last executing test programs: 8m33.175893768s ago: executing program 32 (id=3): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x100) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r1, &(0x7f00000000c0)="510003000000", 0x6) syz_open_dev$usbfs(0x0, 0x74, 0x101301) 8m7.505762882s ago: executing program 33 (id=34): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7m37.989743067s ago: executing program 34 (id=67): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) ioperm(0x0, 0x2, 0x7e) gettid() timer_create(0xb, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000140)) 7m21.417112536s ago: executing program 35 (id=80): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 5m55.599973235s ago: executing program 6 (id=148): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5m52.669816334s ago: executing program 6 (id=151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$rfkill(r2, &(0x7f0000000040), 0x8) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08"], 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000200)) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) 5m43.608448802s ago: executing program 7 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 5m42.7493144s ago: executing program 7 (id=159): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'ip6gretap0\x00', {0x1}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m41.411838242s ago: executing program 7 (id=161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f0000002880)=[{{&(0x7f0000000540)=@abs={0x2, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x5}}], 0x1, 0x0) 5m40.464091674s ago: executing program 7 (id=162): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000200)={0x7, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/110, 0x6e}], &(0x7f0000000180)=[0x8, 0x722c, 0xe1e4]}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x40840) 5m39.572897127s ago: executing program 6 (id=163): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 5m38.250193264s ago: executing program 6 (id=166): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 5m35.019899851s ago: executing program 6 (id=170): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 5m32.295754312s ago: executing program 6 (id=173): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010, 0x0, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5m24.384445267s ago: executing program 36 (id=162): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000200)={0x7, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/110, 0x6e}], &(0x7f0000000180)=[0x8, 0x722c, 0xe1e4]}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x40840) 5m16.402725416s ago: executing program 37 (id=173): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010, 0x0, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4m38.620347966s ago: executing program 8 (id=235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 4m36.566847755s ago: executing program 8 (id=237): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 4m35.629574609s ago: executing program 8 (id=240): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0xd76f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) fallocate(r4, 0x0, 0x1000000, 0x3) 4m27.732509476s ago: executing program 8 (id=243): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 4m27.263241956s ago: executing program 8 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}}, 0x24) 4m26.97704197s ago: executing program 4 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xb8) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) close(r4) 4m25.95948048s ago: executing program 8 (id=249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) close(r3) 4m23.420289496s ago: executing program 4 (id=251): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0xd76f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) fallocate(r2, 0x0, 0x1000000, 0x3) 4m21.617204833s ago: executing program 4 (id=253): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x4, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[], "223427d5"}}}}}, 0x0) 4m20.59848713s ago: executing program 4 (id=255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 4m19.470421725s ago: executing program 4 (id=257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f0000000240), 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 4m18.292075835s ago: executing program 4 (id=259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 4m10.428956325s ago: executing program 38 (id=249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) close(r3) 4m2.646217309s ago: executing program 39 (id=259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 2m24.19170366s ago: executing program 0 (id=366): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'ip6gretap0\x00', {0x1}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.821945682s ago: executing program 0 (id=370): recvmmsg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m21.581984966s ago: executing program 0 (id=375): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4014) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r7, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m16.658606634s ago: executing program 0 (id=386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="ca", 0x1}], 0x1}, 0x801) 2m15.846827288s ago: executing program 0 (id=389): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x927}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x50, 0x40, 0xa}}}}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002140)={0x84, 0x0, &(0x7f0000001d80)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, &(0x7f0000001e40)={0x20, 0x0, 0x4, {0x10, 0x4}}, &(0x7f0000001e80)={0x40, 0x7, 0x2, 0xd6c}, 0x0, 0x0, 0x0, &(0x7f0000001f80)={0x40, 0x13, 0x6, @random="cd5f4981f9ab"}, 0x0, &(0x7f0000002000)={0x40, 0x19, 0x2, "ef11"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000002740)={0x2c, &(0x7f0000002400)={0x5d9d5add8f7c1914, 0x2, 0x5d, {0x5d, 0xf, "8d3e9bae9c4d87c76ca0658c65c29888e1a4e232df854dfbd50a6254538d53c8f29238dae462a8226fd1024d935578cc34cb0e35d7e7d18ab06b87708634aea4f09044594f18499782eb7ebde4220e9eeb7b22bafa909072cb55a3"}}, 0x0, 0x0, &(0x7f00000026c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x28, 0xa, 0xb, "42be456b", "aa66a42c"}}, &(0x7f0000002700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x10, 0x0, 0x8, 0x6, 0xa}}}, 0x0) 2m12.996520447s ago: executing program 0 (id=396): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x108f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 1m57.289835373s ago: executing program 40 (id=396): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x108f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 1m0.699394005s ago: executing program 3 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x4000000a}) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x101, 0xe06) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 59.399771402s ago: executing program 3 (id=519): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 58.606874426s ago: executing program 3 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 57.780293987s ago: executing program 3 (id=522): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2058) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x3}, [{0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x0) 56.213445661s ago: executing program 3 (id=525): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000000)='./file2\x00', 0x2004009, &(0x7f00000004c0)=ANY=[], 0xfe, 0x22f, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 55.230714973s ago: executing program 3 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001c00)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r3, 0xe}, 0x59}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000180)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r8, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000180)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 50.889088621s ago: executing program 5 (id=535): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="ca", 0x1}], 0x1}, 0x801) 49.864939776s ago: executing program 5 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) 48.11192052s ago: executing program 5 (id=538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 46.389189109s ago: executing program 5 (id=542): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) fallocate(r0, 0x0, 0x400000000000000, 0x2) 44.902055849s ago: executing program 5 (id=545): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x208000, &(0x7f00000001c0)={[{@noblock_validity}, {}, {@abort}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@barrier}]}, 0x3, 0x578, &(0x7f0000002b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x9, 0xfffffffffffffffc, 0x7, 0x1a0}) 40.271943175s ago: executing program 5 (id=551): inotify_init1(0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 39.812982272s ago: executing program 41 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001c00)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r3, 0xe}, 0x59}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000180)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r8, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000180)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 24.518871011s ago: executing program 42 (id=551): inotify_init1(0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 16.271646854s ago: executing program 9 (id=588): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000740)={0x401, 0x0, 0x9b5b, 0x27d6, 0x0, "10120dfe0ef7b0200000ff490a0080002a00"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.294477539s ago: executing program 9 (id=590): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./bus\x00', 0x1000010, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a530010020021acc45d5e065a461de90100000077d200000000000040b78f0dd3836f07000000000000007752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fbbc000000f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575bfaa9d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC=r0], 0x3, 0x5564, &(0x7f0000005fc0)="$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") sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, 0x0, 0x801, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2882, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 9.17529431s ago: executing program 1 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x13, 0xffffffffffffffff, 0x28f43000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000640)={[{@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x21d, &(0x7f0000000240)="$eJzs3T9rU1EYB+C3ttVSkHQQiiJ4xcUptBX3FqkgBhQlg04W26I0sWAgoEPr5pfQr6Cjq+Cgrn4BEaQKLnarIETqjY2tiU1pb66Y51nyknt+509yySFDTm6drC7NL9cW19fXYmRkIIamYzo2BmIsDsVgpB4FAPA/2Wg04msjlfdcAIDesP8DQP/pcv+/2sMpAQAZ8/0fAPrP9Rs3L8+USrPXkmQkovq4Xq6X08f0+sxi3I1KLMREFOJ7RGNLWl+8VJqdSDZ9GotydbWZX62XB7fnJ6MQY+3zk0lqe344Rpv596OxEFNRiGPt81Nt84fj7Jnfxi9GId7djuWoxHxsZlv5lckkuXCltCN/5Gc7AAAAAAAAAAAAAAAAAAAAAADIQjHZ0vb8nmKx0/U03/35QDvP5xmKE0P5rh0AAAAAAAAAAAAAAAAAAAD+FbUHD5fmKpWF+38r7r199mq3Nl0WA81x99vP/oujpz8+6dRmcG+vz8EWL09lOcS3g+nn9dqd4+dq4+dzeweHI+LPZzreWl8KERnN53mut/GvVe/aePzp9NyLlQ+fu+255x9FAAAAAAAAAAAAAAAAAADQ91o/+t1T7E1mEwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHLT+/z+7Iu81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjwAAAP//3cefEg==") 7.500079147s ago: executing program 1 (id=595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000240)) 7.342969353s ago: executing program 9 (id=596): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x0, 0x2}, {0x8, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.165436343s ago: executing program 2 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/disk', 0x8200, 0x13a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) socket$kcm(0x10, 0x400000002, 0x0) mkdir(0x0, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r2, 0x6, 0x24, &(0x7f0000000340)="513aaf1992", 0x5) mount$overlay(0x0, 0x0, 0x0, 0x2880021, 0x0) fsopen(&(0x7f0000000280)='sockfs\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000400), 0x8) 5.8901326s ago: executing program 1 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x100000) 5.224783543s ago: executing program 2 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000f500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init1(0x0) 4.279358272s ago: executing program 9 (id=600): r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x24000000, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.951187452s ago: executing program 2 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x0, 0xfff1}, {0x1001d, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.79909403s ago: executing program 2 (id=602): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 2.783916048s ago: executing program 9 (id=603): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000b0000fb00000000fdffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 2.638083219s ago: executing program 1 (id=604): set_robust_list(&(0x7f0000000280)={0x0, 0x7}, 0x18) 1.96645653s ago: executing program 9 (id=605): recvmmsg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000800100b060a5000000000000109022400010000500009040002010300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.909716722s ago: executing program 2 (id=606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000240)) 1.679261811s ago: executing program 1 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/disk', 0x8200, 0x13a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) socket$kcm(0x10, 0x400000002, 0x0) mkdir(0x0, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r2, 0x6, 0x24, &(0x7f0000000340)="513aaf1992", 0x5) mount$overlay(0x0, 0x0, 0x0, 0x2880021, 0x0) fsopen(&(0x7f0000000280)='sockfs\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000400), 0x8) 529.750826ms ago: executing program 2 (id=608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 0s ago: executing program 1 (id=609): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) kernel console output (not intermixed with test programs): 425.369919][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.499944][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 430.738955][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 430.838783][ T42] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 430.848444][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.031671][ T42] usb 5-1: config 0 descriptor?? [ 431.117098][ T42] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 