869294][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 415.395491][ T8256] netlink: 'syz.4.823': attribute type 4 has an invalid length. [ 418.845003][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.834'. [ 421.192104][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.837'. [ 422.605992][ T26] audit: type=1326 audit(1743790946.178:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818b75169 code=0x7ffc0000 [ 422.705698][ T26] audit: type=1326 audit(1743790946.228:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f1818b75169 code=0x7ffc0000 [ 422.782469][ T26] audit: type=1326 audit(1743790946.228:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818b75169 code=0x7ffc0000 [ 422.919493][ T26] audit: type=1326 audit(1743790946.228:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818b75169 code=0x7ffc0000 [ 424.008168][ T8360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3442273030 (55076368480 ns) > initial count (33921318416 ns). Using initial count to start timer. [ 424.465564][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 424.651918][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 426.198559][ T26] audit: type=1326 audit(1743790949.748:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a24e6169 code=0x7ffc0000 [ 427.060271][ T26] audit: type=1326 audit(1743790949.748:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a24e6169 code=0x7ffc0000 [ 433.628420][ T4552] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 433.823801][ T1325] Bluetooth: hci5: command 0x1003 tx timeout [ 433.842735][ T7761] Bluetooth: hci5: sending frame failed (-49) [ 434.731629][ T4552] usb 2-1: Using ep0 maxpacket: 16 [ 434.928492][ T4552] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.937343][ T8490] netlink: 'syz.8.884': attribute type 1 has an invalid length. [ 435.014744][ T4552] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 435.033059][ T4552] usb 2-1: can't read configurations, error -71 [ 436.273464][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 436.280368][ T7761] Bluetooth: hci5: sending frame failed (-49) [ 439.058370][ T1325] Bluetooth: hci5: command 0x1009 tx timeout [ 440.381676][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.389557][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.656686][ T8568] process 'syz.1.896' launched './file0' with NULL argv: empty string added [ 444.155541][ T8613] device veth1_macvtap left promiscuous mode [ 444.221640][ T8613] tmpfs: Unknown parameter 'usrquota' [ 452.538608][ T7221] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 453.447905][ T8664] ksmbd: Unknown IPC event: 6, ignore. [ 453.508611][ T7221] usb 9-1: Using ep0 maxpacket: 8 [ 453.645690][ T7221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.677742][ T7221] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 453.690749][ T7221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.877512][ T7221] usb 9-1: config 0 descriptor?? [ 454.140754][ T7221] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 456.180108][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.919'. [ 456.193383][ T8685] device bond_slave_0 entered promiscuous mode [ 456.199691][ T8685] device bond_slave_1 entered promiscuous mode [ 456.205999][ T8685] device macvlan2 entered promiscuous mode [ 456.212120][ T8685] device bond0 entered promiscuous mode [ 456.219271][ T8685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 456.456757][ T4183] Bluetooth: Frame is too long (len 16, expected len 4) [ 456.632527][ T7222] usb 9-1: