last executing test programs: 15m47.322041304s ago: executing program 32 (id=70): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 14m58.263289933s ago: executing program 33 (id=161): pipe2$9p(&(0x7f0000000240), 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 14m42.042624759s ago: executing program 34 (id=164): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206010300000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000014000780080011400000000005001500024000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="08002600b409000008002700010000000800a1"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4b, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x51e, &(0x7f0000000140)="$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") r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000114000/0x18000)=nil, &(0x7f0000000800)=[@textreal={0x8, &(0x7f0000000780)="1b3e0d00ba410066ed0f5790b30caf3e660f38822f66b91908000066b8ec01000066ba000000000f302e0f5dcd266667f00fb1920600000036f30f09baf80c66b86ecdb88966efbafc0cb82000ef", 0x4e}], 0x1, 0x61, &(0x7f0000000840), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 12m20.197558038s ago: executing program 35 (id=306): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 10m51.142571292s ago: executing program 36 (id=349): r0 = syz_open_procfs(0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x309080, 0x1) openat$dsp1(0xffffffffffffff9c, 0x0, 0x143082, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$P9_RREADDIR(r0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 9m33.952746546s ago: executing program 37 (id=383): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x8000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0) 8m42.641375404s ago: executing program 38 (id=448): ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) timerfd_create(0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x800, 0x70bd26, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xd, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000004a80)=0xffff8000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_setup(0x49f, 0x0, &(0x7f0000000340), &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, &(0x7f0000000280)) 7m1.884456421s ago: executing program 2 (id=600): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6m59.054355816s ago: executing program 2 (id=606): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./file2\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') 6m55.236127799s ago: executing program 0 (id=615): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6m50.811496153s ago: executing program 0 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 6m47.826848795s ago: executing program 0 (id=621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, r5, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 6m43.204362076s ago: executing program 39 (id=606): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./file2\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') 6m29.657097017s ago: executing program 40 (id=621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, r5, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 6m12.902649031s ago: executing program 41 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) 6m6.748040584s ago: executing program 42 (id=650): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5m47.00299197s ago: executing program 43 (id=658): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ad"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x96e, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x1, 0x0, 0x0, 0x401}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x7e517c1b6f48909a, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x3, 0x166, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000001040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1}) creat(&(0x7f00000001c0)='./file0\x00', 0xcb) io_uring_enter(r6, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 4m26.848599913s ago: executing program 44 (id=709): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) close(0x4) 4m17.276049316s ago: executing program 8 (id=750): sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x6bf8dd7b1292a0f, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 4m16.471337456s ago: executing program 8 (id=753): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sigaltstack(&(0x7f0000001040)={&(0x7f0000001580)=""/4097, 0x0, 0xffffffffffffff0d}, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, &(0x7f0000000340)={0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x9, 0xfffffffe, 0xfc, 0x7e40, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/address_bits', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(&(0x7f0000000240)={0x0, 0x2}, 0x0) fsopen(&(0x7f0000000500)='mqueue\x00', 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) brk(0x400000ffc020) read$msr(r3, &(0x7f0000000c40)=""/4096, 0x1000) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x20000800) close(r1) 4m14.599150541s ago: executing program 8 (id=757): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x40, 0xf, 0x2, {0x2, 0xe}}, 0x0}, &(0x7f0000000940)={0x1c, &(0x7f0000000740)={0x20, 0x10, 0x3c, "dc50aece0efc2e549223c0fd610380a5762afdd56f051f075723d0ade9bbbf3ff4b6809dedbeadf593df2f5d02a6d493d67bac5e65bea8695fb68d16"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m11.513693949s ago: executing program 8 (id=762): sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x6bf8dd7b1292a0f, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 4m10.739916469s ago: executing program 8 (id=765): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 4m9.848205757s ago: executing program 8 (id=768): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) 3m54.320077476s ago: executing program 45 (id=768): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) 3m50.247902341s ago: executing program 4 (id=796): unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r1, 0xffffffffffffffff, 0x0) 3m47.295984592s ago: executing program 4 (id=799): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x76e1c523, 0x401, 0x4, 0x3, 0x0, 0x0, 0x0, 0x100, 0xa4001f7e}}, 0x50) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) 3m46.421474415s ago: executing program 4 (id=800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffe}, 0x1c) sendmmsg(r1, &(0x7f00000043c0)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}}], 0x1, 0x20000015) 3m45.530181242s ago: executing program 4 (id=801): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m42.012255767s ago: executing program 4 (id=804): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x80, 0x0, 0x0, 0x10, 0x0, {0x8000}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x200}) 3m37.937399175s ago: executing program 4 (id=809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, 0x0, &(0x7f0000ffe000), &(0x7f0000ffe000)) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x4040980) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1007, 0x10b00) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 3m29.798740099s ago: executing program 2 (id=730): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) 3m26.399806046s ago: executing program 2 (id=821): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x76e1c523, 0x401, 0x4, 0x3, 0x0, 0x0, 0x0, 0x100, 0xa4001f7e}}, 0x50) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) 3m25.699986917s ago: executing program 2 (id=822): unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r1, 0xffffffffffffffff, 0x0) 3m21.821877054s ago: executing program 46 (id=809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, 0x0, &(0x7f0000ffe000), &(0x7f0000ffe000)) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x4040980) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1007, 0x10b00) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 3m20.408246069s ago: executing program 2 (id=827): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) 3m4.967711682s ago: executing program 47 (id=827): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) 2m33.503122288s ago: executing program 7 (id=870): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x4000810) 2m32.63934955s ago: executing program 7 (id=872): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000370401000000ffdbdf2500000000", @ANYBLOB="890c0400010000001c0012800b000100677265746170"], 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 2m31.8330506s ago: executing program 7 (id=874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 2m31.184325781s ago: executing program 7 (id=875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0x6, 0x2, 0x81, 0x4, 0xa, 0x81, 0x0, 0x1, 0x6, 0x1}, {0xdddd1000, 0x1, 0x3, 0x5, 0x2, 0x8, 0xd, 0xff, 0x0, 0x81, 0x80, 0x3}, {0x2000, 0x4000, 0x0, 0xdd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x9, 0x2}, {0xffff1000, 0x100000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x9, 0x6, 0x4, 0x8}, {0x100002, 0xeeee8000, 0x9, 0x4, 0x80, 0xee, 0x0, 0x7, 0x80, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x7, 0x86, 0xf3, 0x42}, {0x4, 0x4, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0x80}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0x4, 0x8, 0x2, 0x8, 0x8, 0x8, 0x4e}, {0x4, 0x7}, {0xd000, 0x5}, 0x10, 0x0, 0x0, 0x2a00e8, 0x7, 0x1000, 0x0, [0x5, 0x6, 0x8, 0xd8f5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.160165723s ago: executing program 7 (id=878): syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa10e959f3f5397fe804fde821a7e0bc927809"], 0x1a) 2m29.112865922s ago: executing program 7 (id=880): getpid() socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m12.944918448s ago: executing program 48 (id=880): getpid() socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m7.188507049s ago: executing program 0 (id=790): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1010e, &(0x7f0000000300)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@debug}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 2m5.145492021s ago: executing program 0 (id=902): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r2, @ANYBLOB="aa904cd46feebae1729b7ed55f830edbef1c4035d341a72b5022b674a0dfd96422416a6cdf3f2b96f20b82cabb198e87e6674aac5109788acec0f6d22396b2f49b176961cb"], 0x1c}}, 0x0) 1m58.384045156s ago: executing program 0 (id=905): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) 1m54.746556876s ago: executing program 49 (id=905): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) 1m8.889409522s ago: executing program 9 (id=907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) 1m7.268593497s ago: executing program 9 (id=984): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 1m7.139339374s ago: executing program 9 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x120, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xf0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x28, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m4.809926327s ago: executing program 9 (id=989): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x22983, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000014) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1m0.375947933s ago: executing program 9 (id=998): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) 55.202481462s ago: executing program 9 (id=1004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 39.280851464s ago: executing program 50 (id=1004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 13.48153916s ago: executing program 6 (id=1069): socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0) 10.483255458s ago: executing program 6 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040041000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 8.799018341s ago: executing program 6 (id=1078): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 8.546753012s ago: executing program 5 (id=1081): socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0) 8.008072358s ago: executing program 1 (id=1082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x4}, 0x10) 6.480308644s ago: executing program 1 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad00"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 5.800203482s ago: executing program 3 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) dup2(r1, r3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 5.643091207s ago: executing program 1 (id=1086): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fcc8fc00004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 5.142608642s ago: executing program 5 (id=1087): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040041000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.651522665s ago: executing program 5 (id=1088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.495614018s ago: executing program 3 (id=1089): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 4.142149715s ago: executing program 1 (id=1090): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b000000000005001000"], 0x30}}, 0x0) 3.982240465s ago: executing program 6 (id=1091): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x80, 0x4) 3.782635209s ago: executing program 3 (id=1092): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x8c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3a, 0xb, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.380067237s ago: executing program 5 (id=1093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x4}, 0x10) 3.259174576s ago: executing program 6 (id=1094): sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1420dd89f05ae40d}, 0x4004000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.220553736s ago: executing program 1 (id=1095): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {0x0}, {0xffffffffffffffff}, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid\x00') mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x2b7, &(0x7f000001bb40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x3}, {0x6, 0x0, 0x1}], @ipv4=@gre={{0x2a, 0x4, 0x0, 0x3, 0x29d, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @empty, {[@end, @timestamp_prespec={0x44, 0x2c, 0x88, 0x3, 0x4, [{@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@broadcast, 0x8}, {@multicast1, 0x8}]}, @cipso={0x86, 0x2c, 0x3, [{0x0, 0x5, "b09aab"}, {0x2, 0x2}, {0x5, 0x2}, {0x0, 0x11, "3d7f37c474302a1b704839e2384db5"}, {0x0, 0xc, "6b44c389798af3fc9e2f"}]}, @timestamp={0x44, 0xc, 0x41, 0x0, 0x7, [0x1400, 0xc]}, @timestamp={0x44, 0x14, 0xbb, 0x0, 0x1, [0x3, 0x1, 0x5, 0x6]}, @timestamp={0x44, 0x18, 0x4f, 0x0, 0x5, [0xfbb, 0x6, 0x2, 0x2, 