432.903582][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.934399][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.954401][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.972505][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.068394][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.397313][ T42] gspca_sonixj: reg_r err -110 [ 433.402753][ T42] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 433.767596][ T7088] 9pnet_fd: Insufficient options for proto=fd [ 435.052368][ T9] usb 5-1: USB disconnect, device number 14 [ 435.238356][ T5812] Bluetooth: hci5: command tx timeout [ 436.042681][ T7083] chnl_net:caif_netlink_parms(): no params data found [ 436.070519][ T7099] loop8: detected capacity change from 0 to 2048 [ 436.360679][ T7099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.373674][ T7099] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.468331][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 436.730898][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 437.025097][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.100850][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 437.108864][ T9] usb 6-1: can't read configurations, error -71 [ 437.302582][ T5812] Bluetooth: hci5: command tx timeout [ 437.484113][ T7099] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.189: bg 0: block 345: padding at end of block bitmap is not set [ 438.140858][ T6693] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.960631][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.009318][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.023474][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.040118][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.100615][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.124320][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.274628][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.381390][ T5819] Bluetooth: hci5: command tx timeout [ 440.463278][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.709817][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.717385][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.729105][ T7083] bridge_slave_0: entered allmulticast mode [ 440.737810][ T7083] bridge_slave_0: entered promiscuous mode [ 440.875513][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.961053][ T7141] 9pnet_fd: Insufficient options for proto=fd [ 441.157668][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.166280][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.174113][ T7083] bridge_slave_1: entered allmulticast mode [ 441.182955][ T7083] bridge_slave_1: entered promiscuous mode [ 441.325601][ T5819] Bluetooth: hci2: command tx timeout [ 441.459889][ T5819] Bluetooth: hci5: command tx timeout [ 441.658659][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.792577][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.039664][ T35] bridge_slave_1: left allmulticast mode [ 443.045647][ T35] bridge_slave_1: left promiscuous mode [ 443.053002][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.142451][ T35] bridge_slave_0: left allmulticast mode [ 443.149190][ T35] bridge_slave_0: left promiscuous mode [ 443.155756][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.409126][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 443.409524][ T5819] Bluetooth: hci2: command tx timeout [ 445.545483][ T5819] Bluetooth: hci2: command tx timeout [ 445.612122][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.640657][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 445.957942][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.505385][ T35] bond0 (unregistering): Released all slaves [ 446.708509][ T7083] team0: Port device team_slave_0 added [ 446.829111][ T7083] team0: Port device team_slave_1 added [ 447.229393][ T9] usb 6-1: device descriptor read/all, error -71 [ 447.628688][ T5819] Bluetooth: hci2: command tx timeout [ 447.695474][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.703808][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.731284][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.921610][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.929279][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.959553][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.074493][ T35] hsr_slave_0: left promiscuous mode [ 448.160529][ T35] hsr_slave_1: left promiscuous mode [ 448.169446][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.177078][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.293527][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.305147][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.470084][ T35] veth1_macvtap: left promiscuous mode [ 448.475857][ T35] veth0_macvtap: left promiscuous mode [ 448.482126][ T35] veth1_vlan: left promiscuous mode [ 448.487736][ T35] veth0_vlan: left promiscuous mode [ 449.092450][ T7172] 9pnet_fd: Insufficient options for proto=fd [ 449.309057][ T35] pim6reg (unregistering): left allmulticast mode [ 452.154524][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 452.594076][ T35] team0 (unregistering): Port device team_slave_1 removed [ 453.176519][ T35] team0 (unregistering): Port device team_slave_0 removed [ 456.110469][ T7083] hsr_slave_0: entered promiscuous mode [ 456.121778][ T7083] hsr_slave_1: entered promiscuous mode [ 456.278812][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 460.196828][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.595239][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.044172][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.771254][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.943497][ T7083] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 462.029594][ T7083] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 462.189672][ T7083] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 462.244972][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.252711][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.260761][ T7132] bridge_slave_0: entered allmulticast mode [ 462.270707][ T7132] bridge_slave_0: entered promiscuous mode [ 462.714755][ T35] bridge_slave_1: left allmulticast mode [ 462.722882][ T35] bridge_slave_1: left promiscuous mode [ 462.729784][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.159791][ T35] bridge_slave_0: left allmulticast mode [ 463.165686][ T35] bridge_slave_0: left promiscuous mode [ 463.172776][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.133102][ T7225] netlink: 'syz.5.226': attribute type 10 has an invalid length. [ 466.141383][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.5.226'. [ 466.310082][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.459789][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.476241][ T35] bond0 (unregistering): Released all slaves [ 466.561785][ T7083] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.602376][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.610122][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.617831][ T7132] bridge_slave_1: entered allmulticast mode [ 466.632343][ T7132] bridge_slave_1: entered promiscuous mode [ 466.644437][ T7225] team0: entered promiscuous mode [ 466.650969][ T7225] team_slave_0: entered promiscuous mode [ 466.657924][ T7225] team_slave_1: entered promiscuous mode [ 466.665040][ T7225] team0: entered allmulticast mode [ 466.670911][ T7225] team_slave_0: entered allmulticast mode [ 466.676853][ T7225] team_slave_1: entered allmulticast mode [ 466.687365][ T7225] bridge0: port 3(team0) entered blocking state [ 466.694317][ T7225] bridge0: port 3(team0) entered disabled state [ 466.710255][ T7225] bridge0: port 3(team0) entered blocking state [ 466.717047][ T7225] bridge0: port 3(team0) entered forwarding state [ 467.602622][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.595005][ T35] hsr_slave_0: left promiscuous mode [ 469.626387][ T35] hsr_slave_1: left promiscuous mode [ 469.634658][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.642517][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.689231][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.696829][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.746083][ T35] veth1_macvtap: left promiscuous mode [ 469.752130][ T35] veth0_macvtap: left promiscuous mode [ 469.758361][ T35] veth1_vlan: left promiscuous mode [ 469.763921][ T35] veth0_vlan: left promiscuous mode [ 470.428516][ T35] team0 (unregistering): Port device team_slave_1 removed [ 470.904494][ T35] team0 (unregistering): Port device team_slave_0 removed [ 472.308791][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.528982][ T7132] team0: Port device team_slave_0 added [ 473.681118][ T7132] team0: Port device team_slave_1 added [ 474.452790][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.460737][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.487784][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.629427][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 474.872306][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.886403][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.894613][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.923607][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.945067][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 475.132647][ T42] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.144070][ T42] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.154266][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 475.161692][ T42] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 475.171195][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.264337][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.418928][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.426480][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.480079][ T42] usb 6-1: config 0 descriptor?? [ 475.732101][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.739750][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.220919][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 476.227560][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 476.314978][ T42] usb 6-1: USB disconnect, device number 7 [ 476.571966][ T7132] hsr_slave_0: entered promiscuous mode [ 476.583195][ T7132] hsr_slave_1: entered promiscuous mode [ 476.592232][ T7132] debugfs: 'hsr0' already exists in 'hsr' [ 476.598274][ T7132] Cannot create hsr debugfs directory [ 480.911961][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.919550][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.722855][ T7132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.783520][ T7132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.926036][ T7132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.009754][ T7132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.293077][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.784413][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 490.142908][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.416328][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.097178][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.104918][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.292621][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.300437][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.755344][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.770536][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.781563][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.795300][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.838481][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.990723][ T5812] Bluetooth: hci1: command tx timeout [ 495.045574][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 495.111860][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.138817][ T42] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 495.419252][ T42] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 495.427916][ T42] usb 6-1: config 179 has no interface number 0 [ 495.434832][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 495.446469][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 495.458100][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 495.469968][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 495.481923][ T42] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 495.496209][ T42] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 495.509132][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.506051][ T7339] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 496.577039][ T7339] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 497.059815][ T5819] Bluetooth: hci1: command tx timeout [ 497.096581][ T7132] veth0_vlan: entered promiscuous mode [ 497.260700][ T11] usb 6-1: USB disconnect, device number 8 [ 497.260735][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 497.261012][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 497.495585][ T7132] veth1_vlan: entered promiscuous mode [ 498.058369][ T3780] bridge_slave_1: left allmulticast mode [ 498.066865][ T3780] bridge_slave_1: left promiscuous mode [ 498.074070][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.104002][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 498.144628][ T3780] bridge_slave_0: left allmulticast mode [ 498.150804][ T3780] bridge_slave_0: left promiscuous mode [ 498.157449][ T3780] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.960180][ T3780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.113769][ T3780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.138685][ T5812] Bluetooth: hci1: command tx timeout [ 499.148665][ T3780] bond0 (unregistering): Released all slaves [ 499.542399][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.552102][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.569409][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.585989][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.601125][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 499.858455][ T3780] hsr_slave_0: left promiscuous mode [ 499.903364][ T3780] hsr_slave_1: left promiscuous mode [ 499.914515][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.970385][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.218438][ T5812] Bluetooth: hci1: command tx timeout [ 501.799537][ T5812] Bluetooth: hci5: command tx timeout [ 501.802096][ T3780] team0 (unregistering): Port device team_slave_1 removed [ 501.981283][ T3780] team0 (unregistering): Port device team_slave_0 removed [ 502.603459][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.611793][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.619755][ T7317] bridge_slave_0: entered allmulticast mode [ 502.629637][ T7317] bridge_slave_0: entered promiscuous mode [ 503.011260][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.018953][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.026754][ T7317] bridge_slave_1: entered allmulticast mode [ 503.036536][ T7317] bridge_slave_1: entered promiscuous mode [ 503.382337][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.609480][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.860838][ T5812] Bluetooth: hci5: command tx timeout [ 504.375480][ T7317] team0: Port device team_slave_0 added [ 504.500897][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.574182][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.591844][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.605969][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.623121][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.696463][ T7317] team0: Port device team_slave_1 added [ 505.483542][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.491491][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.518282][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.792305][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.800553][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.828137][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.859873][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 505.971409][ T5819] Bluetooth: hci5: command tx timeout [ 506.589143][ T7317] hsr_slave_0: entered promiscuous mode [ 506.599710][ T7317] hsr_slave_1: entered promiscuous mode [ 506.738329][ T5819] Bluetooth: hci2: command tx timeout [ 507.363541][ T12] bridge_slave_1: left allmulticast mode [ 507.370147][ T12] bridge_slave_1: left promiscuous mode [ 507.376831][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.499893][ T12] bridge_slave_0: left allmulticast mode [ 507.505791][ T12] bridge_slave_0: left promiscuous mode [ 507.514433][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.018844][ T5819] Bluetooth: hci5: command tx timeout [ 508.290708][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.340160][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.412462][ T12] bond0 (unregistering): Released all slaves [ 508.830961][ T5819] Bluetooth: hci2: command tx timeout [ 508.958709][ T12] hsr_slave_0: left promiscuous mode [ 508.996064][ T12] hsr_slave_1: left promiscuous mode [ 509.005139][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.072302][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.728610][ T12] veth1_vlan: left promiscuous mode [ 509.734315][ T12] veth0_vlan: left promiscuous mode [ 510.898536][ T5819] Bluetooth: hci2: command tx timeout [ 511.831018][ T12] team0 (unregistering): Port device team_slave_1 removed [ 511.936884][ T12] team0 (unregistering): Port device team_slave_0 removed [ 512.773378][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 512.787682][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 512.797607][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 512.814669][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 512.826847][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.895873][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.906926][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.920276][ T7355] bridge_slave_0: entered allmulticast mode [ 512.930071][ T7355] bridge_slave_0: entered promiscuous mode [ 512.978967][ T5812] Bluetooth: hci2: command tx timeout [ 513.216483][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.229861][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.237640][ T7355] bridge_slave_1: entered allmulticast mode [ 513.247591][ T7355] bridge_slave_1: entered promiscuous mode [ 513.685275][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.916022][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.966154][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.057260][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 514.106736][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.464613][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.716528][ T7355] team0: Port device team_slave_0 added [ 514.785821][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.872426][ T7355] team0: Port device team_slave_1 added [ 514.898963][ T5812] Bluetooth: hci3: command tx timeout [ 515.480138][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.487430][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.513957][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.879216][ T7317] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 515.918629][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.925876][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.952767][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.181365][ T7317] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 516.439494][ T7317] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 516.506450][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 516.558644][ T7317] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 516.978785][ T5812] Bluetooth: hci3: command tx timeout [ 517.018828][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.170037][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.177576][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.186744][ T7371] bridge_slave_0: entered allmulticast mode [ 517.196535][ T7371] bridge_slave_0: entered promiscuous mode [ 517.233134][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.241004][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.249054][ T7371] bridge_slave_1: entered allmulticast mode [ 517.259290][ T7371] bridge_slave_1: entered promiscuous mode [ 517.309440][ T7355] hsr_slave_0: entered promiscuous mode [ 517.325963][ T7355] hsr_slave_1: entered promiscuous mode [ 517.335157][ T7355] debugfs: 'hsr0' already exists in 'hsr' [ 517.341226][ T7355] Cannot create hsr debugfs directory [ 517.374265][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.593036][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.004080][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.076828][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.308778][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.766082][ T7371] team0: Port device team_slave_0 added [ 519.059110][ T5812] Bluetooth: hci3: command tx timeout [ 519.094329][ T7463] loop5: detected capacity change from 0 to 8192 [ 519.206957][ T7371] team0: Port device team_slave_1 added [ 519.427129][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.435244][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.443345][ T7416] bridge_slave_0: entered allmulticast mode [ 519.453191][ T7416] bridge_slave_0: entered promiscuous mode [ 519.726293][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.733699][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.761591][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.784860][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.792800][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.802920][ T7416] bridge_slave_1: entered allmulticast mode [ 519.813704][ T7416] bridge_slave_1: entered promiscuous mode [ 519.853901][ T12] bridge_slave_1: left allmulticast mode [ 519.859992][ T12] bridge_slave_1: left promiscuous mode [ 519.866641][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.934329][ T12] bridge_slave_0: left allmulticast mode [ 519.942039][ T12] bridge_slave_0: left promiscuous mode [ 519.948916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.976153][ T12] bridge_slave_1: left allmulticast mode [ 519.984784][ T12] bridge_slave_1: left promiscuous mode [ 519.991662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.029092][ T12] bridge_slave_0: left allmulticast mode [ 520.034980][ T12] bridge_slave_0: left promiscuous mode [ 520.041864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.784208][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.806790][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.834284][ T12] bond0 (unregistering): Released all slaves [ 521.141252][ T5812] Bluetooth: hci3: command tx timeout [ 521.217509][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.259962][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.305676][ T12] bond0 (unregistering): Released all slaves [ 521.567179][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.574520][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.601336][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.753072][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.875779][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.382455][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.517808][ T7416] team0: Port device team_slave_0 added [ 522.555141][ T7371] hsr_slave_0: entered promiscuous mode [ 522.565776][ T7371] hsr_slave_1: entered promiscuous mode [ 522.574878][ T7371] debugfs: 'hsr0' already exists in 'hsr' [ 522.581887][ T7371] Cannot create hsr debugfs directory [ 522.758754][ T7416] team0: Port device team_slave_1 added [ 523.364764][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.372591][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.399278][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.455297][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.533160][ T12] hsr_slave_0: left promiscuous mode [ 523.559577][ T12] hsr_slave_1: left promiscuous mode [ 523.569305][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.576907][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.608622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.616244][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.659765][ T12] hsr_slave_0: left promiscuous mode [ 523.675108][ T12] hsr_slave_1: left promiscuous mode [ 523.685008][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.692862][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.730813][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.739029][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.806141][ T12] veth1_macvtap: left promiscuous mode [ 523.812469][ T12] veth0_macvtap: left promiscuous mode [ 523.818761][ T12] veth1_vlan: left promiscuous mode [ 523.824424][ T12] veth0_vlan: left promiscuous mode [ 523.846704][ T12] veth1_macvtap: left promiscuous mode [ 523.854102][ T12] veth0_macvtap: left promiscuous mode [ 523.860364][ T12] veth1_vlan: left promiscuous mode [ 523.865926][ T12] veth0_vlan: left promiscuous mode [ 524.765501][ T12] team0 (unregistering): Port device team_slave_1 removed [ 524.799665][ T12] team0 (unregistering): Port device team_slave_0 removed [ 525.362922][ T12] team0 (unregistering): Port device team_slave_1 removed [ 525.458960][ T12] team0 (unregistering): Port device team_slave_0 removed [ 525.811777][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.820337][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.847186][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.128962][ T7355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 526.217405][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.225093][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.321295][ T7355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 526.441722][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.449360][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.529540][ T7355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 526.895914][ T7355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.118471][ T7416] hsr_slave_0: entered promiscuous mode [ 527.129040][ T7416] hsr_slave_1: entered promiscuous mode [ 527.137863][ T7416] debugfs: 'hsr0' already exists in 'hsr' [ 527.147888][ T7416] Cannot create hsr debugfs directory [ 529.487823][ T7371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.579783][ T7371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.837415][ T7371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.935337][ T7371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.452299][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.721822][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.826355][ T7416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.977309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.984973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.047669][ T7416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 532.180733][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.188532][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.224357][ T7416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 532.277078][ T7416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 532.644530][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.252494][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.967895][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.076702][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.084434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.233799][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.241578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.066085][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.324655][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.495888][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.503541][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.591192][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.598873][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.781550][ T7550] loop5: detected capacity change from 0 to 1024 [ 535.792381][ T7550] EXT4-fs: Ignoring removed bh option [ 535.798479][ T7550] EXT4-fs: inline encryption not supported [ 535.990432][ T7550] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 536.152770][ T7550] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.283: lblock 2 mapped to illegal pblock 2 (length 1) [ 536.219034][ T7550] __quota_error: 14 callbacks suppressed [ 536.219130][ T7550] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 536.233642][ T7550] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.283: lblock 0 mapped to illegal pblock 48 (length 1) [ 536.270854][ T7550] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 536.280019][ T7550] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.283: Failed to acquire dquot type 0 [ 536.323315][ T7550] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 536.340355][ T7550] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.283: mark_inode_dirty error [ 536.366900][ T7550] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 536.377776][ T7550] EXT4-fs (loop5): 1 orphan inode deleted [ 536.386048][ T7550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.446939][ T3863] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 536.613335][ T3863] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 536.622610][ T3863] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:18: Failed to release dquot type 0 [ 536.798139][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.190879][ T7355] veth0_vlan: entered promiscuous mode [ 537.271133][ T7355] veth1_vlan: entered promiscuous mode [ 537.532032][ T7355] veth0_macvtap: entered promiscuous mode [ 537.598125][ T7355] veth1_macvtap: entered promiscuous mode [ 537.735291][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.808184][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.879017][ T3747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.936287][ T3747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.967628][ T3747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.990160][ T3747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.197533][ T7317] veth0_vlan: entered promiscuous mode [ 541.511924][ T7317] veth1_vlan: entered promiscuous mode [ 541.574352][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.091475][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.099387][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.439392][ T7317] veth0_macvtap: entered promiscuous mode [ 542.847175][ T7317] veth1_macvtap: entered promiscuous mode [ 543.389836][ T7371] veth0_vlan: entered promiscuous mode [ 543.494514][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.630034][ T7371] veth1_vlan: entered promiscuous mode [ 543.881891][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.993492][ T6618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.003504][ T6618] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 544.051345][ T6618] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 544.088856][ T3780] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.098188][ T3780] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.109299][ T6618] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 544.121622][ T3780] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.188986][ T3780] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.307076][ T7371] veth0_macvtap: entered promiscuous mode [ 544.371370][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.415370][ T7371] veth1_macvtap: entered promiscuous mode [ 544.683872][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.851282][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.013006][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.113285][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.177200][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.232781][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.260008][ T7416] veth0_vlan: entered promiscuous mode [ 545.297797][ T7416] veth1_vlan: entered promiscuous mode [ 545.707073][ T7416] veth0_macvtap: entered promiscuous mode [ 546.031755][ T7416] veth1_macvtap: entered promiscuous mode [ 546.522424][ T7584] loop5: detected capacity change from 0 to 1024 [ 546.533853][ T7584] EXT4-fs: Ignoring removed nobh option [ 546.539840][ T7584] EXT4-fs: Ignoring removed bh option [ 546.810481][ T7584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.455927][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.782739][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.048841][ T1100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.159435][ T1100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.360844][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.476176][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.173933][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.214704][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 554.225759][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 554.244961][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 554.259225][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 554.748516][ T3863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.756538][ T3863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.847593][ T6618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.916755][ T1899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.925251][ T1899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.324754][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 556.420740][ T5819] Bluetooth: hci4: command tx timeout [ 557.773711][ T1899] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.074222][ T1899] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.417597][ T1899] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.509022][ T5819] Bluetooth: hci4: command tx timeout [ 558.687377][ T1899] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.193543][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.203977][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.212020][ T7616] bridge_slave_0: entered allmulticast mode [ 559.221981][ T7616] bridge_slave_0: entered promiscuous mode [ 559.442430][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.450201][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.458327][ T7616] bridge_slave_1: entered allmulticast mode [ 559.468118][ T7616] bridge_slave_1: entered promiscuous mode [ 559.981847][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.990179][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.159620][ T1899] bridge_slave_1: left allmulticast mode [ 560.165513][ T1899] bridge_slave_1: left promiscuous mode [ 560.172629][ T1899] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.299816][ T1899] bridge_slave_0: left allmulticast mode [ 560.305710][ T1899] bridge_slave_0: left promiscuous mode [ 560.314541][ T1899] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.599386][ T5819] Bluetooth: hci4: command tx timeout [ 561.613542][ T1899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.679947][ T1899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.708536][ T1899] bond0 (unregistering): Released all slaves [ 561.780105][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.840115][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.071659][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.079927][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.353885][ T1899] hsr_slave_0: left promiscuous mode [ 562.396268][ T1899] hsr_slave_1: left promiscuous mode [ 562.405989][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.413866][ T1899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.482756][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.490732][ T1899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.600489][ T1899] veth1_macvtap: left promiscuous mode [ 562.606408][ T1899] veth0_macvtap: left promiscuous mode [ 562.613163][ T1899] veth1_vlan: left promiscuous mode [ 562.619018][ T1899] veth0_vlan: left promiscuous mode [ 562.671700][ T5812] Bluetooth: hci4: command tx timeout [ 564.745957][ T1899] team0 (unregistering): Port device team_slave_1 removed [ 565.130293][ T1899] team0 (unregistering): Port device team_slave_0 removed [ 566.185123][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.193406][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.337000][ T7616] team0: Port device team_slave_0 added [ 566.580244][ T7616] team0: Port device team_slave_1 added [ 566.686271][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.695562][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.473306][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.482082][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.522301][ T7616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.082244][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.089962][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.121358][ T7616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.284753][ T7616] hsr_slave_0: entered promiscuous mode [ 569.295491][ T7616] hsr_slave_1: entered promiscuous mode [ 569.620823][ T7731] fuse: Unknown parameter 'group_i00000000000000000000' [ 569.648939][ T7729] loop2: detected capacity change from 0 to 1024 [ 569.696136][ T7729] EXT4-fs: Ignoring removed orlov option [ 569.774951][ T7729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.039693][ T7733] loop0: detected capacity change from 0 to 2048 [ 570.222899][ T7733] loop0: p1 < > p3 [ 570.289779][ T7733] loop0: p3 size 134217728 extends beyond EOD, truncated [ 570.776395][ T5168] loop0: p1 < > p3 [ 570.810708][ T7355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.827685][ T5168] loop0: p3 size 134217728 extends beyond EOD, truncated [ 571.418482][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 571.437088][ T7754] fuse: Unknown parameter '0x0000000000000003' [ 571.638903][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 571.647645][ T9] usb 4-1: config 179 has no interface number 0 [ 571.654422][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 571.666016][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 571.677630][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 571.692602][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 571.706490][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 571.720246][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 571.729719][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.124180][ T7748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 572.199164][ T7748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 572.460131][ T7616] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 572.593859][ T9] usb 4-1: USB disconnect, device number 4 [ 572.600294][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 572.600540][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 572.650028][ T7619] udevd[7619]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 572.673269][ T7622] udevd[7622]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 572.774919][ T7616] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 573.131041][ T7616] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 573.580997][ T7616] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 573.727546][ T7622] udevd[7622]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 573.742986][ T7619] udevd[7619]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 573.835960][ T7775] fuse: Unknown parameter 'group_id00000000000000000000' [ 577.132728][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.509330][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.700419][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.708327][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.874555][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.882271][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.273589][ T7802] fuse: Unknown parameter '0x0000000000000003' [ 581.479458][ T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 581.512889][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.596944][ T7825] loop2: detected capacity change from 0 to 1024 [ 581.625594][ T7825] EXT4-fs: Ignoring removed nobh option [ 581.632832][ T7825] EXT4-fs: Ignoring removed bh option [ 581.739902][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 581.818588][ T9] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 581.833227][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 581.856215][ T7825] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 581.981363][ T9] usb 1-1: string descriptor 0 read error: -22 [ 581.988460][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 581.998097][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.016959][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 582.113789][ T7821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 582.249293][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 582.431779][ T5153] bcm5974 1-1:1.0: could not read from device [ 582.486758][ T5153] bcm5974 1-1:1.0: could not read from device [ 582.596567][ T5153] bcm5974 1-1:1.0: could not read from device [ 582.621620][ T9] usb 1-1: USB disconnect, device number 3 [ 582.699302][ T5153] bcm5974 1-1:1.0: could not read from device [ 583.006320][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 583.226719][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.239619][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.249851][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.256858][ T24] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 583.270167][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.846093][ T24] usb 6-1: config 0 descriptor?? [ 585.581194][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.588927][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.596195][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.604427][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.611868][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.624776][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.633782][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.641229][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.649479][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.656751][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 585.667276][ T24] cougar 0003:060B:500A.0001: unexpected long global item [ 586.410987][ T7851] fuse: Unknown parameter '0x0000000000000003' [ 586.544701][ T24] cougar 0003:060B:500A.0001: parse failed [ 586.551796][ T24] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 586.571747][ T24] usb 6-1: USB disconnect, device number 9 [ 590.306132][ T7616] veth0_vlan: entered promiscuous mode [ 590.780647][ T7616] veth1_vlan: entered promiscuous mode [ 591.499358][ T7616] veth0_macvtap: entered promiscuous mode [ 591.607825][ T7616] veth1_macvtap: entered promiscuous mode [ 591.995636][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.009952][ T24] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 592.046476][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.154627][ T1100] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.224516][ T3677] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.266756][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 592.308787][ T3747] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.351580][ T24] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 592.362959][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 592.398896][ T3747] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.558824][ T24] usb 4-1: string descriptor 0 read error: -22 [ 592.565673][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 592.575541][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.686114][ T7876] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.764623][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 