USB disconnect, device number 7 [ 459.463577][ T8735] device syzkaller1 entered promiscuous mode [ 460.698491][ T1325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 461.049436][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 461.200117][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.335234][ T1325] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.538933][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.693857][ T1325] usb 2-1: config 0 descriptor?? [ 462.127645][ T1325] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 463.080072][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 463.092223][ T8786] device macvlan5 entered promiscuous mode [ 463.098847][ T8786] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 463.931870][ T8802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.956'. [ 464.147500][ T4183] ================================================================== [ 464.156142][ T4183] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 464.164132][ T4183] Read of size 1 at addr ffff88807ad2bc0a by task kworker/u5:5/4183 [ 464.172118][ T4183] [ 464.174952][ T4183] CPU: 0 PID: 4183 Comm: kworker/u5:5 Not tainted 5.15.179-syzkaller #0 [ 464.183294][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.193361][ T4183] Workqueue: hci1 hci_rx_work [ 464.198078][ T4183] Call Trace: [ 464.201664][ T4183] [ 464.204607][ T4183] dump_stack_lvl+0x1e3/0x2d0 [ 464.209293][ T4183] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 464.214931][ T4183] ? _printk+0xd1/0x120 [ 464.219098][ T4183] ? __wake_up_klogd+0xcc/0x100 [ 464.223969][ T4183] ? panic+0x860/0x860 [ 464.228073][ T4183] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 464.233553][ T4183] print_address_description+0x63/0x3b0 [ 464.239106][ T4183] ? hci_le_meta_evt+0x11d6/0x3f50 [ 464.244227][ T4183] kasan_report+0x16b/0x1c0 [ 464.248736][ T4183] ? hci_le_meta_evt+0x11d6/0x3f50 [ 464.253855][ T4183] hci_le_meta_evt+0x11d6/0x3f50 [ 464.258797][ T4183] ? __lock_acquire+0x1ff0/0x1ff0 [ 464.263838][ T4183] ? hci_remote_host_features_evt+0x280/0x280 [ 464.269908][ T4183] ? __mutex_unlock_slowpath+0x218/0x750 [ 464.275544][ T4183] ? hci_event_packet+0x3b4/0x1550 [ 464.280665][ T4183] ? mutex_unlock+0x10/0x10 [ 464.285175][ T4183] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 464.291163][ T4183] ? print_irqtrace_events+0x210/0x210 [ 464.296627][ T4183] hci_event_packet+0xc41/0x1550 [ 464.301591][ T4183] ? rcu_lock_release+0x20/0x20 [ 464.306509][ T4183] ? hci_send_to_monitor+0x99/0x4d0 [ 464.311730][ T4183] hci_rx_work+0x237/0xa10 [ 464.316173][ T4183] process_one_work+0x8a1/0x10c0 [ 464.321162][ T4183] ? worker_detach_from_pool+0x260/0x260 [ 464.326802][ T4183] ? _raw_spin_lock_irqsave+0x120/0x120 [ 464.332350][ T4183] ? kthread_data+0x4e/0xc0 [ 464.336857][ T4183] ? wq_worker_running+0x97/0x170 [ 464.341891][ T4183] worker_thread+0xaca/0x1280 [ 464.346594][ T4183] kthread+0x3f6/0x4f0 [ 464.350665][ T4183] ? rcu_lock_release+0x20/0x20 [ 464.355632][ T4183] ? kthread_blkcg+0xd0/0xd0 [ 464.360227][ T4183] ret_from_fork+0x1f/0x30 [ 464.364666][ T4183] [ 464.367695][ T4183] [ 464.370021][ T4183] Allocated by task 8817: [ 464.374345][ T4183] ____kasan_kmalloc+0xba/0xf0 [ 464.379118][ T4183] __kmalloc_node_track_caller+0x195/0x390 [ 464.384931][ T4183] __alloc_skb+0x12c/0x590 [ 464.389347][ T4183] vhci_write+0xbc/0x430 [ 464.393589][ T4183] vfs_write+0xacd/0xe50 [ 464.397828][ T4183] ksys_write+0x1a2/0x2c0 [ 464.402157][ T4183] do_syscall_64+0x3b/0xb0 [ 464.406571][ T4183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 464.412461][ T4183] [ 464.414781][ T4183] Last potentially related work creation: [ 464.420489][ T4183] kasan_save_stack+0x36/0x60 [ 464.425166][ T4183] kasan_record_aux_stack+0xba/0x100 [ 464.430449][ T4183] kvfree_call_rcu+0x118/0x8a0 [ 464.435215][ T4183] neigh_flush_dev+0x189/0x9e0 [ 464.439977][ T4183] __neigh_ifdown+0x45/0x3b0 [ 464.444560][ T4183] neigh_ifdown+0x1b/0x30 [ 464.448888][ T4183] rt6_disable_ip+0x642/0x6d0 [ 464.453567][ T4183] addrconf_ifdown+0x166/0x1be0 [ 464.458418][ T4183] addrconf_notify+0x452/0xf40 [ 464.463182][ T4183] raw_notifier_call_chain+0xd0/0x170 [ 464.468558][ T4183] __dev_notify_flags+0x1fd/0x3f0 [ 464.473583][ T4183] dev_change_flags+0xe7/0x190 [ 464.478344][ T4183] devinet_ioctl+0x92a/0x1ae0 [ 464.483020][ T4183] inet_ioctl+0x32f/0x400 [ 464.487347][ T4183] sock_do_ioctl+0x11d/0x5a0 [ 464.491936][ T4183] sock_ioctl+0x484/0x770 [ 464.496266][ T4183] __se_sys_ioctl+0xf1/0x160 [ 464.500857][ T4183] do_syscall_64+0x3b/0xb0 [ 464.505274][ T4183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 464.511166][ T4183] [ 464.513487][ T4183] The buggy address belongs to the object at ffff88807ad2b800 [ 464.513487][ T4183] which belongs to the cache kmalloc-1k of size 1024 [ 464.527636][ T4183] The buggy address is located 10 bytes to the right of [ 464.527636][ T4183] 1024-byte region [ffff88807ad2b800, ffff88807ad2bc00) [ 464.541437][ T4183] The buggy address belongs to the page: [ 464.547076][ T4183] page:ffffea0001eb4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ad28 [ 464.557238][ T4183] head:ffffea0001eb4a00 order:3 compound_mapcount:0 compound_pincount:0 [ 464.565578][ T4183] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 464.573579][ T4183] raw: 00fff00000010200 ffffea0001d67e00 0000000500000005 ffff888017441dc0 [ 464.582162][ T4183] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 464.590741][ T4183] page dumped because: kasan: bad access detected [ 464.597157][ T4183] page_owner tracks the page as allocated [ 464.602865][ T4183] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xf2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_MEMALLOC), pid 4239, ts 75100686827, free_ts 75028129524 [ 464.622704][ T4183] get_page_from_freelist+0x3b78/0x3d40 [ 464.628274][ T4183] __alloc_pages+0x272/0x700 [ 464.632874][ T4183] new_slab+0xbb/0x4b0 [ 464.636946][ T4183] ___slab_alloc+0x6f6/0xe10 [ 464.641533][ T4183] __kmalloc_node_track_caller+0x1f6/0x390 [ 464.647338][ T4183] __alloc_skb+0x12c/0x590 [ 464.651755][ T4183] __netdev_alloc_skb+0xfb/0x4e0 [ 464.656691][ T4183] batadv_iv_ogm_queue_add+0x6a0/0xbe0 [ 464.662153][ T4183] batadv_iv_ogm_schedule+0x821/0x1000 [ 464.667612][ T4183] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 464.674638][ T4183] process_one_work+0x8a1/0x10c0 [ 464.679576][ T4183] worker_thread+0xaca/0x1280 [ 464.684275][ T4183] kthread+0x3f6/0x4f0 [ 464.688346][ T4183] ret_from_fork+0x1f/0x30 [ 464.692762][ T4183] page last free stack trace: [ 464.697424][ T4183] free_unref_page_prepare+0xc34/0xcf0 [ 464.702882][ T4183] free_unref_page+0x95/0x2d0 [ 464.707574][ T4183] __unfreeze_partials+0x1b7/0x210 [ 464.712689][ T4183] put_cpu_partial+0x132/0x1a0 [ 464.717453][ T4183] ___cache_free+0xe3/0x100 [ 464.721956][ T4183] qlist_free_all+0x36/0x90 [ 464.726456][ T4183] kasan_quarantine_reduce+0x162/0x180 [ 464.731914][ T4183] __kasan_slab_alloc+0x2f/0xc0 [ 464.736763][ T4183] slab_post_alloc_hook+0x53/0x380 [ 464.741900][ T4183] kmem_cache_alloc_node+0x121/0x2c0 [ 464.747211][ T4183] __alloc_skb+0xdd/0x590 [ 464.751542][ T4183] netlink_ack+0x33c/0xb10 [ 464.755956][ T4183] netlink_rcv_skb+0x24c/0x410 [ 464.760721][ T4183] netlink_unicast+0x7c0/0x990 [ 464.765487][ T4183] netlink_sendmsg+0xa30/0xd60 [ 464.770253][ T4183] __sys_sendto+0x564/0x720 [ 464.774758][ T4183] [ 464.777076][ T4183] Memory state around the buggy address: [ 464.782700][ T4183] ffff88807ad2bb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.790758][ T4183] ffff88807ad2bb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.798819][ T4183] >ffff88807ad2bc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 464.806875][ T4183] ^ [ 464.811201][ T4183] ffff88807ad2bc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 464.819262][ T4183] ffff88807ad2bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 464.827317][ T4183] ================================================================== [ 464.835375][ T4183] Disabling lock debugging due to kernel taint [ 464.841604][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.856315][ T4183] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 464.863721][ T4183] CPU: 0 PID: 4183 Comm: kworker/u5:5 Tainted: G B 5.15.179-syzkaller #0 [ 464.873499][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.873520][ T4183] Workqueue: hci1 hci_rx_work [ 464.873549][ T4183] Call Trace: [ 464.873557][ T4183] [ 464.873565][ T4183] dump_stack_lvl+0x1e3/0x2d0 [ 464.873593][ T4183] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 464.873617][ T4183] ? panic+0x860/0x860 [ 464.873635][ T4183] ? rcu_is_watching+0x11/0xa0 [ 464.873659][ T4183] ? preempt_schedule_common+0xa6/0xd0 [ 464.873686][ T4183] panic+0x318/0x860 [ 464.873705][ T4183] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 464.873729][ T4183] ? check_panic_on_warn+0x1d/0xa0 [ 464.873754][ T4183] ? fb_is_primary_device+0xd0/0xd0 [ 464.873778][ T4183] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 464.873800][ T4183] ? _raw_spin_unlock+0x40/0x40 [ 464.873823][ T4183] check_panic_on_warn+0x7e/0xa0 [ 464.873845][ T4183] ? hci_le_meta_evt+0x11d6/0x3f50 [ 464.873868][ T4183] end_report+0x6d/0xf0 [ 464.873889][ T4183] kasan_report+0x18e/0x1c0 [ 464.873910][ T4183] ? hci_le_meta_evt+0x11d6/0x3f50 [ 464.873937][ T4183] hci_le_meta_evt+0x11d6/0x3f50 [ 464.873961][ T4183] ? __lock_acquire+0x1ff0/0x1ff0 [ 464.873990][ T4183] ? hci_remote_host_features_evt+0x280/0x280 [ 464.874015][ T4183] ? __mutex_unlock_slowpath+0x218/0x750 [ 464.874038][ T4183] ? hci_event_packet+0x3b4/0x1550 [ 464.874064][ T4183] ? mutex_unlock+0x10/0x10 [ 464.874088][ T4183] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 464.874111][ T4183] ? print_irqtrace_events+0x210/0x210 [ 464.874135][ T4183] hci_event_packet+0xc41/0x1550 [ 464.874163][ T4183] ? rcu_lock_release+0x20/0x20 [ 464.874192][ T4183] ? hci_send_to_monitor+0x99/0x4d0 [ 464.874214][ T4183] hci_rx_work+0x237/0xa10 [ 464.874240][ T4183] process_one_work+0x8a1/0x10c0 [ 464.874272][ T4183] ? worker_detach_from_pool+0x260/0x260 [ 464.874298][ T4183] ? _raw_spin_lock_irqsave+0x120/0x120 [ 464.874328][ T4183] ? kthread_data+0x4e/0xc0 [ 464.874348][ T4183] ? wq_worker_running+0x97/0x170 [ 464.874370][ T4183] worker_thread+0xaca/0x1280 [ 464.874405][ T4183] kthread+0x3f6/0x4f0 [ 464.874425][ T4183] ? rcu_lock_release+0x20/0x20 [ 464.874446][ T4183] ? kthread_blkcg+0xd0/0xd0 [ 464.874465][ T4183] ret_from_fork+0x1f/0x30 [ 464.874492][ T4183] [ 464.874767][ T4183] Kernel Offset: disabled [ 465.100152][ T4183] Rebooting in 86400 seconds..