0x3]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "c98ab233204962320687f46ab0feba21cc56728901269756475d845d483ebb9ae17cc23f2b5924b197816407be894d1ad9db006363228bb6fffeafbe895a2a446cfe42f2864c04fd2554b021299e89293b258de6c8eda02be7f9f3a1a6bd05acb33fd5eb31b6dc61d686a6209c2133a90fab3a83b9db7a7c87ad891c853f648cc8ad8ad5f52b5e09fd162ff46b638bf2b39b1b6bb3cd96c2f647ce97db855dfb488e92bbbf6663205d7ea388224905db6eb4ac1f76643bfd831c6eb2bd8eb1746747551cc2445bea709dc90cfefcf132dc"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7, 0x3, 0x5], "43a29b892a5f125c4c9f967ee9cba416045ea69c97c08c1245ba4427c514326a4bcc850ec3b4cda4c15ec85ad39167d8fed0bcfd3de1270a661f5f7c8c85e48b1b339289a94aa286f54ec14b03f770ab9d04c403b447bae12f25b308d742057c00d7f8fac4835817"}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0xc361}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x4, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "fe8c20b0cf5ac7d2d2c0e7f55419152bc948639f20ac3459a72e0f8792179c3b860087a601145561c5734f0918f7f82ee82a8abd40aaeb3b392774c974e55718227dba582094a04b084d2cc618e0b2f1c44fda39ed4dd4715ef6c951df6ea7e6bad8d535dfddda7a03ef3dbb0b634fde32de"}}}}}}}, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x1f, 0xefcc, 0x6, 0x5, "f06fca79266e82a74b6c5e442e6130c3c267a0", 0x10006, 0xc}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) 3.144069756s ago: executing program 3 (id=1096): socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0) 1.30144088s ago: executing program 5 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040041000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 692.335798ms ago: executing program 3 (id=1098): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write(r0, 0x0, 0x0) 456.448976ms ago: executing program 6 (id=1099): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fcc8fc00004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 388.94304ms ago: executing program 1 (id=1100): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 128.029108ms ago: executing program 3 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 0s ago: executing program 5 (id=1102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.444641][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.588967][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.598287][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.742422][ T9757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.054514][ T9922] loop9: detected capacity change from 0 to 64 [ 955.660133][ T9927] loop1: detected capacity change from 0 to 512 [ 955.849069][ T9927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 955.961466][ T9927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 955.970164][ T9927] System zones: 1-12 [ 956.139537][ T9927] EXT4-fs (loop1): 1 orphan inode deleted [ 956.146178][ T9927] EXT4-fs (loop1): 1 truncate cleaned up [ 956.154142][ T9927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.268125][ T30] audit: type=1804 audit(1750987208.833:14): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.671" name="/newroot/1/file1/bus" dev="loop1" ino=17 res=1 errno=0 [ 956.765808][ T9637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.835446][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.9.673'. [ 956.938603][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.9.673'. [ 957.024732][ T9944] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 957.067213][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.075477][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.369656][ T3983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.378439][ T3983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.358214][ T9757] veth0_vlan: entered promiscuous mode [ 959.626692][ T9757] veth1_vlan: entered promiscuous mode [ 960.171555][ T9757] veth0_macvtap: entered promiscuous mode [ 960.273928][ T9757] veth1_macvtap: entered promiscuous mode [ 960.458685][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.583489][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.666109][ T9757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.676101][ T9757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.685180][ T9757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.694151][ T9757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.706736][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.714629][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.045038][ T9997] loop7: detected capacity change from 0 to 64 [ 964.238225][ T5804] Bluetooth: hci0: unexpected event 0x06 length: 11 > 3 [ 965.235090][T10005] loop8: detected capacity change from 0 to 512 [ 965.439063][T10005] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 965.591624][T10005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 965.600213][T10005] System zones: 1-12 [ 965.718500][T10005] EXT4-fs (loop8): 1 orphan inode deleted [ 965.724924][T10005] EXT4-fs (loop8): 1 truncate cleaned up [ 965.734992][T10005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.025174][ T30] audit: type=1804 audit(1750987218.593:15): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.683" name="/newroot/13/file1/bus" dev="loop8" ino=17 res=1 errno=0 [ 966.558247][ T9460] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.358772][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.366911][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.421492][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 969.667781][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.676121][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.892585][T10045] loop8: detected capacity change from 0 to 32768 [ 971.061944][T10045] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 971.062064][T10045] allowing incompatible features above 0.0: (unknown version) [ 971.062150][T10045] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 971.101690][T10045] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 971.110196][T10045] bcachefs (loop8): initializing new filesystem [ 971.130137][T10045] bcachefs (loop8): going read-write [ 971.232846][T10045] bcachefs (loop8): marking superblocks [ 971.276950][T10045] bcachefs (loop8): initializing freespace [ 971.303031][T10045] bcachefs (loop8): done initializing freespace [ 971.319745][T10045] bcachefs (loop8): reading snapshots table [ 971.326001][T10045] bcachefs (loop8): reading snapshots done [ 971.418344][T10045] bcachefs (loop8): done starting filesystem [ 971.595373][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 971.826149][ T9460] bcachefs (loop8): shutting down [ 971.831608][ T9460] bcachefs (loop8): going read-only [ 971.837183][ T9460] bcachefs (loop8): finished waiting for writes to stop [ 971.851708][T10068] loop1: detected capacity change from 0 to 64 [ 971.926389][ T9460] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3 [ 972.361876][ T9460] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3 [ 972.401683][ T5855] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 972.459188][ T9460] bcachefs (loop8): clean shutdown complete, journal seq 4 [ 972.538776][ T9460] bcachefs (loop8): marking filesystem clean [ 972.762321][ T5855] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 972.772240][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.780492][ T5855] usb 8-1: Product: syz [ 972.785086][ T5855] usb 8-1: Manufacturer: syz [ 972.789920][ T5855] usb 8-1: SerialNumber: syz [ 972.827465][ T9460] bcachefs (loop8): shutdown complete [ 973.039426][ T5855] usb 8-1: config 0 descriptor?? [ 973.485919][ T5855] usb 8-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 973.771555][ T5855] usb 8-1: no permanent extended address found, random address set [ 973.779766][ T5855] usb 8-1: atusb_probe: initialization failed, error = -524 [ 973.788358][ T5855] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 974.007548][ T5855] usb 8-1: USB disconnect, device number 5 [ 978.425204][T10110] loop9: detected capacity change from 0 to 32768 [ 978.629933][T10110] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 978.630018][T10110] allowing incompatible features above 0.0: (unknown version) [ 978.630079][T10110] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 978.673447][T10110] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 978.681994][T10110] bcachefs (loop9): initializing new filesystem [ 978.698427][T10110] bcachefs (loop9): going read-write [ 978.801926][ T5855] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 978.810358][T10110] bcachefs (loop9): marking superblocks [ 978.874409][T10110] bcachefs (loop9): initializing freespace [ 978.898595][T10110] bcachefs (loop9): done initializing freespace [ 978.915003][T10110] bcachefs (loop9): reading snapshots table [ 978.921273][T10110] bcachefs (loop9): reading snapshots done [ 979.117607][T10110] bcachefs (loop9): done starting filesystem [ 979.151232][ T5855] usb 8-1: Using ep0 maxpacket: 8 [ 979.213394][ T5855] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.224705][ T5855] usb 8-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 979.234284][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.375013][ T5855] usb 8-1: config 0 descriptor?? [ 979.535115][ T5855] rtsx_usb 8-1:0.0: probe with driver rtsx_usb failed with error -22 [ 979.685060][ T5855] usb 8-1: USB disconnect, device number 6 [ 979.698365][ T9490] bcachefs (loop9): shutting down [ 979.704750][ T9490] bcachefs (loop9): going read-only [ 979.710219][ T9490] bcachefs (loop9): finished waiting for writes to stop [ 979.798925][ T9490] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3 [ 979.817190][T10129] loop4: detected capacity change from 0 to 64 [ 980.130219][ T9490] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3 [ 980.230568][ T9490] bcachefs (loop9): clean shutdown complete, journal seq 4 [ 980.294658][ T9490] bcachefs (loop9): marking filesystem clean [ 980.452350][ T9490] bcachefs (loop9): shutdown complete [ 981.172862][T10135] fuse: Unknown parameter 'user_id00000000000000000000' [ 981.571930][ T5855] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 981.847454][ T5855] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 981.857198][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.866524][ T5855] usb 2-1: Product: syz [ 981.871198][ T5855] usb 2-1: Manufacturer: syz [ 981.876020][ T5855] usb 2-1: SerialNumber: syz [ 982.043767][ T5855] usb 2-1: config 0 descriptor?? [ 982.093529][T10144] loop8: detected capacity change from 0 to 512 [ 982.156615][T10144] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 982.261626][T10144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 982.318154][T10144] System zones: 1-12 [ 982.512171][T10144] EXT4-fs (loop8): 1 orphan inode deleted [ 982.518483][T10144] EXT4-fs (loop8): 1 truncate cleaned up [ 982.528298][T10144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.611674][ T5855] usb 2-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 982.855831][ T5855] usb 2-1: no permanent extended address found, random address set [ 982.864167][ T5855] usb 2-1: atusb_probe: initialization failed, error = -524 [ 982.872951][ T5855] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 984.052197][ T5855] usb 2-1: USB disconnect, device number 4 [ 984.221696][T10151] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 984.420703][ T9460] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.595892][T10183] loop7: detected capacity change from 0 to 64 [ 991.287554][T10186] fuse: Unknown parameter 'user_id00000000000000000000' [ 992.097040][T10195] loop4: detected capacity change from 0 to 512 [ 992.181324][T10195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 993.032455][ T5859] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 994.100764][T10195] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 994.110065][T10195] System zones: 1-12 [ 995.176962][T10195] EXT4-fs (loop4): 1 orphan inode deleted [ 995.183546][T10195] EXT4-fs (loop4): 1 truncate cleaned up [ 995.192255][T10195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.853586][ T5859] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 995.872826][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.030717][ T5859] usb 9-1: config 0 descriptor?? [ 996.069205][ T5859] usb 9-1: can't set config #0, error -71 [ 996.121562][ T5859] usb 9-1: USB disconnect, device number 3 [ 996.244783][ T9757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.520196][T10228] loop1: detected capacity change from 0 to 64 [ 1000.931930][T10237] fuse: Bad value for 'fd' [ 1001.412243][T10064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1001.453404][T10064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1001.464479][T10064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1001.485911][T10064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1001.501336][T10064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1002.162454][T10250] loop7: detected capacity change from 0 to 512 [ 1002.183139][T10250] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1002.202154][T10250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1002.322112][T10250] System zones: 1-12 [ 1002.384831][T10250] EXT4-fs (loop7): 1 orphan inode deleted [ 1002.391047][T10250] EXT4-fs (loop7): 1 truncate cleaned up [ 1002.399524][T10250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.051543][ T5859] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1003.148756][ T9593] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.293636][ T5859] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1003.303474][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.313908][ T5859] usb 2-1: Product: syz [ 1003.318297][ T5859] usb 2-1: Manufacturer: syz [ 1003.323762][ T5859] usb 2-1: SerialNumber: syz [ 1003.494088][ T5859] usb 2-1: config 0 descriptor?? [ 1003.582058][T10064] Bluetooth: hci3: command tx timeout [ 1003.932455][ T5859] usb 2-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 1004.011510][ T30] audit: type=1326 audit(1750987256.563:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566938e929 code=0x7fc00000 [ 1004.135116][T10241] chnl_net:caif_netlink_parms(): no params data found [ 1004.168498][ T5859] usb 2-1: no permanent extended address found, random address set [ 1004.178423][ T5859] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1004.187261][ T5859] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1004.383652][ T5859] usb 2-1: USB disconnect, device number 5 [ 1004.506463][ T30] audit: type=1326 audit(1750987257.063:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f566938e929 code=0x7fc00000 [ 1004.528873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.536173][ T30] audit: type=1326 audit(1750987257.063:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566938e929 code=0x7fc00000 [ 1004.560017][ T30] audit: type=1326 audit(1750987257.063:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566938e929 code=0x7fc00000 [ 1004.589167][ T30] audit: type=1326 audit(1750987257.063:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566938e929 code=0x7fc00000 [ 1004.611628][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.620080][ T30] audit: type=1326 audit(1750987257.063:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566938e929 code=0x7fc00000 [ 1004.642590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.086277][ T3983] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.346508][ T3983] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.578758][ T3983] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.673974][T10064] Bluetooth: hci3: command tx timeout [ 1005.887843][ T3983] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.143083][T10282] fuse: Bad value for 'fd' [ 1006.821599][ T3983] bridge_slave_1: left allmulticast mode [ 1006.827611][ T3983] bridge_slave_1: left promiscuous mode [ 1006.835817][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.869690][T10289] loop1: detected capacity change from 0 to 64 [ 1006.913371][ T3983] bridge_slave_0: left allmulticast mode [ 1006.930361][ T3983] bridge_slave_0: left promiscuous mode [ 1006.937314][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.441232][ T5854] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1007.509849][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.610279][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.636906][ T3983] bond0 (unregistering): Released all slaves [ 1007.728292][ T5854] usb 8-1: device descriptor read/64, error -71 [ 1007.747254][T10064] Bluetooth: hci3: command tx timeout [ 1007.782655][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.790342][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.798840][T10241] bridge_slave_0: entered allmulticast mode [ 1007.807297][T10241] bridge_slave_0: entered promiscuous mode [ 1008.017700][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.025417][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.033285][T10241] bridge_slave_1: entered allmulticast mode [ 1008.045736][T10241] bridge_slave_1: entered promiscuous mode [ 1008.112496][ T5854] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1008.323119][ T5854] usb 8-1: device descriptor read/64, error -71 [ 1008.445689][ T5854] usb usb8-port1: attempt power cycle [ 1008.830627][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.901681][ T5854] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1008.991104][ T3983] hsr_slave_0: left promiscuous mode [ 1009.013003][ T5854] usb 8-1: device descriptor read/8, error -71 [ 1009.020482][ T3983] hsr_slave_1: left promiscuous mode [ 1009.032849][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.040561][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.077366][ T8966] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1009.121055][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.128917][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.177109][ T3983] veth1_macvtap: left promiscuous mode [ 1009.183143][ T3983] veth0_macvtap: left promiscuous mode [ 1009.189140][ T3983] veth1_vlan: left promiscuous mode [ 1009.194944][ T3983] veth0_vlan: left promiscuous mode [ 1009.276968][ T5854] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1009.327413][ T5854] usb 8-1: device descriptor read/8, error -71 [ 1009.351735][ T8966] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1009.361154][ T8966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.369411][ T8966] usb 9-1: Product: syz [ 1009.375496][ T8966] usb 9-1: Manufacturer: syz [ 1009.380324][ T8966] usb 9-1: SerialNumber: syz [ 1009.453724][ T5854] usb usb8-port1: unable to enumerate USB device [ 1009.669000][ T8966] usb 9-1: config 0 descriptor?? [ 1009.859626][T10064] Bluetooth: hci3: command tx timeout [ 1010.142926][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 1010.253027][ T8966] usb 9-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 1010.289875][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 1010.586381][ T8966] usb 9-1: no permanent extended address found, random address set [ 1010.596538][ T8966] usb 9-1: atusb_probe: initialization failed, error = -524 [ 1010.606418][ T8966] atusb 9-1:0.0: probe with driver atusb failed with error -524 [ 1010.850498][ T8966] usb 9-1: USB disconnect, device number 4 [ 1010.919395][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.429536][T10241] team0: Port device team_slave_0 added [ 1011.461323][T10241] team0: Port device team_slave_1 added [ 1011.874973][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.882352][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.909045][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.990380][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.997762][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.024674][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.052442][T10330] fuse: Bad value for 'fd' [ 1012.401019][T10335] loop7: detected capacity change from 0 to 64 [ 1012.607870][T10241] hsr_slave_0: entered promiscuous mode [ 1012.617901][T10241] hsr_slave_1: entered promiscuous mode [ 1014.551374][ T8966] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1014.811976][ T8966] usb 8-1: device descriptor read/64, error -71 [ 1015.091313][ T8966] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1015.452400][ T8966] usb 8-1: device descriptor read/64, error -71 [ 1015.474487][T10241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1015.500084][T10241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1015.595993][ T8966] usb usb8-port1: attempt power cycle [ 1015.611150][T10241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1015.737335][T10241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1016.005459][ T8966] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1016.056571][ T30] audit: type=1326 audit(1750987268.603:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.4.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6fad8e929 code=0x0 [ 1016.084642][ T8966] usb 8-1: device descriptor read/8, error -71 [ 1016.372626][ T8966] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1016.440144][ T8966] usb 8-1: device descriptor read/8, error -71 [ 1016.558346][ T8966] usb usb8-port1: unable to enumerate USB device [ 1016.667525][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.874052][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.967008][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.974718][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.043811][T10382] fuse: Unknown parameter '0x0000000000000004' [ 1017.215022][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.222616][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.628726][T10389] loop1: detected capacity change from 0 to 64 [ 1022.661380][ T5855] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1022.841752][ T5855] usb 8-1: device descriptor read/64, error -71 [ 1023.385058][T10410] loop4: detected capacity change from 0 to 32768 [ 1023.406345][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.413192][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.465791][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.483880][T10410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.784 (10410) [ 1023.515845][T10410] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1023.526348][T10410] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 1023.535450][T10410] BTRFS info (device loop4): disk space caching is enabled [ 1023.542866][T10410] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1023.621681][ T5855] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1023.800063][T10410] BTRFS info (device loop4): rebuilding free space tree [ 1023.843007][T10410] BTRFS info (device loop4): disabling free space tree [ 1023.850128][T10410] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1023.860106][T10410] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1023.920431][ T5855] usb 8-1: device descriptor read/64, error -71 [ 1024.206433][ T5855] usb usb8-port1: attempt power cycle [ 1024.431759][ T9757] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1024.636616][ T30] audit: type=1326 audit(1750987277.143:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x0 [ 1024.719304][T10241] veth0_vlan: entered promiscuous mode [ 1024.786376][ T5855] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1024.838246][ T5855] usb 8-1: device descriptor read/8, error -71 [ 1024.993075][T10241] veth1_vlan: entered promiscuous mode [ 1025.141164][ T5855] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1025.214670][ T5855] usb 8-1: device descriptor read/8, error -71 [ 1025.800605][ T5855] usb usb8-port1: unable to enumerate USB device [ 1027.585722][T10241] veth0_macvtap: entered promiscuous mode [ 1027.817377][T10241] veth1_macvtap: entered promiscuous mode [ 1027.918180][T10444] fuse: Unknown parameter '0x0000000000000004' [ 1028.158921][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.241581][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.327443][T10241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.338103][T10241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.348399][T10241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.357612][T10241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.378155][ T5855] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1028.562860][ T5855] usb 5-1: device descriptor read/64, error -71 [ 1028.853015][ T5855] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1029.091269][ T5855] usb 5-1: device descriptor read/64, error -71 [ 1029.158253][T10458] loop1: detected capacity change from 0 to 64 [ 1029.203351][ T5855] usb usb5-port1: attempt power cycle [ 1029.621867][ T5855] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1029.711947][ T5855] usb 5-1: device descriptor read/8, error -71 [ 1029.973309][ T5855] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1030.062677][ T5855] usb 5-1: device descriptor read/8, error -71 [ 1030.208541][ T5855] usb usb5-port1: unable to enumerate USB device [ 1032.942902][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1032.955399][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.022121][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.046212][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.077465][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.101661][ T5812] Bluetooth: hci3: command 0x0405 tx timeout [ 1033.755157][T10478] loop1: detected capacity change from 0 to 32768 [ 1033.825976][T10478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.795 (10478) [ 1033.869943][T10478] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1033.880412][T10478] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 1033.889589][T10478] BTRFS info (device loop1): disk space caching is enabled [ 1033.897137][T10478] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1034.344759][T10478] BTRFS info (device loop1): rebuilding free space tree [ 1034.379970][T10478] BTRFS info (device loop1): disabling free space tree [ 1034.389573][T10478] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1034.399561][T10478] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1034.968323][ T9637] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1035.069046][ T30] audit: type=1326 audit(1750987287.623:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.4.796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6fad8e929 code=0x0 [ 1035.183309][ T5812] Bluetooth: hci1: command tx timeout [ 1036.205802][T10515] fuse: Unknown parameter '0x0000000000000004' [ 1036.361434][ T5855] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1036.370416][T10473] chnl_net:caif_netlink_parms(): no params data found [ 1036.585643][ T5855] usb 2-1: device descriptor read/64, error -71 [ 1036.891152][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1037.084022][ T5855] usb 2-1: device descriptor read/64, error -71 [ 1037.228009][ T5855] usb usb2-port1: attempt power cycle [ 1037.271111][ T5812] Bluetooth: hci1: command tx timeout [ 1037.658553][ T5855] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1037.753616][ T5855] usb 2-1: device descriptor read/8, error -71 [ 1037.820155][ T4077] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.022098][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1038.027196][ T4077] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.745420][ T5855] usb 2-1: device descriptor read/8, error -71 [ 1039.323394][ T4077] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.347258][ T5804] Bluetooth: hci1: command tx timeout [ 1039.720323][ T5855] usb usb2-port1: unable to enumerate USB device [ 1039.883350][ T4077] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.486172][T10540] loop1: detected capacity change from 0 to 64 [ 1040.549958][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.573697][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.581802][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.589538][T10473] bridge_slave_0: entered allmulticast mode [ 1040.599166][T10473] bridge_slave_0: entered promiscuous mode [ 1040.984009][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.992209][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.000102][T10473] bridge_slave_1: entered allmulticast mode [ 1041.052272][T10473] bridge_slave_1: entered promiscuous mode [ 1041.430153][ T5812] Bluetooth: hci1: command tx timeout [ 1041.569620][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.581704][ T4077] bridge_slave_1: left allmulticast mode [ 1041.587623][ T4077] bridge_slave_1: left promiscuous mode [ 1041.594412][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.617917][ T4077] bridge_slave_0: left allmulticast mode [ 1041.624163][ T4077] bridge_slave_0: left promiscuous mode [ 1041.633003][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.011398][ T7108] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1042.220593][ T7108] usb 5-1: device descriptor read/64, error -71 [ 1042.442513][ T4077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.497361][ T7108] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1042.520364][ T4077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.574590][ T4077] bond0 (unregistering): Released all slaves [ 1042.685224][ T7108] usb 5-1: device descriptor read/64, error -71 [ 1042.723301][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.819973][ T7108] usb usb5-port1: attempt power cycle [ 1043.282546][ T7108] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1043.343571][ T7108] usb 5-1: device descriptor read/8, error -71 [ 1043.423675][T10473] team0: Port device team_slave_0 added [ 1044.043724][T10557] loop1: detected capacity change from 0 to 32768 [ 1044.100536][T10473] team0: Port