592.992271][ T5153] bcm5974 4-1:1.0: could not read from device [ 593.060292][ T5153] bcm5974 4-1:1.0: could not read from device [ 593.063404][ T7888] fuse: Bad value for 'user_id' [ 593.071952][ T7888] fuse: Bad value for 'user_id' [ 593.137176][ T5153] bcm5974 4-1:1.0: could not read from device [ 593.181354][ T24] usb 4-1: USB disconnect, device number 5 [ 593.204220][ T5153] bcm5974 4-1:1.0: could not read from device [ 593.388533][ T5867] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 593.608889][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 593.674257][ T5867] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.686852][ T5867] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.697386][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 593.705045][ T5867] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 593.717843][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.719683][ T7895] fuse: Unknown parameter '0x0000000000000003' [ 593.945064][ T5867] usb 1-1: config 0 descriptor?? [ 594.837451][ T5867] hid_parser_main: 72 callbacks suppressed [ 594.837563][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.852107][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.859529][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.866783][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.874276][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.881740][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.889127][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.896386][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.906308][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.915779][ T5867] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 594.928262][ T5867] cougar 0003:060B:500A.0002: unexpected long global item [ 595.193512][ T5867] cougar 0003:060B:500A.0002: parse failed [ 595.200486][ T5867] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 595.340145][ T5867] usb 1-1: USB disconnect, device number 4 [ 597.334795][ T7904] loop3: detected capacity change from 0 to 8192 [ 597.552011][ T7904] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 603.521602][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.530065][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.224066][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 604.368603][ T7944] fuse: Unknown parameter '0x0000000000000003' [ 605.259421][ T5867] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 606.073392][ T5867] usb 6-1: unable to get BOS descriptor or descriptor too short [ 606.190094][ T5867] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 606.205062][ T5867] usb 6-1: config 1 interface 0 has no altsetting 0 [ 606.364676][ T5867] usb 6-1: string descriptor 0 read error: -22 [ 606.371998][ T5867] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 606.381524][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.696727][ T7949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 606.869741][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input15 [ 607.143647][ T5153] bcm5974 6-1:1.0: could not read from device [ 607.258767][ T5153] bcm5974 6-1:1.0: could not read from device [ 607.379114][ T5153] bcm5974 6-1:1.0: could not read from device [ 607.445963][ T5867] usb 6-1: USB disconnect, device number 10 [ 607.470059][ T5153] bcm5974 6-1:1.0: could not read from device [ 608.918112][ T30] audit: type=1326 audit(1756344781.336:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b11b8ebe9 code=0x7ffc0000 [ 609.183748][ T30] audit: type=1326 audit(1756344781.396:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b11b8ebe9 code=0x7ffc0000 [ 610.468123][ C0] hrtimer: interrupt took 424848 ns [ 610.604627][ T7996] fuse: Unknown parameter '0x0000000000000003' [ 610.769129][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.777384][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.147799][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.160603][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.251206][ T24] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 612.550807][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 612.589635][ T24] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 612.600840][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 612.737860][ T24] usb 4-1: string descriptor 0 read error: -22 [ 612.745053][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 612.760477][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.920591][ T8010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.991979][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 613.183494][ T5153] bcm5974 4-1:1.0: could not read from device [ 613.190945][ T30] audit: type=1326 audit(1756344785.616:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 613.284978][ T5153] bcm5974 4-1:1.0: could not read from device [ 613.360033][ T5153] bcm5974 4-1:1.0: could not read from device [ 613.380623][ T30] audit: type=1326 audit(1756344785.666:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 613.403410][ T30] audit: type=1326 audit(1756344785.666:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 613.418700][ T11] usb 4-1: USB disconnect, device number 6 [ 613.426249][ T30] audit: type=1326 audit(1756344785.686:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 613.454376][ T30] audit: type=1326 audit(1756344785.686:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 613.724081][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.738457][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.788987][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.875508][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.903898][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.134831][ T8038] fuse: Unknown parameter 'fd0x0000000000000003' [ 616.019621][ T5812] Bluetooth: hci1: command tx timeout [ 616.157188][ T8049] loop2: detected capacity change from 0 to 256 [ 616.238980][ T8049] exfat: Deprecated parameter 'namecase' [ 616.245761][ T8049] exfat: Deprecated parameter 'namecase' [ 616.252014][ T8049] exfat: Deprecated parameter 'utf8' [ 616.560109][ T8049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 616.894330][ T8023] chnl_net:caif_netlink_parms(): no params data found [ 617.014794][ T3747] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.209847][ T3747] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.533690][ T3747] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.944621][ T3747] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.101463][ T5812] Bluetooth: hci1: command tx timeout [ 618.193670][ T24] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 618.279274][ T8068] binder: 8066:8068 ioctl c0306201 200000000080 returned -14 [ 618.363438][ T8068] binder: 8066:8068 ioctl 4018620d 0 returned -22 [ 618.554454][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 618.649157][ T24] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 618.661344][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 618.851376][ T24] usb 1-1: string descriptor 0 read error: -22 [ 618.858510][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 618.868209][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.948599][ T3747] bridge_slave_1: left allmulticast mode [ 618.954788][ T3747] bridge_slave_1: left promiscuous mode [ 618.962807][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.019422][ T8064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 619.064535][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17 [ 619.118376][ T3747] bridge_slave_0: left allmulticast mode [ 619.124425][ T3747] bridge_slave_0: left promiscuous mode [ 619.132963][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.249708][ T5153] bcm5974 1-1:1.0: could not read from device [ 619.325280][ T5153] bcm5974 1-1:1.0: could not read from device [ 619.371941][ T5153] bcm5974 1-1:1.0: could not read from device [ 619.398382][ T7497] usb 1-1: USB disconnect, device number 5 [ 619.493451][ T8081] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 620.180595][ T5812] Bluetooth: hci1: command tx timeout [ 620.678761][ T3747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.759177][ T3747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.821185][ T3747] bond0 (unregistering): Released all slaves [ 622.266938][ T5812] Bluetooth: hci1: command tx timeout [ 623.053236][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.061145][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.069379][ T8023] bridge_slave_0: entered allmulticast mode [ 623.079233][ T8023] bridge_slave_0: entered promiscuous mode [ 623.276632][ T3747] hsr_slave_0: left promiscuous mode [ 623.318547][ T3747] hsr_slave_1: left promiscuous mode [ 623.327200][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.335184][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.407202][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.415365][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.595829][ T3747] veth1_macvtap: left promiscuous mode [ 623.602129][ T3747] veth0_macvtap: left promiscuous mode [ 623.612636][ T3747] veth1_vlan: left promiscuous mode [ 623.618533][ T3747] veth0_vlan: left promiscuous mode [ 623.909293][ T8122] binder: 8119:8122 ioctl c0306201 200000000080 returned -14 [ 623.980299][ T8123] fuse: Unknown parameter 'fd0x0000000000000003' [ 624.213005][ T8122] binder: 8119:8122 ioctl 4018620d 0 returned -22 [ 625.291862][ T3747] team0 (unregistering): Port device team_slave_1 removed [ 625.361212][ T3747] team0 (unregistering): Port device team_slave_0 removed [ 625.508451][ T11] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 625.704360][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 625.749062][ T11] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 625.764180][ T11] usb 3-1: config 1 interface 0 has no altsetting 0 [ 625.914702][ T11] usb 3-1: string descriptor 0 read error: -22 [ 625.922016][ T11] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 625.931553][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.098642][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 626.156894][ T8131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 627.154184][ T11] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18 [ 627.241467][ T5153] bcm5974 3-1:1.0: could not read from device [ 627.409511][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.417100][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.425060][ T8023] bridge_slave_1: entered allmulticast mode [ 627.434793][ T8023] bridge_slave_1: entered promiscuous mode [ 627.576451][ T5153] bcm5974 3-1:1.0: could not read from device [ 628.641552][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.673440][ T8147] loop3: detected capacity change from 0 to 512 [ 628.908835][ T8147] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 628.996387][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.148986][ T8147] EXT4-fs (loop3): orphan cleanup on readonly fs [ 629.270812][ T8147] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.408: bad orphan inode 15 [ 629.458872][ T8147] ext4_test_bit(bit=14, block=18) = 1 [ 629.464518][ T8147] is_bad_inode(inode)=0 [ 629.469209][ T8147] NEXT_ORPHAN(inode)=1023 [ 629.473698][ T8147] max_ino=32 [ 629.477047][ T8147] i_nlink=0 [ 629.699731][ T8147] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.408: corrupted xattr block 19: e_value size too large [ 629.829830][ T5153] bcm5974 3-1:1.0: could not read from device [ 629.978558][ T5153] bcm5974 3-1:1.0: could not read from device [ 629.998342][ T8147] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 630.011766][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 630.164102][ T5153] bcm5974 3-1:1.0: could not read from device [ 630.227736][ T5153] bcm5974 3-1:1.0: could not read from device [ 631.152093][ T8023] team0: Port device team_slave_0 added [ 631.314713][ T8023] team0: Port device team_slave_1 added [ 631.337045][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 631.394843][ T11] usb 3-1: USB disconnect, device number 2 [ 632.141429][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.150183][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.177303][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.559209][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.566366][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.593087][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.467222][ T8023] hsr_slave_0: entered promiscuous mode [ 634.478539][ T8023] hsr_slave_1: entered promiscuous mode [ 635.202039][ T7416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.259380][ T8150] Bluetooth: hci3: command 0x0406 tx timeout [ 637.448252][ T8023] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 637.511899][ T8023] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 637.612325][ T8023] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 637.704037][ T8023] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 638.039809][ T8150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.059530][ T8150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.076650][ T8150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.100227][ T8150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.129820][ T8150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 638.248352][ T7497] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 638.498722][ T7497] usb 3-1: unable to get BOS descriptor or descriptor too short [ 638.549422][ T11] hid_parser_main: 72 callbacks suppressed [ 638.549532][ T11] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 638.578844][ T7497] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 638.590724][ T7497] usb 3-1: config 1 interface 0 has no altsetting 0 [ 638.734811][ T7497] usb 3-1: string descriptor 0 read error: -22 [ 638.742832][ T7497] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 638.752390][ T7497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.829773][ T11] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 638.894585][ T8192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 638.986356][ T7497] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19 [ 639.195828][ T5153] bcm5974 3-1:1.0: could not read from device [ 639.249417][ T5153] bcm5974 3-1:1.0: could not read from device [ 639.398975][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.505650][ T11] usb 3-1: USB disconnect, device number 3 [ 639.520863][ T5153] bcm5974 3-1:1.0: could not read from device [ 639.562714][ T5153] bcm5974 3-1:1.0: could not read from device [ 639.809887][ T8023] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.972637][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.980399][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.012693][ T8203] fido_id[8203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 640.180029][ T8150] Bluetooth: hci4: command tx timeout [ 640.219244][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.226901][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.611983][ T30] audit: type=1326 audit(1756344812.986:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 640.635718][ T30] audit: type=1326 audit(1756344812.996:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 640.659275][ T30] audit: type=1326 audit(1756344812.996:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 641.809449][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 642.259606][ T8150] Bluetooth: hci4: command tx timeout [ 642.630553][ T8227] loop2: detected capacity change from 0 to 4096 [ 642.823575][ T8227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.083408][ T30] audit: type=1800 audit(1756344815.526:36): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.426" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 643.641597][ T7355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.966469][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.975420][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.988948][ T8193] bridge_slave_0: entered allmulticast mode [ 643.998996][ T8193] bridge_slave_0: entered promiscuous mode [ 644.144536][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.272019][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.280084][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.288220][ T8193] bridge_slave_1: entered allmulticast mode [ 644.303592][ T8193] bridge_slave_1: entered promiscuous mode [ 644.355315][ T8150] Bluetooth: hci4: command tx timeout [ 644.402883][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.778734][ T9] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 644.832825][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.965375][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.993859][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.074447][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 645.091786][ T9] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 645.104177][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 645.151532][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.210150][ T9] usb 6-1: string descriptor 0 read error: -22 [ 645.220651][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 645.231733][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.310047][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.422934][ T8252] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 645.544188][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input20 [ 645.709886][ T5153] bcm5974 6-1:1.0: could not read from device [ 645.777206][ T5153] bcm5974 6-1:1.0: could not read from device [ 646.058299][ T8193] team0: Port device team_slave_0 added [ 646.065452][ T7497] usb 6-1: USB disconnect, device number 11 [ 646.099797][ T5153] bcm5974 6-1:1.0: could not read from device [ 646.114327][ T5153] bcm5974 6-1:1.0: could not read from device [ 646.150725][ T8193] team0: Port device team_slave_1 added [ 646.420663][ T8150] Bluetooth: hci4: command tx timeout [ 646.777059][ T8270] loop3: detected capacity change from 0 to 16 [ 646.895417][ T8270] erofs (device loop3): mounted with root inode @ nid 36. [ 646.897716][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.910226][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.936867][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.126247][ T57] bridge_slave_1: left allmulticast mode [ 647.132700][ T57] bridge_slave_1: left promiscuous mode [ 647.139611][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.306955][ T57] bridge_slave_0: left allmulticast mode [ 647.314174][ T57] bridge_slave_0: left promiscuous mode [ 647.321245][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.157699][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.219088][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.248665][ T57] bond0 (unregistering): Released all slaves [ 648.333058][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.340650][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.367316][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.475950][ T30] audit: type=1326 audit(1756344821.896:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.499174][ T30] audit: type=1326 audit(1756344821.896:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.525070][ T30] audit: type=1326 audit(1756344821.906:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.550139][ T30] audit: type=1326 audit(1756344821.906:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.572832][ T30] audit: type=1326 audit(1756344821.906:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.595560][ T30] audit: type=1326 audit(1756344821.906:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.621331][ T30] audit: type=1326 audit(1756344821.906:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 649.645007][ T30] audit: type=1326 audit(1756344821.906:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.5.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 650.356732][ T8295] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 650.366591][ T8295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 650.376786][ T8295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 650.419980][ T8193] hsr_slave_0: entered promiscuous mode [ 650.430521][ T8193] hsr_slave_1: entered promiscuous mode [ 650.444332][ T8193] debugfs: 'hsr0' already exists in 'hsr' [ 650.450410][ T8193] Cannot create hsr debugfs directory [ 651.013907][ T30] audit: type=1800 audit(1756344822.786:45): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.440" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 651.820572][ T57] hsr_slave_0: left promiscuous mode [ 651.846085][ T57] hsr_slave_1: left promiscuous mode [ 651.856345][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.864827][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.988400][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.996123][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.136567][ T57] veth1_macvtap: left promiscuous mode [ 652.145233][ T57] veth0_macvtap: left promiscuous mode [ 652.151594][ T57] veth1_vlan: left promiscuous mode [ 652.157235][ T57] veth0_vlan: left promiscuous mode [ 653.083137][ T9] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 653.273154][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 653.300814][ T9] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 653.314887][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 653.373406][ T9] usb 6-1: string descriptor 0 read error: -22 [ 653.381063][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 653.390628][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.484596][ T8319] loop2: detected capacity change from 0 to 16 [ 653.522388][ T8313] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 653.632721][ T8319] erofs (device loop2): mounted with root inode @ nid 36. [ 653.654495][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input21 [ 653.873761][ T5153] bcm5974 6-1:1.0: could not read from device [ 654.031550][ T57] team0 (unregistering): Port device team_slave_1 removed [ 654.131320][ T57] team0 (unregistering): Port device team_slave_0 removed [ 654.146347][ T5153] bcm5974 6-1:1.0: could not read from device [ 654.254741][ T5153] bcm5974 6-1:1.0: could not read from device [ 654.383676][ T9] usb 6-1: USB disconnect, device number 12 [ 654.390736][ T5153] bcm5974 6-1:1.0: could not read from device [ 655.879373][ T8023] veth0_vlan: entered promiscuous mode [ 656.279822][ T8023] veth1_vlan: entered promiscuous mode [ 657.131884][ T8023] veth0_macvtap: entered promiscuous mode [ 657.314835][ T8023] veth1_macvtap: entered promiscuous mode [ 657.534448][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.614152][ T8193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 657.722218][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.759531][ T8193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 657.890630][ T8193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 657.918793][ T6702] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 657.970322][ T4347] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.021582][ T8193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 658.039031][ T8357] loop3: detected capacity change from 0 to 16 [ 658.099954][ T8357] erofs (device loop3): mounted with root inode @ nid 36. [ 658.108377][ T3747] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.137722][ T3747] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.165745][ T3747] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.075908][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.205791][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 660.446542][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.449980][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.457468][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.487592][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.498351][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.556757][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 660.567107][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 660.578353][ T24] usb 3-1: SerialNumber: syz [ 660.617247][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.625184][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.784586][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.792278][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.912218][ T24] usb 3-1: 0:2 : does not exist [ 661.199692][ T24] usb 3-1: USB disconnect, device number 4 [ 661.813027][ T7779] udevd[7779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.224015][ T6702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 663.328934][ T6702] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 663.339746][ T6702] usb 6-1: chopping to 0 config(s) [ 663.345139][ T6702] usb 6-1: can't read configurations, error -32 [ 663.598416][ T6702] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 663.780009][ T6702] usb 6-1: device descriptor read/64, error -32 [ 663.918997][ T6702] usb usb6-port1: attempt power cycle [ 664.013443][ T8410] loop2: detected capacity change from 0 to 16 [ 664.143783][ T8410] erofs (device loop2): mounted with root inode @ nid 36. [ 664.168979][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.340576][ T6702] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 664.421570][ T6702] usb 6-1: device descriptor read/8, error -32 [ 664.704129][ T6702] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 664.755428][ T8193] veth0_vlan: entered promiscuous mode [ 664.795356][ T6702] usb 6-1: device descriptor read/8, error -32 [ 664.814942][ T8193] veth1_vlan: entered promiscuous mode [ 664.942209][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.949201][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.970107][ T6702] usb usb6-port1: unable to enumerate USB device [ 665.375653][ T8193] veth0_macvtap: entered promiscuous mode [ 665.640966][ T8193] veth1_macvtap: entered promiscuous mode [ 667.037459][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.369212][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.674366][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.804793][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.920326][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.068453][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.556958][ T8467] loop2: detected capacity change from 0 to 16 [ 670.629313][ T8467] erofs (device loop2): mounted with root inode @ nid 36. [ 670.990699][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.999031][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.451202][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.459614][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.359702][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 674.381162][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 674.399592][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 674.419434][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 674.432098][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.499050][ T8150] Bluetooth: hci2: command tx timeout [ 677.112060][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 677.465432][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.754367][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.076667][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.421964][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.543138][ T3677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.551624][ T3677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.589409][ T8150] Bluetooth: hci2: command tx timeout [ 679.280477][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.288803][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.485593][ T12] bridge_slave_1: left allmulticast mode [ 679.491606][ T12] bridge_slave_1: left promiscuous mode [ 679.498546][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.616763][ T12] bridge_slave_0: left allmulticast mode [ 679.631726][ T12] bridge_slave_0: left promiscuous mode [ 679.638640][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.593623][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.658321][ T8150] Bluetooth: hci2: command tx timeout [ 680.699627][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.724361][ T12] bond0 (unregistering): Released all slaves [ 682.834152][ T8150] Bluetooth: hci2: command tx timeout [ 683.099148][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.114807][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.125077][ T8506] bridge_slave_0: entered allmulticast mode [ 683.140099][ T8506] bridge_slave_0: entered promiscuous mode [ 683.644622][ T12] hsr_slave_0: left promiscuous mode [ 683.738554][ T12] hsr_slave_1: left promiscuous mode [ 683.746924][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.754772][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.012180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.020332][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.394128][ T12] veth1_macvtap: left promiscuous mode [ 684.400320][ T12] veth0_macvtap: left promiscuous mode [ 684.406226][ T12] veth1_vlan: left promiscuous mode [ 684.412059][ T12] veth0_vlan: left promiscuous mode [ 687.344811][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 687.597495][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 687.680272][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.691710][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 687.701285][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 687.714591][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.093123][ T9] usb 4-1: config 0 descriptor?? [ 689.531251][ T12] team0 (unregistering): Port device team_slave_1 removed [ 689.705496][ T12] team0 (unregistering): Port device team_slave_0 removed [ 690.201382][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.209290][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.217074][ T8506] bridge_slave_1: entered allmulticast mode [ 690.227119][ T8506] bridge_slave_1: entered promiscuous mode [ 690.414935][ T9] usb 4-1: USB disconnect, device number 7 [ 690.683986][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'. [ 690.980506][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.097334][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.625995][ T8506] team0: Port device team_slave_0 added [ 691.718342][ T8506] team0: Port device team_slave_1 added [ 692.145418][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.154393][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.181182][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.309957][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.321305][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.349359][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.365365][ T8636] fuse: Bad value for 'fd' [ 693.470335][ T8506] hsr_slave_0: entered promiscuous mode [ 693.481326][ T8506] hsr_slave_1: entered promiscuous mode [ 693.799254][ T6702] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 694.062502][ T6702] usb 3-1: Using ep0 maxpacket: 16 [ 694.099086][ T6702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.110372][ T6702] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 694.120209][ T6702] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 694.129654][ T6702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.277737][ T6702] usb 3-1: config 0 descriptor?? [ 696.326660][ T8506] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 696.490187][ T8506] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 696.560656][ T8506] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 696.653164][ T8506] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 696.773016][ T6702] usb 3-1: USB disconnect, device number 5 [ 697.581582][ T8681] loop3: detected capacity change from 0 to 16 [ 697.632782][ T8681] erofs (device loop3): mounted with root inode @ nid 36. [ 698.088838][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.430325][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.554918][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.562762][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.703269][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.710971][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.284609][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.669377][ T8730] fuse: Bad value for 'fd' [ 703.619255][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 703.883501][ T9] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 703.895541][ T9] usb 3-1: config 0 has no interface number 0 [ 703.903427][ T9] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.914859][ T9] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.925183][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 703.934724][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.178314][ T9] usb 3-1: config 0 descriptor?? [ 704.352523][ T8745] overlayfs: missing 'workdir' [ 704.661816][ T9] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 704.670632][ T9] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 704.679231][ T9] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 704.687606][ T9] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 704.916988][ T8506] veth0_vlan: entered promiscuous mode [ 704.940932][ T9] logitech-djreceiver 0003:046D:C534.0004: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input28 [ 705.052520][ T9] usb 3-1: USB disconnect, device number 6 [ 705.068484][ T8506] veth1_vlan: entered promiscuous mode [ 705.515674][ T8506] veth0_macvtap: entered promiscuous mode [ 705.644188][ T8506] veth1_macvtap: entered promiscuous mode [ 705.773547][ T8752] fido_id[8752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 705.850510][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.048452][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.060864][ T8756] No control pipe specified [ 706.148603][ T3677] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.161711][ T3780] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.237380][ T3780] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.296179][ T3780] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.479856][ T30] audit: type=1326 audit(1756344879.906:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.619039][ T30] audit: type=1326 audit(1756344879.976:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.641810][ T30] audit: type=1326 audit(1756344879.976:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.664471][ T30] audit: type=1326 audit(1756344879.976:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.690288][ T30] audit: type=1326 audit(1756344879.986:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.714237][ T30] audit: type=1326 audit(1756344879.986:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.736960][ T30] audit: type=1326 audit(1756344879.986:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.759617][ T30] audit: type=1326 audit(1756344880.036:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.785274][ T30] audit: type=1326 audit(1756344880.036:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 707.809016][ T30] audit: type=1326 audit(1756344880.056:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6838ebe9 code=0x7ffc0000 [ 708.838403][ T7497] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 709.392144][ T7497] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 709.401940][ T7497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.561248][ T7497] usb 2-1: config 0 descriptor?? [ 709.597414][ T7497] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 710.000245][ T7497] gp8psk: usb in 128 operation failed. [ 710.068630][ T7497] gp8psk: usb in 137 operation failed. [ 710.074450][ T7497] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 710.085353][ T7497] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 710.299128][ T7497] usb 2-1: USB disconnect, device number 7 [ 710.428643][ T8782] loop5: detected capacity change from 0 to 1024 [ 710.703430][ T8782] EXT4-fs: Ignoring removed orlov option [ 711.289287][ T8782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.574264][ T8790] overlayfs: missing 'workdir' [ 712.510712][ T8804] No control pipe specified [ 713.255630][ T6618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.589143][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 713.860123][ T9] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 713.868962][ T9] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 713.877360][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.888058][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 713.897205][ T9] usb 2-1: config 0 has no interface number 0 [ 713.903825][ T9] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 713.914150][ T9] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 713.929504][ T9] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 713.940977][ T9] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.954624][ T9] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 713.964161][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.225364][ T9] usb 2-1: config 0 descriptor?? [ 714.277779][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 714.483465][ T9] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 714.495203][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 714.505306][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 715.620309][ T9] usb 2-1: USB disconnect, device number 8 [ 715.854234][ T7779] udevd[7779]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.059151][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.121241][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.137837][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.216251][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.239162][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 716.681903][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 717.028656][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 717.038276][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.081204][ T9] usb 2-1: config 0 descriptor?? [ 717.105174][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 717.399090][ T9] gp8psk: usb in 128 operation failed. [ 717.468448][ T9] gp8psk: usb in 137 operation failed. [ 717.474126][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 717.486505][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 717.591522][ T9] usb 2-1: USB disconnect, device number 9 [ 718.358138][ T8150] Bluetooth: hci1: command tx timeout [ 718.985708][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 719.037109][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.049544][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.697573][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.699977][ T8862] No control pipe specified [ 719.705852][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.900563][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.154212][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.443786][ T8150] Bluetooth: hci1: command tx timeout [ 720.451384][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.724160][ T8876] netlink: 1304 bytes leftover after parsing attributes in process `syz.9.182'. [ 720.834459][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.210244][ T8150] Bluetooth: hci2: unexpected cc 0x2005 length: 8 > 1 [ 722.498844][ T8150] Bluetooth: hci1: command tx timeout [ 722.640620][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.653563][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.667451][ T8834] bridge_slave_0: entered allmulticast mode [ 722.677585][ T8834] bridge_slave_0: entered promiscuous mode [ 722.823408][ T12] bridge_slave_1: left allmulticast mode [ 722.829757][ T12] bridge_slave_1: left promiscuous mode [ 722.842953][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.929995][ T12] bridge_slave_0: left allmulticast mode [ 722.942191][ T12] bridge_slave_0: left promiscuous mode [ 722.949176][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.454919][ T5872] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 723.831734][ T5872] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 723.841356][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.882499][ T5872] usb 3-1: config 0 descriptor?? [ 723.901013][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.936984][ T5872] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 724.003704][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.094407][ T12] bond0 (unregistering): Released all slaves [ 724.210375][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.220210][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.228719][ T8834] bridge_slave_1: entered allmulticast mode [ 724.241601][ T8834] bridge_slave_1: entered promiscuous mode [ 724.343931][ T5872] gp8psk: usb in 128 operation failed. [ 724.364987][ T5872] gp8psk: usb in 137 operation failed. [ 724.379109][ T5872] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 724.391808][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 724.523369][ T5872] usb 3-1: USB disconnect, device number 7 [ 724.582082][ T8150] Bluetooth: hci1: command tx timeout [ 724.709933][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.761432][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.395421][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.403323][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.476758][ T8834] team0: Port device team_slave_0 added [ 726.606843][ T8834] team0: Port device team_slave_1 added [ 727.246949][ T12] hsr_slave_0: left promiscuous mode [ 727.348786][ T12] hsr_slave_1: left promiscuous mode [ 727.357010][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.364972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.424000][ T8916] loop9: detected capacity change from 0 to 512 [ 727.564034][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.573551][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.790338][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 727.790428][ T30] audit: type=1326 audit(1756344900.206:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 727.886624][ T12] veth1_macvtap: left promiscuous mode [ 727.892907][ T12] veth0_macvtap: left promiscuous mode [ 727.899004][ T12] veth1_vlan: left promiscuous mode [ 727.904595][ T12] veth0_vlan: left promiscuous mode [ 728.012008][ T30] audit: type=1326 audit(1756344900.296:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.034835][ T30] audit: type=1326 audit(1756344900.296:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.060710][ T30] audit: type=1326 audit(1756344900.316:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.084850][ T30] audit: type=1326 audit(1756344900.326:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.107441][ T30] audit: type=1326 audit(1756344900.326:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.130185][ T30] audit: type=1326 audit(1756344900.326:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.153679][ T30] audit: type=1326 audit(1756344900.366:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.179795][ T30] audit: type=1326 audit(1756344900.376:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.203531][ T30] audit: type=1326 audit(1756344900.396:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 728.871035][ T8150] Bluetooth: hci4: unexpected cc 0x2005 length: 8 > 1 [ 728.887358][ T8916] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 728.895918][ T8916] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 729.123049][ T8916] EXT4-fs (loop9): 1 truncate cleaned up [ 729.131366][ T8916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.173863][ T12] team0 (unregistering): Port device team_slave_1 removed [ 732.320845][ T12] team0 (unregistering): Port device team_slave_0 