device team_slave_1 added [ 1044.118754][T10557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.806 (10557) [ 1044.197534][T10557] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1044.211163][T10557] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 1044.221180][T10557] BTRFS info (device loop1): disk space caching is enabled [ 1044.228549][T10557] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1044.245487][ T7108] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1044.312302][ T7108] usb 5-1: device descriptor read/8, error -71 [ 1044.456314][ T7108] usb usb5-port1: unable to enumerate USB device [ 1044.509644][T10557] BTRFS info (device loop1): rebuilding free space tree [ 1044.588350][T10557] BTRFS info (device loop1): disabling free space tree [ 1044.595801][T10557] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1044.607491][T10557] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1044.863308][ T30] audit: type=1800 audit(1750987297.403:25): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.806" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 1045.061388][ T4077] hsr_slave_0: left promiscuous mode [ 1045.135907][ T4077] hsr_slave_1: left promiscuous mode [ 1045.144718][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.152601][ T4077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.311694][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.324251][ T4077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.481790][ T9637] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1045.530445][ T4077] veth1_macvtap: left promiscuous mode [ 1045.536645][ T4077] veth0_macvtap: left promiscuous mode [ 1045.542772][ T4077] veth1_vlan: left promiscuous mode [ 1045.548365][ T4077] veth0_vlan: left promiscuous mode [ 1045.952504][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.810'. [ 1046.231482][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.411589][ T7108] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1046.711489][T10596] fuse: Unknown parameter '0x0000000000000004' [ 1046.721145][ T7108] usb 5-1: Using ep0 maxpacket: 16 [ 1047.483849][ T4077] team0 (unregistering): Port device team_slave_1 removed [ 1048.470370][ T4077] team0 (unregistering): Port device team_slave_0 removed [ 1049.890125][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.897950][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.928404][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.951539][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.958900][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.988970][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.156336][T10604] netlink: 36 bytes leftover after parsing attributes in process `syz.7.812'. [ 1051.165883][T10473] hsr_slave_0: entered promiscuous mode [ 1051.175714][T10473] hsr_slave_1: entered promiscuous mode [ 1051.184185][T10473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.192050][T10473] Cannot create hsr debugfs directory [ 1051.249206][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.260163][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.379369][T10606] loop1: detected capacity change from 0 to 64 [ 1051.873332][ T7108] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1051.882841][ T7108] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1051.891348][ T7108] usb 5-1: Product: syz [ 1051.895693][ T7108] usb 5-1: Manufacturer: syz [ 1051.923873][ T3594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.932326][ T3594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.019840][ T7108] usb 5-1: config 0 descriptor?? [ 1052.105384][ T7108] usb 5-1: can't set config #0, error -32 [ 1052.297589][T10610] 9pnet_fd: Insufficient options for proto=fd [ 1053.915754][ T8966] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1054.155322][ T8966] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1054.167355][ T8966] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1054.178278][ T8966] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1054.188019][ T8966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.417123][T10620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1054.449467][ T8966] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1055.405428][T10625] loop1: detected capacity change from 0 to 32768 [ 1055.418796][ T8966] usb 3-1: USB disconnect, device number 6 [ 1055.444957][T10625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.817 (10625) [ 1055.490016][T10625] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1055.502484][T10625] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 1055.519237][T10625] BTRFS info (device loop1): disk space caching is enabled [ 1055.526869][T10625] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1055.571453][T10473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1055.632781][T10473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1055.684989][T10473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1055.821614][T10473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1055.855543][ T9804] udevd[9804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.995750][T10625] BTRFS info (device loop1): rebuilding free space tree [ 1056.025275][T10625] BTRFS info (device loop1): disabling free space tree [ 1056.032762][T10625] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1056.042694][T10625] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1056.331044][ T30] audit: type=1800 audit(1750987308.713:26): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.817" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 1056.658146][ T9637] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1057.081738][T10652] fuse: Unknown parameter '0x0000000000000004' [ 1057.212840][ T8966] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1057.432967][T10649] cgroup: Invalid name [ 1057.433011][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.819'. [ 1059.339552][T10473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.019715][T10473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.102347][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 1061.147422][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.155078][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.285665][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.293306][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.871436][ T8966] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1061.879824][ T8966] usb 8-1: no configurations [ 1061.884939][ T8966] usb 8-1: can't read configurations, error -22 [ 1064.648447][T10681] loop7: detected capacity change from 0 to 32768 [ 1064.733890][T10681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.828 (10681) [ 1064.789564][T10681] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1064.801269][T10681] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 1064.810679][T10681] BTRFS info (device loop7): disk space caching is enabled [ 1064.818176][T10681] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1065.057410][T10681] BTRFS info (device loop7): rebuilding free space tree [ 1065.104150][T10681] BTRFS info (device loop7): disabling free space tree [ 1065.111403][T10681] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1065.121320][T10681] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1065.199349][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1065.212216][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1065.231930][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1065.301930][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1065.555338][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1065.571853][ T30] audit: type=1800 audit(1750987317.913:27): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.828" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 1065.873914][ T9593] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1067.713794][T10708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.901315][T10689] chnl_net:caif_netlink_parms(): no params data found [ 1070.328232][T10718] fuse: Unknown parameter '0x0000000000000004' [ 1073.512394][T10473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.528919][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.7.832'. [ 1074.393911][T10473] veth0_vlan: entered promiscuous mode [ 1074.615256][T10473] veth1_vlan: entered promiscuous mode [ 1075.294059][T10473] veth0_macvtap: entered promiscuous mode [ 1075.431917][T10473] veth1_macvtap: entered promiscuous mode [ 1076.028102][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.043504][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.051507][T10689] bridge_slave_0: entered allmulticast mode [ 1076.059880][T10689] bridge_slave_0: entered promiscuous mode [ 1076.083278][T10473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.254755][T10473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.269638][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.277243][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.285106][T10689] bridge_slave_1: entered allmulticast mode [ 1076.293619][T10689] bridge_slave_1: entered promiscuous mode [ 1076.487643][T10473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.497208][T10473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.508300][T10473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.517738][T10473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.291873][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.649869][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.827332][T10689] team0: Port device team_slave_0 added [ 1079.134057][T10689] team0: Port device team_slave_1 added [ 1081.312594][T10758] fuse: Unknown parameter 'fd0x0000000000000004' [ 1081.502856][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.510142][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.536752][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.574261][T10760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.842'. [ 1081.749066][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.756583][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.784303][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.401522][ T7108] usb 5-1: USB disconnect, device number 19 [ 1082.518463][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.017124][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.187273][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1083.226367][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1083.241577][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1083.258830][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1083.322354][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1083.379015][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.434862][T10689] hsr_slave_0: entered promiscuous mode [ 1083.446344][T10689] hsr_slave_1: entered promiscuous mode [ 1083.454056][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1083.461890][T10689] Cannot create hsr debugfs directory [ 1083.652470][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.635260][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.645202][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.712177][ T12] bridge_slave_1: left allmulticast mode [ 1084.718044][ T12] bridge_slave_1: left promiscuous mode [ 1084.724425][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.741601][ T12] bridge_slave_0: left allmulticast mode [ 1084.747463][ T12] bridge_slave_0: left promiscuous mode [ 1084.753822][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.478581][ T5812] Bluetooth: hci2: command tx timeout [ 1085.525194][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.564363][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.584072][ T12] bond0 (unregistering): Released all slaves [ 1086.611085][ T12] hsr_slave_0: left promiscuous mode [ 1086.670033][ T12] hsr_slave_1: left promiscuous mode [ 1086.679088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.689682][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.784358][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.793625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.881789][ T12] veth1_macvtap: left promiscuous mode [ 1086.887705][ T12] veth0_macvtap: left promiscuous mode [ 1086.896092][ T12] veth1_vlan: left promiscuous mode [ 1086.901997][ T12] veth0_vlan: left promiscuous mode [ 1087.561995][ T5812] Bluetooth: hci2: command tx timeout [ 1089.702078][ T5812] Bluetooth: hci2: command tx timeout [ 1090.636700][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1090.753325][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1090.952853][T10805] fuse: Unknown parameter 'fd0x0000000000000004' [ 1091.754973][ T5812] Bluetooth: hci2: command tx timeout [ 1091.901509][T10773] chnl_net:caif_netlink_parms(): no params data found [ 1092.890344][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1092.922311][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1092.938571][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1092.960086][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1092.981512][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1093.440930][T10689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1093.602659][T10689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1093.733051][T10689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1093.923342][T10689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1094.442867][ T8966] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1094.701921][ T8966] usb 8-1: Using ep0 maxpacket: 16 [ 1094.722525][ T8966] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1094.731981][ T8966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.740135][ T8966] usb 8-1: Product: syz [ 1094.744878][ T8966] usb 8-1: Manufacturer: syz [ 1094.749603][ T8966] usb 8-1: SerialNumber: syz [ 1094.917024][ T8966] usb 8-1: config 0 descriptor?? [ 1095.035848][ T8966] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1095.045692][ T8966] usb 8-1: Detected FT-X [ 1095.101680][ T5812] Bluetooth: hci6: command tx timeout [ 1095.202781][ T8966] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1095.330525][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.339162][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.347466][T10773] bridge_slave_0: entered allmulticast mode [ 1095.356668][T10773] bridge_slave_0: entered promiscuous mode [ 1095.425720][ T8966] ftdi_sio 8-1:0.0: GPIO initialisation failed: -32 [ 1095.497893][ T8966] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1095.614922][ T8966] usb 8-1: USB disconnect, device number 21 [ 1095.638959][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.646642][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.654279][T10773] bridge_slave_1: entered allmulticast mode [ 1095.662832][T10773] bridge_slave_1: entered promiscuous mode [ 1095.700461][ T8966] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1095.713053][ T8966] ftdi_sio 8-1:0.0: device disconnected [ 1096.164181][T10817] chnl_net:caif_netlink_parms(): no params data found [ 1096.464995][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.666921][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.191244][ T5812] Bluetooth: hci6: command tx timeout [ 1097.280682][ T7524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.386608][T10773] team0: Port device team_slave_0 added [ 1097.533181][ T7524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.704016][T10773] team0: Port device team_slave_1 added [ 1098.016859][ T7524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.339053][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.346394][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.373992][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.465850][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.567494][ T7524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.817455][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.825098][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.851815][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.019556][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.027385][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.035101][T10817] bridge_slave_0: entered allmulticast mode [ 1099.043702][T10817] bridge_slave_0: entered promiscuous mode [ 1099.143440][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.856'. [ 1099.160596][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.247628][T10845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1099.261520][ T5812] Bluetooth: hci6: command tx timeout [ 1099.346002][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.353913][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.362593][T10817] bridge_slave_1: entered allmulticast mode [ 1099.374174][T10817] bridge_slave_1: entered promiscuous mode [ 1099.572677][T10773] hsr_slave_0: entered promiscuous mode [ 1099.581636][T10773] hsr_slave_1: entered promiscuous mode [ 1099.592013][T10773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1099.599689][T10773] Cannot create hsr debugfs directory [ 1099.624265][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.632053][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.913015][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.920624][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.062660][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.273301][ T7524] bridge_slave_1: left allmulticast mode [ 1100.279447][ T7524] bridge_slave_1: left promiscuous mode [ 1100.287026][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.903708][ T7524] bridge_slave_0: left allmulticast mode [ 1100.909720][ T7524] bridge_slave_0: left promiscuous mode [ 1100.923888][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.835443][ T5812] Bluetooth: hci6: command tx timeout [ 1103.064903][T10858] fuse: Unknown parameter 'fd0x0000000000000004' [ 1103.896816][ T7524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.944151][ T7524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.987802][ T7524] bond0 (unregistering): Released all slaves [ 1104.042612][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.628551][ T7524] hsr_slave_0: left promiscuous mode [ 1104.670962][ T7524] hsr_slave_1: left promiscuous mode [ 1104.679102][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.687159][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.734527][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.742356][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.785117][ T7524] veth1_macvtap: left promiscuous mode [ 1104.791161][ T7524] veth0_macvtap: left promiscuous mode [ 1104.797113][ T7524] veth1_vlan: left promiscuous mode [ 1104.802736][ T7524] veth0_vlan: left promiscuous mode [ 1105.304899][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'. [ 1106.220543][ T7524] team0 (unregistering): Port device team_slave_1 removed [ 1106.323468][ T7524] team0 (unregistering): Port device team_slave_0 removed [ 1106.517447][T10817] team0: Port device team_slave_0 added [ 1106.877936][T10817] team0: Port device team_slave_1 added [ 1107.413709][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.420996][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.447401][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.703005][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.710235][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.737420][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.974461][T10882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1108.720022][T10817] hsr_slave_0: entered promiscuous mode [ 1108.784641][T10817] hsr_slave_1: entered promiscuous mode [ 1108.793350][T10817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.801615][T10817] Cannot create hsr debugfs directory [ 1109.382175][ T3495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.645656][ T3495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.850089][ T3495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.157784][ T3495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.306040][T10773] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1110.425130][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.485110][T10773] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1110.587298][T10773] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1110.822017][T10915] netlink: 16 bytes leftover after parsing attributes in process `syz.7.872'. [ 1110.920350][T10773] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1111.237346][ T3495] bridge_slave_1: left allmulticast mode [ 1111.243443][ T3495] bridge_slave_1: left promiscuous mode [ 1111.250108][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.358458][ T3495] bridge_slave_0: left allmulticast mode [ 1111.369275][ T3495] bridge_slave_0: left promiscuous mode [ 1111.376063][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.924245][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.008695][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.036338][ T3495] bond0 (unregistering): Released all slaves [ 1112.302336][T10926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1113.306097][ T3495] hsr_slave_0: left promiscuous mode [ 1113.325061][ T3495] hsr_slave_1: left promiscuous mode [ 1113.333723][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.343988][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.373845][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.381845][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.419320][ T3495] veth1_macvtap: left promiscuous mode [ 1113.426132][ T3495] veth0_macvtap: left promiscuous mode [ 1113.432254][ T3495] veth1_vlan: left promiscuous mode [ 1113.437854][ T3495] veth0_vlan: left promiscuous mode [ 1114.457435][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 1114.480169][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 1115.016451][T10689] veth0_vlan: entered promiscuous mode [ 1115.287773][T10689] veth1_vlan: entered promiscuous mode [ 1115.454799][T10817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1115.542418][T10689] veth0_macvtap: entered promiscuous mode [ 1115.595431][T10817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1115.708311][T10817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1115.757099][T10817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1115.804198][T10689] veth1_macvtap: entered promiscuous mode [ 1115.877710][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.113680][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.156059][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.226463][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.297337][T10689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.309487][T10689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.318734][T10689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.328287][T10689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.377217][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.384834][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.484854][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.492457][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.345330][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.591949][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.680710][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.688364][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.853495][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.861201][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.365606][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.395947][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.540591][T10996] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1120.555756][T10996] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1120.561908][T10996] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1120.561908][T10996] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1120.582708][T10996] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1120.594661][T10996] CUSE: DEVNAME unspecified [ 1120.753029][ T30] audit: type=1326 audit(1750987373.303:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23adb8e929 code=0x0 [ 1121.045418][T10817] veth0_vlan: entered promiscuous mode [ 1121.218251][T10817] veth1_vlan: entered promiscuous mode [ 1121.630917][T10817] veth0_macvtap: entered promiscuous mode [ 1121.743267][T10817] veth1_macvtap: entered promiscuous mode [ 1121.975911][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.133574][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.269027][T10817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.278515][T10817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.288758][T10817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.298502][T10817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.436344][T10773] veth0_vlan: entered promiscuous mode [ 1122.584183][T10773] veth1_vlan: entered promiscuous mode [ 1123.007409][T10773] veth0_macvtap: entered promiscuous mode [ 1123.126223][T10773] veth1_macvtap: entered promiscuous mode [ 1123.407721][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.508811][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.663457][T10773] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.672467][T10773] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.681475][T10773] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.690378][T10773] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.833827][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1123.843709][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1123.863305][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1123.936295][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1123.956491][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1126.081312][ T5804] Bluetooth: hci1: command tx timeout [ 1126.621898][T11023] chnl_net:caif_netlink_parms(): no params data found [ 1127.137848][ T3983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.376837][ T3983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.615692][ T3983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.815672][ T3983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.163669][ T5804] Bluetooth: hci1: command tx timeout [ 1128.713017][ T3983] bridge_slave_1: left allmulticast mode [ 1128.719463][ T3983] bridge_slave_1: left promiscuous mode [ 1128.729748][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.838010][ T3983] bridge_slave_0: left allmulticast mode [ 1128.846449][ T3983] bridge_slave_0: left promiscuous mode [ 1128.853399][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.242693][ T5804] Bluetooth: hci1: command tx timeout [ 1130.589897][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.687288][T11077] syz.1.894 (11077): drop_caches: 2 [ 1130.722515][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.846816][ T3983] bond0 (unregistering): Released all slaves [ 1130.940286][T11023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.948208][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.962243][T11023] bridge_slave_0: entered allmulticast mode [ 1130.975212][T11023] bridge_slave_0: entered promiscuous mode [ 1131.250686][ T3983] hsr_slave_0: left promiscuous mode [ 1131.283594][ T3983] hsr_slave_1: left promiscuous mode [ 1131.292466][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.300235][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.349375][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.357441][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.497338][ T3983] veth1_macvtap: left promiscuous mode [ 1131.503571][ T3983] veth0_macvtap: left promiscuous mode [ 1131.509477][ T3983] veth1_vlan: left promiscuous mode [ 1131.515234][ T3983] veth0_vlan: left promiscuous mode [ 1132.295148][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.321755][ T5812] Bluetooth: hci1: command tx timeout [ 1132.341783][T10064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.367513][T10064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.378763][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 1132.407457][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 1132.554915][T10064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.569273][T10064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1132.861148][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.872474][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.881867][T11023] bridge_slave_1: entered allmulticast mode [ 1132.895057][T11023] bridge_slave_1: entered promiscuous mode [ 1133.723498][T11023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.767794][T11023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.885274][T11023] team0: Port device team_slave_0 added [ 1133.974173][T11023] team0: Port device team_slave_1 added [ 1134.409186][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.417339][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.443962][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.590440][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.597802][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.626263][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.714357][T10064] Bluetooth: hci0: command tx timeout [ 1134.937130][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.947306][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.170725][T11023] hsr_slave_0: entered promiscuous mode [ 1135.179598][T11023] hsr_slave_1: entered promiscuous mode [ 1135.424375][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.435594][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.813867][T11093] chnl_net:caif_netlink_parms(): no params data found [ 1136.500086][T11130] loop0: detected capacity change from 0 to 512 [ 1136.597277][T11130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1136.711805][T11130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1136.732743][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.741667][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.794337][T10064] Bluetooth: hci0: command tx timeout [ 1136.851621][T11130] System zones: 1-12 [ 1136.921147][T11130] EXT4-fs (loop0): 1 orphan inode deleted [ 1136.927311][T11130] EXT4-fs (loop0): 1 truncate cleaned up [ 1136.936306][T11130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.945798][ T3594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.957770][ T3594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.101442][T11130] loop0: detected capacity change from 512 to 0 [ 1137.118975][T11137] syz.0.790: attempt to access beyond end of device [ 1137.118975][T11137] loop0: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 1137.133742][T11137] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.790: reading directory lblock 0 [ 1137.146829][T11137] syz.0.790: attempt to access beyond end of device [ 1137.146829][T11137] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1137.161288][T11137] buffer_io_error: 9 callbacks suppressed [ 1137.161359][T11137] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1137.180198][T11137] EXT4-fs (loop0): I/O error while writing superblock [ 1137.869498][T10817] syz-executor: attempt to access beyond end of device [ 1137.869498][T10817] loop0: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 1137.884351][T10817] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 1137.901393][T10817] syz-executor: attempt to access beyond end of device [ 1137.901393][T10817] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1137.902595][T11135] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1137.916800][T10817] syz-executor: attempt to access beyond end of device [ 1137.916800][T10817] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 1137.945999][T10817] syz-executor: attempt to access beyond end of device [ 1137.945999][T10817] loop0: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 1137.951557][ T5855] kworker/0:3: attempt to access beyond end of device [ 1137.951557][ T5855] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1137.961762][T10817] EXT4-fs error (device loop0): ext4_get_inode_loc:4930: inode #2: block 5: comm syz-executor: unable to read itable block [ 1137.973357][ T5855] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1137.973457][ T5855] EXT4-fs (loop0): I/O error while writing superblock [ 1138.006976][T10817] syz-executor: attempt to access beyond end of device [ 1138.006976][T10817] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1138.023952][T10817] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1138.032601][T10817] EXT4-fs (loop0): I/O error while writing superblock [ 1138.039633][T10817] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: IO failure [ 1138.048837][T10817] syz-executor: attempt to access beyond end of device [ 1138.048837][T10817] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1138.062723][T10817] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1138.072434][T10817] EXT4-fs (loop0): I/O error while writing superblock [ 1138.079506][T10817] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 1138.097793][T10817] syz-executor: attempt to access beyond end of device [ 1138.097793][T10817] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1138.112790][T10817] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1138.121519][T10817] EXT4-fs (loop0): I/O error while writing superblock [ 1138.166044][T11023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1138.678216][T11023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1138.872700][T10064] Bluetooth: hci0: command tx timeout [ 1138.892145][ T4035] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4915: inode #2: block 5: comm kworker/u8:22: unable to read itable block [ 1138.907418][ T4035] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1138.917866][ T4035] EXT4-fs (loop0): I/O error while writing superblock [ 1139.905261][T10817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.891618][T11023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1141.894937][T10817] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1141.903638][T10817] EXT4-fs (loop0): I/O error while writing superblock [ 1141.911933][T10064] Bluetooth: hci0: command tx timeout [ 1144.121998][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.129484][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.144347][T11093] bridge_slave_0: entered allmulticast mode [ 1144.152778][T11093] bridge_slave_0: entered promiscuous mode [ 1144.290402][T11023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1144.616563][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.625029][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.633595][T11093] bridge_slave_1: entered allmulticast mode [ 1144.649803][T11093] bridge_slave_1: entered promiscuous mode [ 1144.764326][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.190246][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.490074][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.592943][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.728028][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.785554][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.013691][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.020484][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.171317][T11093] team0: Port device team_slave_0 added [ 1146.402801][T11093] team0: Port device team_slave_1 added [ 1146.423056][ T48] bridge_slave_1: left allmulticast mode [ 1146.428930][ T48] bridge_slave_1: left promiscuous mode [ 1146.435779][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.539400][ T48] bridge_slave_0: left allmulticast mode [ 1146.545567][ T48] bridge_slave_0: left promiscuous mode [ 1146.552444][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.062995][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.089031][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.108599][ T48] bond0 (unregistering): Released all slaves [ 1147.560447][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.567986][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.595425][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.813958][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.823917][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.852161][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.000254][ T48] hsr_slave_0: left promiscuous mode [ 1148.017420][ T48] hsr_slave_1: left promiscuous mode [ 1148.028644][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.036414][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.118403][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.128664][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.178132][ T48] veth1_macvtap: left promiscuous mode [ 1148.184201][ T48] veth0_macvtap: left promiscuous mode [ 1148.190125][ T48] veth1_vlan: left promiscuous mode [ 1148.196180][ T48] veth0_vlan: left promiscuous mode [ 1148.903302][T11175] netlink: 'syz.1.909': attribute type 11 has an invalid length. [ 1148.906174][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1149.045038][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1149.790848][T11023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.226498][T11093] hsr_slave_0: entered promiscuous mode [ 1150.236398][T11093] hsr_slave_1: entered promiscuous mode [ 1150.245000][T11093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1150.252943][T11093] Cannot create hsr debugfs directory [ 1150.502150][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1150.532318][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1150.551786][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1150.567026][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1150.579114][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1151.263268][T11023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.558444][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.566195][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.756490][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.764178][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.275794][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 1152.285196][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 1152.347997][ T5863] Process accounting resumed [ 1152.622268][ T5804] Bluetooth: hci3: command tx timeout [ 1154.079574][T11185] chnl_net:caif_netlink_parms(): no params data found [ 1154.749358][ T5804] Bluetooth: hci3: command tx timeout [ 1156.742980][T11218] netlink: 'syz.6.917': attribute type 11 has an invalid length. [ 1156.785485][ T5804] Bluetooth: hci3: command tx timeout [ 1157.326920][T11093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1157.522595][T11093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1157.584104][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.634497][T11093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1157.735022][T11093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1158.311154][ T5863] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1158.439389][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.448468][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.456448][T11185] bridge_slave_0: entered allmulticast mode [ 1158.465861][T11185] bridge_slave_0: entered promiscuous mode [ 1158.523256][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 1158.551592][T11023] veth0_vlan: entered promiscuous mode [ 1158.581423][ T5863] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1158.643503][ T5863] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1158.653073][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.661456][ T5863] usb 7-1: Product: syz [ 1158.665866][ T5863] usb 7-1: Manufacturer: syz [ 1158.670732][ T5863] usb 7-1: SerialNumber: syz [ 1158.703261][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.711906][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.719681][T11185] bridge_slave_1: entered allmulticast mode [ 1158.729364][T11185] bridge_slave_1: entered promiscuous mode [ 1158.822597][ T5863] usb 7-1: config 0 descriptor?? [ 1158.889256][ T5804] Bluetooth: hci3: command tx timeout [ 1159.148858][T11185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.191647][T11185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.272611][T11236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.921'. [ 1159.282100][T11236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.921'. [ 1159.352963][ T5863] Process accounting resumed [ 1159.447487][T11185] team0: Port device team_slave_0 added [ 1159.554622][T11185] team0: Port device team_slave_1 added [ 1160.026117][T11185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.034246][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.060692][T11185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.191261][T11023] veth1_vlan: entered promiscuous mode [ 1160.285494][T11185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.292808][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.323886][T11185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.574902][T11023] veth0_macvtap: entered promiscuous mode [ 1160.882090][T11023] veth1_macvtap: entered promiscuous mode [ 1160.961437][T11185] hsr_slave_0: entered promiscuous mode [ 1160.970016][T11185] hsr_slave_1: entered promiscuous mode [ 1160.978690][T11185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.986495][T11185] Cannot create hsr debugfs directory [ 1161.064886][T11023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.171979][T11023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.378733][T11023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.388111][T11023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.397353][T11023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.406363][T11023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.452019][ T7108] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1161.673597][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.714912][ T5855] usb 7-1: USB disconnect, device number 27 [ 1161.781256][ T7108] usb 2-1: Using ep0 maxpacket: 32 [ 1161.901470][ T7108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1161.947437][ T7108] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1161.958814][ T7108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.967968][ T7108] usb 2-1: Product: syz [ 1161.972559][ T7108] usb 2-1: Manufacturer: syz [ 1161.977435][ T7108] usb 2-1: SerialNumber: syz [ 1161.989069][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.114892][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.122463][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.173685][ T7108] usb 2-1: config 0 descriptor?? [ 1162.202732][ T7108] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.321445][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.329146][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.041806][T11258] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1163.938446][ T7108] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1165.334160][ T7108] usb 2-1: USB disconnect, device number 10 [ 1165.356446][T11264] netlink: 'syz.1.925': attribute type 11 has an invalid length. [ 1165.437167][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1165.575239][T11185] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1165.832742][T11185] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1165.877296][T11185] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1165.977674][T11185] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1168.027420][T11286] netlink: 32 bytes leftover after parsing attributes in process `syz.6.929'. [ 1168.036906][T11286] netlink: 32 bytes leftover after parsing attributes in process `syz.6.929'. [ 1168.046006][T11289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 1168.111557][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.138014][T11185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.179401][ T5882] Process accounting resumed [ 1168.235659][ T7524] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.545852][ T7524] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.888425][ T7524] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.003510][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.127954][ T7524] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.217582][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.225250][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.918613][ T7108] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1169.970978][ T30] audit: type=1326 audit(1750987422.513:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1169.984510][T11185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1169.993993][ T30] audit: type=1326 audit(1750987422.513:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.004481][T11185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1170.027111][ T30] audit: type=1326 audit(1750987422.513:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.027371][ T30] audit: type=1326 audit(1750987422.513:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.027626][ T30] audit: type=1326 audit(1750987422.513:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.091664][ T7524] bridge_slave_1: left allmulticast mode [ 1170.110471][ T30] audit: type=1326 audit(1750987422.513:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.110989][ T30] audit: type=1326 audit(1750987422.513:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.117331][ T7524] bridge_slave_1: left promiscuous mode [ 1170.138858][ T30] audit: type=1326 audit(1750987422.513:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.167720][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.169308][ T30] audit: type=1326 audit(1750987422.523:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.223891][ T30] audit: type=1326 audit(1750987422.523:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1170.282547][ T7524] bridge_slave_0: left allmulticast mode [ 1170.288688][ T7524] bridge_slave_0: left promiscuous mode [ 1170.295612][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.801254][ T7108] usb 2-1: Using ep0 maxpacket: 8 [ 1170.843245][ T7108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1170.852657][ T7108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.862647][ T7108] usb 2-1: Product: syz [ 1170.867075][ T7108] usb 2-1: Manufacturer: syz [ 1170.872650][ T7108] usb 2-1: SerialNumber: syz [ 1170.935709][ T7108] usb 2-1: config 0 descriptor?? [ 1171.014951][ T7524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.092038][ T7524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.111092][ T7524] bond0 (unregistering): Released all slaves [ 1171.147671][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.155438][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.293632][ T7108] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1171.497944][ T7108] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1171.863410][T11318] netlink: 'syz.6.934': attribute type 11 has an invalid length. [ 1172.137739][ T7524] hsr_slave_0: left promiscuous mode [ 1172.168124][ T7524] hsr_slave_1: left promiscuous mode [ 1172.176558][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.185464][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.234227][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.242344][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.317015][ T7524] veth1_macvtap: left promiscuous mode [ 1172.323116][ T7524] veth0_macvtap: left promiscuous mode [ 1172.329138][ T7524] veth1_vlan: left promiscuous mode [ 1172.336512][ T7524] veth0_vlan: left promiscuous mode [ 1172.681720][ T5863] usb 2-1: USB disconnect, device number 11 [ 1173.272618][ T7524] team0 (unregistering): Port device team_slave_1 removed [ 1173.299156][ T7524] team0 (unregistering): Port device team_slave_0 removed [ 1174.676024][T11185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.802980][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'. [ 1174.906075][T11093] veth0_vlan: entered promiscuous mode [ 1175.022654][T11093] veth1_vlan: entered promiscuous mode [ 1175.401936][T11093] veth0_macvtap: entered promiscuous mode [ 1175.517195][T11093] veth1_macvtap: entered promiscuous mode [ 1175.812841][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.995702][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.153803][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1176.153889][ T30] audit: type=1326 audit(1750987428.693:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.182844][ T30] audit: type=1326 audit(1750987428.693:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.206273][ T30] audit: type=1326 audit(1750987428.693:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.229033][ T30] audit: type=1326 audit(1750987428.693:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.251898][ T30] audit: type=1326 audit(1750987428.693:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.274717][ T30] audit: type=1326 audit(1750987428.693:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.297442][ T30] audit: type=1326 audit(1750987428.703:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.320334][ T30] audit: type=1326 audit(1750987428.703:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.343112][ T30] audit: type=1326 audit(1750987428.703:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.365836][ T30] audit: type=1326 audit(1750987428.703:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.1.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1176.619836][T11093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.629898][T11093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.639129][T11093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.648265][T11093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.052577][T11372] netlink: 'syz.1.942': attribute type 11 has an invalid length. [ 1177.531157][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.539240][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.856129][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.865287][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.707457][T11396] loop3: detected capacity change from 0 to 64 [ 1178.750423][T11185] veth0_vlan: entered promiscuous mode [ 1178.904158][T11185] veth1_vlan: entered promiscuous mode [ 1179.097973][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.947'. [ 1179.456801][T11185] veth0_macvtap: entered promiscuous mode [ 1179.537713][T11185] veth1_macvtap: entered promiscuous mode [ 1179.778503][T11185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.882172][T11185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.025207][T11185] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.034558][T11185] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.043832][T11185] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.053054][T11185] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.692678][ T7108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1180.881110][ T7108] usb 4-1: Using ep0 maxpacket: 8 [ 1180.908744][ T7108] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1180.917486][ T7108] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1180.927781][ T7108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1180.937957][ T7108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1180.948872][ T7108] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.962765][ T7108] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1180.972307][ T7108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.781829][ T7108] usb 4-1: usb_control_msg returned -32 [ 1182.787803][ T7108] usbtmc 4-1:16.0: can't read capabilities [ 1184.345351][ T7108] usb 4-1: USB disconnect, device number 3 [ 1185.860680][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.957'. [ 1186.387967][T11451] loop3: detected capacity change from 0 to 64 [ 1186.613922][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1186.613995][ T30] audit: type=1326 audit(1750987439.183:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.646184][ T30] audit: type=1326 audit(1750987439.183:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.794891][ T30] audit: type=1326 audit(1750987439.243:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.818133][ T30] audit: type=1326 audit(1750987439.243:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.842307][ T30] audit: type=1326 audit(1750987439.243:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.865633][ T30] audit: type=1326 audit(1750987439.243:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.888371][ T30] audit: type=1326 audit(1750987439.243:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.911124][ T30] audit: type=1326 audit(1750987439.243:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.935392][ T30] audit: type=1326 audit(1750987439.243:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1186.978803][ T30] audit: type=1326 audit(1750987439.243:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23adb8e929 code=0x7ffc0000 [ 1188.321077][ T7108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1188.501702][ T7108] usb 4-1: Using ep0 maxpacket: 8 [ 1188.541986][T11479] xt_socket: unknown flags 0x58 [ 1188.548498][ T7108] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1188.557739][ T7108] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1188.568094][ T7108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1188.579762][ T7108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1188.591593][ T7108] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1188.605390][ T7108] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1188.614784][ T7108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.038944][ T4077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.047276][ T4077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.156117][ T7108] usb 4-1: usb_control_msg returned -32 [ 1189.162312][ T7108] usbtmc 4-1:16.0: can't read capabilities [ 1189.202468][ T7108] usb 4-1: USB disconnect, device number 4 [ 1189.317652][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.326015][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.843992][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.967'. [ 1190.988587][T11502] kvm: kvm [11499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1191.073166][T11502] kvm: kvm [11499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1191.222334][T11502] kvm: kvm [11499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1192.826206][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.835066][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.255476][ T7524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.264020][ T7524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.406937][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1194.407021][ T30] audit: type=1326 audit(1750987446.963:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.442683][ T30] audit: type=1326 audit(1750987446.963:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.466440][ T30] audit: type=1326 audit(1750987446.963:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.489032][ T30] audit: type=1326 audit(1750987446.963:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.517080][ T30] audit: type=1326 audit(1750987446.973:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.541462][ T30] audit: type=1326 audit(1750987446.973:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.564351][ T30] audit: type=1326 audit(1750987446.973:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.587214][ T30] audit: type=1326 audit(1750987446.973:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.610020][ T30] audit: type=1326 audit(1750987446.973:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1194.642803][ T30] audit: type=1326 audit(1750987446.983:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11546 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1196.679245][T11569] netlink: 'syz.6.986': attribute type 14 has an invalid length. [ 1196.754372][T11569] netlink: 32 bytes leftover after parsing attributes in process `syz.6.986'. [ 1197.441931][ T5804] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11 [ 1199.795438][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.992'. [ 1200.321702][T11588] No control pipe specified [ 1201.369961][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1201.370035][ T30] audit: type=1326 audit(1750987453.933:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.403628][ T30] audit: type=1326 audit(1750987453.933:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.427140][ T30] audit: type=1326 audit(1750987453.943:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.449905][ T30] audit: type=1326 audit(1750987453.943:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.472929][ T30] audit: type=1326 audit(1750987453.953:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.498625][ T30] audit: type=1326 audit(1750987453.953:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.522494][ T30] audit: type=1326 audit(1750987453.953:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.545253][ T30] audit: type=1326 audit(1750987453.953:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.568331][ T30] audit: type=1326 audit(1750987453.953:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1201.594281][ T30] audit: type=1326 audit(1750987453.953:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1205.558255][T11608] loop9: detected capacity change from 0 to 64 [ 1206.432683][T11607] overlayfs: failed to resolve './file0': -2 [ 1206.478344][T11610] ceph: No mds server is up or the cluster is laggy [ 1206.486909][ T7108] libceph: connect (1)[c::]:6789 error -101 [ 1206.497531][ T7108] libceph: mon0 (1)[c::]:6789 connect error [ 1207.578923][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.586567][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1208.329442][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1003'. [ 1210.847000][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 1211.571285][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1211.571494][ T30] audit: type=1326 audit(1750987464.133:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.601359][ T30] audit: type=1326 audit(1750987464.133:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.627184][ T30] audit: type=1326 audit(1750987464.133:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.650547][ T30] audit: type=1326 audit(1750987464.133:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.673353][ T30] audit: type=1326 audit(1750987464.133:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.697197][ T30] audit: type=1326 audit(1750987464.143:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.722510][ T30] audit: type=1326 audit(1750987464.143:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.745973][ T30] audit: type=1326 