removed [ 732.582466][ T8926] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 732.960536][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 733.001695][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 733.013466][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 733.050239][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 733.070683][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.158508][ T8506] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.504755][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.512057][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.538733][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.919629][ T6702] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 734.119456][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.126784][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.154615][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.421593][ T6702] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 734.431612][ T6702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.470489][ T6702] usb 10-1: config 0 descriptor?? [ 734.537720][ T6702] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 734.980296][ T6702] gp8psk: usb in 128 operation failed. [ 734.987158][ T6702] gp8psk: usb in 137 operation failed. [ 734.993166][ T6702] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 735.004152][ T6702] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 735.146432][ T6702] usb 10-1: USB disconnect, device number 2 [ 735.157835][ T8150] Bluetooth: hci3: command tx timeout [ 735.242999][ T8834] hsr_slave_0: entered promiscuous mode [ 735.256445][ T8834] hsr_slave_1: entered promiscuous mode [ 735.265924][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 735.272009][ T8834] Cannot create hsr debugfs directory [ 737.219575][ T8150] Bluetooth: hci3: command tx timeout [ 739.283451][ T8945] chnl_net:caif_netlink_parms(): no params data found [ 739.312279][ T8150] Bluetooth: hci3: command tx timeout [ 741.204238][ T8988] syz.1.589 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 741.378997][ T8150] Bluetooth: hci3: command tx timeout [ 742.204100][ T8834] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 742.321567][ T8834] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 742.440829][ T8834] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 742.509990][ T6702] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 742.593040][ T8834] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 742.774626][ T6702] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 742.785778][ T6702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.907610][ T6702] usb 2-1: config 0 descriptor?? [ 742.956863][ T6702] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 743.041953][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 743.343373][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 743.387800][ T6702] gp8psk: usb in 128 operation failed. [ 743.401672][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.412322][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 743.429201][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 743.436130][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 743.446873][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.459192][ T6702] gp8psk: usb in 137 operation failed. [ 743.464857][ T6702] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 743.475618][ T6702] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 743.499607][ T9] usb 3-1: config 0 descriptor?? [ 743.656980][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.662024][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 743.664909][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.679712][ T8945] bridge_slave_0: entered allmulticast mode [ 743.689750][ T8945] bridge_slave_0: entered promiscuous mode [ 743.749725][ T6702] usb 2-1: USB disconnect, device number 10 [ 743.952352][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.960215][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.968301][ T8945] bridge_slave_1: entered allmulticast mode [ 743.978431][ T8945] bridge_slave_1: entered promiscuous mode [ 744.578318][ T8945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.726159][ T8945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.431489][ T8945] team0: Port device team_slave_0 added [ 745.474970][ T9012] loop1: detected capacity change from 0 to 256 [ 745.845765][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.064020][ T8945] team0: Port device team_slave_1 added [ 746.234183][ T9] usb 3-1: USB disconnect, device number 8 [ 746.533671][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.550718][ T8945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.558137][ T8945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.584622][ T8945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.699308][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.706889][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.455452][ T8945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.462889][ T8945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.489349][ T8945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.518618][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.526191][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.359858][ T14] Bluetooth: hci6: Frame reassembly failed (-84) [ 748.387688][ T8834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.399630][ T8834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.705525][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 748.705608][ T30] audit: type=1326 audit(1756344921.136:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 748.904346][ T30] audit: type=1326 audit(1756344921.186:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 748.928088][ T30] audit: type=1326 audit(1756344921.246:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 748.954538][ T30] audit: type=1326 audit(1756344921.246:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 748.978453][ T30] audit: type=1326 audit(1756344921.246:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 749.001366][ T30] audit: type=1326 audit(1756344921.246:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 749.024074][ T30] audit: type=1326 audit(1756344921.246:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 749.050951][ T30] audit: type=1326 audit(1756344921.266:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 749.074992][ T30] audit: type=1326 audit(1756344921.266:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 749.097745][ T30] audit: type=1326 audit(1756344921.306:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570c18ebe9 code=0x7ffc0000 [ 749.273297][ T8945] hsr_slave_0: entered promiscuous mode [ 749.284213][ T8945] hsr_slave_1: entered promiscuous mode [ 749.293458][ T8945] debugfs: 'hsr0' already exists in 'hsr' [ 749.299590][ T8945] Cannot create hsr debugfs directory [ 750.338474][ T8150] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 751.047135][ T9048] loop9: detected capacity change from 0 to 1024 [ 751.056649][ T9048] EXT4-fs: Ignoring removed i_version option [ 751.071925][ T9048] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 751.118593][ T9048] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.603: Invalid block bitmap block 0 in block_group 0 [ 751.134521][ T9048] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.603: Failed to acquire dquot type 0 [ 751.150145][ T9048] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.603: Freeing blocks not in datazone - block = 0, count = 4096 [ 751.171291][ T9048] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.603: Invalid inode bitmap blk 0 in block_group 0 [ 751.185765][ T9048] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 751.203041][ T1100] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 751.218977][ T9048] EXT4-fs (loop9): 1 orphan inode deleted [ 751.227360][ T9048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.290046][ T9048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.627537][ T3747] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.920693][ T3747] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.171270][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.250303][ T5872] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 752.314584][ T3747] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.542032][ T5872] usb 10-1: Using ep0 maxpacket: 16 [ 752.669387][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.680182][ T5872] usb 10-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.693922][ T5872] usb 10-1: config 0 interface 0 has no altsetting 0 [ 752.701065][ T5872] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 752.710622][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.072899][ T3747] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.255776][ T5872] usb 10-1: config 0 descriptor?? [ 753.362335][ T5872] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 753.704093][ T9064] ===================================================== [ 753.711586][ T9064] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 753.720126][ T9064] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 753.726085][ T9064] do_xdp_generic+0xd52/0x1690 [ 753.731225][ T9064] tun_get_user+0x45be/0x6ca0 [ 753.736094][ T9064] tun_chr_write_iter+0x3e9/0x5c0 [ 753.741554][ T9064] vfs_write+0xbe2/0x15d0 [ 753.746097][ T9064] __x64_sys_write+0x1fb/0x4d0 [ 753.751304][ T9064] x64_sys_call+0x3014/0x3e20 [ 753.756273][ T9064] do_syscall_64+0xd9/0x210 [ 753.761165][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.767257][ T9064] [ 753.769842][ T9064] Uninit was stored to memory at: [ 753.775150][ T9064] pskb_expand_head+0x310/0x1610 [ 753.780543][ T9064] do_xdp_generic+0xa79/0x1690 [ 753.785531][ T9064] tun_get_user+0x45be/0x6ca0 [ 753.790568][ T9064] tun_chr_write_iter+0x3e9/0x5c0 [ 753.795786][ T9064] vfs_write+0xbe2/0x15d0 [ 753.800513][ T9064] __x64_sys_write+0x1fb/0x4d0 [ 753.805498][ T9064] x64_sys_call+0x3014/0x3e20 [ 753.810582][ T9064] do_syscall_64+0xd9/0x210 [ 753.815313][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.821563][ T9064] [ 753.823984][ T9064] Uninit was created at: [ 753.828679][ T9064] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 753.835428][ T9064] kmalloc_reserve+0x22f/0x4b0 [ 753.840535][ T9064] __alloc_skb+0x347/0x7d0 [ 753.845140][ T9064] alloc_skb_with_frags+0xc5/0xa60 [ 753.850610][ T9064] sock_alloc_send_pskb+0xad8/0xc70 [ 753.856037][ T9064] tun_get_user+0x113f/0x6ca0 [ 753.861153][ T9064] tun_chr_write_iter+0x3e9/0x5c0 [ 753.866364][ T9064] vfs_write+0xbe2/0x15d0 [ 753.871082][ T9064] __x64_sys_write+0x1fb/0x4d0 [ 753.876055][ T9064] x64_sys_call+0x3014/0x3e20 [ 753.881142][ T9064] do_syscall_64+0xd9/0x210 [ 753.885862][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.892215][ T9064] [ 753.894688][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.2.608 Not tainted syzkaller #0 PREEMPT(none) [ 753.904274][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.914644][ T9064] ===================================================== [ 753.921851][ T9064] Disabling lock debugging due to kernel taint [ 753.928326][ T9064] Kernel panic - not syncing: kmsan.panic set ... [ 753.934922][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.2.608 Tainted: G B syzkaller #0 PREEMPT(none) [ 753.945925][ T9064] Tainted: [B]=BAD_PAGE [ 753.950206][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.960438][ T9064] Call Trace: [ 753.963847][ T9064] [ 753.966901][ T9064] __dump_stack+0x26/0x30 [ 753.971456][ T9064] dump_stack_lvl+0x53/0x270 [ 753.976377][ T9064] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 753.982408][ T9064] dump_stack+0x1e/0x25 [ 753.986835][ T9064] vpanic+0x361/0xc50 [ 753.991051][ T9064] panic+0x15d/0x160 [ 753.995205][ T9064] kmsan_report+0x31c/0x320 [ 753.999907][ T9064] ? __msan_warning+0x1b/0x30 [ 754.004770][ T9064] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 754.010911][ T9064] ? do_xdp_generic+0xd52/0x1690 [ 754.016093][ T9064] ? tun_get_user+0x45be/0x6ca0 [ 754.021128][ T9064] ? tun_chr_write_iter+0x3e9/0x5c0 [ 754.026517][ T9064] ? vfs_write+0xbe2/0x15d0 [ 754.031225][ T9064] ? __x64_sys_write+0x1fb/0x4d0 [ 754.036385][ T9064] ? x64_sys_call+0x3014/0x3e20 [ 754.041478][ T9064] ? do_syscall_64+0xd9/0x210 [ 754.046390][ T9064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.052661][ T9064] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 754.058707][ T9064] ? ___bpf_prog_run+0xea65/0xeba0 [ 754.064056][ T9064] ? __bpf_prog_run32+0xc2/0xf0 [ 754.069097][ T9064] ? kmsan_get_metadata+0xfb/0x160 [ 754.074433][ T9064] __msan_warning+0x1b/0x30 [ 754.079119][ T9064] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 754.085138][ T9064] do_xdp_generic+0xd52/0x1690 [ 754.090149][ T9064] ? tun_get_user+0x4141/0x6ca0 [ 754.095164][ T9064] ? filter_irq_stacks+0x49/0x190 [ 754.100419][ T9064] ? kmsan_get_metadata+0xfb/0x160 [ 754.105737][ T9064] ? tun_get_user+0x453a/0x6ca0 [ 754.110772][ T9064] tun_get_user+0x45be/0x6ca0 [ 754.115622][ T9064] ? stack_depot_save_flags+0x35/0x7b0 [ 754.121299][ T9064] ? kmsan_get_metadata+0xfb/0x160 [ 754.126600][ T9064] ? kmsan_get_metadata+0xfb/0x160 [ 754.131919][ T9064] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 754.138463][ T9064] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 754.144835][ T9064] tun_chr_write_iter+0x3e9/0x5c0 [ 754.150053][ T9064] vfs_write+0xbe2/0x15d0 [ 754.154586][ T9064] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 754.160308][ T9064] __x64_sys_write+0x1fb/0x4d0 [ 754.165285][ T9064] x64_sys_call+0x3014/0x3e20 [ 754.170192][ T9064] do_syscall_64+0xd9/0x210 [ 754.174895][ T9064] ? irqentry_exit+0x16/0x60 [ 754.179670][ T9064] ? clear_bhb_loop+0x40/0x90 [ 754.184524][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.190599][ T9064] RIP: 0033:0x7f570c18d69f [ 754.195152][ T9064] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 754.214932][ T9064] RSP: 002b:00007f570a3f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 754.223518][ T9064] RAX: ffffffffffffffda RBX: 00007f570c3b5fa0 RCX: 00007f570c18d69f [ 754.231627][ T9064] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 754.239726][ T9064] RBP: 00007f570c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 754.247845][ T9064] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 754.255972][ T9064] R13: 00007f570c3b6038 R14: 00007f570c3b5fa0 R15: 00007ffc50af0ff8 [ 754.264132][ T9064] [ 754.267626][ T9064] Kernel Offset: disabled [ 754.272023][ T9064] Rebooting in 86400 seconds..