audit(1750987464.143:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.768647][ T30] audit: type=1326 audit(1750987464.143:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1211.791413][ T30] audit: type=1326 audit(1750987464.143:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1214.644833][T11655] overlayfs: failed to resolve './file0': -2 [ 1215.834825][T11673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1017'. [ 1218.831019][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1218.831091][ T30] audit: type=1326 audit(1750987471.373:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1218.860564][ T30] audit: type=1326 audit(1750987471.373:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1218.888403][ T30] audit: type=1326 audit(1750987471.373:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1218.912803][ T30] audit: type=1326 audit(1750987471.373:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1218.936006][ T30] audit: type=1326 audit(1750987471.373:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1218.958998][ T30] audit: type=1326 audit(1750987471.373:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1218.982205][ T30] audit: type=1326 audit(1750987471.373:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1219.009319][ T30] audit: type=1326 audit(1750987471.373:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1219.033902][ T30] audit: type=1326 audit(1750987471.373:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1219.056689][ T30] audit: type=1326 audit(1750987471.373:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4aa78e929 code=0x7ffc0000 [ 1225.323968][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1225.346849][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1225.356318][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1225.404403][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1225.433003][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1225.937135][T11719] overlayfs: failed to clone upperpath [ 1227.906019][T10064] Bluetooth: hci4: command tx timeout [ 1228.044759][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1032'. [ 1228.055021][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1228.055070][ T30] audit: type=1326 audit(1750987480.553:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.087787][ T30] audit: type=1326 audit(1750987480.553:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.113188][ T30] audit: type=1326 audit(1750987480.553:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.136931][ T30] audit: type=1326 audit(1750987480.553:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.159919][ T30] audit: type=1326 audit(1750987480.553:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.182611][ T30] audit: type=1326 audit(1750987480.553:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.207373][ T30] audit: type=1326 audit(1750987480.553:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.231039][ T30] audit: type=1326 audit(1750987480.553:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.253745][ T30] audit: type=1326 audit(1750987480.563:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1228.276709][ T30] audit: type=1326 audit(1750987480.563:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15978e929 code=0x7ffc0000 [ 1229.981567][T10064] Bluetooth: hci4: command tx timeout [ 1230.421017][T11714] chnl_net:caif_netlink_parms(): no params data found [ 1232.644651][T10064] Bluetooth: hci4: command tx timeout [ 1232.670094][ T7524] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1234.701437][ T5804] Bluetooth: hci4: command tx timeout [ 1235.420003][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.428033][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.436749][T11714] bridge_slave_0: entered allmulticast mode [ 1235.445055][T11714] bridge_slave_0: entered promiscuous mode [ 1235.566105][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1235.566177][ T30] audit: type=1326 audit(1750987488.103:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.602120][ T30] audit: type=1326 audit(1750987488.103:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.626436][ T30] audit: type=1326 audit(1750987488.113:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.649189][ T30] audit: type=1326 audit(1750987488.113:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.672086][ T30] audit: type=1326 audit(1750987488.113:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.698189][ T30] audit: type=1326 audit(1750987488.113:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.721920][ T30] audit: type=1326 audit(1750987488.113:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.744938][ T30] audit: type=1326 audit(1750987488.113:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.768050][ T30] audit: type=1326 audit(1750987488.113:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.795559][ T30] audit: type=1326 audit(1750987488.113:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067898e929 code=0x7ffc0000 [ 1235.846578][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.854570][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.862782][T11714] bridge_slave_1: entered allmulticast mode [ 1235.872746][T11714] bridge_slave_1: entered promiscuous mode [ 1236.007232][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 1236.453952][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.575561][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.219536][T11714] team0: Port device team_slave_0 added [ 1237.288363][T11714] team0: Port device team_slave_1 added [ 1237.721267][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.732473][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.760237][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.075945][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.083529][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.110141][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.657701][T11714] hsr_slave_0: entered promiscuous mode [ 1238.669329][T11714] hsr_slave_1: entered promiscuous mode [ 1238.677734][T11714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1238.685547][T11714] Cannot create hsr debugfs directory [ 1239.618393][ T3983] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.845881][ T3983] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.098745][T11822] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1056'. [ 1240.127912][ T3983] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.532501][ T3983] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.995376][ T3983] bridge_slave_1: left allmulticast mode [ 1243.001475][ T3983] bridge_slave_1: left promiscuous mode [ 1243.008199][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.059190][ T3983] bridge_slave_0: left allmulticast mode [ 1243.065657][ T3983] bridge_slave_0: left promiscuous mode [ 1243.072570][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.065560][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.198949][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.247241][ T3983] bond0 (unregistering): Released all slaves [ 1248.965810][ T3983] hsr_slave_0: left promiscuous mode [ 1249.001483][ T3983] hsr_slave_1: left promiscuous mode [ 1249.010157][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.018245][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.089332][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.101604][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.225774][ T3983] veth1_macvtap: left promiscuous mode [ 1249.231741][ T3983] veth0_macvtap: left promiscuous mode [ 1249.237588][ T3983] veth1_vlan: left promiscuous mode [ 1249.243148][ T3983] veth0_vlan: left promiscuous mode [ 1250.210938][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 1250.259572][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 1250.833920][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 1253.090139][T11714] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1253.202393][T11714] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1253.329632][T11714] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1253.421481][T11714] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1254.730552][T11714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.916718][T11714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.631981][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 1255.989634][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.997337][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.240169][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.247996][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.732647][T11714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1256.743541][T11714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1257.787752][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'. [ 1258.166333][T11931] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1258.273549][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1085'. [ 1259.399085][T11714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.334720][T11992] ===================================================== [ 1263.342110][T11992] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1263.351027][T11992] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1263.356991][T11992] do_xdp_generic+0xd52/0x1690 [ 1263.362063][T11992] tun_get_user+0x447a/0x6b40 [ 1263.366956][T11992] tun_chr_write_iter+0x3e9/0x5c0 [ 1263.372401][T11992] vfs_write+0xb4b/0x1580 [ 1263.376967][T11992] __x64_sys_write+0x1fb/0x4d0 [ 1263.382186][T11992] x64_sys_call+0x38c3/0x3db0 [ 1263.387240][T11992] do_syscall_64+0xd9/0x210 [ 1263.392068][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.398160][T11992] [ 1263.400595][T11992] Uninit was stored to memory at: [ 1263.406021][T11992] pskb_expand_head+0x310/0x1610 [ 1263.411247][T11992] do_xdp_generic+0xa79/0x1690 [ 1263.416192][T11992] tun_get_user+0x447a/0x6b40 [ 1263.421177][T11992] tun_chr_write_iter+0x3e9/0x5c0 [ 1263.426474][T11992] vfs_write+0xb4b/0x1580 [ 1263.431154][T11992] __x64_sys_write+0x1fb/0x4d0 [ 1263.436150][T11992] x64_sys_call+0x38c3/0x3db0 [ 1263.441262][T11992] do_syscall_64+0xd9/0x210 [ 1263.445966][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.452223][T11992] [ 1263.454666][T11992] Uninit was created at: [ 1263.459192][T11992] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1263.466039][T11992] kmalloc_reserve+0x22f/0x4b0 [ 1263.471145][T11992] __alloc_skb+0x347/0x7d0 [ 1263.475818][T11992] alloc_skb_with_frags+0xc5/0xa60 [ 1263.481349][T11992] sock_alloc_send_pskb+0xad8/0xc70 [ 1263.486782][T11992] tun_get_user+0x1019/0x6b40 [ 1263.491802][T11992] tun_chr_write_iter+0x3e9/0x5c0 [ 1263.497041][T11992] vfs_write+0xb4b/0x1580 [ 1263.501739][T11992] __x64_sys_write+0x1fb/0x4d0 [ 1263.506775][T11992] x64_sys_call+0x38c3/0x3db0 [ 1263.511820][T11992] do_syscall_64+0xd9/0x210 [ 1263.516521][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.522756][T11992] [ 1263.525209][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.3.1101 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 1263.537719][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1263.548154][T11992] ===================================================== [ 1263.555277][T11992] Disabling lock debugging due to kernel taint [ 1263.561579][T11992] Kernel panic - not syncing: kmsan.panic set ... [ 1263.568097][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.3.1101 Tainted: G B 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 1263.581949][T11992] Tainted: [B]=BAD_PAGE [ 1263.586162][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1263.596401][T11992] Call Trace: [ 1263.599748][T11992] [ 1263.602743][T11992] __dump_stack+0x26/0x30 [ 1263.607207][T11992] dump_stack_lvl+0x53/0x270 [ 1263.611944][T11992] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1263.617919][T11992] dump_stack+0x1e/0x25 [ 1263.622217][T11992] panic+0x4bd/0xd50 [ 1263.626279][T11992] kmsan_report+0x31c/0x320 [ 1263.630928][T11992] ? __msan_warning+0x1b/0x30 [ 1263.635820][T11992] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1263.641921][T11992] ? do_xdp_generic+0xd52/0x1690 [ 1263.647023][T11992] ? tun_get_user+0x447a/0x6b40 [ 1263.652008][T11992] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1263.657331][T11992] ? vfs_write+0xb4b/0x1580 [ 1263.661985][T11992] ? __x64_sys_write+0x1fb/0x4d0 [ 1263.667063][T11992] ? x64_sys_call+0x38c3/0x3db0 [ 1263.672074][T11992] ? do_syscall_64+0xd9/0x210 [ 1263.676885][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.683087][T11992] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1263.689045][T11992] ? ___bpf_prog_run+0xea65/0xeba0 [ 1263.694312][T11992] ? __bpf_prog_run32+0xc2/0xf0 [ 1263.699281][T11992] ? kmsan_get_metadata+0xfb/0x160 [ 1263.704534][T11992] __msan_warning+0x1b/0x30 [ 1263.709171][T11992] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1263.715081][T11992] do_xdp_generic+0xd52/0x1690 [ 1263.719958][T11992] ? tun_get_user+0x3f21/0x6b40 [ 1263.724920][T11992] ? filter_irq_stacks+0x49/0x190 [ 1263.730077][T11992] ? tun_get_user+0x43f5/0x6b40 [ 1263.735071][T11992] tun_get_user+0x447a/0x6b40 [ 1263.739926][T11992] ? stack_depot_save_flags+0x35/0x7b0 [ 1263.745512][T11992] ? __rcu_read_unlock+0x6d/0xd0 [ 1263.750580][T11992] ? kmsan_get_metadata+0xfb/0x160 [ 1263.755865][T11992] ? kmsan_get_metadata+0xfb/0x160 [ 1263.761128][T11992] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1263.767653][T11992] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1263.773919][T11992] tun_chr_write_iter+0x3e9/0x5c0 [ 1263.779086][T11992] vfs_write+0xb4b/0x1580 [ 1263.783586][T11992] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1263.789284][T11992] __x64_sys_write+0x1fb/0x4d0 [ 1263.794235][T11992] x64_sys_call+0x38c3/0x3db0 [ 1263.799045][T11992] do_syscall_64+0xd9/0x210 [ 1263.803664][T11992] ? clear_bhb_loop+0x40/0x90 [ 1263.808460][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.814923][T11992] RIP: 0033:0x7fb15978d3df [ 1263.819460][T11992] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1263.839243][T11992] RSP: 002b:00007fb15a57f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1263.847906][T11992] RAX: ffffffffffffffda RBX: 00007fb1599b5fa0 RCX: 00007fb15978d3df [ 1263.856265][T11992] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1263.864327][T11992] RBP: 00007fb159810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1263.872400][T11992] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1263.880462][T11992] R13: 0000000000000000 R14: 00007fb1599b5fa0 R15: 00007ffdf26e8508 [ 1263.888570][T11992] [ 1263.892052][T11992] Kernel Offset: disabled [ 1263.896468][T11992] Rebooting in 86400 seconds..